last executing test programs: 10m1.121238893s ago: executing program 2 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x4000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xff43}, 0x1, 0x0, 0x0, 0xc0ea}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m0.315715322s ago: executing program 2 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="03032abd7000fbdbdf250a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) 10m0.225611718s ago: executing program 2 (id=78): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) 9m56.566842239s ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000480)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5d}, 0x1, {[0x5bb, 0x0, 0xfffff800, 0x70, 0x7, 0x9, 0x6, 0xe2c]}}, 0x5c) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000700)={0x1}, 0x8, r3) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 9m55.905130943s ago: executing program 2 (id=98): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) socket(0x21, 0x80005, 0xb2d3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) getdents(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b0000000000", 0xf, 0x0, 0x0, 0x0) 9m54.516448909s ago: executing program 2 (id=103): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) listen(0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) 9m53.902434821s ago: executing program 32 (id=103): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x2, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x7, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x16b, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0x6, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x2a34, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x3, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0x57ae807c, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x8, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x18, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x3b, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0xa6c, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0xa, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x9748, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) listen(0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80800) 2m21.661536054s ago: executing program 1 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) read$midi(r4, 0x0, 0x0) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000ce34000000000000000000850000002f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x3ed238d32da7c388, 0x0) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2m17.167045417s ago: executing program 1 (id=1442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) shutdown(0xffffffffffffffff, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x2, 0x1) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 2m16.600673691s ago: executing program 1 (id=1445): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102400, 0x19000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) recvmmsg$unix(r1, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/63, 0x3f}], 0x1}}], 0x3, 0x400000a0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000e40)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0xad92, 0x1000, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000280)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = eventfd2(0x210d28e2, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000100)=r6, 0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080), 0x0, 0x4) 2m14.974496993s ago: executing program 1 (id=1452): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) rseq(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.128729412s ago: executing program 1 (id=1455): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000440), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000200)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000800000280012800b00010067656e6572184e4eb3a372548868102d5d65766500000305b5141400030000000000000000000000000000000000140035006765"], 0x5c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4048040) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x4000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="14050000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004001) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x84) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x2, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 2m13.435047495s ago: executing program 1 (id=1456): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xa, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r10, &(0x7f0000001d00)={0x2020}, 0x2020) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdc00, {0x3}}, 0x14}}, 0x8004) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) 2m13.112231353s ago: executing program 33 (id=1456): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xa, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r10 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r10, &(0x7f0000001d00)={0x2020}, 0x2020) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdc00, {0x3}}, 0x14}}, 0x8004) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) 13.297169308s ago: executing program 6 (id=1860): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10.506256181s ago: executing program 6 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000003c0)=""/207, 0xcf}], 0x1, 0x6, 0xfffffffe) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x3, 0x0, 0x7, 0x0}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x40) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) fallocate(r4, 0x0, 0x2, 0x8) 9.122111756s ago: executing program 0 (id=1877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d3b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="dd677445bcfd0600c70000000000c2b746cbdb717bfd20feaa418f39057f000000000000", 0x24}, {&(0x7f0000000a40)="d122e32587b4d7078a1b9626feffdbe50ca1ab34e9d3a25b03bf5fb1efb3095b77b831d137d67a447c06bac419fc4e494926b999e53628d91d5bab8e181e03cdbd626c285353305ad977270ddb9c9260d8ec41cb82ec252ef6eb7cd6ceeaa3dc2722a9bb7d17ce07f1329ded096b5175077b8bd3c866e5a6d20bbbd2cfeb9693c9957632be4aada0efbb818d25e35507f19aee422f0e2dc94badb054960796fcb59789b51bd957bef3002a22aaaf71", 0xaf}, {&(0x7f0000000b00)="7efb15c0927062496a0395599b05e9b99c7e5b51ab66bc64161370f0d4eb7f30ffa4e9d06965dca5b237786e64ea", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="71831b059de4d82541cd887a9e7a85c1a0ed36", 0x13}, {&(0x7f0000001380)="af86d0c8714909a0ee831b0c837b598f9dc7c1ae20ed322c0c9e3cadf1fa4640e5c94264ccd08f0cbcfebc83acd6ec17550af3906c752fe484abbf41295ba427d982763c4bdf94a6850513a973968b598e8151684927a181ca229bc1cd5d312996568c041d86636889cdca8112732eea689c7623835aedbc37628400db7e00604db51337f2c60c8cc0f39ffb0f85be0713f391f257cdefa71588636a937213e78e758d58501ddf41be0741eaf7a804eae990f1b382582bc1bb849ed3e543f4744328bc3a029b6c2562a86ce38a85f4fb16a8f56d51a08d227756fc452611be3002015ac8c9fca0a955d7326b5e63", 0xee}], 0x2}}], 0x3, 0x4000001) 8.84642965s ago: executing program 3 (id=1878): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x44, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x4000000) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780), 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xc8, r0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_usb_connect$uac1(0x6, 0x118, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x106, 0x3, 0x1, 0x7, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x203, 0x4, 0x10, 0xfffe, 0x0, 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x0, "067d02"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x3, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x3, 0x4, [0x3, 0x4, 0x5, 0x7], 0x4}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x1, 0x0, "de1982"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x8000, 0x9, "60729b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x0, "64c3"}, @as_header={0x7, 0x24, 0x1, 0x15, 0x46, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x7fff, 0x0, "7e3a17b32d5d27"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0xf, "4ca1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xff, 0xc, {0x7, 0x25, 0x1, 0x81, 0xfd, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0x0, 'v'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x23, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x87, 0x1, ':', "d8f238"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x1, 0xfd, 0x7, '\r', "34fa7d"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xa27, 0x2, 0x80, "44a756e98833"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0x3c, 0xfc, {0x7, 0x25, 0x1, 0x1, 0xfc, 0x7}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1, 0x3, 0x9c, 0x10, 0x8}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x5, 0x5}]}, 0x6, [{0x6f, &(0x7f00000000c0)=@string={0x6f, 0x3, "8a3ef7401c04dc37eca17e8a70eaa02beaa3b67778564069a9328770bc748cd196d4997ff9566f6908828680268693d6146b473b93d363d1204b69b9cba15d05b63124dc6502ae0a012cb6b1bec6ad34d532d11da109dec186f256551251ea958d18f3356cc0ebae371f07eef1"}}, {0xb9, &(0x7f00000002c0)=@string={0xb9, 0x3, "eaf1d7d633576b4ee4dec597e502a0835abd64880ffe4e7dc893af11215aae48ca8b59943d9e434eed22f19120bba5badda0c247c30123fb5a4c7c0f2b3978354637d641c096c969afd3e201f7fd53624d9df502743930d73300d1fb15da5b2101d5bf5b7a3c04c076b6c3feb14fa740a004e5116e9db3ca86efeadf98b302ebb125215861c2d37d2ce552d4c5888c01c6dfaddbbc85cf779138f53b48f0f4384e208311337b5980a18a4e42b33fd8b68fe5c2ad4c969c"}}, {0xd6, &(0x7f0000000380)=@string={0xd6, 0x3, "439caffc8c60b1c43cf42bc9d3eabb8acb699ae6b952eb82cde46e729c89c3c93c12623387677597dcf9186ff5cb6dd5a8154e7221c3f68911f84c76cc0159895e3e6ba447c133be87ee21155006a6a9f45728a5e70b268170dbd9151308393e4a7bf4b9f46e4d6379d1b232048a10a175c0bf54f4648deb7cbad98d89714c616a13f41b87b44024fab2b7fb8c7bbf6c815c1c5d8b4772cd557d17bece486e1ca1b9cb516fc94915376eb637501f7bbcf2f3c5618854b98b5f9be04d23f8750d09f6f6fd292837be31c9a9a17c5cadab26113f98"}}, {0x46, &(0x7f00000005c0)=@string={0x46, 0x3, "07c97a333adc651a126f2252658ff5fd98a6719bbd04f9b423b7b0fc0fd47de5c93663b09e1f2947f1a89da7899b454a10b2950a120b5df7f43620ef879a31cff9cae6e6"}}, {0x15, &(0x7f0000000480)=@string={0x15, 0x3, "22df4b89ca47c17cd1ce080ecf671cc7515a73"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x424}}]}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x10000001}, 0x18) mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setuid(0xee01) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000700)={0x8000000000000001, 0x8}, &(0x7f0000000740)) 8.39826363s ago: executing program 0 (id=1879): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)={0x3c, r7, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0xfffffffc, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) (fail_nth: 1) 7.379458543s ago: executing program 0 (id=1881): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x34, &(0x7f0000000080), &(0x7f00000002c0)=0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6(0xa, 0x800, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000002940), 0x40000000000017d, 0x811) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)={0x3c, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0xfffffffc, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) 7.255243527s ago: executing program 4 (id=1883): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.870093022s ago: executing program 5 (id=1884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = socket$unix(0x1, 0x2, 0x0) shutdown(r3, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x2, 0x1) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 6.567952433s ago: executing program 6 (id=1885): openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) 5.885536165s ago: executing program 6 (id=1886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 5.732717218s ago: executing program 6 (id=1887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x551, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) recvmmsg(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) write$P9_RSTATu(r2, 0x0, 0x21e) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r6 = syz_open_pts(r5, 0x101) dup3(r6, r5, 0x0) syz_io_uring_setup(0x88c, &(0x7f0000001440)={0x0, 0xaee2, 0x80, 0x2, 0xbffffffc, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x38, 0xffdfff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x2000006, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x0, 0x5c, 0x8, 0x7f, 0xd1, 0xf2b, 0x1, 0x806, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xffff7ff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x0, 0x40d, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xa2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x6, 0xffffffff, 0x7f, 0x8, 0x6, 0x3, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc7, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x9, 0x5, 0x3, 0x2, 0x3, 0x1000002, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x4002, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x40000005, 0x6, 0x8000, 0x7, 0x6, 0x8, 0x6, 0x7fffffff, 0x400e00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x9, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0x10001, 0xf2, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) shutdown(r8, 0x1) 5.660450729s ago: executing program 5 (id=1888): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) io_setup(0x2007, &(0x7f0000000980)) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c00000001"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.872763728s ago: executing program 3 (id=1889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x181000, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x1, 0x40, 0x10, {0x77, 0xc}, {0x0, 0x100}, @period={0x59, 0xffff, 0x4, 0x23, 0xffff, {0x4, 0x5, 0x2, 0x2}, 0x7, &(0x7f00000000c0)=[0x4, 0x3, 0x58, 0x3, 0x1, 0x1800, 0x1]}}, {0x56, 0x3, 0x0, {0x7, 0x40}, {0x6, 0x200}, @const={0x153, {0x4b, 0x8, 0x1400, 0x6}}}}) socket(0x2a, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) 4.704983904s ago: executing program 0 (id=1890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d3b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="dd677445bcfd0600c70000000000c2b746cbdb717bfd20feaa418f39057f000000000000", 0x24}, {&(0x7f0000000a40)="d122e32587b4d7078a1b9626feffdbe50ca1ab34e9d3a25b03bf5fb1efb3095b77b831d137d67a447c06bac419fc4e494926b999e53628d91d5bab8e181e03cdbd626c285353305ad977270ddb9c9260d8ec41cb82ec252ef6eb7cd6ceeaa3dc2722a9bb7d17ce07f1329ded096b5175077b8bd3c866e5a6d20bbbd2cfeb9693c9957632be4aada0efbb818d25e35507f19aee422f0e2dc94badb054960796fcb59789b51bd957bef3002a22aaaf71", 0xaf}, {&(0x7f0000000b00)="7efb15c0927062496a0395599b05e9b99c7e5b51ab66bc64161370f0d4eb7f30ffa4e9d06965dca5b237786e64ea", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="71831b059de4d82541cd887a9e7a85c1a0ed36", 0x13}, {&(0x7f0000001380)="af86d0c8714909a0ee831b0c837b598f9dc7c1ae20ed322c0c9e3cadf1fa4640e5c94264ccd08f0cbcfebc83acd6ec17550af3906c752fe484abbf41295ba427d982763c4bdf94a6850513a973968b598e8151684927a181ca229bc1cd5d312996568c041d86636889cdca8112732eea689c7623835aedbc37628400db7e00604db51337f2c60c8cc0f39ffb0f85be0713f391f257cdefa71588636a937213e78e758d58501ddf41be0741eaf7a804eae990f1b382582bc1bb849ed3e543f4744328bc3a029b6c2562a86ce38a85f4fb16a8f56d51a08d227756fc452611be3002015ac8c9fca0a955d7326b5e63", 0xee}], 0x2}}], 0x3, 0x4000001) 4.516088575s ago: executing program 0 (id=1891): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r5, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000440)=0xffffffff) recvmmsg(r5, &(0x7f000000e280), 0x58a, 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000580)=r7, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)="7f50f1625c", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 4.488257609s ago: executing program 4 (id=1892): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c0000"], 0x0, 0x5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (fail_nth: 5) 3.988743052s ago: executing program 4 (id=1893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 3.827667093s ago: executing program 3 (id=1894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000407000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) syz_open_dev$usbfs(0x0, 0x10, 0x10801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x52b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0xfeb3, 0x4815, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) close(r6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180"], 0x34}}, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.781881736s ago: executing program 4 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x17, 0x68, 0x309, 0x0, 0xfffffffc, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x600c0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) 2.560726601s ago: executing program 3 (id=1896): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102392, 0x18ff8) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) 2.49503402s ago: executing program 5 (id=1897): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.462998281s ago: executing program 0 (id=1898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x42080000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sysinfo(&(0x7f0000000800)=""/97) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)={0x8, 0x0, [{0xffff1000, 0xf9, &(0x7f0000000140)=""/249}, {0xeeee0000, 0xe6, &(0x7f0000000280)=""/230}, {0xdddf0000, 0x5d, &(0x7f0000000380)=""/93}, {0xffff1000, 0x1000, &(0x7f0000001300)=""/4096}, {0x0, 0x4e, &(0x7f00000000c0)=""/47}, {0x4, 0x41, &(0x7f0000000400)=""/65}, {0x4, 0xd7, &(0x7f00000005c0)=""/215}, {0xf000, 0x47, &(0x7f0000000480)=""/71}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008041}, 0x10) 2.168877282s ago: executing program 3 (id=1899): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, &(0x7f0000000140)=0xc) 2.168187765s ago: executing program 5 (id=1900): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x7f, 0x1, 0x5, 0xcfc, 0x5}}, {0xe, 0x2, [0x14f4, 0x3571, 0x3, 0xa685, 0x1]}}, {{0x1c, 0x1, {0x3b, 0xb, 0xa1, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xfe4, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x7706, 0x0, 0x2, 0xd, 0xa}}, {0x18, 0x2, [0x5, 0x8, 0x4, 0xff7f, 0x9, 0x7, 0xd2a, 0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x80, 0x83, 0x4, 0x1, 0x0, 0xeb, 0x445, 0x5}}, {0xe, 0x2, [0x1ff, 0x1, 0x51, 0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x42b, 0x9, 0x5, 0x5, 0x40, 0xa]}}, {{0x1c, 0x1, {0x1, 0xe, 0x800, 0x7623, 0x2, 0xfffffc00, 0x401, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x16c}}, 0x0) 1.384747532s ago: executing program 4 (id=1901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d3b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="dd677445bcfd0600c70000000000c2b746cbdb717bfd20feaa418f39057f000000000000", 0x24}, {&(0x7f0000000a40)="d122e32587b4d7078a1b9626feffdbe50ca1ab34e9d3a25b03bf5fb1efb3095b77b831d137d67a447c06bac419fc4e494926b999e53628d91d5bab8e181e03cdbd626c285353305ad977270ddb9c9260d8ec41cb82ec252ef6eb7cd6ceeaa3dc2722a9bb7d17ce07f1329ded096b5175077b8bd3c866e5a6d20bbbd2cfeb9693c9957632be4aada0efbb818d25e35507f19aee422f0e2dc94badb054960796fcb59789b51bd957bef3002a22aaaf71", 0xaf}, {&(0x7f0000000b00)="7efb15c0927062496a0395599b05e9b99c7e5b51ab66bc64161370f0d4eb7f30ffa4e9d06965dca5b237786e64ea", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="71831b059de4d82541cd887a9e7a85c1a0ed36", 0x13}, {&(0x7f0000001380)="af86d0c8714909a0ee831b0c837b598f9dc7c1ae20ed322c0c9e3cadf1fa4640e5c94264ccd08f0cbcfebc83acd6ec17550af3906c752fe484abbf41295ba427d982763c4bdf94a6850513a973968b598e8151684927a181ca229bc1cd5d312996568c041d86636889cdca8112732eea689c7623835aedbc37628400db7e00604db51337f2c60c8cc0f39ffb0f85be0713f391f257cdefa71588636a937213e78e758d58501ddf41be0741eaf7a804eae990f1b382582bc1bb849ed3e543f4744328bc3a029b6c2562a86ce38a85f4fb16a8f56d51a08d227756fc452611be3002015ac8c9fca0a955d7326b5e63", 0xee}], 0x2}}], 0x3, 0x4000001) 1.348548455s ago: executing program 6 (id=1902): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0xc17a) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000600)={0x32}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) 1.316173168s ago: executing program 4 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$pid(0x3, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4300, 0x0) utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) r6 = socket(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x82, 0x0, &(0x7f00000007c0)) 1.109146269s ago: executing program 5 (id=1904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x181000, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x0, 0x1, {0x1, 0x40, 0x10, {0x77, 0xc}, {0x0, 0x100}, @period={0x59, 0xffff, 0x4, 0x23, 0xffff, {0x4, 0x5, 0x2, 0x2}, 0x7, &(0x7f00000000c0)=[0x4, 0x3, 0x58, 0x3, 0x1, 0x1800, 0x1]}}, {0x56, 0x3, 0x0, {0x7, 0x40}, {0x6, 0x200}, @const={0x153, {0x4b, 0x8, 0x1400, 0x6}}}}) socket(0x2a, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)}}], 0x2, 0x48000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) 840.734093ms ago: executing program 3 (id=1905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 0s ago: executing program 5 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) syz_open_dev$sndpcmp(&(0x7f0000002040), 0xffffffffffffffff, 0x88000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002080), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000005c0)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000045}, 0x2004c0c0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffffffffffeb5) kernel console output (not intermixed with test programs): disconnect, device number 48 [ 506.041697][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 506.063183][ T5934] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 506.075833][ T5934] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 506.118101][ T5934] usb 2-1: USB disconnect, device number 51 [ 506.953054][ T30] audit: type=1400 audit(1756136294.747:433): avc: denied { accept } for pid=11199 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 507.205550][T11211] input: syz1 as /devices/virtual/input/input63 [ 507.417631][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1263'. [ 507.678001][T11248] overlayfs: failed lookup in lower (newroot/255, name='bus', err=-40): overlapping layers [ 508.671358][ T30] audit: type=1400 audit(1756136296.627:434): avc: denied { ioctl } for pid=11258 comm="syz.4.1268" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 509.118077][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1267'. [ 509.656164][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 509.665759][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 509.739691][T11280] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[11280] [ 509.783401][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 509.789394][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 509.853975][ T5978] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 509.881893][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 509.888035][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 510.037521][ T5978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.490238][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 510.496420][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 510.505541][ T5978] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.549800][T11279] ceph: No mds server is up or the cluster is laggy [ 510.571730][ T5978] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.575676][T11274] ceph: No mds server is up or the cluster is laggy [ 510.635006][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.684546][ T5978] usb 6-1: config 0 descriptor?? [ 510.706801][ T5978] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 510.891386][ T5934] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 510.902629][ T5978] usb 6-1: USB disconnect, device number 52 [ 511.078100][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 511.091003][ T5934] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.099233][ T5934] usb 2-1: config 0 has no interface number 0 [ 511.106911][ T5934] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.115094][T11301] input: syz1 as /devices/virtual/input/input64 [ 511.121255][ T5934] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.266045][ T5934] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 511.303904][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.330292][ T5934] usb 2-1: config 0 descriptor?? [ 511.431478][ T5978] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 511.581384][ T5978] usb 6-1: Using ep0 maxpacket: 32 [ 511.589797][ T5978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.696007][ T5978] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.838342][ T5978] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 511.887260][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.939147][ T5978] usb 6-1: config 0 descriptor?? [ 511.964628][ T5978] ldusb 6-1:0.0: Interrupt in endpoint not found [ 511.985352][ T5978] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 511.999423][ T5934] uclogic 0003:28BD:0071.0007: pen parameters not found [ 512.006424][ T5934] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 512.015955][ T5934] usb 2-1: USB disconnect, device number 52 [ 512.174373][ T5978] usb 6-1: USB disconnect, device number 53 [ 512.733261][T11314] FAULT_INJECTION: forcing a failure. [ 512.733261][T11314] name failslab, interval 1, probability 0, space 0, times 0 [ 512.747672][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(full) [ 512.747689][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.747696][T11314] Call Trace: [ 512.747700][T11314] [ 512.747704][T11314] dump_stack_lvl+0x16c/0x1f0 [ 512.747721][T11314] should_fail_ex+0x512/0x640 [ 512.747734][T11314] ? __kmalloc_noprof+0xbf/0x510 [ 512.747747][T11314] ? io_cache_alloc_new+0x45/0xf0 [ 512.747760][T11314] should_failslab+0xc2/0x120 [ 512.747773][T11314] __kmalloc_noprof+0xd2/0x510 [ 512.747783][T11314] ? mark_held_locks+0x49/0x80 [ 512.747803][T11314] io_cache_alloc_new+0x45/0xf0 [ 512.747817][T11314] io_msg_alloc_async+0x1c3/0x3a0 [ 512.747829][T11314] io_sendmsg_prep+0x37d/0x550 [ 512.747842][T11314] io_submit_sqes+0x850/0x25c0 [ 512.747861][T11314] __do_sys_io_uring_enter+0xd6a/0x1630 [ 512.747874][T11314] ? __fget_files+0x20e/0x3c0 [ 512.747886][T11314] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 512.747899][T11314] ? fput+0x9b/0xd0 [ 512.747913][T11314] ? ksys_write+0x1ac/0x250 [ 512.747924][T11314] ? __pfx_ksys_write+0x10/0x10 [ 512.747939][T11314] do_syscall_64+0xcd/0x4c0 [ 512.747953][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.747965][T11314] RIP: 0033:0x7fde60b8ebe9 [ 512.747974][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.747985][T11314] RSP: 002b:00007fde61a84038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 512.747996][T11314] RAX: ffffffffffffffda RBX: 00007fde60db5fa0 RCX: 00007fde60b8ebe9 [ 512.748003][T11314] RDX: 0000000000005b24 RSI: 0000000000004d10 RDI: 0000000000000004 [ 512.748009][T11314] RBP: 00007fde61a84090 R08: 0000000000000000 R09: 0000000000000000 [ 512.748016][T11314] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 512.748022][T11314] R13: 00007fde60db6038 R14: 00007fde60db5fa0 R15: 00007ffd1c79c9f8 [ 512.748036][T11314] [ 513.583194][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 513.592886][T11325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.383651][T11325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.627784][T11335] binder: 11330:11335 ioctl 4018620d 0 returned -22 [ 515.171553][ T5963] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 515.698865][ T5963] usb 6-1: config 0 has an invalid interface number: 94 but max is 0 [ 515.722608][ T5963] usb 6-1: config 0 has no interface number 0 [ 515.751672][ T5963] usb 6-1: config 0 interface 94 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 515.791621][ T5963] usb 6-1: config 0 interface 94 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 515.818529][ T5963] usb 6-1: config 0 interface 94 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 515.833929][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 515.859478][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 515.922844][T11353] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 515.926453][ T5963] usb 6-1: config 0 interface 94 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 515.969647][ T30] audit: type=1400 audit(1756136303.927:435): avc: denied { ioctl } for pid=11352 comm="syz.4.1295" path="socket:[35512]" dev="sockfs" ino=35512 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 515.974546][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 516.071367][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has an endpoint descriptor with address 0x34, changing to 0x4 [ 516.100738][ T5963] usb 6-1: config 0 interface 94 altsetting 0 endpoint 0x4 has invalid maxpacket 60988, setting to 64 [ 516.114953][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 516.126085][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.137072][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 516.147839][ T5963] usb 6-1: config 0 interface 94 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 516.220381][ T5963] usb 6-1: New USB device found, idVendor=03f0, idProduct=4349, bcdDevice=ea.72 [ 516.233848][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.242633][ T5963] usb 6-1: Product: syz [ 516.246803][ T5963] usb 6-1: Manufacturer: syz [ 516.251530][ T5963] usb 6-1: SerialNumber: syz [ 516.260281][ T5963] usb 6-1: config 0 descriptor?? [ 516.276837][ T5963] pl2303 6-1:0.94: required endpoints missing [ 516.524273][ T5927] usb 6-1: USB disconnect, device number 54 [ 516.850036][ T30] audit: type=1400 audit(1756136304.807:436): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 517.258890][ T30] audit: type=1326 audit(1756136305.167:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.408237][ T30] audit: type=1326 audit(1756136305.167:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.507213][ T30] audit: type=1326 audit(1756136305.177:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.531794][ T30] audit: type=1326 audit(1756136305.177:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.555548][ T30] audit: type=1326 audit(1756136305.177:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.579328][ T30] audit: type=1326 audit(1756136305.177:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.604037][ T30] audit: type=1326 audit(1756136305.177:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 517.627913][ T30] audit: type=1326 audit(1756136305.177:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11363 comm="syz.1.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 518.681179][T11383] Unsupported ieee802154 address type: 0 [ 519.071005][T11394] binder: 11386:11394 ioctl 4018620d 0 returned -22 [ 521.306544][ T5927] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 521.572123][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.982606][T11430] tmpfs: Unknown parameter '00000000000000000003' [ 522.364480][T11430] mkiss: ax0: crc mode is auto. [ 522.406509][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 522.706774][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 522.716521][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 522.741522][ T5927] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.750686][ T5927] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.758741][ T5927] usb 2-1: Manufacturer: syz [ 522.764600][ T5927] usb 2-1: config 0 descriptor?? [ 523.131494][ T5927] rc_core: IR keymap rc-hauppauge not found [ 523.138762][ T5927] Registered IR keymap rc-empty [ 523.144364][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.223315][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.254561][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 523.272741][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input65 [ 523.328247][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.356731][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.385957][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.422020][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.465360][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.493769][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.533067][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.563470][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.645976][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.687600][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 523.687616][ T30] audit: type=1400 audit(1756136311.647:493): avc: denied { write } for pid=11450 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 523.716183][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.751542][ T5927] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 523.774432][ T5927] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 523.785078][ T5927] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 523.801231][ T5927] usb 2-1: USB disconnect, device number 53 [ 524.172731][ T30] audit: type=1400 audit(1756136312.137:494): avc: denied { write } for pid=11456 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 524.201585][ T976] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 524.362686][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 524.639426][ T976] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 524.649014][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.660394][ T976] usb 4-1: config 0 descriptor?? [ 524.770045][T11477] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1330'. [ 525.569245][ T976] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 525.822157][ T30] audit: type=1400 audit(1756136313.777:495): avc: denied { setopt } for pid=11485 comm="syz.5.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 526.108784][ T976] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 526.120819][ T976] asix 4-1:0.0: probe with driver asix failed with error -71 [ 526.131039][ T976] usb 4-1: USB disconnect, device number 44 [ 526.511389][ T5927] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 526.511389][ T912] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 526.593989][T11500] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 526.683222][ T5927] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.692041][ T5927] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.703205][ T5927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.712593][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 526.715550][ T912] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 526.724006][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 526.734731][ T912] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 526.745037][ T5927] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.768087][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.776593][ T5927] usb 2-1: Product: syz [ 526.780972][ T5927] usb 2-1: Manufacturer: syz [ 526.785788][ T912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 526.790683][ T5927] cdc_wdm 2-1:1.0: skipping garbage [ 526.800608][ T5927] cdc_wdm 2-1:1.0: skipping garbage [ 526.818345][ T5927] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 526.824359][ T912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 526.824392][ T912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 526.847616][ T5927] cdc_wdm 2-1:1.0: Unknown control protocol [ 526.851880][ T912] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 526.867540][ T912] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 526.875666][ T912] usb 6-1: Product: syz [ 526.879824][ T912] usb 6-1: Manufacturer: syz [ 526.898795][ T912] cdc_wdm 6-1:1.0: skipping garbage [ 526.907535][ T912] cdc_wdm 6-1:1.0: skipping garbage [ 526.917150][ T912] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 526.926385][ T912] cdc_wdm 6-1:1.0: Unknown control protocol [ 527.088785][ T30] audit: type=1400 audit(1756136315.047:496): avc: denied { read write } for pid=11492 comm="syz.1.1335" name="cdc-wdm0" dev="devtmpfs" ino=3402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 527.157708][ T30] audit: type=1400 audit(1756136315.047:497): avc: denied { open } for pid=11492 comm="syz.1.1335" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 527.191196][ T976] usb 2-1: USB disconnect, device number 54 [ 527.511609][ T30] audit: type=1400 audit(1756136315.337:498): avc: denied { setattr } for pid=11505 comm="syz.4.1339" name="SMC" dev="sockfs" ino=36943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.591041][ T30] audit: type=1400 audit(1756136315.477:499): avc: denied { ioctl } for pid=11505 comm="syz.4.1339" path="socket:[36943]" dev="sockfs" ino=36943 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 527.591916][ T912] usb 6-1: USB disconnect, device number 55 [ 527.640013][T11508] binder: 11507:11508 ioctl 4018620d 0 returned -22 [ 527.647543][T11508] binder: 11507:11508 ioctl 40046205 0 returned -22 [ 527.763393][T11516] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 527.772659][T11516] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 527.781402][T11516] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 528.126810][ T30] audit: type=1326 audit(1756136316.087:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7fc00000 [ 528.151814][ T30] audit: type=1326 audit(1756136316.087:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2bf8ebe9 code=0x7fc00000 [ 528.175736][ T30] audit: type=1326 audit(1756136316.087:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.4.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7fc00000 [ 528.833873][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 528.833884][ T30] audit: type=1400 audit(1756136316.787:569): avc: denied { set_context_mgr } for pid=11528 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 528.887988][ T30] audit: type=1400 audit(1756136316.847:570): avc: denied { call } for pid=11528 comm="syz.5.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 531.075607][T11542] input: syz1 as /devices/virtual/input/input66 [ 531.241413][ T5927] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 532.543983][ T30] audit: type=1400 audit(1756136320.507:571): avc: denied { module_request } for pid=11538 comm="syz.0.1349" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 532.710601][ T912] libceph: connect (1)[c::]:6789 error -101 [ 532.718436][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.738845][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 532.786335][ T912] libceph: connect (1)[c::]:6789 error -101 [ 532.800838][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 532.892956][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 532.904343][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 532.914108][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 532.929095][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.951457][ T5927] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.959562][ T5927] usb 5-1: Manufacturer: syz [ 532.966923][ T5927] usb 5-1: config 0 descriptor?? [ 533.016025][ T912] libceph: connect (1)[c::]:6789 error -101 [ 533.148698][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 533.155872][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 533.162522][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 533.659106][ T5927] rc_core: IR keymap rc-hauppauge not found [ 533.665446][ T5927] Registered IR keymap rc-empty [ 533.670497][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 533.680509][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 533.692896][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 533.702510][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 533.708926][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 533.715399][T11556] ceph: No mds server is up or the cluster is laggy [ 533.722499][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 533.728548][T11559] ceph: No mds server is up or the cluster is laggy [ 533.749123][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 533.790251][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 533.839182][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.321470][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.371451][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.460379][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.601896][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.868922][ T30] audit: type=1400 audit(1756136322.807:572): avc: denied { create } for pid=11585 comm="syz.4.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 534.951805][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 534.996738][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 535.006309][ T30] audit: type=1400 audit(1756136322.947:573): avc: denied { sys_admin } for pid=11585 comm="syz.4.1358" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 535.027736][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 535.056231][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 535.092805][ T5927] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 535.123499][ T5927] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 535.144761][ T5927] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.211429][ T5927] usb 5-1: USB disconnect, device number 49 [ 535.230554][T11598] binder: 11597:11598 unknown command 0 [ 535.236143][T11598] binder: 11597:11598 ioctl c0306201 200000000080 returned -22 [ 535.245217][T11598] binder: BINDER_SET_CONTEXT_MGR already set [ 535.251578][T11598] binder: 11597:11598 ioctl 4018620d 200000000040 returned -16 [ 535.261518][ T5934] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 535.443050][ T5934] usb 2-1: config 0 has no interfaces? [ 535.473805][ T5934] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.499627][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.537953][ T5934] usb 2-1: Product: syz [ 535.550661][ T5934] usb 2-1: Manufacturer: syz [ 535.556397][ T5934] usb 2-1: SerialNumber: syz [ 535.570856][ T5934] usb 2-1: config 0 descriptor?? [ 535.891673][T11596] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1359'. [ 537.396631][ T976] libceph: connect (1)[c::]:6789 error -101 [ 537.404592][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 537.461827][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 537.507382][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 537.681782][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 537.687867][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 537.831468][ T976] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 537.995455][ T976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.007695][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 538.016458][ T5963] usb 2-1: USB disconnect, device number 55 [ 538.030171][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.138417][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 538.145998][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 538.207007][ T976] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 538.291625][T11634] binder: 11632:11634 ioctl 40046205 0 returned -22 [ 538.403868][ T976] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 538.421731][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 538.431360][ T976] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.450635][T11621] ceph: No mds server is up or the cluster is laggy [ 538.450733][T11618] ceph: No mds server is up or the cluster is laggy [ 538.464325][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 538.471937][ T976] usb 5-1: Manufacturer: syz [ 538.503574][ T976] usb 5-1: config 0 descriptor?? [ 538.743074][T11638] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1371'. [ 538.993179][T11645] 9pnet_fd: Insufficient options for proto=fd [ 539.031374][ T976] rc_core: IR keymap rc-hauppauge not found [ 539.037304][ T976] Registered IR keymap rc-empty [ 539.037397][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 539.056113][ T30] audit: type=1400 audit(1756136327.017:574): avc: denied { ioctl } for pid=11641 comm="syz.1.1372" path="socket:[36756]" dev="sockfs" ino=36756 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 539.088875][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 539.112902][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 539.146415][ T30] audit: type=1400 audit(1756136327.097:575): avc: denied { read } for pid=11641 comm="syz.1.1372" path="socket:[37184]" dev="sockfs" ino=37184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.148297][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.170059][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.180886][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 539.203630][T11648] bond0: (slave rose0): Enslaving as an active interface with an up link [ 540.046324][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.081483][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.113550][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.298961][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.340819][T11667] binder: 11662:11667 ioctl 40046205 0 returned -22 [ 540.348013][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.451478][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.481414][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.509084][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.551824][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.686185][T11676] binder: 11668:11676 ioctl 40046205 0 returned -22 [ 540.709424][ T976] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.936402][ T976] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 540.971437][ T976] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.012017][ T976] usb 5-1: USB disconnect, device number 50 [ 541.496450][ T30] audit: type=1326 audit(1756136329.037:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.637618][ T30] audit: type=1326 audit(1756136329.037:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.725450][ T30] audit: type=1326 audit(1756136329.047:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.805322][ T30] audit: type=1326 audit(1756136329.047:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.843952][ T30] audit: type=1326 audit(1756136329.047:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.875614][ T30] audit: type=1326 audit(1756136329.047:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 541.909168][ T30] audit: type=1326 audit(1756136329.047:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 542.021504][ T5963] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 542.028518][ T30] audit: type=1326 audit(1756136329.047:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 542.351656][ T30] audit: type=1326 audit(1756136329.057:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 542.379086][ T30] audit: type=1326 audit(1756136329.057:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11672 comm="syz.5.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3909d8ebe9 code=0x7ffc0000 [ 542.427965][ T5963] usb 6-1: config 0 has no interfaces? [ 542.585405][ T5963] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.607795][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.626589][ T5963] usb 6-1: Product: syz [ 542.631196][ T5963] usb 6-1: Manufacturer: syz [ 542.653135][ T5963] usb 6-1: SerialNumber: syz [ 542.798497][ T5963] usb 6-1: config 0 descriptor?? [ 543.308324][T11717] QAT: failed to copy from user cfg_data. [ 543.541468][T11690] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1379'. [ 543.701193][T11732] capability: warning: `syz.0.1386' uses 32-bit capabilities (legacy support in use) [ 543.872798][ T5963] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 544.104724][ T5963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.176683][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 544.380095][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 544.429290][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 544.472819][ T5963] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 544.482782][ T5963] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 544.517555][ T5963] usb 2-1: Manufacturer: syz [ 544.526441][ T5963] usb 2-1: config 0 descriptor?? [ 544.988912][ T24] usb 6-1: USB disconnect, device number 56 [ 545.585296][T11755] input: syz1 as /devices/virtual/input/input69 [ 545.850156][T11755] netlink: 'syz.5.1391': attribute type 4 has an invalid length. [ 545.858155][T11755] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1391'. [ 546.734002][T11776] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1393'. [ 547.794899][ T5963] rc_core: IR keymap rc-hauppauge not found [ 547.882309][ T5934] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 548.151557][ T5963] Registered IR keymap rc-empty [ 548.156532][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.181451][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.202173][ T5963] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 548.227689][ T5963] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70 [ 548.281263][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.313145][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.321495][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 548.321511][ T30] audit: type=1400 audit(1756136336.277:607): avc: denied { override_creds } for pid=11796 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 548.349939][ T5934] usb 5-1: config 0 has no interfaces? [ 548.373070][ T5934] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 548.382303][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 548.389952][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.401447][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.281490][ T30] audit: type=1400 audit(1756136337.227:608): avc: denied { mounton } for pid=11797 comm="syz.5.1400" path="/proc/931/task" dev="proc" ino=38033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 549.291407][ T5934] usb 5-1: Product: syz [ 549.307692][ T30] audit: type=1400 audit(1756136337.237:609): avc: denied { accept } for pid=11797 comm="syz.5.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.320280][ T5934] usb 5-1: Manufacturer: syz [ 549.334710][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.344652][ T5934] usb 5-1: SerialNumber: syz [ 549.356574][ T5934] usb 5-1: config 0 descriptor?? [ 549.362083][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.399096][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.436383][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.486366][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.544125][T11807] binder: 11805:11807 ioctl 40046205 0 returned -22 [ 549.562281][ T5963] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 549.903651][ T5978] usb 5-1: USB disconnect, device number 51 [ 549.912948][ T5963] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 549.920954][ T5963] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 550.713384][T11818] block device autoloading is deprecated and will be removed. [ 550.821894][ T5963] usb 2-1: USB disconnect, device number 56 [ 551.041984][ T30] audit: type=1400 audit(1756136338.957:610): avc: denied { execute } for pid=11821 comm="syz.5.1406" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 551.524839][ T5978] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 551.626576][ T5963] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 551.930856][ T5978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.054908][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 552.401608][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.414216][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 552.478803][ T5978] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 552.494510][ T5978] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 552.505560][ T5978] usb 5-1: Manufacturer: syz [ 552.530252][ T5978] usb 5-1: config 0 descriptor?? [ 552.892492][T11852] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1412'. [ 553.237719][T11847] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 553.797425][T11859] netlink: 'syz.3.1413': attribute type 5 has an invalid length. [ 554.026262][T11859] netlink: 'syz.3.1413': attribute type 7 has an invalid length. [ 554.047873][T11858] binder: 11857:11858 ioctl 40046205 0 returned -22 [ 554.152570][ T5978] rc_core: IR keymap rc-hauppauge not found [ 554.158561][ T5978] Registered IR keymap rc-empty [ 554.201495][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.271553][T11859] : entered promiscuous mode [ 554.271673][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.683629][ T5978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 554.712929][ T5978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input71 [ 554.737558][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.761458][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.785965][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.871430][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 554.946123][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.244313][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.272999][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.291665][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.417805][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 555.437812][T11891] QAT: failed to copy from user cfg_data. [ 555.464251][ T5978] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 556.109463][ T5978] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 556.873446][ T5978] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 556.902784][ T5978] usb 5-1: USB disconnect, device number 52 [ 557.452420][ T30] audit: type=1326 audit(1756136344.940:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.558262][ T30] audit: type=1326 audit(1756136344.940:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.630554][ T30] audit: type=1326 audit(1756136344.940:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.660837][ T30] audit: type=1326 audit(1756136344.940:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.689240][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1426'. [ 557.751385][ T30] audit: type=1326 audit(1756136344.940:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.796506][T11909] overlayfs: failed to resolve './bus': -2 [ 557.837411][ T30] audit: type=1326 audit(1756136344.940:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 557.863212][ T976] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 558.124156][ T30] audit: type=1326 audit(1756136344.940:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 558.149984][ T30] audit: type=1326 audit(1756136344.940:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 558.152661][ T976] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.399433][ T30] audit: type=1326 audit(1756136344.950:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 558.589361][ T30] audit: type=1326 audit(1756136344.950:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27b2f8ebe9 code=0x7ffc0000 [ 558.658461][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 559.541781][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 559.571362][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 559.735303][ T976] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.744495][ T976] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.754745][ T976] usb 4-1: Manufacturer: syz [ 559.773841][ T976] usb 4-1: config 0 descriptor?? [ 562.066528][ T976] rc_core: IR keymap rc-hauppauge not found [ 562.078744][ T976] Registered IR keymap rc-empty [ 562.097288][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.141968][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.165227][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 562.322984][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 562.337171][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.363585][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.392941][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.431686][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.453677][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.461163][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.467560][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.491391][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.535317][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.617247][T11979] input: syz1 as /devices/virtual/input/input73 [ 562.642005][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 562.920138][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 564.048948][T11980] netlink: 'syz.4.1441': attribute type 4 has an invalid length. [ 564.065162][T11980] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1441'. [ 564.081444][ T976] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 564.102961][ T976] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 564.111700][ T976] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 564.179992][ T976] usb 4-1: USB disconnect, device number 45 [ 565.786538][T12007] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1448'. [ 566.037019][T12008] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1445'. [ 566.982151][ T912] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 567.168548][ T912] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 567.191012][ T912] usb 5-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.358070][ T912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.364783][ T912] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 567.374154][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.402822][ T912] usb 5-1: config 0 descriptor?? [ 567.409636][T12015] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 567.417353][T12015] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 567.616625][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 567.616640][ T30] audit: type=1400 audit(1756136355.580:668): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 567.864133][ T912] usb 5-1: string descriptor 0 read error: -71 [ 568.086118][ T30] audit: type=1326 audit(1756136355.900:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.314973][ T30] audit: type=1326 audit(1756136355.900:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.321910][ T912] usbhid 5-1:0.0: can't add hid device: -71 [ 568.344421][ T912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 568.355691][ T912] usb 5-1: USB disconnect, device number 53 [ 568.371572][ T30] audit: type=1326 audit(1756136355.900:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.397586][ T30] audit: type=1326 audit(1756136355.900:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.424983][ T30] audit: type=1326 audit(1756136355.900:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.509001][T10343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.537501][ T30] audit: type=1326 audit(1756136355.900:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.600203][ T30] audit: type=1326 audit(1756136355.900:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.649658][ T30] audit: type=1326 audit(1756136355.900:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.677753][ T30] audit: type=1326 audit(1756136355.900:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12025 comm="syz.3.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 568.724033][T10343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.741052][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1458'. [ 569.468537][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 569.541402][T10343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.897688][T10343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.926120][T12036] veth2: entered promiscuous mode [ 570.026858][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1463'. [ 570.545719][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 571.220803][T12049] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 571.575530][T11713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 571.589136][T11713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 571.598600][T11713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 571.616418][T11713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 571.627312][T11713] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 571.650836][T12067] geneve2: entered promiscuous mode [ 571.656704][T12067] geneve2: entered allmulticast mode [ 571.747197][T10343] dummy0: left allmulticast mode [ 571.788407][T10343] bridge0: port 3(dummy0) entered disabled state [ 571.805743][T10343] bridge_slave_1: left allmulticast mode [ 572.276442][T10343] bridge_slave_1: left promiscuous mode [ 572.298889][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.312356][T10343] bridge_slave_0: left allmulticast mode [ 572.318393][T10343] bridge_slave_0: left promiscuous mode [ 572.352155][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.149081][T10343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.174667][T10343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.189795][T10343] bond0 (unregistering): Released all slaves [ 573.446943][T10343] bond1 (unregistering): (slave vcan4): Releasing backup interface [ 573.457137][T10343] vcan4: left promiscuous mode [ 573.465584][T10343] bond1 (unregistering): Released all slaves [ 573.592899][T10343] bond2 (unregistering): (slave vcan5): Releasing backup interface [ 573.600888][T10343] vcan5: left promiscuous mode [ 573.625002][T10343] bond2 (unregistering): Released all slaves [ 573.653263][ T5855] Bluetooth: hci2: command tx timeout [ 573.708068][T10343] bond3 (unregistering): Released all slaves [ 573.836745][T10343] bond4 (unregistering): (slave vcan8): Releasing backup interface [ 573.844901][T10343] vcan8: left promiscuous mode [ 573.846588][T12113] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1474'. [ 573.992271][T10343] bond4 (unregistering): Released all slaves [ 574.221209][T10343] bond5 (unregistering): Released all slaves [ 574.327898][T10343] bond6 (unregistering): Released all slaves [ 574.344971][ T1097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.364378][ T1097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.481504][ T1097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.556685][ T1097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.682748][T10343] _ÐZ`Ô€@S: left promiscuous mode [ 575.171538][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 575.171554][ T30] audit: type=1326 audit(1756136363.130:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 575.207987][ T30] audit: type=1326 audit(1756136363.130:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12120 comm="syz.3.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 575.522332][T12126] netlink: set zone limit has 4 unknown bytes [ 575.542008][T12072] chnl_net:caif_netlink_parms(): no params data found [ 575.855462][ T5855] Bluetooth: hci2: command tx timeout [ 575.861172][T10343] tipc: Left network mode [ 576.856740][ T30] audit: type=1326 audit(1756136364.400:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856792][ T30] audit: type=1326 audit(1756136364.400:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856831][ T30] audit: type=1326 audit(1756136364.650:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856870][ T30] audit: type=1326 audit(1756136364.650:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856908][ T30] audit: type=1326 audit(1756136364.650:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856946][ T30] audit: type=1326 audit(1756136364.780:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.856984][ T30] audit: type=1326 audit(1756136364.780:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 576.857022][ T30] audit: type=1326 audit(1756136364.780:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12144 comm="syz.0.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 577.195675][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.669898][T12163] QAT: failed to copy from user cfg_data. [ 577.881467][ T5855] Bluetooth: hci2: command tx timeout [ 578.607207][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.661474][T12072] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.668696][T12072] bridge_slave_0: entered allmulticast mode [ 578.680878][T12072] bridge_slave_0: entered promiscuous mode [ 578.756797][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.783542][T12072] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.807261][T12072] bridge_slave_1: entered allmulticast mode [ 578.825049][T12072] bridge_slave_1: entered promiscuous mode [ 579.270158][T10343] hsr_slave_0: left promiscuous mode [ 579.311682][T12173] binder: 12172:12173 ioctl 40046205 0 returned -22 [ 579.328002][T10343] hsr_slave_1: left promiscuous mode [ 579.346289][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.391342][T10343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.411986][T10343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.427697][T10343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.500295][T10343] veth1_macvtap: left promiscuous mode [ 579.538315][T10343] veth0_macvtap: left allmulticast mode [ 579.554337][T10343] veth0_macvtap: left promiscuous mode [ 579.573136][T10343] veth1_vlan: left promiscuous mode [ 579.578455][T10343] veth0_vlan: left promiscuous mode [ 579.961521][ T5855] Bluetooth: hci2: command tx timeout [ 580.465399][T10343] team0 (unregistering): Port device team_slave_1 removed [ 580.509843][T10343] team0 (unregistering): Port device team_slave_0 removed [ 580.851374][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 580.851393][ T30] audit: type=1326 audit(1756136368.730:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.137588][ T30] audit: type=1326 audit(1756136368.730:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.168880][ T30] audit: type=1326 audit(1756136368.740:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.195168][ T30] audit: type=1326 audit(1756136368.740:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.230015][ T30] audit: type=1326 audit(1756136368.740:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.266671][ T30] audit: type=1326 audit(1756136368.740:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.312448][ T30] audit: type=1326 audit(1756136368.740:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.343450][ T30] audit: type=1326 audit(1756136368.740:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.461941][T12202] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1494'. [ 581.465060][ T30] audit: type=1326 audit(1756136368.740:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 581.591179][ T30] audit: type=1326 audit(1756136368.740:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12196 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bf8ebe9 code=0x7ffc0000 [ 582.037244][T12210] QAT: failed to copy from user cfg_data. [ 582.936072][T12072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.950937][T12072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.992624][T12220] netlink: del zone limit has 4 unknown bytes [ 583.754793][T12072] team0: Port device team_slave_0 added [ 583.770478][T12228] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1502'. [ 583.799110][T12072] team0: Port device team_slave_1 added [ 584.161819][T12072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.170509][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.235370][T12239] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 584.428967][T12072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.572762][T12072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.600626][T12072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.788549][T12072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.304635][T12072] hsr_slave_0: entered promiscuous mode [ 585.342148][T12072] hsr_slave_1: entered promiscuous mode [ 587.441491][T12281] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1513'. [ 588.108622][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 588.108637][ T30] audit: type=1400 audit(1756136376.070:753): avc: denied { read } for pid=12291 comm="syz.0.1516" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 588.429538][ T30] audit: type=1400 audit(1756136376.070:754): avc: denied { open } for pid=12291 comm="syz.0.1516" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 589.145371][ T30] audit: type=1326 audit(1756136377.110:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 589.171800][ T30] audit: type=1326 audit(1756136377.110:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722db8ebe9 code=0x7ffc0000 [ 589.174157][T12072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 589.195164][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.315978][T12072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 589.344831][T12072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 589.357580][T12072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 589.944546][T12318] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 590.024531][T12072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.073774][T12072] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.098543][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.105714][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.160697][T12072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.198086][T12072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.260068][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.267180][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.629646][T12072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.813364][T12347] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1524'. [ 591.188611][ T30] audit: type=1400 audit(1756136379.150:757): avc: denied { ioctl } for pid=12349 comm="syz.3.1525" path="socket:[39862]" dev="sockfs" ino=39862 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 591.213254][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.348884][T12356] bridge0: port 3(dummy0) entered blocking state [ 591.355559][T12356] bridge0: port 3(dummy0) entered listening state [ 591.362798][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.370125][T12356] bridge0: port 2(bridge_slave_1) entered listening state [ 591.377923][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.385314][T12356] bridge0: port 1(bridge_slave_0) entered listening state [ 591.736224][T12356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.365871][ T30] audit: type=1326 audit(1756136381.330:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.493865][ T30] audit: type=1326 audit(1756136381.330:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.571672][ T30] audit: type=1326 audit(1756136381.330:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.681655][ T30] audit: type=1326 audit(1756136381.360:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.748973][T12072] veth0_vlan: entered promiscuous mode [ 593.764109][T12072] veth1_vlan: entered promiscuous mode [ 593.804321][ T30] audit: type=1326 audit(1756136381.370:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.834902][ T30] audit: type=1326 audit(1756136381.370:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.867195][ T30] audit: type=1326 audit(1756136381.370:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.876003][T12072] veth0_macvtap: entered promiscuous mode [ 593.911077][T12072] veth1_macvtap: entered promiscuous mode [ 593.919095][ T30] audit: type=1326 audit(1756136381.370:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.946811][ T30] audit: type=1326 audit(1756136381.370:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde60b8ebe9 code=0x7ffc0000 [ 593.973251][ T30] audit: type=1326 audit(1756136381.370:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde60b8d550 code=0x7ffc0000 [ 593.988729][T12072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.042287][ T912] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 594.639006][T12420] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1539'. [ 594.639401][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 594.660955][ T912] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 594.671524][ T912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.883200][T12072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.893779][ T912] usb 4-1: config 0 descriptor?? [ 594.914580][T12398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.965468][T12412] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 595.095198][T10334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.130014][T10334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.155498][T10334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.181383][T10334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.336814][ T912] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 595.361469][ T912] ryos 0003:1E7D:3138.0008: unknown main item tag 0x1 [ 595.403981][ T8268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.480618][ T912] ryos 0003:1E7D:3138.0008: unknown main item tag 0x0 [ 595.541459][ T8268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.561172][ T912] ryos 0003:1E7D:3138.0008: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 595.882422][ T912] usb 4-1: USB disconnect, device number 46 [ 595.899784][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.973628][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.187984][T12426] fido_id[12426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 597.722273][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 597.881323][T11713] Bluetooth: hci2: command 0x0405 tx timeout [ 598.045125][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 598.052742][T12425] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 598.245776][T12425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 598.265995][T12425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 598.274411][T12425] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 598.288130][T12425] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 598.294425][T12425] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 598.316535][T12425] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 598.326182][T12425] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 598.335312][T12425] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 598.344153][T12425] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 598.355553][T12425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.362768][T12425] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 598.370835][T12425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 598.379630][T12425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 598.393490][T12425] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 598.473644][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 598.473659][ T30] audit: type=1326 audit(1756136386.440:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.504070][ T30] audit: type=1326 audit(1756136386.470:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.535802][ T30] audit: type=1326 audit(1756136386.500:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.571692][ T30] audit: type=1326 audit(1756136386.500:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.596034][ T30] audit: type=1326 audit(1756136386.500:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.731867][ T5844] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 598.745366][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1549'. [ 598.772289][ T30] audit: type=1326 audit(1756136386.520:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 598.809919][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1549'. [ 599.059228][ T5844] usb 4-1: device descriptor read/64, error -71 [ 599.143053][ T30] audit: type=1326 audit(1756136386.530:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 599.398225][ T30] audit: type=1326 audit(1756136386.530:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 599.913714][ T30] audit: type=1326 audit(1756136386.530:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 599.940772][ T30] audit: type=1326 audit(1756136386.530:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12471 comm="syz.6.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f67d978ebe9 code=0x7ffc0000 [ 599.965263][ T5844] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 600.196976][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 600.197012][ T5844] usb 4-1: device descriptor read/64, error -71 [ 600.231837][T12484] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 600.315417][ T5844] usb usb4-port1: attempt power cycle [ 600.383438][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 600.389164][T11713] Bluetooth: hci4: command 0x0406 tx timeout [ 600.389482][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 600.441450][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 600.851581][ T5844] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 600.905593][ T5844] usb 4-1: device descriptor read/8, error -71 [ 601.172522][ T5844] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 601.202875][ T5844] usb 4-1: device descriptor read/8, error -71 [ 601.250957][ T912] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 601.311639][ T5844] usb usb4-port1: unable to enumerate USB device [ 601.405337][ T912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 601.416595][ T912] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 601.426675][ T912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.444931][ T912] usb 5-1: config 0 descriptor?? [ 601.465506][T12506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 602.246089][T12536] QAT: failed to copy from user cfg_data. [ 602.389191][T12506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1558'. [ 602.401377][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 602.403224][ T912] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 602.453649][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 602.478568][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 602.499216][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 602.524313][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 602.583955][ T912] ryos 0003:1E7D:3138.0009: unknown main item tag 0x1 [ 603.461422][ T912] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 603.511767][ T912] ryos 0003:1E7D:3138.0009: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 604.141848][ T5844] usb 5-1: USB disconnect, device number 54 [ 604.751412][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 604.757459][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 604.763513][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 604.769513][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 604.824223][T12542] fido_id[12542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 605.058891][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1568'. [ 605.095668][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 605.095684][ T30] audit: type=1400 audit(1756136393.060:839): avc: denied { connect } for pid=12558 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 605.435075][T12561] QAT: failed to copy from user cfg_data. [ 605.521398][ T30] audit: type=1400 audit(1756136393.060:840): avc: denied { setopt } for pid=12558 comm="syz.3.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 606.134729][T12579] SELinux: policydb string length 16711688 does not match expected length 8 [ 606.145730][ T30] audit: type=1400 audit(1756136394.080:841): avc: denied { load_policy } for pid=12578 comm="syz.4.1572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 606.203221][T12579] SELinux: failed to load policy [ 606.386016][T12595] binder: 12576:12595 ioctl 40046205 0 returned -22 [ 606.856791][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.903574][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.928511][T12603] ======================================================= [ 606.928511][T12603] WARNING: The mand mount option has been deprecated and [ 606.928511][T12603] and is ignored by this kernel. Remove the mand [ 606.928511][T12603] option from the mount to silence this warning. [ 606.928511][T12603] ======================================================= [ 606.930188][ T30] audit: type=1400 audit(1756136394.890:842): avc: denied { remount } for pid=12602 comm="syz.5.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 606.963443][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.983628][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.997793][T12572] batadv_slave_1: left promiscuous mode [ 607.572829][T12572] veth0_macvtap: left allmulticast mode [ 607.593819][T12572] 0ªX¹¦D: left allmulticast mode [ 607.635081][ T30] audit: type=1400 audit(1756136395.600:843): avc: denied { create } for pid=12596 comm="syz.4.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 607.662849][T12572] bond1: left promiscuous mode [ 607.667799][T12572] vcan1: left promiscuous mode [ 607.678310][T12572] bond2: left promiscuous mode [ 607.915861][T12572] vcan3: left promiscuous mode [ 607.940385][T12572] bond3: left promiscuous mode [ 607.952961][T12572] vcan6: left promiscuous mode [ 608.059714][T12572] bond4: left promiscuous mode [ 608.064672][T12572] vcan12: left promiscuous mode [ 608.074468][T12572] bond5: left promiscuous mode [ 608.079306][T12572] vcan14: left promiscuous mode [ 608.174119][ T8268] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.503353][T12572] [U]  [ 608.510726][T12623] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 608.521847][ T8268] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.546045][ T30] audit: type=1400 audit(1756136396.500:844): avc: denied { lock } for pid=12616 comm="syz.5.1579" path="socket:[42122]" dev="sockfs" ino=42122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 608.579109][T12623] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 608.602293][T12628] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 608.621659][T12623] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 608.631033][ T8268] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.654474][ T8268] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.679931][ T30] audit: type=1400 audit(1756136396.640:845): avc: denied { create } for pid=12626 comm="syz.3.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 608.711428][T12628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 608.808539][ T30] audit: type=1400 audit(1756136396.770:846): avc: denied { write } for pid=12626 comm="syz.3.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 608.917266][ T30] audit: type=1400 audit(1756136396.870:847): avc: denied { write } for pid=12634 comm="syz.4.1583" path="socket:[42146]" dev="sockfs" ino=42146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 609.551305][ T5963] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 609.895489][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.898876][T12662] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1587'. [ 610.077670][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.239546][ T5963] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 610.302979][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.317459][ T5963] usb 5-1: config 0 descriptor?? [ 610.471413][ T912] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 611.109512][ T5963] razer 0003:1532:010E.000A: unknown main item tag 0x0 [ 611.124281][ T5963] razer 0003:1532:010E.000A: unknown main item tag 0x0 [ 611.132114][ T5963] razer 0003:1532:010E.000A: unknown main item tag 0x0 [ 611.139357][ T5963] razer 0003:1532:010E.000A: unknown main item tag 0x0 [ 611.151678][ T5963] razer 0003:1532:010E.000A: unknown main item tag 0x0 [ 611.195037][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 611.221030][ T5963] razer 0003:1532:010E.000A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 611.235124][ T912] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 611.260609][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.289494][ T912] usb 6-1: config 0 descriptor?? [ 611.431426][T12664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 611.448813][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.464739][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.151853][ T912] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 612.276943][ T912] ryos 0003:1E7D:3138.000B: unknown main item tag 0x1 [ 612.296811][ T912] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 612.323889][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 612.346991][ T912] ryos 0003:1E7D:3138.000B: hidraw1: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.5-1/input0 [ 612.427500][ T5844] usb 5-1: USB disconnect, device number 55 [ 612.568033][ T912] usb 6-1: USB disconnect, device number 57 [ 612.597605][T12698] fido_id[12698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 613.175580][T12693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.591560][ T30] audit: type=1400 audit(1756136401.540:848): avc: denied { write } for pid=12714 comm="syz.5.1596" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 613.817390][ T30] audit: type=1400 audit(1756136401.550:849): avc: denied { append } for pid=12714 comm="syz.5.1596" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 613.841039][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.937753][ T30] audit: type=1400 audit(1756136401.740:850): avc: denied { read append } for pid=12726 comm="syz.6.1600" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 613.938716][ T5844] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 613.962499][ T30] audit: type=1400 audit(1756136401.740:851): avc: denied { open } for pid=12726 comm="syz.6.1600" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 614.611701][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 614.626697][ T5844] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.698933][T12739] SELinux: security_context_str_to_sid (l©Rl^º) failed with errno=-22 [ 614.746525][ T5844] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 614.777907][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.819556][ T5844] usb 6-1: Product: syz [ 614.932585][ T5863] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 614.934583][ T5844] usb 6-1: Manufacturer: syz [ 614.954433][ T5844] usb 6-1: SerialNumber: syz [ 615.020815][ T5844] usb 6-1: config 0 descriptor?? [ 615.274943][ T5844] usb 6-1: bad CDC descriptors [ 615.414857][ T5844] usb 6-1: unsupported MDLM descriptors [ 617.438595][ T5844] usb 6-1: USB disconnect, device number 58 [ 617.750095][T12771] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1610'. [ 618.213453][T12772] : entered promiscuous mode [ 618.433453][T12779] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1612'. [ 619.745253][T12801] QAT: failed to copy from user cfg_data. [ 621.041290][T12805] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 621.048898][T12805] SELinux: failed to load policy [ 621.469647][T12807] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 621.469647][T12807] program syz.0.1621 not setting count and/or reply_len properly [ 621.850868][ T30] audit: type=1400 audit(1756136409.810:852): avc: denied { mounton } for pid=12818 comm="syz.0.1625" path="/346/file0" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 621.962500][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 621.970421][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 621.978168][ C0] bridge0: port 3(dummy0) entered learning state [ 623.399207][T12851] QAT: failed to copy from user cfg_data. [ 623.491308][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 624.091649][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.117839][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.556156][ T30] audit: type=1400 audit(1756136412.520:853): avc: denied { kexec_image_load } for pid=12855 comm="syz.0.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 624.825503][T12864] netlink: 'syz.4.1635': attribute type 12 has an invalid length. [ 626.555435][T12890] netlink: 'syz.3.1643': attribute type 1 has an invalid length. [ 626.669961][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1642'. [ 626.710637][T12896] overlayfs: failed to resolve './bus': -2 [ 626.944419][T12902] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 627.066497][T12890] bond8: entered promiscuous mode [ 627.076285][T12890] 8021q: adding VLAN 0 to HW filter on device bond8 [ 627.880752][T12902] team0: Port device netdevsim0 added [ 628.892239][T12917] binder: 12906:12917 ioctl 40046205 0 returned -22 [ 629.868590][T12927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.918150][T12934] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1650'. [ 631.038701][ T30] audit: type=1400 audit(1756136419.000:854): avc: denied { bind } for pid=12942 comm="syz.4.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 631.143089][T12956] netlink: 'syz.6.1656': attribute type 1 has an invalid length. [ 631.173278][T12956] bond1: entered promiscuous mode [ 631.179148][T12956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 631.206186][T12956] overlayfs: failed to resolve './bus': -2 [ 631.391504][ T5844] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 631.614893][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 631.692390][ T5844] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 631.755204][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.792817][ T5844] usb 4-1: config 0 descriptor?? [ 631.807718][T12954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.000945][T12975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1661'. [ 632.021519][ T912] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 632.833153][ T912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.843327][ T5844] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 632.850857][ T5844] ryos 0003:1E7D:3138.000C: unknown main item tag 0x1 [ 632.856507][ T912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.865891][ T5844] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 632.869945][ T912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 632.893563][ T912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 632.919042][ T912] usb 5-1: Manufacturer: syz [ 633.265183][ T912] usb 5-1: config 0 descriptor?? [ 633.275907][T12954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1654'. [ 633.309489][ T5844] ryos 0003:1E7D:3138.000C: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 633.449303][T12993] binder: 12988:12993 ioctl 40046205 0 returned -22 [ 633.587728][T12992] netlink: 'syz.6.1665': attribute type 9 has an invalid length. [ 633.587749][T12992] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1665'. [ 633.796075][ T912] usb 4-1: USB disconnect, device number 51 [ 637.067326][ T912] usb 5-1: USB disconnect, device number 56 [ 637.142148][T13024] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1672'. [ 637.528327][T13029] FAULT_INJECTION: forcing a failure. [ 637.528327][T13029] name failslab, interval 1, probability 0, space 0, times 0 [ 637.541142][T13029] CPU: 0 UID: 0 PID: 13029 Comm: syz.4.1673 Not tainted syzkaller #0 PREEMPT(full) [ 637.541164][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.541171][T13029] Call Trace: [ 637.541176][T13029] [ 637.541180][T13029] dump_stack_lvl+0x16c/0x1f0 [ 637.541197][T13029] should_fail_ex+0x512/0x640 [ 637.541217][T13029] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 637.541246][T13029] should_failslab+0xc2/0x120 [ 637.541266][T13029] __kmalloc_cache_noprof+0x6a/0x3e0 [ 637.541290][T13029] ? io_wq_create+0x6a/0x9a0 [ 637.541319][T13029] io_wq_create+0x6a/0x9a0 [ 637.541344][T13029] io_uring_alloc_task_context+0x1e1/0x650 [ 637.541362][T13029] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 637.541379][T13029] ? rcu_is_watching+0x12/0xc0 [ 637.541393][T13029] ? irqentry_exit+0x3b/0x90 [ 637.541407][T13029] __io_uring_add_tctx_node+0x2dd/0x500 [ 637.541423][T13029] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 637.541439][T13029] ? __io_uring_add_tctx_node_from_submit+0x42/0x130 [ 637.541455][T13029] ? __io_uring_add_tctx_node_from_submit+0x81/0x130 [ 637.541473][T13029] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 637.541490][T13029] __do_sys_io_uring_enter+0x123a/0x1630 [ 637.541503][T13029] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 637.541517][T13029] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 637.541528][T13029] ? rcu_is_watching+0x12/0xc0 [ 637.541540][T13029] ? irqentry_exit+0x3b/0x90 [ 637.541551][T13029] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.541568][T13029] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 637.541583][T13029] do_syscall_64+0xcd/0x4c0 [ 637.541596][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.541610][T13029] RIP: 0033:0x7f5f2bf8ebe9 [ 637.541619][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.541630][T13029] RSP: 002b:00007f5f2ce5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 637.541641][T13029] RAX: ffffffffffffffda RBX: 00007f5f2c1b6090 RCX: 00007f5f2bf8ebe9 [ 637.541648][T13029] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 637.541655][T13029] RBP: 00007f5f2ce5a090 R08: 0000000000000000 R09: 00000000fffffdcf [ 637.541661][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.541667][T13029] R13: 00007f5f2c1b6128 R14: 00007f5f2c1b6090 R15: 00007fffd5280b58 [ 637.541682][T13029] [ 637.776576][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.766194][T13040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1676'. [ 639.583196][T13045] binder: 13044:13045 ioctl 40046205 0 returned -22 [ 639.855829][T13054] vivid-003: ================= START STATUS ================= [ 639.864001][T13054] vivid-003: Radio HW Seek Mode: Bounded [ 639.869947][T13054] vivid-003: Radio Programmable HW Seek: false [ 639.876450][T13054] vivid-003: RDS Rx I/O Mode: Block I/O [ 639.882751][T13054] vivid-003: Generate RBDS Instead of RDS: false [ 639.889290][T13054] vivid-003: RDS Reception: true [ 639.894598][T13054] vivid-003: RDS Program Type: 0 inactive [ 639.900537][T13054] vivid-003: RDS PS Name: inactive [ 639.906361][T13054] vivid-003: RDS Radio Text: inactive [ 639.912161][T13054] vivid-003: RDS Traffic Announcement: false inactive [ 639.919084][T13054] vivid-003: RDS Traffic Program: false inactive [ 639.925771][T13054] vivid-003: RDS Music: false inactive [ 639.931592][T13054] vivid-003: ================== END STATUS ================== [ 640.377495][ T912] libceph: connect (1)[c::]:6789 error -101 [ 640.384526][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 640.652023][ T912] libceph: connect (1)[c::]:6789 error -101 [ 640.658210][ T912] libceph: mon0 (1)[c::]:6789 connect error [ 641.211707][T13069] ceph: No mds server is up or the cluster is laggy [ 642.517740][T13091] svc: failed to register nfsdv3 RPC service (errno 111). [ 642.556685][T13091] svc: failed to register nfsaclv3 RPC service (errno 111). [ 642.761439][ T5934] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 642.943302][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.988808][ T5934] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 643.015759][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.052629][ T5934] usb 4-1: config 0 descriptor?? [ 643.231448][ T5844] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 643.380798][ T5934] usbhid 4-1:0.0: can't add hid device: -71 [ 643.416372][ T5934] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 643.518245][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 643.530116][ T5844] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 643.539872][ T5934] usb 4-1: USB disconnect, device number 52 [ 643.550984][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.570835][ T5844] usb 5-1: config 0 descriptor?? [ 643.590745][T13114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1694'. [ 643.591633][T13100] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 644.468763][ T5844] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 644.478723][ T5844] ryos 0003:1E7D:3138.000D: unknown main item tag 0x1 [ 644.487882][ T5844] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0 [ 644.501926][ T5934] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 644.521085][ T5844] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 644.681515][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 644.695073][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.741452][ T5934] usb 4-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 644.760677][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.012421][ T5934] usb 4-1: config 0 descriptor?? [ 645.717933][ T5978] usb 5-1: USB disconnect, device number 57 [ 645.791279][ T5934] usb 4-1: can't set config #0, error -71 [ 645.798987][ T5934] usb 4-1: USB disconnect, device number 53 [ 646.463365][ T30] audit: type=1400 audit(1756136434.420:855): avc: denied { append } for pid=13151 comm="syz.5.1703" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 647.531310][T13176] vivid-000: ================= START STATUS ================= [ 647.539024][T13176] vivid-000: Radio HW Seek Mode: Bounded [ 647.545009][T13176] vivid-000: Radio Programmable HW Seek: false [ 647.551505][T13176] vivid-000: RDS Rx I/O Mode: Block I/O [ 647.557148][T13176] vivid-000: Generate RBDS Instead of RDS: false [ 647.563863][T13176] vivid-000: RDS Reception: true [ 647.568956][T13176] vivid-000: RDS Program Type: 0 inactive [ 647.574993][T13176] vivid-000: RDS PS Name: inactive [ 647.580469][T13176] vivid-000: RDS Radio Text: inactive [ 647.586410][T13176] vivid-000: RDS Traffic Announcement: false inactive [ 647.593546][T13176] vivid-000: RDS Traffic Program: false inactive [ 647.600192][T13176] vivid-000: RDS Music: false inactive [ 647.606055][T13176] vivid-000: ================== END STATUS ================== [ 647.917088][ T30] audit: type=1400 audit(1756136435.880:856): avc: denied { create } for pid=13179 comm="syz.4.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.938266][ T30] audit: type=1326 audit(1756136435.900:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.4.1713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f2bf8ebe9 code=0x0 [ 648.038673][T13175] 9pnet_fd: Insufficient options for proto=fd [ 648.875388][T13194] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 649.469447][T13205] nfs: Unknown parameter '' [ 649.824873][ T30] audit: type=1400 audit(1756136437.460:858): avc: denied { checkpoint_restore } for pid=13201 comm="syz.3.1720" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.471285][ T5978] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 650.498820][ T30] audit: type=1400 audit(1756136438.460:859): avc: denied { ioctl } for pid=13211 comm="syz.0.1722" path="socket:[44150]" dev="sockfs" ino=44150 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 650.524956][T13212] overlayfs: workdir and upperdir must reside under the same mount [ 650.872571][ T5978] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 651.001692][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 4 [ 651.030376][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1023 [ 651.060313][ T5978] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 651.101682][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.168187][T13200] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 651.180321][ T5978] usb 4-1: Product: syz [ 651.185813][ T5978] usb 4-1: Manufacturer: syz [ 651.190818][ T5978] usb 4-1: SerialNumber: syz [ 651.202700][ T5978] usb 4-1: config 0 descriptor?? [ 651.211997][ T5978] hub 4-1:0.0: bad descriptor, ignoring hub [ 651.224574][ T5978] hub 4-1:0.0: probe with driver hub failed with error -5 [ 651.452874][ T5978] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input74 [ 651.514790][ T5978] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 651.558123][ T5978] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 651.751610][ T5963] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 651.856941][T13230] 9pnet_fd: Insufficient options for proto=fd [ 651.924022][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.939039][ T5963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.038088][ T5963] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 652.042406][ C0] bridge0: port 3(dummy0) entered forwarding state [ 652.053739][ C0] bridge0: topology change detected, propagating [ 652.060407][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.067642][ C0] bridge0: topology change detected, propagating [ 652.072940][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.074176][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.089120][ C0] bridge0: topology change detected, propagating [ 652.396189][ T30] audit: type=1400 audit(1756136440.280:860): avc: denied { bind } for pid=13236 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 652.539366][ T5963] usb 7-1: config 0 descriptor?? [ 652.658121][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 652.664416][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 652.741660][ T5978] usb 4-1: USB disconnect, device number 54 [ 652.805018][T13239] ceph: No mds server is up or the cluster is laggy [ 652.952708][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.991791][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.217120][T13247] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1733'. [ 653.371365][ T5978] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 653.421577][ T30] audit: type=1400 audit(1756136441.380:861): avc: denied { map } for pid=13226 comm="syz.6.1727" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.444531][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.613541][ T5978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.623975][ T5978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 653.633919][ T5978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 653.650730][ T5978] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.669221][ T5978] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.679585][ T5978] usb 5-1: Manufacturer: syz [ 653.691875][ T5978] usb 5-1: config 0 descriptor?? [ 654.530938][ T5963] usbhid 7-1:0.0: can't add hid device: -71 [ 654.545430][ T5963] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 654.549390][T13268] netlink: 'syz.3.1738': attribute type 1 has an invalid length. [ 654.560705][ T5963] usb 7-1: USB disconnect, device number 2 [ 654.576753][T13268] bond9: entered promiscuous mode [ 654.585835][T13268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 654.600829][T13268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 654.608669][T13268] bond9: (slave vcan20): The slave device specified does not support setting the MAC address [ 654.619011][T13268] bond9: (slave vcan20): Setting fail_over_mac to active for active-backup mode [ 654.630581][T13268] bond9: (slave vcan20): making interface the new active one [ 654.641534][T13268] vcan20: entered promiscuous mode [ 654.654256][T13268] bond9: (slave vcan20): Enslaving as an active interface with an up link [ 654.668202][T13268] overlayfs: failed to resolve './bus': -2 [ 654.810124][ T30] audit: type=1400 audit(1756136442.770:862): avc: denied { getopt } for pid=13271 comm="syz.0.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 654.900718][T13274] gtp0: entered promiscuous mode [ 654.917955][T13274] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1740'. [ 655.497405][T13282] kvm: pic: single mode not supported [ 655.497511][T13282] kvm: pic: single mode not supported [ 655.549334][T13282] kvm: pic: level sensitive irq not supported [ 655.567088][T13282] kvm: pic: single mode not supported [ 655.575190][T13282] kvm: pic: level sensitive irq not supported [ 655.585936][T13282] kvm: pic: single mode not supported [ 655.593535][T13282] kvm: pic: single mode not supported [ 655.600753][T13282] kvm: pic: single mode not supported [ 655.606439][T13282] kvm: pic: level sensitive irq not supported [ 655.612914][T13282] kvm: pic: single mode not supported [ 655.618990][T13282] kvm: pic: level sensitive irq not supported [ 655.625525][T13282] kvm: pic: single mode not supported [ 655.632695][T13282] kvm: pic: single mode not supported [ 655.638114][T13282] kvm: pic: level sensitive irq not supported [ 656.030177][ T5934] usb 5-1: USB disconnect, device number 58 [ 656.529541][ T30] audit: type=1400 audit(1756136444.490:863): avc: denied { write } for pid=13297 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.632448][ T30] audit: type=1400 audit(1756136444.490:864): avc: denied { nlmsg_write } for pid=13297 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 656.881935][T13292] svc: failed to register nfsdv3 RPC service (errno 111). [ 656.891934][T13292] svc: failed to register nfsaclv3 RPC service (errno 111). [ 657.073819][T13299] 9pnet_fd: Insufficient options for proto=fd [ 658.143723][T13310] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1749'. [ 658.408405][T13321] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1754'. [ 658.526595][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1756'. [ 658.606610][T13325] binder: 13324:13325 ioctl 40046205 0 returned -22 [ 660.212336][T13331] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1758'. [ 660.273049][ T30] audit: type=1400 audit(1756136448.230:865): avc: denied { connect } for pid=13332 comm="syz.6.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 660.378915][ T30] audit: type=1400 audit(1756136448.290:866): avc: denied { write } for pid=13332 comm="syz.6.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 660.617474][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 660.701036][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 660.789033][T13362] binder: 13361:13362 ioctl 40046205 0 returned -22 [ 660.816191][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1770'. [ 660.947574][T13369] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1771'. [ 661.041781][ T5844] libceph: connect (1)[c::]:6789 error -101 [ 661.091294][ T5844] libceph: mon0 (1)[c::]:6789 connect error [ 661.201164][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1772'. [ 661.357725][T13353] ceph: No mds server is up or the cluster is laggy [ 662.811293][ T5844] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 662.931143][T13393] kAFS: unable to lookup cell '(0.xlIÀä²|.½(¢Wi»2òTY>â1 ‡ õ' [ 662.975621][ T5844] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.988033][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.002025][ T5844] usb 5-1: Product: syz [ 663.008214][ T5844] usb 5-1: Manufacturer: syz [ 663.017029][ T5844] usb 5-1: SerialNumber: syz [ 663.041361][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 664.021242][ T30] audit: type=1326 audit(1756136451.120:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.3.1780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f722db8ebe9 code=0x0 [ 664.078013][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.091329][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.102095][ T43] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 664.111951][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.123525][ T43] usb 7-1: config 0 descriptor?? [ 664.328661][T13405] binder: 13403:13405 ioctl 40046205 0 returned -22 [ 664.391453][ T5963] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 664.643353][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 664.650925][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 664.681247][ T5963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 664.690405][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.813860][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 664.819939][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 664.881702][ T5844] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 664.882630][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 664.901415][ T43] usb 7-1: USB disconnect, device number 3 [ 665.002017][ T5963] pvrusb2: ********** [ 665.017269][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 665.027798][ T5963] pvrusb2: Important functionality might not be entirely working. [ 665.037442][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 665.049341][ T5963] pvrusb2: ********** [ 665.096902][ T30] audit: type=1400 audit(1756136453.060:868): avc: denied { shutdown } for pid=13401 comm="syz.3.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 665.171549][ T2338] pvrusb2: Invalid write control endpoint [ 665.199413][ T5844] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 665.301546][ T5844] usb 5-1: USB disconnect, device number 59 [ 665.343025][ T2338] pvrusb2: Invalid write control endpoint [ 665.350642][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 665.364110][ T5844] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 665.376326][ T43] usb 4-1: USB disconnect, device number 55 [ 665.380408][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 665.390688][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 665.403605][ T2338] pvrusb2: Device being rendered inoperable [ 665.416871][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 665.713521][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 665.746547][ T2338] pvrusb2: Attached sub-driver cx25840 [ 665.761275][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 665.772125][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 666.448926][T13432] block nbd0: Attempted send on invalid socket [ 666.456102][T13432] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 668.029559][T13451] macvlan0: entered allmulticast mode [ 668.044574][T13451] veth1_vlan: entered allmulticast mode [ 668.237069][T13458] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1794'. [ 668.467500][T13461] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 668.540493][T13464] netlink: 'syz.5.1792': attribute type 4 has an invalid length. [ 670.343192][T13486] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1797'. [ 670.596589][T13499] binder: 13497:13499 ioctl 40046205 0 returned -22 [ 672.114109][T13518] SELinux: failed to load policy [ 672.753784][T13520] QAT: failed to copy from user cfg_data. [ 673.828897][T13545] vivid-003: ================= START STATUS ================= [ 673.836788][T13545] vivid-003: Radio HW Seek Mode: Bounded [ 673.842654][T13545] vivid-003: Radio Programmable HW Seek: false [ 673.849002][T13545] vivid-003: RDS Rx I/O Mode: Block I/O [ 673.855758][T13545] vivid-003: Generate RBDS Instead of RDS: false [ 674.431433][T13545] vivid-003: RDS Reception: true [ 674.436718][T13545] vivid-003: RDS Program Type: 0 inactive [ 674.442821][T13545] vivid-003: RDS PS Name: inactive [ 674.448278][T13545] vivid-003: RDS Radio Text: inactive [ 674.453988][T13545] vivid-003: RDS Traffic Announcement: false inactive [ 674.462221][T13545] vivid-003: RDS Traffic Program: false inactive [ 674.468829][T13545] vivid-003: RDS Music: false inactive [ 674.474549][T13545] vivid-003: ================== END STATUS ================== [ 674.884226][T13552] binder: 13547:13552 ioctl 40046205 0 returned -22 [ 677.685513][T13604] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1825'. [ 678.043632][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 678.071534][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 678.334427][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 678.340602][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 678.940075][T13608] ceph: No mds server is up or the cluster is laggy [ 679.044431][ T5927] libceph: connect (1)[c::]:6789 error -101 [ 679.057192][ T5927] libceph: mon0 (1)[c::]:6789 connect error [ 680.109963][T13641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1834'. [ 683.638263][T13673] vivid-003: ================= START STATUS ================= [ 683.646429][T13673] vivid-003: Radio HW Seek Mode: Bounded [ 683.652398][T13673] vivid-003: Radio Programmable HW Seek: false [ 683.658927][T13673] vivid-003: RDS Rx I/O Mode: Block I/O [ 683.666625][T13673] vivid-003: Generate RBDS Instead of RDS: false [ 683.673353][T13673] vivid-003: RDS Reception: true [ 683.678401][T13673] vivid-003: RDS Program Type: 0 inactive [ 683.684836][T13673] vivid-003: RDS PS Name: inactive [ 683.690472][T13673] vivid-003: RDS Radio Text: inactive [ 683.696460][T13673] vivid-003: RDS Traffic Announcement: false inactive [ 683.703618][T13673] vivid-003: RDS Traffic Program: false inactive [ 683.710308][T13673] vivid-003: RDS Music: false inactive [ 683.738043][T13673] vivid-003: ================== END STATUS ================== [ 683.816726][T13668] binder: 13667:13668 ioctl 40046205 0 returned -22 [ 684.044713][T13677] binder: 13674:13677 ioctl 40046205 0 returned -22 [ 684.650223][T13688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1847'. [ 685.352073][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.358480][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.317894][T13707] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 686.326813][T13707] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 686.335694][T13707] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 687.038689][T13719] binder: 13716:13719 ioctl 40046205 0 returned -22 [ 688.193120][T13735] vivid-003: ================= START STATUS ================= [ 688.200896][T13735] vivid-003: Radio HW Seek Mode: Bounded [ 688.206761][T13735] vivid-003: Radio Programmable HW Seek: false [ 688.213093][T13735] vivid-003: RDS Rx I/O Mode: Block I/O [ 688.218769][T13735] vivid-003: Generate RBDS Instead of RDS: false [ 688.225791][T13735] vivid-003: RDS Reception: true [ 688.230841][T13735] vivid-003: RDS Program Type: 0 inactive [ 688.236781][T13735] vivid-003: RDS PS Name: inactive [ 688.242309][T13735] vivid-003: RDS Radio Text: inactive [ 688.248047][T13735] vivid-003: RDS Traffic Announcement: false inactive [ 688.255112][T13735] vivid-003: RDS Traffic Program: false inactive [ 688.261657][T13735] vivid-003: RDS Music: false inactive [ 688.267289][T13735] vivid-003: ================== END STATUS ================== [ 688.855971][T13749] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1863'. [ 689.779504][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 691.251816][T13774] zonefs (nullb0) ERROR: Not a zoned block device [ 691.746813][T13786] binder: 13778:13786 ioctl 40046205 0 returned -22 [ 691.975517][T13785] vivid-002: ================= START STATUS ================= [ 692.098242][T13785] vivid-002: Radio HW Seek Mode: Bounded [ 692.104259][T13785] vivid-002: Radio Programmable HW Seek: false [ 692.110506][T13785] vivid-002: RDS Rx I/O Mode: Block I/O [ 692.116490][T13785] vivid-002: Generate RBDS Instead of RDS: false [ 692.123050][T13785] vivid-002: RDS Reception: true [ 692.128059][T13785] vivid-002: RDS Program Type: 0 inactive [ 692.133903][T13785] vivid-002: RDS PS Name: inactive [ 692.139242][T13785] vivid-002: RDS Radio Text: inactive [ 692.587327][T13785] vivid-002: RDS Traffic Announcement: false inactive [ 692.607966][T13785] vivid-002: RDS Traffic Program: false inactive [ 692.620536][T13785] vivid-002: RDS Music: false inactive [ 692.627767][T13785] vivid-002: ================== END STATUS ================== [ 693.727888][T13812] FAULT_INJECTION: forcing a failure. [ 693.727888][T13812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.741062][T13812] CPU: 0 UID: 0 PID: 13812 Comm: syz.0.1879 Not tainted syzkaller #0 PREEMPT(full) [ 693.741086][T13812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.741097][T13812] Call Trace: [ 693.741102][T13812] [ 693.741109][T13812] dump_stack_lvl+0x16c/0x1f0 [ 693.741135][T13812] should_fail_ex+0x512/0x640 [ 693.741158][T13812] _copy_from_user+0x2e/0xd0 [ 693.741186][T13812] copy_msghdr_from_user+0x98/0x160 [ 693.741205][T13812] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 693.741238][T13812] ___sys_sendmsg+0xfe/0x1d0 [ 693.741258][T13812] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.741310][T13812] __sys_sendmsg+0x16d/0x220 [ 693.741330][T13812] ? __pfx___sys_sendmsg+0x10/0x10 [ 693.741366][T13812] do_syscall_64+0xcd/0x4c0 [ 693.741388][T13812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.741406][T13812] RIP: 0033:0x7fde60b8ebe9 [ 693.741421][T13812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.741437][T13812] RSP: 002b:00007fde61a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.741454][T13812] RAX: ffffffffffffffda RBX: 00007fde60db6180 RCX: 00007fde60b8ebe9 [ 693.741465][T13812] RDX: 0000000008000000 RSI: 0000200000000100 RDI: 0000000000000009 [ 693.741476][T13812] RBP: 00007fde61a42090 R08: 0000000000000000 R09: 0000000000000000 [ 693.741487][T13812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.741497][T13812] R13: 00007fde60db6218 R14: 00007fde60db6180 R15: 00007ffd1c79c9f8 [ 693.741521][T13812] [ 693.801492][ T5934] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 694.790516][ T30] audit: type=1400 audit(1756136482.520:869): avc: denied { create } for pid=13816 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 694.834463][ T30] audit: type=1400 audit(1756136482.780:870): avc: denied { getopt } for pid=13816 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 695.108439][ T5934] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 695.118398][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 695.127100][ T5934] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 695.136478][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 695.187223][ T5934] usb 4-1: Product: syz [ 695.228413][ T5934] usb 4-1: Manufacturer: syz [ 695.234539][ T5934] usb 4-1: SerialNumber: syz [ 695.288085][ T5934] usb 4-1: config 0 descriptor?? [ 695.340234][ T5934] usb 4-1: selecting invalid altsetting 0 [ 695.793043][T13833] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1885'. [ 696.822311][T13806] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 696.860908][ T5934] usb 4-1: USB disconnect, device number 56 [ 697.336177][T13859] FAULT_INJECTION: forcing a failure. [ 697.336177][T13859] name failslab, interval 1, probability 0, space 0, times 0 [ 697.350158][T13859] CPU: 1 UID: 0 PID: 13859 Comm: syz.4.1892 Not tainted syzkaller #0 PREEMPT(full) [ 697.350180][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.350190][T13859] Call Trace: [ 697.350196][T13859] [ 697.350203][T13859] dump_stack_lvl+0x16c/0x1f0 [ 697.350227][T13859] should_fail_ex+0x512/0x640 [ 697.350245][T13859] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 697.350266][T13859] should_failslab+0xc2/0x120 [ 697.350284][T13859] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 697.350301][T13859] ? __alloc_skb+0x2b2/0x380 [ 697.350322][T13859] __alloc_skb+0x2b2/0x380 [ 697.350340][T13859] ? __pfx___alloc_skb+0x10/0x10 [ 697.350354][T13859] ? __pfx_mctp_rtm_newneigh+0x10/0x10 [ 697.350387][T13859] netlink_ack+0x15d/0xb80 [ 697.350407][T13859] ? __lock_acquire+0x62e/0x1ce0 [ 697.350439][T13859] netlink_rcv_skb+0x332/0x420 [ 697.350459][T13859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 697.350482][T13859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.350518][T13859] ? netlink_deliver_tap+0x1ae/0xd30 [ 697.350542][T13859] ? selinux_netlink_send+0x578/0x830 [ 697.350562][T13859] ? is_vmalloc_addr+0x86/0xa0 [ 697.350583][T13859] netlink_unicast+0x5a7/0x870 [ 697.350606][T13859] ? __pfx_netlink_unicast+0x10/0x10 [ 697.350625][T13859] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 697.350652][T13859] netlink_sendmsg+0x8d1/0xdd0 [ 697.350675][T13859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.350702][T13859] ____sys_sendmsg+0xa95/0xc70 [ 697.350725][T13859] ? copy_msghdr_from_user+0x10a/0x160 [ 697.350742][T13859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.350776][T13859] ___sys_sendmsg+0x134/0x1d0 [ 697.350796][T13859] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.350845][T13859] __sys_sendmsg+0x16d/0x220 [ 697.350864][T13859] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.350895][T13859] ? rcu_is_watching+0x12/0xc0 [ 697.350923][T13859] do_syscall_64+0xcd/0x4c0 [ 697.350943][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.350959][T13859] RIP: 0033:0x7f5f2bf8ebe9 [ 697.350972][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.350987][T13859] RSP: 002b:00007f5f2cec4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.351003][T13859] RAX: ffffffffffffffda RBX: 00007f5f2c1b5fa0 RCX: 00007f5f2bf8ebe9 [ 697.351014][T13859] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 697.351024][T13859] RBP: 00007f5f2cec4090 R08: 0000000000000000 R09: 0000000000000000 [ 697.351033][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.351043][T13859] R13: 00007f5f2c1b6038 R14: 00007f5f2c1b5fa0 R15: 00007fffd5280b58 [ 697.351066][T13859] [ 697.884813][ T30] audit: type=1400 audit(1756136485.600:871): avc: denied { read } for pid=13855 comm="syz.0.1891" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 763.871148][ C1] sched: DL replenish lagged too much [ 809.111111][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 809.118062][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13904/3:b..l P13880/1:b..l P13902/1:b..l P13893/1:b..l [ 809.130042][ C1] rcu: (detected by 1, t=10502 jiffies, g=61377, q=630 ncpus=2) [ 809.137727][ C1] task:syz.6.1902 state:R running task stack:25240 pid:13893 tgid:13893 ppid:12072 task_flags:0x400040 flags:0x00004002 [ 809.151669][ C1] Call Trace: [ 809.154931][ C1] [ 809.157837][ C1] __schedule+0x1190/0x5de0 [ 809.162316][ C1] ? find_held_lock+0x2b/0x80 [ 809.166974][ C1] ? __pfx___schedule+0x10/0x10 [ 809.171793][ C1] ? const_folio_flags+0x5b/0x100 [ 809.176793][ C1] ? folio_add_file_rmap_ptes+0x548/0x840 [ 809.182494][ C1] ? insert_page_into_pte_locked+0x1f5/0x9c0 [ 809.188443][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 809.193790][ C1] preempt_schedule_common+0x44/0xc0 [ 809.199044][ C1] preempt_schedule_thunk+0x16/0x30 [ 809.204220][ C1] _raw_spin_unlock+0x3e/0x50 [ 809.208865][ C1] insert_page+0x139/0x200 [ 809.213261][ C1] ? __pfx_insert_page+0x10/0x10 [ 809.218172][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 809.223168][ C1] ? __pfx___vma_enter_locked+0x10/0x10 [ 809.228689][ C1] vm_insert_page+0x2c1/0x440 [ 809.233340][ C1] ? vmalloc_to_page+0x471/0x650 [ 809.238247][ C1] kcov_mmap+0xbf/0x140 [ 809.242375][ C1] __mmap_region+0x1311/0x27b0 [ 809.247110][ C1] ? __pfx___mmap_region+0x10/0x10 [ 809.252207][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 809.257145][ C1] ? avc_has_perm_noaudit+0x117/0x3b0 [ 809.262510][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 809.267434][ C1] mmap_region+0x32b/0x3f0 [ 809.271830][ C1] do_mmap+0xa3e/0x1210 [ 809.275963][ C1] ? __pfx_do_mmap+0x10/0x10 [ 809.280525][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 809.286142][ C1] vm_mmap_pgoff+0x29e/0x470 [ 809.290707][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 809.295802][ C1] ? __fget_files+0x20e/0x3c0 [ 809.300455][ C1] ksys_mmap_pgoff+0x32c/0x5c0 [ 809.305193][ C1] __x64_sys_mmap+0x125/0x190 [ 809.309842][ C1] do_syscall_64+0xcd/0x4c0 [ 809.314328][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.320201][ C1] RIP: 0033:0x7f67d978ec23 [ 809.324584][ C1] RSP: 002b:00007fff2ea350a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 809.332984][ C1] RAX: ffffffffffffffda RBX: 00007f67d99b6308 RCX: 00007f67d978ec23 [ 809.340924][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f67d75f6000 [ 809.348863][ C1] RBP: 00007f67d99b6270 R08: 00000000000000db R09: 0000000000000000 [ 809.356804][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 809.364748][ C1] R13: 00007f67d99b6270 R14: 0000000000001a3a R15: 0000000000000006 [ 809.372705][ C1] [ 809.375714][ C1] task:syz.4.1903 state:R running task stack:27672 pid:13902 tgid:13895 ppid:5856 task_flags:0x40044c flags:0x00004000 [ 809.389153][ C1] Call Trace: [ 809.392415][ C1] [ 809.395327][ C1] __schedule+0x1190/0x5de0 [ 809.399810][ C1] ? __pfx___schedule+0x10/0x10 [ 809.404633][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 809.409629][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 809.414977][ C1] preempt_schedule_common+0x44/0xc0 [ 809.420237][ C1] preempt_schedule_thunk+0x16/0x30 [ 809.425411][ C1] _raw_spin_unlock+0x3e/0x50 [ 809.430056][ C1] unmap_page_range+0xf77/0x42c0 [ 809.434979][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 809.440324][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 809.445233][ C1] ? uprobe_munmap+0x20/0x5c0 [ 809.449883][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 809.455750][ C1] unmap_vmas+0x218/0x470 [ 809.460054][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 809.464888][ C1] exit_mmap+0x1b9/0xb90 [ 809.469107][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 809.473848][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 809.478769][ C1] __mmput+0x12a/0x410 [ 809.482821][ C1] mmput+0x62/0x70 [ 809.486515][ C1] do_exit+0x7c7/0x2bf0 [ 809.490645][ C1] ? __pfx_do_exit+0x10/0x10 [ 809.495209][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 809.500202][ C1] ? find_held_lock+0x2b/0x80 [ 809.504853][ C1] do_group_exit+0xd3/0x2a0 [ 809.509333][ C1] get_signal+0x2673/0x26d0 [ 809.513826][ C1] ? __pfx_get_signal+0x10/0x10 [ 809.518652][ C1] ? find_held_lock+0x2b/0x80 [ 809.523302][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 809.528822][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 809.534978][ C1] ? fd_install+0x244/0x750 [ 809.539486][ C1] exit_to_user_mode_loop+0x84/0x110 [ 809.544754][ C1] do_syscall_64+0x3f6/0x4c0 [ 809.549326][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.555194][ C1] RIP: 0033:0x7f5f2bf8ebe9 [ 809.559579][ C1] RSP: 002b:00007f5f2ce82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 809.567961][ C1] RAX: 0000000000000003 RBX: 00007f5f2c1b6180 RCX: 00007f5f2bf8ebe9 [ 809.575904][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 809.583847][ C1] RBP: 00007f5f2c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 809.591798][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.599753][ C1] R13: 00007f5f2c1b6218 R14: 00007f5f2c1b6180 R15: 00007fffd5280b58 [ 809.607717][ C1] [ 809.610712][ C1] task:syz.0.1898 state:R running task stack:23640 pid:13880 tgid:13879 ppid:5843 task_flags:0x400740 flags:0x00004002 [ 809.624152][ C1] Call Trace: [ 809.627409][ C1] [ 809.630314][ C1] __schedule+0x1190/0x5de0 [ 809.634801][ C1] ? __pfx___schedule+0x10/0x10 [ 809.639625][ C1] ? mark_held_locks+0x49/0x80 [ 809.644364][ C1] preempt_schedule_irq+0x51/0x90 [ 809.649357][ C1] irqentry_exit+0x36/0x90 [ 809.653743][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 809.659705][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 809.665920][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 8b 05 16 9b 17 05 85 c0 74 20 8b 05 e0 cb 17 05 85 c0 74 16 65 48 8b 05 98 be 42 08 <8b> 80 ec 0a 00 00 85 c0 0f 94 c0 0f b6 c0 e9 4d ff 02 00 66 2e 0f [ 809.685498][ C1] RSP: 0018:ffffc900058963e8 EFLAGS: 00000202 [ 809.691533][ C1] RAX: ffff888078fe8000 RBX: ffffc90005896bb0 RCX: ffffc90005898001 [ 809.699475][ C1] RDX: ffffc90005896bb8 RSI: ffffc90005896b88 RDI: ffffc90005896470 [ 809.707417][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 809.715369][ C1] R10: 0000000000000002 R11: 0000000000011eea R12: ffffc900058964b0 [ 809.723310][ C1] R13: ffffc90005896460 R14: ffffc90005896bb0 R15: ffffc90005896494 [ 809.731259][ C1] unwind_next_frame+0x3de/0x20a0 [ 809.736269][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 809.741789][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 809.747918][ C1] arch_stack_walk+0x94/0x100 [ 809.752569][ C1] ? shmem_alloc_folio+0x135/0x160 [ 809.757667][ C1] stack_trace_save+0x8e/0xc0 [ 809.762317][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 809.767662][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 809.772576][ C1] save_stack+0x160/0x1f0 [ 809.776873][ C1] ? __pfx_save_stack+0x10/0x10 [ 809.781692][ C1] ? post_alloc_hook+0x1c0/0x230 [ 809.786601][ C1] ? get_page_from_freelist+0x132b/0x38e0 [ 809.792289][ C1] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 809.798323][ C1] ? alloc_pages_mpol+0x1fb/0x550 [ 809.803316][ C1] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 809.808835][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 809.813760][ C1] __set_page_owner+0x91/0x550 [ 809.818494][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 809.823832][ C1] ? bad_range+0x261/0x4c0 [ 809.828218][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 809.833387][ C1] post_alloc_hook+0x1c0/0x230 [ 809.838129][ C1] get_page_from_freelist+0x132b/0x38e0 [ 809.843648][ C1] ? prepare_alloc_pages+0x444/0x610 [ 809.848917][ C1] ? rcu_is_watching+0x12/0xc0 [ 809.853654][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 809.859514][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 809.864429][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 809.869343][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 809.875651][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 809.880645][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 809.885987][ C1] ? find_held_lock+0x2b/0x80 [ 809.890638][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 809.895549][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 809.901415][ C1] ? policy_nodemask+0xea/0x4e0 [ 809.906250][ C1] alloc_pages_mpol+0x1fb/0x550 [ 809.911073][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 809.916421][ C1] folio_alloc_mpol_noprof+0x36/0x2f0 [ 809.921765][ C1] shmem_alloc_folio+0x135/0x160 [ 809.926678][ C1] shmem_alloc_and_add_folio+0x499/0xc20 [ 809.932288][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 809.938428][ C1] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 809.944295][ C1] shmem_get_folio_gfp+0x67f/0x1600 [ 809.949464][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 809.955070][ C1] shmem_write_begin+0x160/0x300 [ 809.959980][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 809.965419][ C1] ? timestamp_truncate+0x21e/0x2d0 [ 809.970615][ C1] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 809.977453][ C1] generic_perform_write+0x3c2/0x900 [ 809.982722][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 809.988503][ C1] ? inode_needs_update_time.part.0+0x191/0x270 [ 809.994746][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 810.000523][ C1] shmem_file_write_iter+0x10e/0x140 [ 810.005780][ C1] __kernel_write_iter+0x317/0xb10 [ 810.010861][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 810.016464][ C1] ? __up_read+0x1f8/0x750 [ 810.020945][ C1] ? dump_user_range+0x756/0xb70 [ 810.025853][ C1] dump_user_range+0x413/0xb70 [ 810.030593][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 810.035848][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 810.041983][ C1] ? __pfx_writenote+0x10/0x10 [ 810.046725][ C1] elf_core_dump+0x2929/0x3b60 [ 810.051466][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 810.056548][ C1] ? kasan_save_stack+0x33/0x60 [ 810.061366][ C1] ? kasan_save_track+0x14/0x30 [ 810.066186][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 810.070916][ C1] ? vfs_coredump+0x1dca/0x5670 [ 810.075734][ C1] ? get_signal+0x22e3/0x26d0 [ 810.080394][ C1] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 810.086096][ C1] ? 0xffffffffff600000 [ 810.090241][ C1] ? vfs_coredump+0x2b97/0x5670 [ 810.095069][ C1] vfs_coredump+0x2b97/0x5670 [ 810.099722][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 810.104716][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 810.109631][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 810.114546][ C1] ? lock_acquire+0x179/0x350 [ 810.119210][ C1] ? __kernel_text_address+0xd/0x40 [ 810.124388][ C1] ? lock_acquire+0x179/0x350 [ 810.129039][ C1] ? find_held_lock+0x2b/0x80 [ 810.133689][ C1] ? stack_depot_save_flags+0x3de/0x9c0 [ 810.139215][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 810.144386][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 810.149566][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.155353][ C1] ? stack_depot_save_flags+0x3de/0x9c0 [ 810.160874][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.166935][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 810.172544][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 810.178499][ C1] ? rcu_is_watching+0x12/0xc0 [ 810.183235][ C1] get_signal+0x22e3/0x26d0 [ 810.187713][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.192883][ C1] ? __pfx_get_signal+0x10/0x10 [ 810.197704][ C1] ? force_sig_info_to_task+0x3a0/0x660 [ 810.203236][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 810.208764][ C1] ? __pfx_force_exit_sig+0x10/0x10 [ 810.213943][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 810.220096][ C1] ? syscall_user_dispatch+0x12c/0x140 [ 810.225546][ C1] exit_to_user_mode_loop+0x84/0x110 [ 810.230808][ C1] do_syscall_64+0x3f6/0x4c0 [ 810.235375][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.241238][ C1] RIP: 0033:0x7fde60b8ebe9 [ 810.245622][ C1] RSP: 002b:00007fde61a840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 810.254011][ C1] RAX: ffffffffffffffda RBX: 00007fde60db5fa8 RCX: 00007fde60b8ebe9 [ 810.261964][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fde60db5fac [ 810.269924][ C1] RBP: 00007fde60db5fa0 R08: 00007fde61a85000 R09: 0000000000000000 [ 810.277874][ C1] R10: 0000000000000592 R11: 0000000000000246 R12: 0000000000000000 [ 810.285826][ C1] R13: 00007fde60db6038 R14: 00007ffd1c79c910 R15: 00007ffd1c79c9f8 [ 810.293775][ C1] [ 810.296777][ C1] task:syz.6.1902 state:R running task stack:25400 pid:13904 tgid:13893 ppid:12072 task_flags:0x400140 flags:0x00004002 [ 810.310231][ C1] Call Trace: [ 810.313491][ C1] [ 810.316400][ C1] __schedule+0x1190/0x5de0 [ 810.320905][ C1] ? __pfx___schedule+0x10/0x10 [ 810.325736][ C1] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 810.331259][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 810.336779][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 810.342136][ C1] preempt_schedule_common+0x44/0xc0 [ 810.347391][ C1] preempt_schedule_thunk+0x16/0x30 [ 810.352562][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 810.358512][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 810.363594][ C1] __local_bh_enable_ip+0x107/0x120 [ 810.368778][ C1] ? __dev_queue_xmit+0xaf1/0x4490 [ 810.373878][ C1] __dev_queue_xmit+0xb06/0x4490 [ 810.378816][ C1] ? ip6_local_out+0x2a6/0x4d0 [ 810.383560][ C1] ? ip6_send_skb+0x112/0x460 [ 810.388210][ C1] ? udp_v6_send_skb+0x96f/0x1910 [ 810.393209][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 810.398568][ C1] ? find_held_lock+0x2b/0x80 [ 810.403219][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 810.408134][ C1] ? enqueue_to_backlog+0x493/0xe90 [ 810.413309][ C1] ? find_held_lock+0x2b/0x80 [ 810.417964][ C1] neigh_connected_output+0x3da/0x620 [ 810.423312][ C1] ip6_finish_output2+0xaee/0x2020 [ 810.428403][ C1] __ip6_finish_output+0x3cd/0x1010 [ 810.433580][ C1] ip6_output+0x1ca/0x3e0 [ 810.437878][ C1] ip6_mr_output+0x233/0x11b0 [ 810.442554][ C1] ? __pfx_ip6_mr_output+0x10/0x10 [ 810.447656][ C1] ? __ip6_local_out+0x45b/0xa80 [ 810.452580][ C1] ? nf_hook_slow+0x132/0x200 [ 810.457236][ C1] ? __ip6_local_out+0x2f1/0xa80 [ 810.462150][ C1] ? __pfx_dst_output+0x10/0x10 [ 810.466978][ C1] ? ip6_local_out+0x2a6/0x4d0 [ 810.471710][ C1] ip6_local_out+0x2a6/0x4d0 [ 810.476274][ C1] ip6_send_skb+0x112/0x460 [ 810.480749][ C1] udp_v6_send_skb+0x96f/0x1910 [ 810.485577][ C1] udpv6_sendmsg+0x23a8/0x2d20 [ 810.490340][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 810.495873][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 810.500956][ C1] ? avc_has_perm_noaudit+0x149/0x3b0 [ 810.506302][ C1] ? avc_has_perm+0x144/0x1f0 [ 810.510951][ C1] ? kasan_save_stack+0x33/0x60 [ 810.515772][ C1] ? kasan_save_track+0x14/0x30 [ 810.520605][ C1] ? __import_iovec+0x1dd/0x650 [ 810.525430][ C1] ? __might_fault+0xe3/0x190 [ 810.530080][ C1] ? __might_fault+0x13b/0x190 [ 810.534811][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 810.539895][ C1] ? inet6_sendmsg+0x105/0x140 [ 810.544630][ C1] inet6_sendmsg+0x105/0x140 [ 810.549202][ C1] ____sys_sendmsg+0x705/0xc70 [ 810.553948][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 810.559376][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.564634][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.569807][ C1] ? kfree+0x24f/0x4d0 [ 810.573850][ C1] ? ___sys_sendmsg+0x141/0x1d0 [ 810.578672][ C1] ___sys_sendmsg+0x134/0x1d0 [ 810.583319][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.588498][ C1] ? __pfx___might_resched+0x10/0x10 [ 810.593763][ C1] __sys_sendmmsg+0x200/0x420 [ 810.598411][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 810.603581][ C1] ? __pfx_do_futex+0x10/0x10 [ 810.608239][ C1] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 810.614632][ C1] ? xfd_validate_state+0x61/0x180 [ 810.619719][ C1] ? __sys_setsockopt+0x1c0/0x230 [ 810.624720][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 810.629636][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.634803][ C1] do_syscall_64+0xcd/0x4c0 [ 810.639277][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.645150][ C1] RIP: 0033:0x7f67d978ebe9 [ 810.649537][ C1] RSP: 002b:00007f67da650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 810.657917][ C1] RAX: ffffffffffffffda RBX: 00007f67d99b6180 RCX: 00007f67d978ebe9 [ 810.665859][ C1] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 810.673799][ C1] RBP: 00007f67d9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 810.681739][ C1] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000 [ 810.689679][ C1] R13: 00007f67d99b6218 R14: 00007f67d99b6180 R15: 00007fff2ea34fe8 [ 810.697638][ C1] [ 810.700630][ C1] rcu: rcu_preempt kthread starved for 9744 jiffies! g61377 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 810.711701][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 810.721652][ C1] rcu: RCU grace-period kthread stack dump: [ 810.727508][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 810.740949][ C1] Call Trace: [ 810.744203][ C1] [ 810.747110][ C1] __schedule+0x1190/0x5de0 [ 810.751593][ C1] ? __pfx___schedule+0x10/0x10 [ 810.756415][ C1] ? find_held_lock+0x2b/0x80 [ 810.761067][ C1] ? schedule+0x2d7/0x3a0 [ 810.765365][ C1] schedule+0xe7/0x3a0 [ 810.769403][ C1] schedule_timeout+0x123/0x290 [ 810.774226][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 810.779571][ C1] ? __pfx_process_timeout+0x10/0x10 [ 810.784831][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.790606][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 810.796041][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 810.800777][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 810.806041][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.811211][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 810.816120][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 810.820939][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 810.826714][ C1] rcu_gp_kthread+0x270/0x380 [ 810.831361][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.836536][ C1] ? rcu_is_watching+0x12/0xc0 [ 810.841271][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.846451][ C1] ? __kthread_parkme+0x19e/0x250 [ 810.851448][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 810.856613][ C1] kthread+0x3c5/0x780 [ 810.860650][ C1] ? __pfx_kthread+0x10/0x10 [ 810.865219][ C1] ? rcu_is_watching+0x12/0xc0 [ 810.869953][ C1] ? __pfx_kthread+0x10/0x10 [ 810.874511][ C1] ret_from_fork+0x5d7/0x6f0 [ 810.879070][ C1] ? __pfx_kthread+0x10/0x10 [ 810.883629][ C1] ret_from_fork_asm+0x1a/0x30 [ 810.888370][ C1] [ 810.891360][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 810.897649][ C1] Sending NMI from CPU 1 to CPUs 0: [ 810.902827][ C0] NMI backtrace for cpu 0 [ 810.902840][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 810.902855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.902862][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 810.902878][ C0] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 810.902890][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 810.902901][ C0] RAX: 0000000003359603 RBX: 0000000000000000 RCX: ffffffff8b93bc29 [ 810.902909][ C0] RDX: 0000000000000000 RSI: ffffffff8de50210 RDI: ffffffff8c162900 [ 810.902918][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 810.902926][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 810.902934][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab4b90 R15: 0000000000000000 [ 810.902943][ C0] FS: 0000000000000000(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 810.902957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.902965][ C0] CR2: 00007fd404251c77 CR3: 0000000074d57000 CR4: 00000000003526f0 [ 810.902974][ C0] Call Trace: [ 810.902979][ C0] [ 810.902984][ C0] default_idle+0x13/0x20 [ 810.903000][ C0] default_idle_call+0x6d/0xb0 [ 810.903015][ C0] do_idle+0x391/0x510 [ 810.903031][ C0] ? __pfx_do_idle+0x10/0x10 [ 810.903047][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 810.903063][ C0] cpu_startup_entry+0x4f/0x60 [ 810.903078][ C0] rest_init+0x16b/0x2b0 [ 810.903093][ C0] ? acpi_subsystem_init+0x133/0x180 [ 810.903113][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 810.903128][ C0] start_kernel+0x3ee/0x4d0 [ 810.903142][ C0] x86_64_start_reservations+0x18/0x30 [ 810.903155][ C0] x86_64_start_kernel+0x130/0x190 [ 810.903168][ C0] common_startup_64+0x13e/0x148 [ 810.903188][ C0] [ 814.425984][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.732165][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.889860][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.901184][ T1300] ieee802154 phy1 wpan1: encryption failed: -22