last executing test programs: 3.82686315s ago: executing program 2 (id=1405): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r0, 0x7, 0x1, 0x3ff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000200)='J\xa1-\\\\&$+\x00', &(0x7f0000000240)='-@%-)@#{\x00', &(0x7f0000000280)='/dev/uinput\x00', &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00']}, &(0x7f00000003c0)={[&(0x7f0000000340)='#[@@\xde@/\x00', &(0x7f0000000380)='%\x00']}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x487f) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x0, {{0x2, 0x4e20, @local}}}, 0x88) sendmsg$key(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2, 0x9, 0x3d, 0x6, 0x37, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x4, 0xff, 0x8, 0x2, 0x876}, @sadb_x_nat_t_type={0x1, 0x14, 0x74}, @sadb_lifetime={0x4, 0x4, 0xfffff000, 0x7, 0x695}, @sadb_address={0x5, 0x6, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e23, 0x50, @mcast1, 0x6f2}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_lifetime={0x4, 0x2, 0x80000000, 0xf9fa, 0x7, 0x3}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbd, 0x3, {0x6, 0x3c, 0x7, 0x8, 0x0, 0x10, 0x0, @in6=@local, @in6=@local}}, @sadb_x_sec_ctx={0x17, 0x18, 0x0, 0xb, 0xab, "e92cfcb0a3c847adf7056fc1a4349a083e3bde5d1c134c2298e69a3285ce8ded72f7489770a763eb18033377e0f765fb7a32c206f2a085f35c515a35a5867192198aaa3dd33638c9965a53e62ddf322a111f1dcf8048dcaa33fb37575674bc62885649fc120f72328f499d4d6c0be067d2b4183fabf4288fab38ce269b4a75d72d5faf53392e51208663a9d90784971a16b860a80314cde5c806b0b399fc2ad6be391f9d4598e6fbb77e10"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x1b8}}, 0x8000) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000780)=""/140) r2 = syz_clone(0x20042000, &(0x7f0000000840), 0x0, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="a57c37c54e8a8ef0feb7d6b452e121662a9a63d4cce3cc90d66a2a976d41de70f613518aea7f9106b1f94e99c8e5d9c317fbfa26a3397ec1cc90bae286d65306324751d22bb1b89691fe10366241b765de942ad1a4c2b9c26ee524d20320a906bce80e37a8a30318bf3c1adefc78fcc360271ffe2d50bcf1d6585d0ce605eade7264474b3cd27d7bd0567fc4599e74b21ac0ff0cf37616465eee092e6c74e2e1b8e822d83368a23397d7e15d013557bcc64434b0") epoll_create1(0x80000) (async) epoll_create1(0x80000) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000009c0)={0xd}) tkill(r2, 0x34) (async) tkill(r2, 0x34) r3 = accept4$inet6(r0, &(0x7f0000000a00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000a40)=0x1c, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000a80), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp6={{0x28}, {0x0, "78eb"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xf4, 0x5, 0x10001, 'syz0\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) semget(0x0, 0x3, 0x210) (async) r4 = semget(0x0, 0x3, 0x210) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000e40)) (async) semctl$SETVAL(r4, 0x0, 0x10, &(0x7f0000000e40)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000e80)={0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x7fff, 0xa, 0x3, 0x3}, &(0x7f0000000f40)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000f80)={0x0, 0xe5, "e6e242908c49d560916ab64a618f16752a9b3ed96962ea9eadcda2fe6193d00d28c6bf00ea939a58d710a143714927ebe4aa707d5afe49ffba158ef4ab1f01e954f77656105c4c01d51aa83452c8ce339ce4e76cc911b63446eb6403ecdaab2978dc00a067be7b80bf7e99b8e0b9f73b9ef256624baa404cc56596b049044a569b2d64fb1315be39a15d02398cefa79ef895f2cd481da4f7f4ea1efd989203831fa564acbfc60824ce1e89ff56cf1864303ede195cff0823389cf3a64d0c150190cea7fba1a226e488aeec9f0f9b784144b789a28958e3ebd8a96901dd27bc20ae78ca600b"}, &(0x7f0000001080)=0xed) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000f80)={0x0, 0xe5, "e6e242908c49d560916ab64a618f16752a9b3ed96962ea9eadcda2fe6193d00d28c6bf00ea939a58d710a143714927ebe4aa707d5afe49ffba158ef4ab1f01e954f77656105c4c01d51aa83452c8ce339ce4e76cc911b63446eb6403ecdaab2978dc00a067be7b80bf7e99b8e0b9f73b9ef256624baa404cc56596b049044a569b2d64fb1315be39a15d02398cefa79ef895f2cd481da4f7f4ea1efd989203831fa564acbfc60824ce1e89ff56cf1864303ede195cff0823389cf3a64d0c150190cea7fba1a226e488aeec9f0f9b784144b789a28958e3ebd8a96901dd27bc20ae78ca600b"}, &(0x7f0000001080)=0xed) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000010c0)={r5, 0x6, 0x4, 0x1, 0x7fff, 0x8, 0xe, 0x8, {r6, @in6={{0xa, 0x4e20, 0x7, @remote, 0x7}}, 0x9, 0xce58000, 0x1, 0x1000000, 0x8}}, &(0x7f0000001180)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000010c0)={r5, 0x6, 0x4, 0x1, 0x7fff, 0x8, 0xe, 0x8, {r6, @in6={{0xa, 0x4e20, 0x7, @remote, 0x7}}, 0x9, 0xce58000, 0x1, 0x1000000, 0x8}}, &(0x7f0000001180)=0xb0) sched_setscheduler(r1, 0x0, &(0x7f00000011c0)=0x7f) syz_open_dev$admmidi(&(0x7f0000001200), 0x80000000, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000001200), 0x80000000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001240), 0x802, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001280)=0x201160, 0x4) listen(r3, 0xe) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000012c0), 0x8280, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000012c0), 0x8280, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000001300)={0x9, 0x6, 0x3, 0x7fffffff, '\x00', 0xb9}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000001340)={'vlan0\x00', {0x2, 0x0, @private}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001380)) (async) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001380)) 3.794464761s ago: executing program 2 (id=1406): r0 = semget(0x1, 0x3, 0x204) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket(0x1d, 0x803, 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa794b99a355ad4913bdb1aabbbbbbbbbbbb080045000020000000b6e7008ee9fd3ef4ad85d6"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000000c0)={'pimreg0\x00', {0x2, 0x4e23, @remote}}) r8 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x4, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x56, 0x0, @fd=r4, 0x9, {0x0, r4}, 0x25, 0x3, 0x1, {0x0, 0x0, r1}}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000100)={0x2, 'hsr0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mbind(&(0x7f00000af000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000040)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.92427338s ago: executing program 2 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9e7d7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x15, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000280)="c1c3b3d47c4e26cb2e5bd78ad8b81cfdbf236c585634173e1f350c904893b8ad5997d64e72f9a4f0d50b558553427b2422c11b52a60a71154114a303cb4afdc71c7b2f6520bcfc8ee7ddf09f691d48419ad37205e0365dc7c3e2d3ad9762ef3e845a998a53f9e14571baeec6cde033249c941b89034f922d67e1af14dcf9846bfddd1d606ee266f67c1cf872b7e768ff7c37dc27a3bc76cd5a04af37abad2997d70e80614bdace1feebab6c9239eddd6678305327ad1ea", 0xb7) (async) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) (async) syz_open_dev$dri(0x0, 0x0, 0x0) 2.899850701s ago: executing program 2 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 2.296607485s ago: executing program 2 (id=1431): r0 = socket$kcm(0x2, 0x5, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x4, 0x7, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x21}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0x0) (async) umount2(&(0x7f0000000040)='./file0\x00', 0xb) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)) (async) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0xc0a85320, &(0x7f00000000c0)={0x1080}) (async) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000200)="79ba40ff764c9b84c454133a60", 0xd}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) 2.241769374s ago: executing program 2 (id=1432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$nci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$nci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_usb_connect$uac1(0x7, 0x71, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000003700)=""/233, 0xe9}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000003800)=""/95, 0x5f}], 0xa, &(0x7f0000003940)=""/90, 0x5a}, 0xffffff80}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000000001, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x9) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="402302000000e330"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r1, 0x0) r4 = io_uring_setup(0x191a, &(0x7f0000000140)={0x0, 0x331d, 0x10, 0x1, 0x325}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 1.824807595s ago: executing program 4 (id=1442): openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_io_uring_setup(0x5ab8, &(0x7f00000003c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002101, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r2, 0x678, 0x5, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.743150421s ago: executing program 4 (id=1445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) keyctl$dh_compute(0x17, &(0x7f0000000280), &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r1, &(0x7f0000002040), 0x0, 0x34000811) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.474552802s ago: executing program 4 (id=1448): syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10201, 0x2, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_usb_connect(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x81, 0xbc, 0x23, 0x20, 0x557, 0x2008, 0xd490, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x7, 0x2, 0x9, 0xba, 0x70, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 945.945454ms ago: executing program 4 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000000)={{0x0, @private=0xa010101, 0x4e24, 0x1, 'fo\x00', 0x9, 0x10, 0x47}, {@loopback, 0x4e22, 0x2000, 0xfff, 0x5, 0x76dd0cb9}}, 0x44) 872.425183ms ago: executing program 0 (id=1466): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000180)=0xfffffff9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x1d, 0x2, 0x6) (async) r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x8000, '\x00', 0x0, r3, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=@newpolicy={0x1fc, 0x13, 0x204, 0x70bd28, 0x25dfdbfc, {{@in6=@loopback, @in6=@empty, 0x4e23, 0x0, 0x4e22, 0x5, 0xa, 0x20, 0x80, 0x73, r6, r7}, {0x400, 0x1, 0x56c, 0xe7, 0xfcb, 0x4, 0x3d1c, 0x10}, {0x8, 0x400, 0x8, 0x62}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x1, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4d3, 0x46}, 0x2, @in=@private=0xa010100, 0x3500, 0x0, 0x0, 0x7f, 0x1, 0x3, 0x745}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3506, 0x0, 0x1, 0x10, 0x3, 0x8, 0xffff4609}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0xff}, 0xa, @in6=@empty, 0x3501, 0x0, 0x0, 0x8, 0x1, 0x6, 0xe0000000}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3505, 0x4, 0x2, 0x8, 0x200, 0x3, 0x3ff}, {{@in6=@remote, 0x4d5, 0x9de23b7aed1c18ad}, 0xa, @in=@loopback, 0x0, 0x3, 0x3, 0x8, 0x5, 0x1, 0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4004}, 0x4010) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 872.172275ms ago: executing program 4 (id=1467): r0 = msgget$private(0x0, 0x2) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(r0, &(0x7f0000000340)={0x2}, 0x8, 0x800) msgrcv(r0, &(0x7f0000000380)={0x0, ""/114}, 0x7a, 0x3, 0x2000) msgrcv(r0, &(0x7f0000000740)={0x0, ""/139}, 0x93, 0x3, 0x1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) prlimit64(r1, 0x9, &(0x7f0000000000)={0x1}, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x1000, 0x100000000}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, {&(0x7f0000000740)=""/236, 0xec}, 0x0, 0x4}, 0xa0) sendmsg$inet6(r6, 0x0, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 868.546512ms ago: executing program 0 (id=1468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$sndseq(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1a000}], 0x1}}], 0x1, 0x34000811) 844.672825ms ago: executing program 0 (id=1469): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) 736.775308ms ago: executing program 3 (id=1471): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100033887462023010100fe4a0102030109021b000b00000000090400000193723400090582000004000000"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x0, 0x0}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_usb_connect$uac1(0x2, 0xea, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x2, 0x30, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0xf7}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x5, 'n6'}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x2, "7bc5fdb48f"}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x7ca0, 0x9, "0a76b2"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x2, 0x3, [0x7, 0x2, 0x6], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x9, 0x1002}, @as_header={0x7, 0x24, 0x1, 0xd, 0x5, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x3, "3293"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xc2c, 0x4, 0x4, "4d62d399c43dec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xaf, 0x42, 0xa, {0x7, 0x25, 0x1, 0x80, 0xc, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2d, 0x3, 0xd, 0xc, "69362d7155e5a867"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x1001}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x4, 0xb5, 'F'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfa, 0x3, 0x2, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x11, 0x0, 0x5, {0x7, 0x25, 0x1, 0x1, 0x3, 0x4}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x36, 0x8e, 0x0, 0x28, 0xff}, 0x16, &(0x7f00000001c0)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x0, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8, 0x8}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4c, &(0x7f0000000480)=@string={0x4c, 0x3, "cf1e26d3cda12b20e1ca13e91f8d3216b71780db3e0dfee1d0681905a8ab40612eacc7de1dd7acff093e232277c2352dd5e0ccd9c5968e1eb5e9bcf62a4879ab9d165c3d7929ec6eb61c"}}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02000000020000000000001d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair(0xa, 0x3, 0x87, &(0x7f0000000180)) 320.066501ms ago: executing program 0 (id=1473): mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0xccbb127f1e282d38, 0xffffffffffffffff, 0x5da20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() syz_open_dev$midi(&(0x7f0000000080), 0x4, 0x40) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = syz_io_uring_setup(0x3c, &(0x7f00000007c0)={0x0, 0xa56e, 0x13500, 0xfffffffe, 0x2cc}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1f) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x7, 0x8) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0xff, 0x1}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r7}, 0x10) stat(0x0, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) 294.434218ms ago: executing program 0 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) bind$can_raw(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x16000000}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 228.614536ms ago: executing program 0 (id=1475): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000b30000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a00009040000010301010009210008000122030009", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000110400"/17], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc8, &(0x7f0000000580)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x8001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='load ecrxptfs trusted:)#].,.],(00000000000000002685 '], 0x35, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x100008b}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x7, r2, 0x80000}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x9) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffbb}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xa, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xff, @remote}}}, 0x108) syz_open_procfs(r5, &(0x7f0000000140)='net/dev\x00') 223.974679ms ago: executing program 3 (id=1476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0500360000000000"], 0x40}, 0x4, 0x700000002000000, 0x0, 0x2000000}, 0x0) 221.631249ms ago: executing program 1 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r2 = syz_io_uring_setup(0x7aa, &(0x7f0000000780)={0x0, 0x800000, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r2, 0x567, 0x720, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x567, 0x720, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4880}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x2000000b, 0x0, 0x5}, 0xc0000000}}]}, {0x4, 0xa}, {0xc, 0x7, {0x5be51a9a2b937ba9}}, {0xc}}}]}]}, 0x68}}, 0x8040) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x2000000b, 0x0, 0x5}, 0xc0000000}}]}, {0x4, 0xa}, {0xc, 0x7, {0x5be51a9a2b937ba9}}, {0xc}}}]}]}, 0x68}}, 0x8040) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000180)}) (async) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000180)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0xf8, 0xa7, 0xb7, 0x20, 0x13d8, 0x1, 0x2a63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xd7, 0x1, 0x0, 0xdb, 0xa8, 0x14, 0x1}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0xf8, 0xa7, 0xb7, 0x20, 0x13d8, 0x1, 0x2a63, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x0, 0xf0, 0x5, [{{0x9, 0x4, 0xd7, 0x1, 0x0, 0xdb, 0xa8, 0x14, 0x1}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 200.816065ms ago: executing program 3 (id=1478): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18180000", @ANYRES32, @ANYBLOB="0000000000008000bcfefa247bf0ce7adaec7fed25fc8c809742aef112aeeb3abdd69b71d23c6635034fc54143c0843d6ed7be19d2d4d81126a659ed640075b33734f354817e1b062d7c5808bf67a199085c12eb7dcc0c9fed9f13576138ecf8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 175.029382ms ago: executing program 3 (id=1479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$sndseq(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x20000}], 0x1}}], 0x1, 0x34000811) 104.268942ms ago: executing program 3 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x11c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_USERDATA={0xf8, 0xd, 0x1, 0x0, "e4b2967b3f56058a94d742c8962b6f136b47caf8ca0f848e1012334205e77a8742c0898c0d1e03e42576ab73a7e2171ba2979ab470f2c1b54ab2e92db8047579159230d7c670a6f2be4b08edd92ef7279916a474021dfbf83acad24b2d99fb145601e6e2cdeb423f379ad61c089fffd2c3995be02fbc6f05d6f9a8a7343b133d61acfd9ee962bba9b8a4c7a6cb0bec0b3d52643e2210e77c81db6e41da61e779f6d13abb819846129026ba575e6ac878f0d5f1f9c0d422ef14a174cde0b49bae31b368d19facb6e4d93a2e7de0e58294b39313fd9b34142a3a8536aa31b1e6463773873715e6b422230a68536215490e90569247"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xd}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x301, 0x0, 0x0, {0xcafb1ae54967686c, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x26e4, 0x6, 0xa, 0x500, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x2650, 0x4, 0x0, 0x1, [{0x2608, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x25f4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x19c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "625ff93d4ebf03b04bd564ef85599d759dec0b850edc6da4c50c3097d9589eee5e0076ab72e680d941eb9ab83cdced1fb29120e31b74ee725ba838ab6df1ff75e170d9c4e59a0857761e85e565aa4024932a963202d852cc8876f65d0009d430e777388f2f7bc0c80d3d5910dfe61cdeecd9e0c7a20c675693177a33ded47b61c89295ae9bcc79cd0dafc6791cd3f5cacd7c590e1a5b4d588763e971ef6874b14b6204ab94d3591afaf2194649458f813954091d3cd948023a7563a4ec76e3926d977c0d5959a35d72"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x23, 0x1, "69bc9c613511069181ffd329713ed7586f846a3bfd95525c0482b92a9f9c5d"}]}, @NFTA_IMMEDIATE_DATA={0x1160, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x23, 0x1, "e65dd2660759f907f51b72a749e2372343d173aae66b94103d06e528194ae9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x78, 0x1, "98ae7ed4a7848e96436b2fb639f559b34fec790ac54707b84e8db91ed85a6357d2ebe20f59a9e8f3c16055e05c474315c4ef04e0a52d434ef05adb78c3bd3dceaee795773fbbf2b1d93e8368956dc9516184f376d53d49e547517c58eb4f278534bd3d496b8022ca772321e03e4c604a0abb4d59"}, @NFTA_DATA_VALUE={0x89, 0x1, "58767f281146ea6b1b3c09e783c758ab0acecfc146933b3fdbfb2ce09eb5f38c1ed7b9d7757d36adcfada1a62b518e049f8c44e0bb3cfcaeb2a828f5bab0ac273acf78fc488bc734d9cf42b5a64cafb64054156466b5aec3ab28442d64b21b2c5c251c8f35ba81b5076f6cfa1d7df6e3c12e7d2ef422ac13474bbe8226a0d117e15445f377"}]}, @NFTA_IMMEDIATE_DATA={0x1190, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "fbf7596ea73a300fb5fd145a4172c1bdbbadb6c83f12bc40f88479a41d2b64a69e3d67c3cad8d7ae1a32f3e48c5249a4eddb643025d482eb81e2d08abbcda96cbd8b263c22cefad74b7ff76e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "8f793d40e22c2dac26ab796c13bf8f261a11720d0ed82d65d9d23e548c0a4469b7d3cea0ad1160fc69389be0064e6c832d81ab32c95e95c343efdedb2f0b9dcaef491c748d104814d08fb843393acbd659ccd3c07978d1ba6c08586eb863e3a55b6e220f373fa6d1e6e89af6acbc646272241a577f730eda72fe6d9264a85db6fc335dc4150bf81cef8c3fac789f87bebf009e7b7f45b84e7cf2a380ee64703da9f4612f692f8929dd781587c0b774b3bb4d4c71a40d4bf4d1a00fea6f841e6fa13fd93c4a6e159a262da52a84af373a0e9caf5a3064cf21ee4520ca63036c1e58a5f67567ca3eedee22819552badf6957fc91fff56e1cdc9d4af2fd705199f5432cb0ba7c78acf3048504370289137e75e82c8c2d5b37f2f32e63c7f9cdde68817d6944f8f1e7860ec2c500b4e2eaa0b1fae89290b1f1052aac868b3be1c730416a4f5a1a5fd6d47e36a0b719b2743338b99a7df980871d5119750095b592b7268051077eb7c23d3b8fd3d092d94321f1bbb82dca8598bb7aa1dee47c0533e48a836b04c39ab018c2f6c6c53d6f762d7843c79904f10725fc8d41333996764096347dd4284ef359f4a74332858df1b51d64305ddd1bd7b21f9728c1aefa87edb003d813a57edc8ea978ecbfa0b0d833d307f487fff6965ac88ae0c057e0d453c94457301038d43c1b0cc217ad2531e94d4dc8a289ae16fc6f15c352ad340f245cce99a8307698720a4f96334a6b48f263eb66e1ca3176c04e45f7c6f4bd37ca47b5fbe8cd25e0b1971059c86e980b462b4c5640f31323db6b9b150fa4a2bd4fd0d6ce6b7d1194c290e57a2ff7f96ced6d6339493166dfcd4372cdfb145e3204ad75f97daa262cadc9cb8689bf24dcacc8988d60e0ab1d9c0f79e360dad643fbf5bf5b663e2b8102f31582e532e988606536b63563595df407a0d1f6d1db39667794b754aa4d05d7b5b5d17a6d046cd00d69f4f74cfa0860624d16fb9668334c234074689d83edbe9ab98ed57e135df911cb5a5787b4584f8d170a5167fe66d46731cc0a93f71386e608375860de9f935468bfd675c886502ebf8cb17b1e62dbdeae7c31d212d8f375859c830a22e7ca72a9403eb67b6b69131a3a06b768dae9313c27b14fe0cc9ceef3707c752cf84666f60f2c4d9c46cef6b7dabcccdab764eb22c1bd0b320012fdec3067ca830c144c61d6c3da9aee310d82e2ea8191eeb01a1e1eb5c2de59e35248aad08528dda7edd90226d9e21920dc2d9280569d8c5d2932dc8651c8312c5ed5799842c577f4f5de51eb172f31acae7aa1bec6f91ac9cbb490d194392ddb2aa858eba8460e711f1212b1d4326a57f12ab5663000bc92505e7172ae0e3743ef351da8d5da892407dc6d3eee363e6760799e0adab1f7e77d7dd01ef138cd1b4654dc47c0de2cdf172ecad1fb9a1d0f14283c71eed71f36c8d13de82469227bf872f2113f6cd380400e0c594daac5f78b9d474b7e910f97cd4abde6bc930a14e2ffd9dbb68f9baef126c427a8e63b9527ceb4c75d4a80c28abe261f6421d962dbb9ce88e2fec405b1b4c54a6b212e7027c03fdd9cd9a868e3e60a063a720cf881a4b62d56c983519b81ffe8e7389ea7284a0e9f8ebcf2245ce8c2cf4bb993b03035f5011861e3b8a97f73d09975a39cc773e41e3aff1448cbc449cffdacf2c29129aa99b733e7872c04fec2377307714ef8a36d4ada4abbe7188fbdd700e0342277b3758a0cac842addbf521dcbab46bdd296f87f18d57ee46342ab6a7038327de35ed1f462125d1d33b233774e2cd4bb174aae22f944a373cf82751e0072d2c5e5a3aa765ba72da0bcc88ae22dc984c80f6e887972b8f7c0b477a9dd3a6860b01a72c55edb8b216328a2449a15e3972cec5140d91d6403dfbe31581fbb6c219e5f2615a6fdded42a4a949ce8eb720822676b4aa745d9a3b32de6985d4315a4f6c34449ff84a41a122324c182a5dc1f13bbab6d9531b3b58ec3324fc9b4d58d9b99c683cb8702591a6b140f6c928889680bf2c1dcd0c5cfda6b3d7e029987a189f7dbafa1471461aaa2882369ecddff4574142b2aa5e302a54abac0a091565ab9f9c9289527823795ea3f689ff120bc61b5f709131769d6b70763101a4ff8091b376bd8bdf60dcb5c354f5adb9b1ce7ac1fa125cb0e2bdd12ae05466ca52a577d1403f2f4316b63b5868057a7895763fc7a4bd3aa32edf78b112f77991971b8bae6b743620397c0d32ef365df1ba1c9d94e254c7756c3089e3347937d673029eb0833111f06fc7b31aa8f2cf23ccb804adad115ecc633a6a56832b9050a676a7a1478aab77ac519b2bf873342223ba0413d0ec2db0f1c7165cf09e0548dbabe1fec9661fd31dfa5dc53eadb360449fd5b506024cd4c498c17418b793045f563433794d4bfa0d57684a0b6a99f310aae62c8d577884aaff747b5a9c39676e55fa4fba16af5aef77f83a533a1f93f397fa4c79857e4874cde1f57b98b2132a251f156b6106bf6cf13562ad7fd85beecbf7c0056a6d8d23ed88fa6054c06ce5ead1156b95858b29558e210703cba7416795020814dcd3eed527c4543585887bd79daaff0d6df57b718d54b634d4344602f8b50de365c37817b2316da5dd5184e1fac382019af89b4e03c5066bee2a93cec4136b7560b63a9704bb41fad2c650e9065ed84477093f3d3636ef215e7ce8e3079e89cf21d707286ce2968646dab82ebbbb4026d9e66307f9a0714a4f63724e6aa702d707f6234be630dab0996a225e75d82650621ab2074d7acdd7365a24d17caae823b19994489a36a3813ecb4d50072a612d4fb2d64c21b6b762c687296f81a4f68379ba8648542b6f5fc55cfccd4186b4b64dee6e0674a3467261da9bc0b5de31892e030c6aa7f93a8d9970d6075b757aff8edec33e87a17ca6f38e4cda3222581e3fe3cb53ba39cd011cd10cecf72194916754f76823dbbade24979431e2fd1b903ed492e6e20395c7e9c3b4d7c66f6299b2d6903deb17270b5f9f1fffa3f4d5deb27db67c68e4197d3630d01b9004429ab8776c75ff6cb0cc73784c80a0bb1c02e7a5e8b7fe592e58b2f58864816312cfef5b43045b4c18f48800f745c3ae0017ac3616fceb2e19b910c266010efde824c767bde6669f2399e45622370c12e9751cd5552c6dc0965e27dcd0dc82b435839b6dfb3f6482a9e7a362855173d8169ede3179fca91254ccbb92331b6e4b1b066687b4d40d82d912b009fcc2824798f18b02873f8a8d6ae976c130cff42f1b8d733b6a74b4a353c480ba1bcc23e8cce38429de47a9d24da60e51d43719ec4907692f5bc38e0d73eca50079072960a712e9ec12e96daf646cf15ecca3575e5e125fabd5c8498f736e13d88fac97cbd9d016e6c419384b7bf7783579f1150f8a6b69dbd334ad7ff7e5147798751da8191f6ea75c943a53a23644ef4fea3bafb87a086317761ca49e028cf8f881299f46888367730545b8f1f6461ce2e21945afab0037741ac1f18a07e3b4912a147a7358db020ec291b89a0660354f2895d467608e5c028b534cf1f4db00cfd87b1c83676a92866811fb18f0b26b91411cb40ef0754149639d1a5ca4203de0adc27112130c89c39b14e843628ce26872aaa8980b1c4d09c4aa48549133aba2ad7adc42dd171773f4bb6824929fde0a22f695060ca65a75f00e6145043d37b155ec107fb2b1ff67afeefd5d393991ddba9dee26f50157f2978ca411d6479d1f728188d78c256c068dc1841d1ceef9dfeb1212cb58aeda155bcab4e26f85b51fac236d2dba4f352f8d7e7a8104c621549f96b2398074661f806ff531c6ddd91122d7574fe75e9b4a0979a26c77c631c0bee09c29095f13a56e2c6cc44195661c86e6ef245218b6b3ed0edb6eb038c3c0213e67053bd047780e2f42750d7eacc5ffe3a1e74f067703f0d48195a4ea6375513b8dec62b2ada6e1b43affa0f1a9b154ff2cdbab368c4e2481b6d37d66963effabba95d97aba603a3a487227c8af296485942db4d06169679540a67c7e04782561a06fee3b1246d887654fd7f5253f7e0b0d33d44e10471f12633df09670432fa0f716e64a66d36532c8101d433664500226efa1f798877d14e78d9897785d03a19d065ac79fd0cb2115589dc6fab603c3df064f727d21cf3e086af0b159fc39987c6496e99af8bd8ae25726153f288e004dd5136c974f7d2fd46223259a8c687125799f8324639398fd10805055de688aca6c4fe0133cddb998643c871f672186615a9e3dfbfb615d06c07337d138edc9478673e32cebb251c188b9ecbe87019f9c2befa22ded1095728412add2e49ee082066fda35b2ecaaa63135bdd49bcaaa9ec7ebe2aaa700161bbeb721f7b0536a1f0370eb898d01e2c44ee26d17d7bf48ecf4bc00d2fccca48735818d3decf341e517ca70c17a58d39055f23386664c320a0db9258783e4396f076e2e772e1590b31a23601e01f84d863aacffbba90f08aa21fbff015d31c56988c1444a25d7dff46a2d623b849c2355a7f86bd12daca8c9ebaca9e87d2020731ca83872bfe84a082f2686414ae7bae81b80b7e2f9b67c2742d66b6f2ecc2141bab9b0351d0df158b19efb99a22527a619ff7a2030f07b46131b2a056f0782abf7e9f1a6cb9a8eb41b99d36d7969dbde1b86948c70dfa002d7fad9f2ad4bb7839856930de15e58ef837a8afc3766c301ea5a447e91d53b199b55838f93df596ef7c6abca6b72b9def0e0a2a697b5eb84cbf77ae228eeca6f5ad3c85387ac4467c1bd8f2307bb61303c0b2314d3d14e4a3c2fe4f28f28712e57da7827a33e93c34157abf4eb55690da5344563bc159b0cdc7df46d76d9c0369c94edd0484c30cfadf35c19203e93365f026d6878f2827be5f6c5cc7f87884fd2a54fa9140bf1632dad1dab4f28b9ecae39cce1078f936e73b3188b9260ef60ee699d69a68dafcb056ec72c42fbed5bd93a6ef2dc33b3aeea52221d38ceab07a3792edc54d34a7043e0fa203404df718585884bc49d1fed9cb943fde05406f34b0524cc2b045c22f420b5cd1a711d75164492196fdd2019b6cdf11f766283c28f169efe8fc053d3823aa022d72c9f97598b78c05d4d67bdab7ed612ebf1e4046d3edc9e07e4ccabf803d8a3dff23640e33e00a415e97ddd11be7c1624a7578d1fee3900356943d25cda02c9917faa779e22002b144dd4c508ff3c47bf85f430e997eeec63d22159b40e75b4c0d0f8c3a7781e6ad23b007fa20b0b23d8691b97f26fe56a251d89c7fd7334a2bfb16c900a5366ba01f7ac5755613373e77122b795c3c140d530fe9acc922a46913313f9845e779f51f403da67f51a603b5ba61f57c83bcc34a1ad3c602e9c57f518c3153505b4b3688838e278bfb217ccdccebb2e2f7df57be5102c85c53bf3d62a6c3619d1466fb3d5ec77b3bc13af738698504b81a3b0e5811edac376f31e1d77bb45617aa04113a7767dc2fc6ae1235262a2a27380e7c7dfe96fa79d2591ad6aa60fae30ac5607d3c2d8229c9049737ff51e4bbd20adffcd7d1623b4bc6d748d86daf7aada6076f87b3e2ca148949ecc8945dd21b1a3fa6dbccc8bb4b997ca7954f5218c3e76a24f56fd412ef0aea38b4043a76fdba6072692d23d313e12df499957a31584b93b7357b5e7d265c3cb20efb46a728b09e895caedbf01561ec9508ed7ebdb377d56704ddb18b10f91105169b08e623ecfeb82c3b1ddb41e3a9ede920511b530a4ceb71d933335eb0bdf7d58a5ba74bec8cf69eb669f865b013086c96cf4eb1085850f4"}, @NFTA_DATA_VALUE={0xea, 0x1, "4c59b4a9fa73afcfd6390e1d67ae866ab60d2619aba748ff4a93ff92cf5843bdcc87f6ebe905705246e27ca5ebd2caee5f2d3f8383abf4574d7cd8618eb8b05f5b46de104c30cc75a5406c708d859aaba90e51b52ddd6908b1fd723d414c432d0084005e196995a30cadbfd78ccc41fc13e63e2d145e20ef1622b584b61d79589ae8dc223fe2a465b6eeb4ef129d2c090e9dc2371a813e18f84f3a480b95762ba26c6b945dc25ba127f45b48feaac073375a87de67a9d9f57cd5ad3eceb491594cd81686fdac79b4f87c9f1d99e65c07209250138accd10faebf265cce8e7f6a3ba668464f71"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x148, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x30, 0x1, "09d36dbba831c87dd2152f130ad068ecc2199faaa9ad732e1aa9b4db18091e7bd01b738aef9d3adf77223d11"}, @NFTA_DATA_VALUE={0xf2, 0x1, "ac1d2e5610385003fae2c02c044322a2e470ddb8163564095f817e0925603aefcab27694d26cbe04101ce54104c9cb28dbd6255c88f4ad3cccb75af981e980d0489e6989673139ef9b2b2f4ae4179ea96751b20ca3d195bb24ccc711442d4378dbe3fa6fafbc7304d0209a9e9a05ad929fe66ed7c2bb3cbad0077d5842b27568b6960422dd1d393014b2a2a68239265f44eb2c125aaf5436b395d81d7e7221fb4b31bbd052b69e2444681ef6a8b45604f3518e602c52cf6bd358829233c131978c3e016d51205704521a2ed382bb53a8e18d3e1ac234426cb9c8a2efd3830243e28a2356b73233e03c48bfb21868"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}, @NFT_MSG_NEWTABLE={0x174, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x4f, 0x6, "eddd68e34ccf5eb35a1758a292162371f93007f2574ae3dfe6271daa8254b01cad0dda857af77ce6e6f959724696bb9fba831100e48a84843bf8140e23785ffcc3fadd1a74b13e5d2fe21d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xd8, 0x6, "5facc0b42364be54c3c6048cea6f5510ecb2fe3c0f7a859db73eb4fd650ca88a4df04529b9c1fca3df6ffc55a68226c565087813436d0d4572c04e9ca8ef10b10977e97f7ecceaee27043d77e59466bfe099f4b26d27e4041df4b34fd864d33206fdc41c16b006c3c1c266272a5396999777c4647b7ac82693f696be5b2d47f3a87f84afbb984f4aaa5b3e8ceca9cbb93e677876f6488dbc1a006437d1d88a799ede48df424ce7a6179cb302d68edb74af75a53e7cda60a9f04e50fe7919bb8b09d2d4bd0c0ca4690436a5b357beb468b705059d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x29f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) 103.896725ms ago: executing program 1 (id=1481): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x270, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56c7fc78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x773812f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6eb46feb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a0dca87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x144355b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56e812c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ad41c27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x703725e7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ebdca5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x676e3e01}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d62454a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31b49523}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59b5139e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x422300b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2593663c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47a292e7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x730e2c75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x649c26e4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d70a47b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22c5c507}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7ad7c48a371c2e13}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78e97043}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1c0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3de9e0c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x291c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c78bb8d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb55ae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x655a7ecd}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44ae9701}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a24650f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66c1c564}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e7e4c22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5190fd10}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29357eaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x524a9e2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3357cf9f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x270}, 0x1, 0x0, 0x0, 0x8050}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000440)={0x3, @pix_mp={0x0, 0x8, 0x34565559, 0x1, 0x0, [{0x200, 0x72}, {0x34fd, 0x8}, {0x2, 0x2}, {0x200, 0x80000000}, {0x0, 0x7}, {0x400, 0x3}, {0x1, 0x7}, {0x5, 0x81fa}], 0x6, 0xfc, 0x4, 0x0, 0x3}}) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xb8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mlock(&(0x7f000092b000/0x1000)=nil, 0x1000) 103.091233ms ago: executing program 3 (id=1482): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xff7f, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="055b7d"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) read(0xffffffffffffffff, &(0x7f00000002c0)=""/186, 0xba) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb080001"], 0x30}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 91.312632ms ago: executing program 1 (id=1483): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x50, 0xffffffffffffffff, 0xffff8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_mark(0xffffffffffffffff, 0x400, 0x101a, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 66.926294ms ago: executing program 1 (id=1484): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4}) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000000)=0xfffffff9, 0x3b) 11.586834ms ago: executing program 1 (id=1485): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x42, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000007, 0xfbda}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.245281ms ago: executing program 4 (id=1486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) read$FUSE(r5, &(0x7f0000002200)={0x2020}, 0x2020) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB="2c72626f746d6f64653d303030303030303030303030303030303034343030fb5d30302c757365725f69643d7694999d1af21fe0a38ae6d6d946c5c5b56cc4ddf0ac5f1760c251a00d79e00c48bb6ef58de3dcde6e7ec84f1d2c85d3999eadab5c74b862a73a95c30e5ba74c1c438bbfef7cbbe75e99a4eaf8cf505dffa71e7aedd31668cd2d6994209be188396a3487c53e0623460ae6edbb0eb987b0c11b3cd32570f650a897b599947879c368dc72c3a48d72dc97362d0e7eba", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) 0s ago: executing program 1 (id=1487): socket$unix(0x1, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x4203, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [], {0x4, 0x6}, [], {0x20, 0x6}}, 0x24, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x802) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) getgid() r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r5, r5, 0x0, 0x40008) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): .092879][ T8297] name failslab, interval 1, probability 0, space 0, times 1 [ 187.095635][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 187.138266][ T8297] CPU: 1 UID: 0 PID: 8297 Comm: syz.4.645 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 187.138291][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.138301][ T8297] Call Trace: [ 187.138306][ T8297] [ 187.138312][ T8297] dump_stack_lvl+0x16c/0x1f0 [ 187.138335][ T8297] should_fail_ex+0x512/0x640 [ 187.138349][ T8297] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 187.138367][ T8297] should_failslab+0xc2/0x120 [ 187.138384][ T8297] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 187.138399][ T8297] ? __alloc_skb+0x2b2/0x380 [ 187.138421][ T8297] __alloc_skb+0x2b2/0x380 [ 187.138439][ T8297] ? __pfx___alloc_skb+0x10/0x10 [ 187.138459][ T8297] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 187.138482][ T8297] netlink_alloc_large_skb+0x69/0x130 [ 187.138500][ T8297] netlink_sendmsg+0x694/0xd70 [ 187.138521][ T8297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.138544][ T8297] ____sys_sendmsg+0xa8d/0xc60 [ 187.138556][ T8297] ? copy_msghdr_from_user+0x10a/0x160 [ 187.138572][ T8297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.138589][ T8297] ___sys_sendmsg+0x134/0x1d0 [ 187.138606][ T8297] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.138636][ T8297] __sys_sendmsg+0x16d/0x220 [ 187.138653][ T8297] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.138672][ T8297] ? rcu_is_watching+0x12/0xc0 [ 187.138690][ T8297] do_syscall_64+0xcd/0x260 [ 187.138707][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.138721][ T8297] RIP: 0033:0x7fe99758d169 [ 187.138734][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.138748][ T8297] RSP: 002b:00007fe9983e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.138762][ T8297] RAX: ffffffffffffffda RBX: 00007fe9977a5fa0 RCX: 00007fe99758d169 [ 187.138772][ T8297] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 187.138782][ T8297] RBP: 00007fe9983e9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.138791][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.138800][ T8297] R13: 0000000000000000 R14: 00007fe9977a5fa0 R15: 00007ffc991ccd08 [ 187.138818][ T8297] [ 187.139314][ T8295] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.161636][ T8295] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.329651][ T30] audit: type=1400 audit(1743009880.291:815): avc: denied { write } for pid=8301 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.337200][ T8295] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.400535][ T8295] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.468109][ T8295] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.476699][ T8295] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.485140][ T8295] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.493528][ T8295] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.556104][ T8305] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 187.591507][ T8305] CIFS mount error: No usable UNC path provided in device string! [ 187.591507][ T8305] [ 187.602058][ T8305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.270563][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.286266][ T8314] input: syz0 as /devices/virtual/input/input14 [ 188.320127][ T52] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 188.489777][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 188.498640][ T52] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 188.589298][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.606677][ T52] usb 4-1: Product: syz [ 188.620826][ T52] usb 4-1: Manufacturer: syz [ 188.629489][ T52] usb 4-1: SerialNumber: syz [ 188.647071][ T52] usb 4-1: config 0 descriptor?? [ 188.668571][ T52] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 188.859773][ T5871] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 188.869526][ T30] audit: type=1400 audit(1743009881.831:816): avc: denied { open } for pid=8330 comm="syz.0.655" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 188.894316][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.905901][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.916820][ T52] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 188.928790][ T52] usb 4-1: USB disconnect, device number 30 [ 188.985399][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.995594][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.999766][ T5871] usb 5-1: device descriptor read/64, error -71 [ 189.249810][ T5871] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 189.259423][ T8345] x_tables: duplicate underflow at hook 4 [ 189.280107][ T6071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.390033][ T5871] usb 5-1: device descriptor read/64, error -71 [ 189.501376][ T5871] usb usb5-port1: attempt power cycle [ 190.149836][ T5871] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 190.234644][ T5871] usb 5-1: device descriptor read/8, error -71 [ 191.066648][ T30] audit: type=1400 audit(1743009884.031:817): avc: denied { ioctl } for pid=8369 comm="syz.0.666" path="socket:[19008]" dev="sockfs" ino=19008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.114445][ T5823] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 191.388469][ T5823] usb 4-1: not running at top speed; connect to a high speed hub [ 191.476948][ T5823] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.503610][ T5823] usb 4-1: config 1 interface 0 has no altsetting 0 [ 191.522622][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.535097][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.551481][ T5823] usb 4-1: Product: ఉ [ 191.560920][ T5823] usb 4-1: Manufacturer: 忑Ⰺ쯖ᘹቪ퐞빫൦鎸⿎㜅곀뷣눣힉淝萅ʵ䷛씺狸䚓鍬䲠뀔᭄坸籂ᘫᮓ텩Ờೊ㍷㈮㋩ࢧǃ嗖谚莙ꘒDzꕼź畡腔ퟢ榶ꙸ敒볪䳍阮㼫ꂣ由 [ 191.606314][ T5823] usb 4-1: SerialNumber: 풣뿂夗⊭⌱ϻᛩ䄱厕샥䗿┶༊ઓ䩯⪠秀胈㢟쎬⯍彩΁叨瓹ệ쒆䒰鑀뜙ࣜ햚趓猓荛夤㕏찔壽䝾棳㈶稜ᰶ༰落追柗햱震壉䜭轑㮠␇䛄Ʒ߮჆ﳂ͠髠暿袔釛疨怭䵃줳쪅⥍큲⟍才謨ꕸ㯛歍诘᳌ㅻ頻 [ 192.041812][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 192.054305][ T8384] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.669'. [ 192.082294][ T8386] syz.2.670: attempt to access beyond end of device [ 192.082294][ T8386] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 192.098257][ T8388] FAULT_INJECTION: forcing a failure. [ 192.098257][ T8388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.118896][ T8386] syz.2.670: attempt to access beyond end of device [ 192.118896][ T8386] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 192.131795][ T5823] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 192.139926][ T5823] usb 4-1: USB disconnect, device number 31 [ 192.145445][ T8388] CPU: 0 UID: 0 PID: 8388 Comm: syz.4.668 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 192.145469][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.145477][ T8388] Call Trace: [ 192.145482][ T8388] [ 192.145487][ T8388] dump_stack_lvl+0x16c/0x1f0 [ 192.145509][ T8388] should_fail_ex+0x512/0x640 [ 192.145527][ T8388] _copy_from_iter+0x2a4/0x15b0 [ 192.145544][ T8388] ? find_held_lock+0x2b/0x80 [ 192.145561][ T8388] ? __pfx__copy_from_iter+0x10/0x10 [ 192.145578][ T8388] ? __virt_addr_valid+0x5e/0x590 [ 192.145597][ T8388] ? __phys_addr_symbol+0x30/0x80 [ 192.145616][ T8388] ? __check_object_size+0x4c7/0x710 [ 192.145633][ T8388] netlink_sendmsg+0x83a/0xd70 [ 192.145654][ T8388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.145676][ T8388] ____sys_sendmsg+0xa8d/0xc60 [ 192.145690][ T8388] ? copy_msghdr_from_user+0x10a/0x160 [ 192.145708][ T8388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.145728][ T8388] ___sys_sendmsg+0x134/0x1d0 [ 192.145746][ T8388] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.145781][ T8388] __sys_sendmsg+0x16d/0x220 [ 192.145799][ T8388] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.145821][ T8388] ? rcu_is_watching+0x12/0xc0 [ 192.145839][ T8388] do_syscall_64+0xcd/0x260 [ 192.145858][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.145873][ T8388] RIP: 0033:0x7fe99758d169 [ 192.145884][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.145898][ T8388] RSP: 002b:00007fe9983e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.145912][ T8388] RAX: ffffffffffffffda RBX: 00007fe9977a5fa0 RCX: 00007fe99758d169 [ 192.145922][ T8388] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 192.145930][ T8388] RBP: 00007fe9983e9090 R08: 0000000000000000 R09: 0000000000000000 [ 192.145939][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.145947][ T8388] R13: 0000000000000000 R14: 00007fe9977a5fa0 R15: 00007ffc991ccd08 [ 192.145963][ T8388] [ 192.164565][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 192.402645][ T8386] syz.2.670: attempt to access beyond end of device [ 192.402645][ T8386] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 192.465248][ T8399] netlink: 256 bytes leftover after parsing attributes in process `syz.2.670'. [ 192.475797][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 192.490005][ T5871] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 192.524371][ T8386] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 192.531983][ T8386] UDF-fs: Scanning with blocksize 512 failed [ 192.538783][ T8386] syz.2.670: attempt to access beyond end of device [ 192.538783][ T8386] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 192.551703][ T30] audit: type=1400 audit(1743009885.511:818): avc: denied { write } for pid=8407 comm="syz.4.676" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 192.631426][ T8386] syz.2.670: attempt to access beyond end of device [ 192.631426][ T8386] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 192.667383][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 192.686250][ T8386] syz.2.670: attempt to access beyond end of device [ 192.686250][ T8386] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 192.701069][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 192.711039][ T8386] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 192.718677][ T8386] UDF-fs: Scanning with blocksize 1024 failed [ 192.727964][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 192.734998][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.747209][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 92, changing to 7 [ 192.758525][ T8386] syz.2.670: attempt to access beyond end of device [ 192.758525][ T8386] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 192.771295][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17400, setting to 1024 [ 192.879390][ T5871] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.892102][ T8386] syz.2.670: attempt to access beyond end of device [ 192.892102][ T8386] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 192.907500][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.916509][ T5871] usb 1-1: Product: syz [ 192.921171][ T5871] usb 1-1: Manufacturer: syz [ 192.925771][ T5871] usb 1-1: SerialNumber: syz [ 192.935207][ T5871] usb 1-1: config 0 descriptor?? [ 193.017075][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 193.031819][ T5871] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.045295][ T5871] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 193.053510][ T8386] syz.2.670: attempt to access beyond end of device [ 193.053510][ T8386] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 193.068294][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 193.078588][ T8386] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 193.169232][ T8386] UDF-fs: Scanning with blocksize 2048 failed [ 193.197508][ T8386] syz.2.670: attempt to access beyond end of device [ 193.197508][ T8386] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 193.230060][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 193.251030][ T8386] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 193.276200][ T8386] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 193.307165][ T8386] UDF-fs: Scanning with blocksize 4096 failed [ 193.395348][ T8421] mmap: syz.1.680 (8421): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 193.412378][ T8386] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 193.434881][ T30] audit: type=1326 audit(1743009886.351:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.543851][ T30] audit: type=1326 audit(1743009886.351:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.567441][ T30] audit: type=1326 audit(1743009886.351:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.599918][ T30] audit: type=1326 audit(1743009886.351:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.644249][ T30] audit: type=1326 audit(1743009886.351:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.670181][ T30] audit: type=1326 audit(1743009886.351:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bc058bad0 code=0x7ffc0000 [ 193.694463][ T5871] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 193.697256][ T30] audit: type=1326 audit(1743009886.351:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.723817][ T30] audit: type=1326 audit(1743009886.351:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bc058d169 code=0x7ffc0000 [ 193.757253][ T5871] em28xx 1-1:0.0: Config register raw data: 0x56 [ 193.762898][ T8427] FAULT_INJECTION: forcing a failure. [ 193.762898][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 193.765355][ T8147] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 193.789414][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.795820][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.869744][ T8427] CPU: 0 UID: 0 PID: 8427 Comm: syz.2.683 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 193.869772][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.869783][ T8427] Call Trace: [ 193.869788][ T8427] [ 193.869795][ T8427] dump_stack_lvl+0x16c/0x1f0 [ 193.869821][ T8427] should_fail_ex+0x512/0x640 [ 193.869840][ T8427] should_failslab+0xc2/0x120 [ 193.869863][ T8427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 193.869881][ T8427] ? skb_clone+0x190/0x3f0 [ 193.869906][ T8427] skb_clone+0x190/0x3f0 [ 193.869928][ T8427] netlink_deliver_tap+0xabd/0xd30 [ 193.869952][ T8427] netlink_unicast+0x5df/0x7f0 [ 193.869975][ T8427] ? __pfx_netlink_unicast+0x10/0x10 [ 193.870014][ T8427] netlink_sendmsg+0x8da/0xd70 [ 193.870037][ T8427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.870065][ T8427] ____sys_sendmsg+0xa8d/0xc60 [ 193.870081][ T8427] ? copy_msghdr_from_user+0x10a/0x160 [ 193.870103][ T8427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.870133][ T8427] ___sys_sendmsg+0x134/0x1d0 [ 193.870156][ T8427] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.870201][ T8427] __sys_sendmsg+0x16d/0x220 [ 193.870223][ T8427] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.870250][ T8427] ? rcu_is_watching+0x12/0xc0 [ 193.870272][ T8427] do_syscall_64+0xcd/0x260 [ 193.870294][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.870310][ T8427] RIP: 0033:0x7f255c18d169 [ 193.870324][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.870340][ T8427] RSP: 002b:00007f255cfdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.870358][ T8427] RAX: ffffffffffffffda RBX: 00007f255c3a5fa0 RCX: 00007f255c18d169 [ 193.870370][ T8427] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 193.870379][ T8427] RBP: 00007f255cfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 193.870389][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.870399][ T8427] R13: 0000000000000000 R14: 00007f255c3a5fa0 R15: 00007ffe537091a8 [ 193.870419][ T8427] [ 194.569924][ T5871] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 194.577151][ T5871] em28xx 1-1:0.0: No AC97 audio processor [ 194.607530][ T5871] usb 1-1: USB disconnect, device number 27 [ 194.629430][ T5871] em28xx 1-1:0.0: Disconnecting em28xx [ 194.643519][ T5871] em28xx 1-1:0.0: Freeing device [ 194.711468][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.720620][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.849737][ T939] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 194.860699][ T8447] Invalid ELF header magic: != ELF [ 195.031853][ T939] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.040080][ T939] usb 4-1: config 0 has no interface number 0 [ 195.040244][ T6048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.046150][ T939] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.047637][ T939] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 195.076942][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.085533][ T939] usb 4-1: Product: syz [ 195.091227][ T939] usb 4-1: Manufacturer: syz [ 195.095831][ T939] usb 4-1: SerialNumber: syz [ 195.103931][ T939] usb 4-1: config 0 descriptor?? [ 195.113045][ T939] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 195.471023][ T5871] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 195.654790][ T939] usb 4-1: USB disconnect, device number 32 [ 195.666543][ T939] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 195.790507][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 195.803620][ T5871] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 8 [ 195.821917][ T5871] usb 1-1: config 1 interface 0 has no altsetting 0 [ 195.836952][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.848750][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.857091][ T5871] usb 1-1: Product: 劤ꯠ鼛ᨱᑺॄ诣됤锤峸慆஦⍸ [ 195.873622][ T5871] usb 1-1: Manufacturer: Д [ 195.878296][ T5871] usb 1-1: SerialNumber: й [ 195.884971][ T8450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 196.334088][ T8450] overlay: Unknown parameter 'euid>00000000000000000000' [ 196.356881][ T5871] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 196.389227][ T5871] usb 1-1: USB disconnect, device number 28 [ 196.694215][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.1.700'. [ 196.742546][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 196.742561][ T30] audit: type=1400 audit(1743009889.711:888): avc: denied { setopt } for pid=8478 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 196.845867][ T8484] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.702'. [ 196.930706][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.939212][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.952957][ T30] audit: type=1800 audit(1743009889.921:889): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.705" name="bus" dev="tmpfs" ino=848 res=0 errno=0 [ 197.149957][ T8479] delete_channel: no stack [ 197.175371][ T8479] delete_channel: no stack [ 197.289881][ T8479] delete_channel: no stack [ 197.294382][ T8479] delete_channel: no stack [ 197.298812][ T8479] delete_channel: no stack [ 197.303532][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 197.360131][ T8479] delete_channel: no stack [ 197.417736][ T8479] delete_channel: no stack [ 197.471229][ T8479] delete_channel: no stack [ 197.531181][ T8479] delete_channel: no stack [ 197.583651][ T8479] delete_channel: no stack [ 197.641729][ T8479] delete_channel: no stack [ 197.694702][ T8479] delete_channel: no stack [ 197.749428][ T8479] delete_channel: no stack [ 197.801532][ T8479] delete_channel: no stack [ 198.199164][ T8479] delete_channel: no stack [ 198.209579][ T8479] delete_channel: no stack [ 198.219400][ T8479] delete_channel: no stack [ 198.226500][ T8479] delete_channel: no stack [ 198.260308][ T8479] delete_channel: no stack [ 198.264778][ T8479] delete_channel: no stack [ 198.326144][ T8479] delete_channel: no stack [ 198.330847][ T8479] delete_channel: no stack [ 198.342998][ T8479] delete_channel: no stack [ 198.347527][ T8479] delete_channel: no stack [ 198.374948][ T8479] delete_channel: no stack [ 198.504030][ T8511] Falling back ldisc for ttyS3. [ 198.645843][ T8479] delete_channel: no stack [ 198.650395][ T30] audit: type=1400 audit(1743009891.611:890): avc: denied { sqpoll } for pid=8512 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 198.677286][ T8479] delete_channel: no stack [ 198.701632][ T8479] delete_channel: no stack [ 198.703665][ T8491] overlay: filesystem on ./file0 not supported [ 198.706168][ T8479] delete_channel: no stack [ 198.723672][ T30] audit: type=1400 audit(1743009891.641:891): avc: denied { read } for pid=8512 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.748891][ T8479] delete_channel: no stack [ 198.753695][ T8479] delete_channel: no stack [ 198.760840][ T8479] delete_channel: no stack [ 198.805140][ T30] audit: type=1400 audit(1743009891.671:892): avc: denied { mounton } for pid=8485 comm="syz.2.703" path="/142/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 198.846396][ T8479] delete_channel: no stack [ 199.852566][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.013359][ T8525] syz.0.710: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.032457][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.0.710 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 200.032473][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.032479][ T8525] Call Trace: [ 200.032484][ T8525] [ 200.032489][ T8525] dump_stack_lvl+0x16c/0x1f0 [ 200.032507][ T8525] warn_alloc+0x248/0x3a0 [ 200.032518][ T8525] ? __pfx_warn_alloc+0x10/0x10 [ 200.032530][ T8525] ? __get_vm_area_node+0x1b9/0x300 [ 200.032544][ T8525] ? __get_vm_area_node+0x1e5/0x300 [ 200.032560][ T8525] __vmalloc_node_range_noprof+0x1110/0x1540 [ 200.032579][ T8525] ? hash_ipport_create+0x843/0x1a20 [ 200.032594][ T8525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.032613][ T8525] __kvmalloc_node_noprof+0x2ff/0x600 [ 200.032630][ T8525] ? hash_ipport_create+0x843/0x1a20 [ 200.032641][ T8525] ? hash_ipport_create+0x843/0x1a20 [ 200.032654][ T8525] ? hash_ipport_create+0x843/0x1a20 [ 200.032665][ T8525] hash_ipport_create+0x843/0x1a20 [ 200.032679][ T8525] ? __pfx_hash_ipport_create+0x10/0x10 [ 200.032692][ T8525] ? __pfx_hash_ipport_create+0x10/0x10 [ 200.032704][ T8525] ? ip_set_create+0x7e1/0x14d0 [ 200.032719][ T8525] ? ip_set_create+0x6da/0x14d0 [ 200.032734][ T8525] ip_set_create+0x7e1/0x14d0 [ 200.032751][ T8525] ? __pfx_ip_set_create+0x10/0x10 [ 200.032773][ T8525] ? find_held_lock+0x2b/0x80 [ 200.032786][ T8525] nfnetlink_rcv_msg+0x9f9/0x1200 [ 200.032804][ T8525] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.032827][ T8525] ? avc_has_perm_noaudit+0x117/0x3b0 [ 200.032843][ T8525] netlink_rcv_skb+0x16a/0x440 [ 200.032856][ T8525] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.032871][ T8525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.032887][ T8525] ? bpf_lsm_capable+0x9/0x10 [ 200.032900][ T8525] ? security_capable+0x7e/0x260 [ 200.032914][ T8525] ? ns_capable+0xd7/0x110 [ 200.032926][ T8525] nfnetlink_rcv+0x1b3/0x430 [ 200.032940][ T8525] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 200.032953][ T8525] ? netlink_deliver_tap+0x1ae/0xd30 [ 200.032967][ T8525] netlink_unicast+0x53a/0x7f0 [ 200.032980][ T8525] ? __pfx_netlink_unicast+0x10/0x10 [ 200.032995][ T8525] netlink_sendmsg+0x8da/0xd70 [ 200.033009][ T8525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.033025][ T8525] ____sys_sendmsg+0xa8d/0xc60 [ 200.033035][ T8525] ? copy_msghdr_from_user+0x10a/0x160 [ 200.033048][ T8525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.033059][ T8525] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 200.033073][ T8525] ___sys_sendmsg+0x134/0x1d0 [ 200.033087][ T8525] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.033111][ T8525] __sys_sendmsg+0x16d/0x220 [ 200.033128][ T8525] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.033141][ T8525] ? __x64_sys_futex+0x1e0/0x4c0 [ 200.033156][ T8525] ? rcu_is_watching+0x12/0xc0 [ 200.033169][ T8525] do_syscall_64+0xcd/0x260 [ 200.033183][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.033194][ T8525] RIP: 0033:0x7f982098d169 [ 200.033203][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.033213][ T8525] RSP: 002b:00007f9821899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.033223][ T8525] RAX: ffffffffffffffda RBX: 00007f9820ba5fa0 RCX: 00007f982098d169 [ 200.033230][ T8525] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 200.033236][ T8525] RBP: 00007f9820a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.033242][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.033248][ T8525] R13: 0000000000000000 R14: 00007f9820ba5fa0 R15: 00007fff10754c88 [ 200.033259][ T8525] [ 200.033262][ T8525] Mem-Info: [ 200.382943][ T8525] active_anon:11874 inactive_anon:5 isolated_anon:0 [ 200.382943][ T8525] active_file:6067 inactive_file:41021 isolated_file:0 [ 200.382943][ T8525] unevictable:768 dirty:450 writeback:25 [ 200.382943][ T8525] slab_reclaimable:11782 slab_unreclaimable:104012 [ 200.382943][ T8525] mapped:33906 shmem:9194 pagetables:880 [ 200.382943][ T8525] sec_pagetables:0 bounce:0 [ 200.382943][ T8525] kernel_misc_reclaimable:0 [ 200.382943][ T8525] free:1270744 free_pcp:21089 free_cma:0 [ 200.428314][ T8525] Node 0 active_anon:47496kB inactive_anon:20kB active_file:24260kB inactive_file:164016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135616kB dirty:1788kB writeback:100kB shmem:35240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:3520kB sec_pagetables:0kB all_unreclaimable? no [ 200.460955][ T8525] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 200.491135][ T8525] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.518133][ T8525] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 200.523857][ T8525] Node 0 DMA32 free:1182580kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:47472kB inactive_anon:20kB active_file:24260kB inactive_file:162204kB unevictable:1536kB writepending:1788kB present:3129332kB managed:2544960kB mlocked:0kB bounce:0kB free_pcp:61116kB local_pcp:60060kB free_cma:0kB [ 200.554637][ T8525] lowmem_reserve[]: 0 0 1 1 1 [ 200.559347][ T8525] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 200.586707][ T8525] lowmem_reserve[]: 0 0 0 0 0 [ 200.591414][ T8525] Node 1 Normal free:3885008kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:68kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23204kB local_pcp:9484kB free_cma:0kB [ 200.620794][ T8525] lowmem_reserve[]: 0 0 0 0 0 [ 200.625481][ T8525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.638075][ T8525] Node 0 DMA32: 8*4kB (UE) 29*8kB (UME) 43*16kB (UME) 26*32kB (UME) 176*64kB (UME) 48*128kB (UME) 30*256kB (UME) 19*512kB (UME) 13*1024kB (UM) 9*2048kB (UM) 272*4096kB (UM) = 1182456kB [ 200.656321][ T8525] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 200.668901][ T8525] Node 1 Normal: 5*4kB (UME) 8*8kB (UME) 11*16kB (UE) 24*32kB (UME) 78*64kB (UE) 33*128kB (UE) 14*256kB (UE) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (UME) 942*4096kB (UM) = 3885060kB [ 200.686631][ T8525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.696159][ T8525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.705423][ T8525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.714942][ T8525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.724212][ T8525] 53955 total pagecache pages [ 200.728855][ T8525] 30 pages in swap cache [ 200.733084][ T8525] Free swap = 124336kB [ 200.737208][ T8525] Total swap = 124996kB [ 200.741348][ T8525] 2097051 pages RAM [ 200.745130][ T8525] 0 pages HighMem/MovableOnly [ 200.749781][ T8525] 428705 pages reserved [ 200.753904][ T8525] 0 pages cma reserved [ 200.828516][ T8525] syz.0.710 (8525) used greatest stack depth: 19768 bytes left [ 200.846455][ T6071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.909696][ T30] audit: type=1400 audit(1743009893.871:893): avc: denied { read } for pid=8527 comm="syz.4.711" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.225570][ T8543] kvm: pic: non byte read [ 201.234846][ T8543] kvm: pic: non byte read [ 201.271911][ T8543] kvm: pic: non byte read [ 201.330391][ T8543] kvm: pic: single mode not supported [ 201.330511][ T8543] kvm: pic: level sensitive irq not supported [ 201.383018][ T8543] kvm: pic: non byte read [ 201.618207][ T30] audit: type=1400 audit(1743010150.558:894): avc: denied { connect } for pid=8554 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.069841][ T5871] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 202.082201][ T8567] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 202.151076][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 202.233138][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 202.249418][ T5871] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 202.267531][ T5871] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 202.292437][ T5871] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 202.319728][ T5871] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.401087][ T5871] usb 1-1: config 0 has no interface number 0 [ 202.427684][ T5871] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 202.444844][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 202.446216][ T30] audit: type=1400 audit(1743010151.408:895): avc: denied { bind } for pid=8577 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.477708][ T5871] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 202.508605][ T5871] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.518068][ T30] audit: type=1800 audit(1743010151.458:896): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.725" name="bus" dev="tmpfs" ino=878 res=0 errno=0 [ 202.521199][ T5871] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.615547][ T8587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.724'. [ 202.626309][ T5871] usb 1-1: New USB device found, idVendor=00cd, idProduct=0800, bcdDevice= 5.b9 [ 202.636964][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.647255][ T5871] usb 1-1: config 0 descriptor?? [ 202.667514][ T5871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.685619][ T5871] usb 1-1: MIDIStreaming interface descriptor not found [ 202.769806][ T939] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 202.877242][ T9] usb 1-1: USB disconnect, device number 29 [ 202.949743][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 202.958133][ T939] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 202.969591][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.979033][ T939] usb 5-1: Product: syz [ 202.984051][ T939] usb 5-1: Manufacturer: syz [ 202.988808][ T939] usb 5-1: SerialNumber: syz [ 203.002770][ T939] usb 5-1: config 0 descriptor?? [ 203.013263][ T939] as10x_usb: device has been detected [ 203.023800][ T939] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 203.062708][ T939] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 203.102260][ T939] as10x_usb: error during firmware upload part1 [ 203.116194][ T939] Registered device Sky IT Digital Key (green led) [ 204.395156][ T8610] lo speed is unknown, defaulting to 1000 [ 204.412309][ T8610] lo speed is unknown, defaulting to 1000 [ 204.427315][ T8612] netlink: 'syz.3.732': attribute type 9 has an invalid length. [ 204.436726][ T8610] lo speed is unknown, defaulting to 1000 [ 204.442564][ T8612] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.732'. [ 204.480637][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 204.567627][ T5906] lo speed is unknown, defaulting to 1000 [ 204.576803][ T8610] infiniband sz1: set active [ 204.635384][ T8610] infiniband sz1: added lo [ 204.645119][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 204.673203][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.686527][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 204.697623][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.709313][ T8610] RDS/IB: sz1: added [ 204.721018][ T30] audit: type=1400 audit(1743010153.688:897): avc: denied { setopt } for pid=8615 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.721363][ T8610] smc: adding ib device sz1 with port count 1 [ 204.773390][ T9] usb 1-1: config 0 descriptor?? [ 204.800326][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 204.819819][ T5912] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 204.835330][ T8610] smc: ib device sz1 port 1 has pnetid [ 204.845841][ T5906] lo speed is unknown, defaulting to 1000 [ 204.859219][ T8610] lo speed is unknown, defaulting to 1000 [ 204.972838][ T30] audit: type=1400 audit(1743010153.938:898): avc: denied { ioctl } for pid=8617 comm="syz.2.734" path="socket:[20291]" dev="sockfs" ino=20291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.973334][ T8610] lo speed is unknown, defaulting to 1000 [ 205.024163][ T5912] usb 4-1: not running at top speed; connect to a high speed hub [ 205.033858][ T5912] usb 4-1: config 18 has an invalid interface number: 69 but max is 0 [ 205.050152][ T5912] usb 4-1: config 18 contains an unexpected descriptor of type 0x2, skipping [ 205.054461][ T30] audit: type=1400 audit(1743010153.978:899): avc: denied { getopt } for pid=8617 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.059092][ T9] gspca_vc032x: reg_r err -71 [ 205.118769][ T5912] usb 4-1: config 18 contains an unexpected descriptor of type 0x2, skipping [ 205.145995][ T5912] usb 4-1: config 18 has no interface number 0 [ 205.158209][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 205.167484][ T5912] usb 4-1: config 18 interface 69 altsetting 13 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 205.183891][ T9] usb 1-1: USB disconnect, device number 30 [ 205.190122][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 205.196794][ T8610] lo speed is unknown, defaulting to 1000 [ 205.202863][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 205.217822][ T5912] usb 4-1: config 18 interface 69 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 205.235404][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 205.254433][ T5912] usb 4-1: config 18 interface 69 altsetting 13 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 205.292216][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 205.300953][ T30] audit: type=1326 audit(1743010154.258:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982098d169 code=0x7ffc0000 [ 205.326507][ T5912] usb 4-1: config 18 interface 69 altsetting 13 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 205.347563][ T5906] usb 5-1: USB disconnect, device number 31 [ 205.361449][ T5906] Unregistered device Sky IT Digital Key (green led) [ 205.362160][ T5906] as10x_usb: device has been disconnected [ 205.428796][ T30] audit: type=1326 audit(1743010154.258:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f982098d169 code=0x7ffc0000 [ 205.467327][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 205.538085][ T30] audit: type=1326 audit(1743010154.258:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982098d169 code=0x7ffc0000 [ 205.564347][ T8628] syzkaller0: entered promiscuous mode [ 205.572968][ T5912] usb 4-1: config 18 interface 69 altsetting 13 endpoint 0x5 has invalid maxpacket 1088, setting to 64 [ 205.609105][ T8628] syzkaller0: entered allmulticast mode [ 205.615697][ T5912] usb 4-1: config 18 interface 69 altsetting 13 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 205.634404][ T5912] usb 4-1: config 18 interface 69 has no altsetting 0 [ 205.652589][ T8610] lo speed is unknown, defaulting to 1000 [ 205.687575][ T5912] usb 4-1: New USB device found, idVendor=12d1, idProduct=4bd2, bcdDevice=60.9a [ 205.723315][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.728150][ T30] audit: type=1326 audit(1743010154.258:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f982098d169 code=0x7ffc0000 [ 205.733655][ T5912] usb 4-1: Product: 奌 [ 205.777450][ T5912] usb 4-1: Manufacturer: ч [ 205.788007][ T30] audit: type=1326 audit(1743010154.258:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.0.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982098d169 code=0x7ffc0000 [ 205.793296][ T5912] usb 4-1: SerialNumber: ꀺ毺䅮큈ᩍ⦝㣤꧗㼞勣뀲逪彗☫譁괯읍탪⫌쒖끥쯹 [ 205.921372][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.921372][ T6238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.129044][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 206.168310][ T8612] netlink: 52 bytes leftover after parsing attributes in process `syz.3.732'. [ 206.937390][ T8610] lo speed is unknown, defaulting to 1000 [ 206.945901][ T5912] option 4-1:18.69: GSM modem (1-port) converter detected [ 206.956486][ T5912] usb 4-1: USB disconnect, device number 33 [ 206.971419][ T5912] option 4-1:18.69: device disconnected [ 207.254607][ T9] IPVS: starting estimator thread 0... [ 207.302961][ T8642] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.739'. [ 207.350004][ T8640] IPVS: using max 54 ests per chain, 129600 per kthread [ 207.368940][ T8635] lo speed is unknown, defaulting to 1000 [ 207.626188][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.634618][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.697589][ T8648] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 207.784351][ T8648] VFS: Can't find a romfs filesystem on dev nullb0. [ 207.784351][ T8648] [ 207.953858][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 207.953872][ T30] audit: type=1400 audit(1743010156.918:941): avc: denied { create } for pid=8654 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 209.199949][ T52] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 209.390718][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 209.397510][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.408573][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.420001][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.632043][ T5912] IPVS: starting estimator thread 0... [ 209.770544][ T8682] IPVS: using max 34 ests per chain, 81600 per kthread [ 209.844259][ T52] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.854038][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.867797][ T52] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.877059][ T52] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.885167][ T52] usb 5-1: Manufacturer: syz [ 209.891256][ T52] usb 5-1: config 0 descriptor?? [ 210.242452][ T52] rc_core: IR keymap rc-hauppauge not found [ 210.249043][ T52] Registered IR keymap rc-empty [ 210.254615][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.281640][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.300634][ T52] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.315225][ T52] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 210.333865][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.360243][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.380701][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.396433][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.412605][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.425711][ C1] mceusb 5-1:0.0: long-range (0xf1) receiver active [ 210.452949][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.500587][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.532682][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.559936][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.853549][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.880155][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.899742][ T52] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.912867][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.923920][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.930332][ T52] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.943130][ T52] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xf1 active) [ 210.955064][ T52] usb 5-1: USB disconnect, device number 32 [ 210.962571][ T6238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.360124][ T5826] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 211.550062][ T5826] usb 4-1: device descriptor read/64, error -71 [ 211.680125][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.299783][ T5826] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 212.439861][ T5826] usb 4-1: device descriptor read/64, error -71 [ 212.986523][ T5826] usb usb4-port1: attempt power cycle [ 213.146306][ T8743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.329823][ T5826] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 213.390157][ T5826] usb 4-1: device descriptor read/8, error -71 [ 214.044206][ T5826] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 214.099925][ T5826] usb 4-1: device descriptor read/8, error -71 [ 214.103372][ T8758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.768'. [ 214.116791][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 214.613854][ T5826] usb usb4-port1: unable to enumerate USB device [ 215.156302][ T8771] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.772'. [ 215.951580][ T8782] cgroup: Need name or subsystem set [ 216.074937][ T30] audit: type=1800 audit(1743010165.038:942): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.776" name="bus" dev="tmpfs" ino=836 res=0 errno=0 [ 216.160051][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.178496][ T30] audit: type=1800 audit(1743010165.138:943): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.778" name="bus" dev="tmpfs" ino=757 res=0 errno=0 [ 216.432926][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 216.443270][ T8803] netlink: 46603 bytes leftover after parsing attributes in process `syz.1.781'. [ 216.518726][ T30] audit: type=1400 audit(1743010165.478:944): avc: denied { write } for pid=8804 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.839347][ T5906] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 217.443204][ T5906] usb 4-1: device descriptor read/64, error -71 [ 217.443593][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.572528][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.619865][ T5826] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 217.650246][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.725834][ T8837] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 217.740434][ T8837] cramfs: wrong magic [ 217.769847][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 217.778782][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 217.794322][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.805922][ T5826] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 217.817415][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.827516][ T5826] usb 1-1: Product: syz [ 217.831993][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 217.834277][ T5826] usb 1-1: Manufacturer: syz [ 217.844525][ T5826] usb 1-1: SerialNumber: syz [ 217.968233][ T5826] usb 1-1: config 0 descriptor?? [ 217.975723][ T8846] bridge0: port 3(team0) entered blocking state [ 217.982166][ T8846] bridge0: port 3(team0) entered disabled state [ 217.988871][ T8846] team0: entered allmulticast mode [ 217.994055][ T8846] team_slave_0: entered allmulticast mode [ 217.999832][ T8846] team_slave_1: entered allmulticast mode [ 218.009796][ T5906] usb 4-1: device descriptor read/64, error -71 [ 218.009938][ T8846] team0: entered promiscuous mode [ 218.021228][ T8846] team_slave_0: entered promiscuous mode [ 218.027500][ T8846] team_slave_1: entered promiscuous mode [ 218.045155][ T8846] bridge0: port 3(team0) entered blocking state [ 218.051453][ T8846] bridge0: port 3(team0) entered forwarding state [ 218.078575][ T5826] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 218.333188][ T5906] usb usb4-port1: attempt power cycle [ 218.396151][ T30] audit: type=1800 audit(1743010167.358:945): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.793" name="bus" dev="tmpfs" ino=886 res=0 errno=0 [ 218.689745][ T5906] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 218.710344][ T5906] usb 4-1: device descriptor read/8, error -71 [ 218.728435][ T8866] team0: No ports can be present during mode change [ 219.089758][ T5906] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 219.110217][ T5906] usb 4-1: device descriptor read/8, error -71 [ 219.220191][ T5906] usb usb4-port1: unable to enumerate USB device [ 219.306326][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 219.459733][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 219.466031][ T9] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 219.474486][ T9] usb 5-1: config 0 has no interface number 0 [ 219.483538][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 219.492800][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.509701][ T9] usb 5-1: Product: syz [ 219.513948][ T9] usb 5-1: Manufacturer: syz [ 219.518542][ T9] usb 5-1: SerialNumber: syz [ 219.529240][ T5906] usb 1-1: USB disconnect, device number 31 [ 219.536545][ T9] usb 5-1: config 0 descriptor?? [ 219.641672][ T30] audit: type=1400 audit(1743010168.608:946): avc: denied { append } for pid=8888 comm="syz.2.804" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.660737][ T8890] 9pnet_fd: Insufficient options for proto=fd [ 219.671406][ T8889] 9pnet_fd: Insufficient options for proto=fd [ 219.678785][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 219.769211][ T30] audit: type=1800 audit(1743010168.728:947): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.806" name="bus" dev="tmpfs" ino=921 res=0 errno=0 [ 219.962084][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.976719][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.014964][ T9] usb 5-1: USB disconnect, device number 33 [ 220.016856][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 220.045458][ T8915] overlayfs: failed to clone upperpath [ 220.064926][ T30] audit: type=1400 audit(1743010169.028:948): avc: denied { accept } for pid=8914 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 220.125239][ T8919] fuse: Bad value for 'group_id' [ 220.130571][ T8919] fuse: Bad value for 'group_id' [ 220.178160][ T30] audit: type=1400 audit(1743010169.138:949): avc: denied { wake_alarm } for pid=8925 comm="syz.1.815" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.274794][ T30] audit: type=1400 audit(1743010169.238:950): avc: denied { bind } for pid=8927 comm="syz.1.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.364603][ T30] audit: type=1800 audit(1743010169.328:951): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.818" name="bus" dev="tmpfs" ino=859 res=0 errno=0 [ 220.859245][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.871221][ T8952] vlan3: entered allmulticast mode [ 220.876355][ T8952] bridge0: entered allmulticast mode [ 221.288472][ T66] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.565338][ T8965] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.827'. [ 221.648757][ T30] audit: type=1400 audit(1743010170.608:952): avc: denied { append } for pid=8953 comm="syz.3.824" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 221.714580][ T30] audit: type=1800 audit(1743010170.678:953): pid=8970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.830" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 221.949759][ T30] audit: type=1326 audit(1743010170.908:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 221.992154][ T30] audit: type=1326 audit(1743010170.908:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.015351][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.039132][ T30] audit: type=1326 audit(1743010170.948:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.062345][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.126008][ T30] audit: type=1326 audit(1743010170.948:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.149824][ T30] audit: type=1326 audit(1743010170.948:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.173166][ T5822] Bluetooth: hci5: command 0x1003 tx timeout [ 222.180503][ T30] audit: type=1326 audit(1743010170.948:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.203725][ T30] audit: type=1326 audit(1743010170.948:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.3.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cbc58d169 code=0x7ffc0000 [ 222.225989][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 222.226905][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.269980][ T30] audit: type=1400 audit(1743010171.228:961): avc: denied { accept } for pid=8972 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.450143][ T9] IPVS: starting estimator thread 0... [ 222.570367][ T8985] IPVS: using max 43 ests per chain, 103200 per kthread [ 222.908093][ T8990] lo speed is unknown, defaulting to 1000 [ 222.950487][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 223.029087][ T9002] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.840'. [ 223.203658][ T5826] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 223.204489][ T6071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.811462][ T5826] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 223.820162][ T5826] usb 5-1: config 0 has no interface number 0 [ 223.826330][ T5826] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.866785][ T5826] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 223.943948][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.966931][ T5826] usb 5-1: Product: syz [ 223.971260][ T5826] usb 5-1: Manufacturer: syz [ 223.975855][ T5826] usb 5-1: SerialNumber: syz [ 224.006676][ T5826] usb 5-1: config 0 descriptor?? [ 224.037521][ T5826] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 224.193641][ T9] kernel write not supported for file /585/attr/exec (pid: 9 comm: kworker/0:0) [ 224.210063][ T9036] QAT: Invalid ioctl 21531 [ 224.357908][ T5826] usb 5-1: USB disconnect, device number 34 [ 224.365713][ T5826] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 225.382479][ T9057] 9pnet: p9_errstr2errno: server reported unknown error # audit_backlog_limit=64 [ 278.146512][T10250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 278.157127][T10248] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_sendpsmmsg: Connection ref[ 279.232734][T10296] ERROR: device name not specified. used Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_root_recvmsgcb: failed to send message to pid 8773: Connection refused [ 279.374972][T10304] xt_policy: output policy not valid in PREROUTING and INPUT Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_sendpsmmsg: Connection refused Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_root_recvmsgcb: failed to send message to pid 8767: Connection refused Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_sendpsmmsg: Connection refused Mar 26 17:30:28 syzkaller daemon.err dhcpcd[5487]: ps_root_recvmsgcb: failed to send message to pid 8781: Connection refused [ 280.161658][ T2110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Mar 26 17:30:30 syzkaller daemon.err dhcpcd[5487]: ps_sendpsmmsg: Connection refused Mar 26 17:30:30 syzkaller daemon.err dhcpcd[5487]: ps_root_recvmsgcb: failed to send message to pid 8813: Connection refused [ 281.957683][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 281.964305][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 282.055535][T10408] ceph: No mds server is up or the cluster is laggy [ 282.337741][ T30] kauditd_printk_skb: 377 callbacks suppressed [ 282.337757][ T30] audit: type=1400 audit(1743010231.298:1528): avc: denied { mounton } for pid=10421 comm="syz.1.1268" path="/304" dev="tmpfs" ino=1686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 282.367466][ T30] audit: type=1400 audit(1743010231.328:1529): avc: denied { create } for pid=10421 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 282.423834][ T30] audit: type=1400 audit(1743010231.388:1530): avc: denied { prog_load } for pid=10425 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.446650][ T30] audit: type=1400 audit(1743010231.418:1531): avc: denied { map_create } for pid=10425 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.466937][ T30] audit: type=1400 audit(1743010231.438:1532): avc: denied { create } for pid=10425 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 282.495253][ T30] audit: type=1400 audit(1743010231.438:1533): avc: denied { prog_load } for pid=10425 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.523997][ T30] audit: type=1400 audit(1743010231.438:1534): avc: denied { prog_load } for pid=10425 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.543236][ T30] audit: type=1400 audit(1743010231.488:1535): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 282.575787][ T30] audit: type=1400 audit(1743010231.538:1536): avc: denied { mounton } for pid=10428 comm="syz.1.1271" path="/307/file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 282.634412][ T30] audit: type=1400 audit(1743010231.538:1537): avc: denied { map_create } for pid=10428 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.719882][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.412571][T10478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10478 comm=syz.1.1291 [ 285.412616][T10596] lo speed is unknown, defaulting to 1000 [ 285.921847][ T6238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.375943][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 287.375956][ T30] audit: type=1400 audit(1743010236.338:1932): avc: denied { read write } for pid=5820 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 287.484426][ T30] audit: type=1400 audit(1743010236.408:1933): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 287.613179][ T30] audit: type=1400 audit(1743010236.448:1934): avc: denied { create } for pid=10653 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 287.642054][ T30] audit: type=1400 audit(1743010236.478:1935): avc: denied { read } for pid=10654 comm="syz.2.1358" dev="nsfs" ino=4026533115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 287.879723][ T30] audit: type=1400 audit(1743010236.488:1936): avc: denied { execmem } for pid=10654 comm="syz.2.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 287.899144][ T30] audit: type=1400 audit(1743010236.488:1937): avc: denied { create } for pid=10653 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 287.919092][ T30] audit: type=1400 audit(1743010236.488:1938): avc: denied { prog_load } for pid=10653 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 287.938357][ T30] audit: type=1400 audit(1743010236.488:1939): avc: denied { read } for pid=10653 comm="syz.4.1357" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 287.974637][ T30] audit: type=1400 audit(1743010236.488:1940): avc: denied { read append } for pid=10653 comm="syz.4.1357" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 288.003084][ T30] audit: type=1400 audit(1743010236.538:1941): avc: denied { create } for pid=10653 comm="syz.4.1357" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 288.490588][ T6238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.556039][T10696] lo speed is unknown, defaulting to 1000 [ 290.074293][T10759] sp0: Synchronizing with TNC [ 290.195764][T10763] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 291.680046][ T9571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.072685][T10854] lo speed is unknown, defaulting to 1000 [ 292.383167][ T30] kauditd_printk_skb: 460 callbacks suppressed [ 292.383182][ T30] audit: type=1400 audit(1743010241.348:2402): avc: denied { create } for pid=10870 comm="syz.2.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 292.412325][ T30] audit: type=1400 audit(1743010241.378:2403): avc: denied { read write } for pid=10870 comm="syz.2.1431" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 292.436235][ T30] audit: type=1400 audit(1743010241.398:2404): avc: denied { mounton } for pid=10870 comm="syz.2.1431" path="/296/file0" dev="tmpfs" ino=1623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 292.484666][ T30] audit: type=1400 audit(1743010241.398:2405): avc: denied { create } for pid=10870 comm="syz.2.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 292.507030][ T30] audit: type=1400 audit(1743010241.418:2406): avc: denied { prog_load } for pid=10867 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 292.526362][ T30] audit: type=1400 audit(1743010241.428:2407): avc: denied { execmem } for pid=10867 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 292.555274][ T30] audit: type=1400 audit(1743010241.428:2408): avc: denied { read write } for pid=10867 comm="syz.0.1430" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 292.578851][ T30] audit: type=1400 audit(1743010241.428:2409): avc: denied { mounton } for pid=10867 comm="syz.0.1430" path="/222/file0" dev="tmpfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 292.609822][ T30] audit: type=1400 audit(1743010241.428:2410): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 292.652116][ T30] audit: type=1400 audit(1743010241.468:2411): avc: denied { prog_load } for pid=10878 comm="syz.2.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 293.782725][T10966] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 294.240007][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.800832][ T6733] sched: DL replenish lagged too much [ 399.729599][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 399.736566][ C0] rcu: 1-...!: (1 GPs behind) idle=3cb4/1/0x4000000000000000 softirq=42644/42646 fqs=134 [ 399.747254][ C0] rcu: (detected by 0, t=10502 jiffies, g=30361, q=199 ncpus=2) [ 399.754967][ C0] Sending NMI from CPU 0 to CPUs 1: [ 399.754992][ C1] NMI backtrace for cpu 1 [ 399.755003][ C1] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 399.755019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.755027][ C1] RIP: 0010:__kasan_check_byte+0xa/0x50 [ 399.755045][ C1] Code: e9 89 fe ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 54 49 89 f4 55 <48> 89 fd 53 e8 0d 1f 00 00 89 c3 84 c0 74 0b 89 d8 5b 5d 41 5c c3 [ 399.755056][ C1] RSP: 0018:ffffc90000a08da0 EFLAGS: 00000002 [ 399.755067][ C1] RAX: 0000000000000001 RBX: ffff8880b8527858 RCX: 0000000000000000 [ 399.755075][ C1] RDX: 0000000000000000 RSI: ffffffff8b603266 RDI: ffff8880b8527858 [ 399.755083][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 399.755090][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8b603266 [ 399.755097][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.755104][ C1] FS: 000055555862d500(0000) GS:ffff888124b54000(0000) knlGS:0000000000000000 [ 399.755117][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.755125][ C1] CR2: 00007fe9983a6f98 CR3: 0000000067ad6000 CR4: 00000000003526f0 [ 399.755133][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.755140][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.755148][ C1] Call Trace: [ 399.755153][ C1] [ 399.755159][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 399.755180][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 399.755192][ C1] ? nmi_handle.part.0+0x1a7/0x5d0 [ 399.755206][ C1] ? nmi_handle+0x86/0xc0 [ 399.755217][ C1] ? __kasan_check_byte+0xa/0x50 [ 399.755229][ C1] ? default_do_nmi+0x6a/0x160 [ 399.755246][ C1] ? exc_nmi+0x170/0x1e0 [ 399.755261][ C1] ? end_repeat_nmi+0xf/0x53 [ 399.755274][ C1] ? _raw_spin_lock_irq+0x36/0x50 [ 399.755287][ C1] ? _raw_spin_lock_irq+0x36/0x50 [ 399.755297][ C1] ? __kasan_check_byte+0xa/0x50 [ 399.755309][ C1] ? __kasan_check_byte+0xa/0x50 [ 399.755321][ C1] ? __kasan_check_byte+0xa/0x50 [ 399.755333][ C1] [ 399.755337][ C1] [ 399.755341][ C1] lock_acquire+0xfc/0x350 [ 399.755359][ C1] _raw_spin_lock_irq+0x36/0x50 [ 399.755369][ C1] ? __hrtimer_run_queues+0x2bc/0xad0 [ 399.755382][ C1] __hrtimer_run_queues+0x2bc/0xad0 [ 399.755395][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 399.755405][ C1] ? read_tsc+0x9/0x20 [ 399.755423][ C1] hrtimer_interrupt+0x397/0x8e0 [ 399.755438][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 399.755452][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 399.755465][ C1] [ 399.755468][ C1] [ 399.755473][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.755485][ C1] RIP: 0010:__page_table_check_ptes_set+0x3c/0x3e0 [ 399.755499][ C1] Code: 55 48 bd 00 00 00 00 00 fc ff df 53 48 89 f3 48 83 ec 70 48 c7 44 24 10 b3 8a b5 41 4c 8d 7c 24 10 48 c7 44 24 18 51 b5 b9 8d <49> c1 ef 03 48 c7 44 24 20 d0 47 2a 82 49 8d 04 2f c7 00 f1 f1 f1 [ 399.755510][ C1] RSP: 0018:ffffc9000434f6e8 EFLAGS: 00000286 [ 399.755519][ C1] RAX: 0000000000000000 RBX: ffff888036076b38 RCX: 0000000000000001 [ 399.755527][ C1] RDX: 80000000744e2007 RSI: ffff888036076b38 RDI: ffff888029c11e00 [ 399.755535][ C1] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000 [ 399.755542][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 399.755549][ C1] R13: ffff888029c11e00 R14: dffffc0000000000 R15: ffffc9000434f6f8 [ 399.755561][ C1] ? __page_table_check_ptes_set+0x16a/0x3e0 [ 399.755573][ C1] ? vm_normal_page+0x13b/0x2b0 [ 399.755589][ C1] ? __pfx_vm_normal_page+0x10/0x10 [ 399.755603][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.755616][ C1] copy_page_range+0x20e7/0x5790 [ 399.755639][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 399.755656][ C1] ? __pfx___might_resched+0x10/0x10 [ 399.755671][ C1] ? __pfx_mas_store+0x10/0x10 [ 399.755686][ C1] ? copy_process+0x8604/0x9130 [ 399.755702][ C1] ? down_write+0x14d/0x200 [ 399.755717][ C1] ? up_write+0x1b2/0x520 [ 399.755734][ C1] copy_process+0x8651/0x9130 [ 399.755753][ C1] ? __pfx_copy_process+0x10/0x10 [ 399.755770][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 399.755781][ C1] ? ___pte_offset_map+0x1bc/0x540 [ 399.755797][ C1] kernel_clone+0xfc/0x960 [ 399.755811][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 399.755828][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 399.755844][ C1] __do_sys_clone+0xce/0x120 [ 399.755858][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 399.755872][ C1] ? do_user_addr_fault+0xde3/0x1430 [ 399.755889][ C1] ? do_user_addr_fault+0x850/0x1430 [ 399.755907][ C1] do_syscall_64+0xcd/0x260 [ 399.755922][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.755934][ C1] RIP: 0033:0x7f0bc05839d3 [ 399.755943][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 399.755954][ C1] RSP: 002b:00007ffdff5ea518 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 399.755965][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0bc05839d3 [ 399.755972][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 399.755980][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 399.755986][ C1] R10: 000055555862d7d0 R11: 0000000000000246 R12: 0000000000000000 [ 399.755994][ C1] R13: 00000000000927c0 R14: 0000000000047f07 R15: 00007ffdff5ea6b0 [ 399.756005][ C1] [ 399.756986][ C0] rcu: rcu_preempt kthread starved for 7591 jiffies! g30361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 400.308922][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 400.318880][ C0] rcu: RCU grace-period kthread stack dump: [ 400.324751][ C0] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 400.338235][ C0] Call Trace: [ 400.341501][ C0] [ 400.344423][ C0] __schedule+0x1129/0x5c00 [ 400.348938][ C0] ? __pfx___schedule+0x10/0x10 [ 400.353780][ C0] ? find_held_lock+0x2b/0x80 [ 400.358447][ C0] ? schedule+0x2d7/0x3a0 [ 400.362770][ C0] schedule+0xe7/0x3a0 [ 400.366828][ C0] schedule_timeout+0x123/0x280 [ 400.371674][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 400.377041][ C0] ? __pfx_process_timeout+0x10/0x10 [ 400.382321][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 400.388116][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 400.393642][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 400.398430][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 400.403726][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 400.408578][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 400.414389][ C0] rcu_gp_kthread+0x270/0x380 [ 400.419068][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.424260][ C0] ? rcu_is_watching+0x12/0xc0 [ 400.429015][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 400.434206][ C0] ? __kthread_parkme+0x148/0x220 [ 400.439226][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 400.444416][ C0] kthread+0x3a4/0x760 [ 400.448475][ C0] ? __pfx_kthread+0x10/0x10 [ 400.453051][ C0] ? __pfx_kthread+0x10/0x10 [ 400.457626][ C0] ? __pfx_kthread+0x10/0x10 [ 400.462215][ C0] ? __pfx_kthread+0x10/0x10 [ 400.466812][ C0] ? rcu_is_watching+0x12/0xc0 [ 400.471582][ C0] ? __pfx_kthread+0x10/0x10 [ 400.476170][ C0] ret_from_fork+0x45/0x80 [ 400.480578][ C0] ? __pfx_kthread+0x10/0x10 [ 400.485157][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.489932][ C0] [ 400.492942][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 400.499249][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 400.510521][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.520562][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 400.525859][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 50 00 3f 08 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 fb a0 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 400.545556][ C0] RSP: 0018:ffffffff8e007d68 EFLAGS: 00000246 [ 400.551620][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b5da2f9 [ 400.559584][ C0] RDX: 0000000000000001 RSI: ffff8881442d9000 RDI: ffff8881442d9064 [ 400.567542][ C0] RBP: ffff8881442d9064 R08: 0000000000000001 R09: ffffed10170865bd [ 400.575503][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: ffff88801eb0f800 [ 400.583461][ C0] R13: ffffffff8f02dae0 R14: 0000000000000000 R15: 0000000000000000 [ 400.591419][ C0] FS: 0000000000000000(0000) GS:ffff888124a54000(0000) knlGS:0000000000000000 [ 400.600338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.606910][ C0] CR2: 00007f58d6613c9a CR3: 0000000067ad0000 CR4: 00000000003526f0 [ 400.614878][ C0] DR0: 0000000100000000 DR1: 0000000000000040 DR2: 0000000000000000 [ 400.622839][ C0] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.631247][ C0] Call Trace: [ 400.634518][ C0] [ 400.637354][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 400.643676][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 400.648867][ C0] ? rcu_sched_clock_irq+0x22b9/0x2fe0 [ 400.654340][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 400.659972][ C0] ? find_held_lock+0x2b/0x80 [ 400.664640][ C0] ? find_held_lock+0x2b/0x80 [ 400.669305][ C0] ? timekeeping_advance+0x72f/0xa90 [ 400.674587][ C0] ? rcu_is_watching+0x12/0xc0 [ 400.679340][ C0] ? update_process_times+0x178/0x2d0 [ 400.684707][ C0] ? __pfx_update_process_times+0x10/0x10 [ 400.690421][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 400.695886][ C0] ? update_wall_time+0x1c/0x40 [ 400.700730][ C0] ? tick_nohz_handler+0x37e/0x540 [ 400.705832][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 400.711022][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 400.716469][ C0] ? __hrtimer_run_queues+0x5ea/0xad0 [ 400.721834][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 400.727541][ C0] ? read_tsc+0x9/0x20 [ 400.731611][ C0] ? hrtimer_interrupt+0x397/0x8e0 [ 400.736718][ C0] ? __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 400.742863][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 400.748667][ C0] [ 400.751588][ C0] [ 400.754507][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.760654][ C0] ? ct_kernel_exit+0x139/0x190 [ 400.765495][ C0] ? acpi_safe_halt+0x1a/0x20 [ 400.770166][ C0] acpi_idle_enter+0xc5/0x160 [ 400.774840][ C0] cpuidle_enter_state+0xb2/0x500 [ 400.779864][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 400.785663][ C0] cpuidle_enter+0x4e/0xa0 [ 400.790075][ C0] do_idle+0x378/0x510 [ 400.794138][ C0] ? __pfx_do_idle+0x10/0x10 [ 400.798718][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 400.804696][ C0] cpu_startup_entry+0x4f/0x60 [ 400.809453][ C0] rest_init+0x16b/0x2b0 [ 400.813690][ C0] ? acpi_subsystem_init+0x133/0x180 [ 400.818970][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 400.824509][ C0] start_kernel+0x3e9/0x4d0 [ 400.829005][ C0] x86_64_start_reservations+0x18/0x30 [ 400.834456][ C0] x86_64_start_kernel+0xb0/0xc0 [ 400.839383][ C0] common_startup_64+0x13e/0x148 [ 400.844322][ C0]