last executing test programs: 6m5.675548743s ago: executing program 4 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(r1, 0x8, &(0x7f0000000140)={0x80, 0x101}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x80084, 0x3, 0x1e, 0x13, "0000f60000d4c9dc88d963b85e13000020c410"}) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000240)=ANY=[@ANYBLOB="a1"]) sendfile(r0, r0, 0x0, 0x7e78a6f1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) write$UHID_INPUT(r8, &(0x7f0000001340)={0x8, {"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", 0x1000}}, 0x1006) fcntl$addseals(r0, 0x409, 0xc) ioctl(r0, 0x59a8, &(0x7f0000000340)="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") r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r9, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000200)={{r9, &(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x101140, &(0x7f0000000040)={@_ha_fsid={[0xfffffffe, 0x4]}, {0x7, 0x6, 0x5, 0x8}}, 0x6b, &(0x7f0000000080), &(0x7f00000000c0)=0x7495}, {[0x1, 0x800, 0xfffffff7, 0x71]}, 0xc, 0xa3, &(0x7f0000000140)=""/163}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0xfffffffffffffffc) 6m4.155937611s ago: executing program 4 (id=476): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000001680)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 6m3.838809062s ago: executing program 4 (id=478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x6200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xf, 0xffff, 0x53, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x20, 0x8, 0x3ff}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6m0.803581633s ago: executing program 4 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 6m0.668001898s ago: executing program 4 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 6m0.479570057s ago: executing program 4 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x604800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x0, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x80, 0xe7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 5m45.111732988s ago: executing program 32 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x604800, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x61, 0x0, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x80, 0xe7}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x694f840696960e3d) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 2m37.459488813s ago: executing program 2 (id=1020): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3cb95cf34ac2e04d006d242bc369fa000000dba87d4e72c9e61db1743f55f94e56e0cc63b31dd9a0ded3c0fe1b4df72afacba541a412c412ccf0599fe7e1cc13dcdc3e7a57ad527d2994512d31d4f190", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000003000b00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x3, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_SET_DEBUG(r11, 0x227e, &(0x7f00000000c0)) 2m36.657824736s ago: executing program 2 (id=1022): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="27fcc181c1339de2a22e61dde02f24623ac94bb0f054d8c3df7181a457c379e761b61cfdbf3e9e7f3bbe1f4911cab5ea48499be76ffe6106cf11d8278b23339effa42a5fc5c2efc3011ac2c9940fe52253cb897dd12e190958426c72f738e0b246652b2f374ebb27b92ac2cd3042bf9e135a5a7f62d09eadca4e7504adfe493a3366a5fb1df86daddc0fe02ac47b5a4d35cab40685cc75774d73fdae9a5ac9c645bc35fc64536cbcd0b5db0be200ae7ddc035c35f5d071f07f8d82a16fece5dfabe0061273d7cf138e2a5dd9", 0xcc) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf25"], 0x114}, {0x0}], 0x2, 0x0, 0x0, 0x4}, 0x20000000) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 2m36.173614573s ago: executing program 2 (id=1025): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0xe00) 2m35.19554628s ago: executing program 2 (id=1029): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffff304}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0x4000d649}, {0x2, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB], 0x2c}}, 0x808) 2m34.270825304s ago: executing program 2 (id=1031): ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0xe0000000, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) 2m34.035577749s ago: executing program 2 (id=1033): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3cb95cf34ac2e04d006d242bc369fa000000dba87d4e72c9e61db1743f55f94e56e0cc63b31dd9a0ded3c0fe1b4df72afacba541a412c412ccf0599fe7e1cc13dcdc3e7a57ad527d2994512d31d4f190", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000003000b00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x3, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_SET_DEBUG(r10, 0x227e, &(0x7f00000000c0)) 2m18.317377238s ago: executing program 33 (id=1033): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3cb95cf34ac2e04d006d242bc369fa000000dba87d4e72c9e61db1743f55f94e56e0cc63b31dd9a0ded3c0fe1b4df72afacba541a412c412ccf0599fe7e1cc13dcdc3e7a57ad527d2994512d31d4f190", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000003000b00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0x3, 0x19, "88bd91aa90758062b5fffd9272e301aa98af75"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$SG_SET_DEBUG(r10, 0x227e, &(0x7f00000000c0)) 1m14.603834202s ago: executing program 3 (id=1239): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0xffffff7f}], 0x62, 0x6000000000000000) 1m13.41293001s ago: executing program 3 (id=1243): pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000700)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x9) sendfile(r0, r1, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x300, 0x70bd2d, 0x25dfdbfc, {0x4, 0x0, 0x1, r2, 0xe, 0xb1a, 0x7, 0xfffffff7, 0x0, 0x9, 0x120}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000071109b000000000006"], 0x0, 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {0x9, 0x5}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x8}, 0x28) 1m12.903373022s ago: executing program 3 (id=1245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000001280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 1m8.826501116s ago: executing program 3 (id=1252): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m6.760523761s ago: executing program 3 (id=1260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000001280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 1m2.437493488s ago: executing program 3 (id=1274): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 47.228377149s ago: executing program 34 (id=1274): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 15.715709307s ago: executing program 0 (id=1371): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) getdents64(r4, &(0x7f0000001700)=""/127, 0x7f) 14.048195195s ago: executing program 0 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24048094}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, r8, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x3) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000400)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 12.983557755s ago: executing program 5 (id=1378): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffff304}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0x4000d649}, {0x2, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r7, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x808) 11.476363092s ago: executing program 5 (id=1382): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 11.165390367s ago: executing program 5 (id=1384): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000772000/0x2000)=nil, 0x2000, 0xc, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x0, 0xa7, 0x9}) r2 = socket(0x2, 0x1, 0x0) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x7f, 0xffffffffffffffff}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x3699103e, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=@known='user.incfs.size\x00') socket$packet(0x11, 0x3, 0x300) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) 10.496676315s ago: executing program 5 (id=1385): socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500003800000000c80190780a010102ac1414aa04019078ac14141b45100000000000000406000000000000acf244901cfb5a1b6b1d8b0c"], 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xb}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xab}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x10000000}) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000040)) 10.135123135s ago: executing program 0 (id=1386): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x0, 0x23, 0x63, {0x63, 0x1, "67e6b5c618a3f791d5cc21dca5b0a450160d2c6bf38577db9b88a9db9a142b22026c6cf604e8e623683b72c24a58c08a3ae0a0480473d2578f6d2c2071d707a438a6375b7e9fa8d6766b6b240fe9272e303927b4f53a8fbf32b17d0cd9c78273f9"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000880)={0x20, 0xe, 0x8b, "86047f6bffb30726943262c7ecfd39b15a410fc4fa9ddd6830a2de02a8790b55be1115d69565d737ce6c7e7ebb76651567d62ba0d006522bd732743e1ab94326754e0beb20a3ba316ce4cb783f8a62514781824c006c779ecff899c9b87e79caccf5d5b6c188201fde37a453d569788f5040b9ed4d1cc6f2981566226895b9db80a32f3b220e09d4052d2e"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0xa, 0x4, 0x9, 0x5, 0x7, 0x8, 0x7, 0x8001, 0xe733, 0x8, 0x3, 0x7caf}}, &(0x7f0000000a00)={0x20, 0x85, 0x4, 0xe368}, &(0x7f0000000a40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a80)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000ac0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9.923817888s ago: executing program 1 (id=1387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x4, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) 9.750478537s ago: executing program 1 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x400000000010, 0x3, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, 0x0) getrusage(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r8, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x98, &(0x7f0000000580)={0xfffffffbfffffffa, 0x20022, 0x14}}) 8.82251492s ago: executing program 1 (id=1391): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x46, &(0x7f00000001c0)=[{&(0x7f0000000240)="d80000002000811e4e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e4bbf41cd0f7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db7010075fcbdd5d95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) 7.208591763s ago: executing program 1 (id=1394): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f00005ed000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x300}, &(0x7f00000000c0)=0x40) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x2}], 0x1, 0x40800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0xffff, 0x4000, 0x4e22, 0x8001}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x3}, 0x70bd2d, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21}}]}, 0x170}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r7, 0x0) 6.332362395s ago: executing program 6 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) read$sequencer(r1, &(0x7f0000000040), 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010001"], 0x1c}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) 5.840826845s ago: executing program 1 (id=1396): socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0xfffffffe, &(0x7f0000000300)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140004001000010000000000000000000100000a50000000060a010400000000000000000a0004050900010073797a31000000002400048020000180080001006c6f67001400028008000540000007ff0600014003ff00000900020073797a2c00000000140000001100010000000000000000000100000a48c560b7dcaee2bd09533e463c74092ed5b913bed82052b4b3221446b7cfea7a45a84114dd9a4d2ff0009286c75c8610605a7b4102325c42d5a79abc8cc4a741bc24d0706d6eeb53a7c24d"], 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x18, 0x15, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 5.698924415s ago: executing program 0 (id=1397): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x4, 0x8001, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@generic={0x86, 0x10, "11026d34c3279adc3f6e49160ed8"}, @generic={0x44, 0x9, "3cd2a8bb679289"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8808c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000007001000040002fe0400000000000000a7ef84138febb0673583876f37815afcbee60f434f5392b4e31629225e0403be8f8e24c30f40b89233bd3644665cce91d86f9e8b89a70840c3496da7e118b34a27e233c9069b4568adc52395a2acb8d182d1f99cbcfb5ddd", @ANYRES32, @ANYRES64=r3, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = mq_open(&(0x7f00000001c0)='nl80211\x00', 0x8c0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xb45, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r5}, 0x38) mremap(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) write(r9, &(0x7f0000000280), 0x0) 4.554132961s ago: executing program 6 (id=1398): memfd_create(0x0, 0x7) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, 0x0}, 0x4040) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000100)={0x8, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffb}}, {{0xa, 0x4e23, 0x6, @remote, 0x49b2cee7}}}, 0x108) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x7, 0x8, 0x400, {0xd, @ah_ip6_spec={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, 0x7fff, 0x8}, {0x0, @local, 0x2, 0x7, [0xfffffffe, 0xec4]}, @ah_ip4_spec={@multicast2, @multicast2, 0x0, 0x2}, {0x0, @multicast, 0x7, 0x8, [0x8, 0x3]}, 0x80000000, 0x3fc000}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xfd9, 0x4000000) r7 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x40, 0x400000) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 4.504626058s ago: executing program 7 (id=1399): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="f11e0814e096aaaaaaaaaa7586dd61fbddf0001033"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xc7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 3.771370074s ago: executing program 0 (id=1400): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20d40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) msgsnd(r2, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000cef1340db39ed78cf1c88c479ea72750d41be576533f32d438da00e77802f12cd32bcf9d15fb6d7db39815f57e6d8277952f7b0f03efe0810bcda836a8fa55fc317419f617d7685b86998ed998a6d63a710d5dda881942070000000000000035fbfe64a6582ec59a9718f1076113aa82b6bcaede7921b66bbff8ca8cafc8d561b1638d353ca2fc4940f6f3e07afd940b515fd580433c36cc1a4c76f49eb81840b394a0a38df37a5256604232f2b0ccc69a03233ca4500cc8ca197ea9a4174b8edf8aff39cd2a5bbee0c9d940fc3d79fa9075dcadb2963e710580bdede6ed5838c83464903736c127a2fbf81d5ca0fbf6ac1b664304ff9946007d01b80d2975156db2be34a9c37ec80806b047c409c5f49956222251364b844624684f445be0ba01c6842f801d4ff5c677843330b688585e24c3557bcfc0e24b2296a7b98a97c1452143b7b5367cc074282d3bebf0587bed9d5daa6e15d2a86f4e091599ae035b1b72855c9b2eb560337d28bd5402c0a0508d98740f97f53324896ca6112119d17fa8c3a7be40e7094aa401209d419b89ba72282b008aeb315e39feab16d1574ea15c4c93718597885d54fe5237902cab30128aa75155be9a9ec22ccd21a260480f33150330d83cca48c64697d30b7b5456293d29366c9f2296943f8be7f79901071a9977f85590ae6f23e008c400dcb609b40b"], 0x82, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000002a40)={{0x12, 0x1, 0x110, 0xe4, 0x45, 0x57, 0x8, 0xcf3, 0xe006, 0x33b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xe0, 0xf0, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0xcf, 0x85, 0x99, 0xb}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x51) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x200000000000011, 0xa, 0x0) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 3.68952085s ago: executing program 7 (id=1401): socket$kcm(0x11, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 3.540010773s ago: executing program 6 (id=1402): r0 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000000c0)="01504c6013001b48e209fa32c61b2b8151f02205000caa65ab5d8af9d801030c38", 0x21, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000000180)="f4db1b308342f85c09407aba114caa1683078a0c1d49eccbc5aad374321e66719577817edea8c69dd8a25074b50dda844c4d0a3111f799d5dc84a232ba76659cda903f6008683eefc830e72aceb05295a4fb3adc057174b7835c936d0bec11b14b2bd3a9f68c6f1d48dcea34af22e9a76ddcf8dee0f1ea4a7a32d9577e6e9c6d649d673e", 0x84, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r0, r0}, 0x0, 0x0, 0x0) 3.119449131s ago: executing program 6 (id=1403): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 9) 3.098550957s ago: executing program 7 (id=1404): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x2010, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.021392725s ago: executing program 7 (id=1405): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000001280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) 2.587937109s ago: executing program 1 (id=1406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000240)={0x28, 0x5, r3, r3, 0x1000, 0x3b, 0x3ffe}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f00000000c0)={0x8, r3}) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000440)="0f20e06635010000000f22e00fc72fbaf80c66b86ceb238b66efbafc0c66b80300000066ef66b97100004066b8c5cf1a9666ba389520310f300f01b31f68ba2100b80050ef640fc7aae6fff011af0500baf80c66b8e455d38b66efbafc0c66ed66b9500200000f32", 0x68}], 0x1, 0xa, &(0x7f0000000500), 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000036007bc32dbd7000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 2.53591254s ago: executing program 6 (id=1407): socket$kcm(0x11, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x10, 0x803, 0x4) syz_open_procfs(0x0, &(0x7f0000001380)) socket$tipc(0x1e, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.084156293s ago: executing program 6 (id=1408): syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) openat$sequencer(0xffffffffffffff9c, 0x0, 0x20d40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) msgsnd(r2, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x82, 0x800) syz_usb_connect(0x2, 0x24, &(0x7f0000002a40)={{0x12, 0x1, 0x110, 0xe4, 0x45, 0x57, 0x8, 0xcf3, 0xe006, 0x33b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0xe0, 0xf0, "", [{{0x9, 0x4, 0xb0, 0x3, 0x0, 0xcf, 0x85, 0x99, 0xb}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x51) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x200000000000011, 0xa, 0x0) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 1.597625217s ago: executing program 5 (id=1409): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000010000000280012000001000067656e65767b000018000280140007002001000000000000000000000000000008000a10cc725f328c79fc01830b7b1b93bf2285da64ea147b5e600a24249a26fd36c33aa5c6", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x420200) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/86, 0x56}], 0x1}, 0x10102) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000380)={{0x5, 0x5, 0xf, 0x5, 'syz0\x00', 0xc}, 0x0, [0x7, 0x6, 0x602, 0xe, 0x800, 0x5, 0x10000, 0x4, 0x4, 0xff, 0x100000004, 0x40, 0x8, 0xd, 0x29, 0xb7e, 0x6, 0x10001, 0x0, 0x9, 0x2, 0x11, 0x4, 0x0, 0x9, 0x4c1, 0x7, 0x3c33, 0x1, 0x1000, 0x1, 0x8, 0x6, 0x5, 0x100, 0x0, 0xffffffffffffffff, 0xfff, 0xffffffffffffffc6, 0x7, 0x4, 0x8000000000000007, 0x2000009, 0xe7d, 0x2, 0x3, 0xffffffffffffffff, 0x4, 0x6, 0x8000000000000001, 0x8, 0x2d1df07d, 0x1ff, 0x9, 0x2, 0xfffffffffffffff9, 0x1, 0x2, 0x100, 0x8000000000000000, 0x5, 0x38000000000, 0x59a96ef8, 0x9, 0xbce, 0x9, 0xffffffffffffffff, 0x100002, 0x6, 0x2, 0xffffffffffffffff, 0x5534, 0x7, 0x200000fff, 0xe, 0x7f, 0x5, 0xa, 0x7e, 0x200, 0x8, 0xe, 0x2, 0x800, 0x80000001, 0x6, 0x1, 0x80000000, 0x9, 0x8, 0x7, 0x800, 0xffffffff, 0x2, 0x8000, 0x1, 0xfffffffffffffc1d, 0x100000001, 0x0, 0x6, 0x58a, 0x2, 0x4, 0xfffffdfffffffff8, 0x68c, 0x9, 0x400000000005, 0xb6, 0xc08, 0x8000000000000000, 0x3, 0xeb, 0x3, 0x253f, 0x5, 0x7, 0x0, 0xfffffffffffffff7, 0x7, 0x4, 0x3, 0x5, 0x5, 0xffffffffffffff91, 0x1400000000000, 0xffffffffffff0001, 0x5, 0xffffffff]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000b00)={0x53, 0x0, 0x2, 0x9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000940)="8819", 0x0, 0x3, 0x12, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40004023, 0x0) 1.544606338s ago: executing program 7 (id=1410): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="f11e0814e096aaaaaaaaaa7586dd61fbddf0001033"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xc7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 439.155091ms ago: executing program 0 (id=1411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40820, 0x6200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xf, 0xffff, 0x53, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x0, 0x20, 0x8, 0x3ff}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003040)=@newtfilter={0x1040, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1014, 0x2, [@TCA_BPF_NAME={0x100e, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1040}}, 0x20004804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'tunl0\x00', 0x0, 0x7, 0xf801, 0x2, 0x3, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xb4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0xffff, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8, 0x10001, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r15, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r16 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r16, &(0x7f00000000c0)={0x1d, r17}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000b40)={0x874, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x5, 0xff, 0x4}, {0x333, 0x7, 0xff, 0x9}, {0x400, 0x8, 0x1, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x69e68a8d}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x248, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0xfa, 0x8, 0x3}, {0x782, 0x97, 0x3, 0x1000}, {0x6, 0x0, 0x3, 0xffff}, {0x5472, 0x2, 0x0, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x8, 0x3, 0x6}, {0x8, 0x3, 0x13, 0x9}, {0x8, 0x1, 0x62, 0x6}, {0x4, 0xc, 0x7e}, {0xc, 0x0, 0x9}, {0x3, 0xc, 0x80, 0x1}, {0x6, 0x7, 0x30, 0x6a}, {0x2, 0x7, 0x1}, {0x4, 0x6, 0x4, 0x9c}, {0x0, 0x31, 0xf, 0x7}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xf6, 0xc7, 0xe, 0x69}, {0x9, 0x8, 0xff, 0xfa42}, {0x4, 0x1, 0x80, 0x4}, {0x101, 0x10, 0x7, 0xffffffff}, {0xffff, 0xfb, 0x8, 0x2}, {0x3, 0x53, 0xac, 0x8}, {0x9, 0x4, 0xcd, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}]}}, {{0x8, 0x1, r13}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff26a}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4000}}}]}}, {{0x8, 0x1, r18}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x874}}, 0x400c8c0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000140)={{0x12, 0x1, 0xc974134031c523a0, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0xad05a0f0c4afa3f5, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x9, [], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x2, 0x0, {0x4}}}]}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 282.447545ms ago: executing program 5 (id=1412): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="f11e0814e096aaaaaaaaaa7586dd61fbddf0001033"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xc7, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 0s ago: executing program 7 (id=1413): r0 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000000c0)="01504c6013001b48e209fa32c61b2b8151f02205000caa65ab5d8af9d801030c38", 0x21, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000000180)="f4db1b308342f85c09407aba114caa1683078a0c1d49eccbc5aad374321e66719577817edea8c69dd8a25074b50dda844c4d0a3111f799d5dc84a232ba76659cda903f6008683eefc830e72aceb05295a4fb3adc057174b7835c936d0bec11b14b2bd3a9f68c6f1d48dcea34af22e9a76ddcf8dee0f1ea4a7a32d9577e6e9c6d649d673e", 0x84, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r0, r0}, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): nfig 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.439492][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 434.439528][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 434.439550][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.442532][T10199] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 434.493742][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.493794][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.664273][ T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 434.665179][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input23 [ 434.676970][ T9] usb 6-1: USB disconnect, device number 15 [ 434.679237][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 434.709018][T10215] binder: 10184:10215 ioctl c0306201 200000000640 returned -22 [ 434.838044][ T5922] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 434.987943][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 434.991432][ T5922] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 434.991457][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.991469][ T5922] usb 1-1: Product: syz [ 434.991479][ T5922] usb 1-1: Manufacturer: syz [ 434.991487][ T5922] usb 1-1: SerialNumber: syz [ 434.993293][ T5922] usb 1-1: config 0 descriptor?? [ 434.995642][ T5922] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 435.146860][ T29] audit: type=1400 audit(2000000219.830:1003): avc: denied { read } for pid=10217 comm="syz.3.1069" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 435.146924][ T29] audit: type=1400 audit(2000000219.830:1004): avc: denied { open } for pid=10217 comm="syz.3.1069" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 435.214682][T10219] Invalid source name [ 435.254255][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 435.498219][ T5922] gspca_ov534_9: reg_w failed -110 [ 435.778030][ T5817] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 435.898004][ T5922] gspca_ov534_9: Unknown sensor 0000 [ 435.898076][ T5922] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 435.911053][ T5817] usb 2-1: device descriptor read/64, error -32 [ 436.148021][ T5817] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 436.277980][ T5817] usb 2-1: device descriptor read/64, error -32 [ 436.518931][ T5922] usb 1-1: USB disconnect, device number 36 [ 436.520125][ T5817] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 436.540947][ T5817] usb 2-1: device descriptor read/8, error -32 [ 436.664234][T10224] netlink: 'syz.5.1070': attribute type 1 has an invalid length. [ 436.778040][ T5817] usb 2-1: reset high-speed USB device number 29 using dummy_hcd [ 436.798681][ T5817] usb 2-1: device descriptor read/8, error -32 [ 436.908711][ T5817] raw-gadget.0 gadget.1: failed to queue suspend event [ 436.909839][ T5454] usb 2-1: USB disconnect, device number 29 [ 436.937630][T10215] raw-gadget.0 gadget.1: failed to queue disconnect event [ 437.649043][T10239] lo speed is unknown, defaulting to 1000 [ 437.671307][ T5922] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 437.818054][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 437.832156][ T5922] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.864291][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.920372][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.992391][ T5922] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.055540][ T5922] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.111654][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.819919][ T5922] usb 6-1: GET_CAPABILITIES returned 0 [ 438.825782][ T5922] usbtmc 6-1:16.0: can't read capabilities [ 439.048177][ T29] audit: type=1400 audit(2000000223.630:1005): avc: denied { create } for pid=10236 comm="syz.5.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 440.380713][T10267] syzkaller0: entered promiscuous mode [ 440.420343][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 440.437810][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 440.438262][T10273] FAULT_INJECTION: forcing a failure. [ 440.438262][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.461482][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 440.491230][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 440.499702][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.542973][T10267] syzkaller0: entered allmulticast mode [ 440.570768][T10272] syzkaller0: entered promiscuous mode [ 440.571894][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.0.1082 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.571916][T10273] Tainted: [L]=SOFTLOCKUP [ 440.571922][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 440.571930][T10273] Call Trace: [ 440.571936][T10273] [ 440.571941][T10273] dump_stack_lvl+0x100/0x190 [ 440.571963][T10273] should_fail_ex.cold+0x5/0xa [ 440.571984][T10273] _copy_from_user+0x2e/0xd0 [ 440.572001][T10273] copy_msghdr_from_user+0x9f/0x4f0 [ 440.572021][T10273] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 440.572050][T10273] ___sys_sendmsg+0x106/0x1e0 [ 440.572069][T10273] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.572111][T10273] __sys_sendmsg+0x170/0x220 [ 440.572135][T10273] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.572165][T10273] ? rcu_is_watching+0x12/0xc0 [ 440.572190][T10273] do_syscall_64+0x10b/0xf80 [ 440.572210][T10273] ? clear_bhb_loop+0x40/0x90 [ 440.572228][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.572244][T10273] RIP: 0033:0x7f115df9c819 [ 440.572256][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.572271][T10273] RSP: 002b:00007f115eed2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.572286][T10273] RAX: ffffffffffffffda RBX: 00007f115e216090 RCX: 00007f115df9c819 [ 440.572296][T10273] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 440.572305][T10273] RBP: 00007f115eed2090 R08: 0000000000000000 R09: 0000000000000000 [ 440.572313][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.572322][T10273] R13: 00007f115e216128 R14: 00007f115e216090 R15: 00007ffecd40f378 [ 440.572345][T10273] [ 440.756837][T10272] syzkaller0: entered allmulticast mode [ 441.156698][ T9] usb 6-1: USB disconnect, device number 16 [ 441.484682][T10270] lo speed is unknown, defaulting to 1000 [ 441.657444][T10285] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 441.668016][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 441.758316][T10286] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 441.766175][T10286] netlink: 'syz.3.1087': attribute type 4 has an invalid length. [ 441.774069][T10286] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1087'. [ 442.147968][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 442.159304][ T9] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 442.173418][T10288] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 442.184355][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.197825][T10288] overlayfs: conflicting lowerdir path [ 442.208012][ T9] usb 6-1: Product: syz [ 442.212749][ T9] usb 6-1: Manufacturer: syz [ 442.217459][ T9] usb 6-1: SerialNumber: syz [ 442.228606][ T9] usb 6-1: config 0 descriptor?? [ 442.292095][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 442.485290][T10270] chnl_net:caif_netlink_parms(): no params data found [ 442.532177][T10293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 442.576788][ T50] Bluetooth: hci6: command tx timeout [ 442.683851][ T9] gspca_ov534_9: reg_w failed -71 [ 442.699818][T10299] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 443.149890][T10299] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 443.157764][T10299] netlink: 'syz.1.1089': attribute type 4 has an invalid length. [ 443.165554][T10299] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1089'. [ 443.816671][ T9] gspca_ov534_9: Unknown sensor 0000 [ 443.816772][ T9] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 443.865880][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.886383][T10270] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.886407][ T9] usb 6-1: USB disconnect, device number 17 [ 443.910532][T10270] bridge_slave_0: entered allmulticast mode [ 443.919657][T10312] FAULT_INJECTION: forcing a failure. [ 443.919657][T10312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.934648][T10270] bridge_slave_0: entered promiscuous mode [ 443.964475][T10312] CPU: 1 UID: 0 PID: 10312 Comm: syz.1.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.964504][T10312] Tainted: [L]=SOFTLOCKUP [ 443.964509][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.964522][T10312] Call Trace: [ 443.964528][T10312] [ 443.964536][T10312] dump_stack_lvl+0x100/0x190 [ 443.964561][T10312] should_fail_ex.cold+0x5/0xa [ 443.964585][T10312] _copy_from_user+0x2e/0xd0 [ 443.964605][T10312] video_usercopy+0xe74/0x1700 [ 443.964626][T10312] ? __pfx___video_do_ioctl+0x10/0x10 [ 443.964647][T10312] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 443.964676][T10312] ? __pfx_video_usercopy+0x10/0x10 [ 443.964711][T10312] v4l2_ioctl+0x1bd/0x250 [ 443.964730][T10312] ? __pfx_v4l2_ioctl+0x10/0x10 [ 443.964752][T10312] __x64_sys_ioctl+0x18e/0x210 [ 443.964779][T10312] do_syscall_64+0x10b/0xf80 [ 443.964799][T10312] ? clear_bhb_loop+0x40/0x90 [ 443.964816][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.964830][T10312] RIP: 0033:0x7ff21419c819 [ 443.964842][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.964856][T10312] RSP: 002b:00007ff215034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.964870][T10312] RAX: ffffffffffffffda RBX: 00007ff214415fa0 RCX: 00007ff21419c819 [ 443.964880][T10312] RDX: 0000200000000080 RSI: 00000000c100565c RDI: 0000000000000003 [ 443.964889][T10312] RBP: 00007ff215034090 R08: 0000000000000000 R09: 0000000000000000 [ 443.964897][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.964904][T10312] R13: 00007ff214416038 R14: 00007ff214415fa0 R15: 00007fffa24001c8 [ 443.964924][T10312] [ 444.287681][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.294959][T10270] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.303028][T10270] bridge_slave_1: entered allmulticast mode [ 444.310577][T10270] bridge_slave_1: entered promiscuous mode [ 444.323606][T10314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10314 comm=syz.3.1093 [ 444.340834][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.489667][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.793821][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 445.025724][ T50] Bluetooth: hci6: command tx timeout [ 445.051457][T10322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1094'. [ 445.694965][T10270] team0: Port device team_slave_0 added [ 446.205978][T10270] team0: Port device team_slave_1 added [ 446.229634][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.257604][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.313492][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.444863][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.587090][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.631024][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.763134][T10270] hsr_slave_0: entered promiscuous mode [ 446.771374][T10270] hsr_slave_1: entered promiscuous mode [ 446.784867][T10270] debugfs: 'hsr0' already exists in 'hsr' [ 446.804302][T10270] Cannot create hsr debugfs directory [ 447.054505][ T50] Bluetooth: hci6: command tx timeout [ 447.994008][ T76] dummy0: left promiscuous mode [ 448.037317][ T76] bridge0: port 1(dummy0) entered disabled state [ 448.118853][ T5870] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 448.238156][ T5927] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 448.309503][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 448.359962][ T5870] usb 2-1: config 253 has an invalid interface number: 95 but max is 3 [ 448.403770][ T5870] usb 2-1: config 253 has an invalid interface number: 98 but max is 3 [ 448.417462][ T5927] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 448.464033][ T5927] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 448.490912][ T5870] usb 2-1: config 253 contains an unexpected descriptor of type 0x1, skipping [ 448.493920][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.531573][ T5927] usb 4-1: Product: syz [ 448.550221][ T5870] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 448.555428][ T5927] usb 4-1: Manufacturer: syz [ 448.588837][ T5927] usb 4-1: SerialNumber: syz [ 448.594520][ T5870] usb 2-1: config 253 has an invalid interface number: 143 but max is 3 [ 448.626438][ T5927] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 448.657798][ T5870] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 448.721036][ T5870] usb 2-1: config 253 has an invalid interface number: 132 but max is 3 [ 448.750512][ T76] bond0 (unregistering): Released all slaves [ 448.767482][ T5870] usb 2-1: config 253 has an invalid interface number: 109 but max is 3 [ 448.801117][ T76] bond1 (unregistering): Released all slaves [ 448.830865][ T5870] usb 2-1: config 253 has 5 interfaces, different from the descriptor's value: 4 [ 448.854785][T10355] bridge0: entered promiscuous mode [ 448.877989][ T5876] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 448.888123][ T5870] usb 2-1: config 253 has no interface number 0 [ 448.894607][T10355] bridge0: entered allmulticast mode [ 448.905309][ T29] audit: type=1400 audit(2000000233.590:1006): avc: denied { block_suspend } for pid=10368 comm="syz.5.1104" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 448.962614][ T5870] usb 2-1: config 253 has no interface number 1 [ 449.005710][ T5870] usb 2-1: config 253 has no interface number 2 [ 449.037582][ T76] hma(sha224): left promiscuous mode [ 449.037733][ T5870] usb 2-1: config 253 has no interface number 3 [ 449.094664][ T5870] usb 2-1: config 253 has no interface number 4 [ 449.129717][ T5876] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 449.132357][ T50] Bluetooth: hci6: command tx timeout [ 449.138305][ T5876] usb 1-1: config 0 has no interface number 0 [ 449.151831][ T5870] usb 2-1: config 253 interface 95 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 449.181292][ T5876] usb 1-1: config 0 interface 176 has no altsetting 0 [ 449.206340][ T5870] usb 2-1: config 253 interface 95 altsetting 7 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 449.206913][ T5927] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.232277][ T5927] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 449.242018][ T5927] usb 4-1: media controller created [ 449.253523][ T5876] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 449.272769][ T5478] 8021q: adding VLAN 0 to HW filter on device eth1 [ 449.291768][ T5870] usb 2-1: config 253 interface 95 altsetting 7 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 449.314182][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.335998][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.344524][ T5876] usb 1-1: Product: syz [ 449.348750][ T5870] usb 2-1: config 253 interface 98 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 449.358066][ T5817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 449.359656][ T5876] usb 1-1: Manufacturer: syz [ 449.372699][ T5870] usb 2-1: config 253 interface 98 altsetting 7 endpoint 0x7 has an invalid bInterval 36, changing to 9 [ 449.387465][ T5876] usb 1-1: SerialNumber: syz [ 449.419399][ T5876] usb 1-1: config 0 descriptor?? [ 449.430253][ T5870] usb 2-1: config 253 interface 98 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 449.508182][ T5817] usb 6-1: device descriptor read/64, error -71 [ 449.523605][ T5870] usb 2-1: config 253 interface 98 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 449.582635][ T5870] usb 2-1: config 253 interface 98 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 449.672404][ T5870] usb 2-1: config 253 interface 98 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 449.760099][ T5817] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 449.794889][T10382] trusted_key: encrypted_key: insufficient parameters specified [ 449.817069][ T5870] usb 2-1: config 253 interface 98 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 64 [ 449.897507][T10270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.904488][ T5870] usb 2-1: config 253 interface 98 altsetting 7 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 449.938764][T10382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.978106][T10382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.988026][ T5817] usb 6-1: device descriptor read/64, error -71 [ 450.004722][T10270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.017386][ T5870] usb 2-1: config 253 interface 98 altsetting 7 endpoint 0x87 has an invalid bInterval 218, changing to 11 [ 450.058601][ T5870] usb 2-1: config 253 interface 143 altsetting 209 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 450.076033][T10270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 450.103438][ T5817] usb usb6-port1: attempt power cycle [ 450.176500][ T5870] usb 2-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x7, skipping [ 450.195512][T10270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.246938][ T5870] usb 2-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x1, skipping [ 450.284716][ T5870] usb 2-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x7, skipping [ 450.373278][ T5870] usb 2-1: config 253 interface 143 altsetting 209 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 450.478498][ T5817] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 450.506084][ T5870] usb 2-1: config 253 interface 143 altsetting 209 endpoint 0x84 has an invalid bInterval 247, changing to 11 [ 450.508641][ T5817] usb 6-1: device descriptor read/8, error -71 [ 450.636448][ T5870] usb 2-1: config 253 interface 143 altsetting 209 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 450.718018][ T5870] usb 2-1: too many endpoints for config 253 interface 132 altsetting 2: 36, using maximum allowed: 30 [ 450.799709][ T5817] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 450.834693][ T5817] usb 6-1: device descriptor read/8, error -71 [ 450.888466][ T5870] usb 2-1: config 253 interface 132 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 450.973687][ T5817] usb usb6-port1: unable to enumerate USB device [ 451.007041][ T5927] usb 4-1: USB disconnect, device number 35 [ 451.064257][ T5870] usb 2-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 451.171290][ T5870] usb 2-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 451.303213][ T5870] usb 2-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 451.477190][T10400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'. [ 451.730712][ T5870] usb 2-1: config 253 interface 132 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 36 [ 451.770399][ T5876] usb 1-1: USB disconnect, device number 37 [ 451.781144][ T5870] usb 2-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 451.793596][ T5870] usb 2-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 451.810596][ T5870] usb 2-1: config 253 interface 109 altsetting 12 bulk endpoint 0x4 has invalid maxpacket 64 [ 451.820987][ T5870] usb 2-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 451.864135][T10403] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 451.922110][T10404] overlayfs: conflicting lowerdir path [ 452.056944][ T5870] usb 2-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 452.092724][T10270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.106024][ T5870] usb 2-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 452.123986][T10270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.144637][T10270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.151972][ T5870] usb 2-1: config 253 interface 95 has no altsetting 0 [ 452.171360][ T5870] usb 2-1: config 253 interface 98 has no altsetting 0 [ 452.179857][T10270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.231444][ T5870] usb 2-1: config 253 interface 143 has no altsetting 0 [ 452.251896][ T5478] 8021q: adding VLAN 0 to HW filter on device eth2 [ 452.255292][ T5870] usb 2-1: config 253 interface 132 has no altsetting 0 [ 452.284333][ T5870] usb 2-1: config 253 interface 109 has no altsetting 0 [ 452.356102][ T5870] usb 2-1: string descriptor 0 read error: -71 [ 452.372240][ T5870] usb 2-1: Dual-Role OTG device on HNP port [ 452.516945][ T5870] usb 2-1: can't set HNP mode: -71 [ 452.798321][T10270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.843608][T10270] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.872017][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.879146][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.916547][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.923710][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.938030][ T5817] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 453.066885][T10270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.201911][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 453.217557][ T5817] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 453.234789][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.395820][ T5817] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 453.416451][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.475303][ T5817] usb 1-1: Product: syz [ 453.496528][T10443] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 453.616096][T10445] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 453.624436][T10445] netlink: 'syz.3.1113': attribute type 4 has an invalid length. [ 453.632821][T10445] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1113'. [ 453.671069][T10445] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 453.679017][T10445] netlink: 'syz.3.1113': attribute type 4 has an invalid length. [ 453.686779][T10445] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1113'. [ 453.735428][ T5817] usb 1-1: Manufacturer: syz [ 453.837185][ T5817] usb 1-1: SerialNumber: syz [ 453.982257][ T5817] usb 1-1: config 0 descriptor?? [ 453.990783][ T5817] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 454.025063][T10270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.345053][ T5478] 8021q: adding VLAN 0 to HW filter on device eth3 [ 454.437970][ T5923] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 454.458522][ T5876] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 454.599862][ T5923] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 454.632840][ T5923] usb 2-1: config 0 has no interface number 0 [ 454.649843][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 454.664634][ T5923] usb 2-1: config 0 interface 176 has no altsetting 0 [ 454.670848][ T5876] usb 4-1: config 253 has an invalid interface number: 95 but max is 3 [ 454.711251][ T5923] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 454.732898][ T5876] usb 4-1: config 253 has an invalid interface number: 98 but max is 3 [ 454.738309][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.782072][ T5923] usb 2-1: Product: syz [ 454.799207][ T5876] usb 4-1: config 253 contains an unexpected descriptor of type 0x1, skipping [ 454.810598][ T5923] usb 2-1: Manufacturer: syz [ 454.824911][ T5923] usb 2-1: SerialNumber: syz [ 454.852628][T10270] veth0_vlan: entered promiscuous mode [ 454.853872][ T5923] usb 2-1: config 0 descriptor?? [ 454.866172][ T5876] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 454.921952][T10270] veth1_vlan: entered promiscuous mode [ 454.929953][ T5876] usb 4-1: config 253 has an invalid interface number: 143 but max is 3 [ 454.953198][ T5876] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 454.990558][ T5876] usb 4-1: config 253 has an invalid interface number: 132 but max is 3 [ 455.036660][T10270] veth0_macvtap: entered promiscuous mode [ 455.063935][ T5876] usb 4-1: config 253 has an invalid interface number: 109 but max is 3 [ 455.076303][T10270] veth1_macvtap: entered promiscuous mode [ 455.101729][ T5876] usb 4-1: config 253 has 5 interfaces, different from the descriptor's value: 4 [ 455.131445][ T5876] usb 4-1: config 253 has no interface number 0 [ 455.170643][T10270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.184384][ T5876] usb 4-1: config 253 has no interface number 1 [ 455.216158][ T5817] gspca_sunplus: reg_r err -32 [ 455.266512][T10475] trusted_key: encrypted_key: insufficient parameters specified [ 455.290297][T10270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.297554][ T5876] usb 4-1: config 253 has no interface number 2 [ 455.320207][ T29] audit: type=1400 audit(2000000240.010:1007): avc: denied { write } for pid=10476 comm="syz.5.1115" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 455.352652][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.468484][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.493099][ T5876] usb 4-1: config 253 has no interface number 3 [ 455.714646][ T29] audit: type=1400 audit(2000000240.260:1008): avc: denied { shutdown } for pid=10476 comm="syz.5.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 455.894175][ T5876] usb 4-1: config 253 has no interface number 4 [ 455.900776][ T5876] usb 4-1: config 253 interface 95 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 455.935266][T10481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.951020][ T5876] usb 4-1: config 253 interface 95 altsetting 7 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 456.006440][ T7641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.038369][ T5876] usb 4-1: config 253 interface 95 altsetting 7 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 456.052141][ T7641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.096761][ T5876] usb 4-1: config 253 interface 98 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 456.109567][ T5876] usb 4-1: config 253 interface 98 altsetting 7 endpoint 0x7 has an invalid bInterval 36, changing to 9 [ 456.194109][ T5478] 8021q: adding VLAN 0 to HW filter on device eth4 [ 456.220466][ T7641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.235698][ T5876] usb 4-1: config 253 interface 98 altsetting 7 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 456.264895][ T7641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.275588][T10485] FAULT_INJECTION: forcing a failure. [ 456.275588][T10485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.289443][ T5876] usb 4-1: config 253 interface 98 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 456.291708][T10485] CPU: 1 UID: 0 PID: 10485 Comm: syz.5.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.291736][T10485] Tainted: [L]=SOFTLOCKUP [ 456.291741][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 456.291750][T10485] Call Trace: [ 456.291755][T10485] [ 456.291761][T10485] dump_stack_lvl+0x100/0x190 [ 456.291784][T10485] should_fail_ex.cold+0x5/0xa [ 456.291802][T10485] ? prepare_alloc_pages+0x16d/0x5f0 [ 456.291820][T10485] should_fail_alloc_page+0xeb/0x140 [ 456.291837][T10485] prepare_alloc_pages+0x1f0/0x5f0 [ 456.291855][T10485] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 456.291876][T10485] ? is_bpf_text_address+0x8a/0x1a0 [ 456.291894][T10485] ? is_bpf_text_address+0x8a/0x1a0 [ 456.291912][T10485] ? bpf_ksym_find+0x128/0x1c0 [ 456.291932][T10485] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.291948][T10485] ? is_bpf_text_address+0x94/0x1a0 [ 456.291965][T10485] ? kernel_text_address+0x8d/0x100 [ 456.291984][T10485] ? __kernel_text_address+0xd/0x30 [ 456.292001][T10485] ? unwind_get_return_address+0x59/0xa0 [ 456.292024][T10485] ? arch_stack_walk+0xa6/0xf0 [ 456.292045][T10485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.292075][T10485] ? stack_depot_save_flags+0x27/0x9d0 [ 456.292092][T10485] ? find_held_lock+0x2b/0x80 [ 456.292114][T10485] ? __refill_objects_node+0x7f5/0x8e0 [ 456.292136][T10485] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 456.292154][T10485] ? policy_nodemask+0xed/0x4f0 [ 456.292170][T10485] alloc_pages_mpol+0x1fb/0x540 [ 456.292186][T10485] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 456.292206][T10485] alloc_pages_noprof+0x1a/0x160 [ 456.292224][T10485] kimage_alloc_pages+0x72/0x380 [ 456.292243][T10485] kimage_alloc_control_pages+0x157/0xa20 [ 456.292265][T10485] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 456.292284][T10485] ? kasan_save_track+0x14/0x30 [ 456.292308][T10485] do_kexec_load+0x275/0x810 [ 456.292327][T10485] ? __pfx_do_kexec_load+0x10/0x10 [ 456.292346][T10485] ? _copy_from_user+0x59/0xd0 [ 456.292364][T10485] __x64_sys_kexec_load+0x1bf/0x230 [ 456.292383][T10485] do_syscall_64+0x10b/0xf80 [ 456.292402][T10485] ? clear_bhb_loop+0x40/0x90 [ 456.292420][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.292435][T10485] RIP: 0033:0x7f145639c819 [ 456.292448][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.292467][T10485] RSP: 002b:00007f1457265028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 456.292482][T10485] RAX: ffffffffffffffda RBX: 00007f1456615fa0 RCX: 00007f145639c819 [ 456.292491][T10485] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: ffffffffffff5df2 [ 456.292501][T10485] RBP: 00007f1457265090 R08: 0000000000000000 R09: 0000000000000000 [ 456.292510][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.292518][T10485] R13: 00007f1456616038 R14: 00007f1456615fa0 R15: 00007ffdb23d5708 [ 456.292539][T10485] [ 456.292561][T10485] kexec: Could not allocate control_code_buffer [ 456.658952][ T5876] usb 4-1: config 253 interface 98 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 456.680029][ T5876] usb 4-1: config 253 interface 98 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 456.700524][ T5876] usb 4-1: config 253 interface 98 altsetting 7 bulk endpoint 0x2 has invalid maxpacket 64 [ 456.802673][ T5876] usb 4-1: config 253 interface 98 altsetting 7 has an endpoint descriptor with address 0xC7, changing to 0x87 [ 456.838167][ T5817] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 456.896897][ T5876] usb 4-1: config 253 interface 98 altsetting 7 endpoint 0x87 has an invalid bInterval 218, changing to 11 [ 456.978546][ T5876] usb 4-1: config 253 interface 143 altsetting 209 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 456.991691][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.035065][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.076004][ T5876] usb 4-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x7, skipping [ 457.123331][ T5876] usb 4-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x1, skipping [ 457.151328][ T5876] usb 4-1: config 253 interface 143 altsetting 209 has a duplicate endpoint with address 0x7, skipping [ 457.190477][ T5922] usb 1-1: USB disconnect, device number 38 [ 457.265230][ T7641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.300577][ T7641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.314037][ T5876] usb 4-1: config 253 interface 143 altsetting 209 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 457.516770][ T5876] usb 4-1: config 253 interface 143 altsetting 209 endpoint 0x84 has an invalid bInterval 247, changing to 11 [ 457.594518][T10495] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 457.683101][T10496] overlayfs: conflicting lowerdir path [ 457.903398][ T5876] usb 4-1: config 253 interface 143 altsetting 209 has 6 endpoint descriptors, different from the interface descriptor's value: 11 [ 457.939376][ T5876] usb 4-1: too many endpoints for config 253 interface 132 altsetting 2: 36, using maximum allowed: 30 [ 457.980012][ T5876] usb 4-1: config 253 interface 132 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 458.075814][ T5876] usb 4-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 458.154402][ T5876] usb 4-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 458.275425][ T5876] usb 4-1: config 253 interface 132 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 458.312912][ T5876] usb 4-1: config 253 interface 132 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 36 [ 458.315004][T10504] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 458.367650][ T5876] usb 4-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 458.470712][T10506] netlink: 'syz.6.1080': attribute type 1 has an invalid length. [ 458.478711][T10506] netlink: 'syz.6.1080': attribute type 4 has an invalid length. [ 458.486678][T10506] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1080'. [ 458.744700][ T5876] usb 4-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 458.792677][ T5876] usb 4-1: config 253 interface 109 altsetting 12 bulk endpoint 0x4 has invalid maxpacket 64 [ 458.858743][ T5876] usb 4-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 458.912107][ T29] audit: type=1400 audit(2000000243.600:1009): avc: denied { read write } for pid=10507 comm="syz.0.1120" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 459.011289][ T5876] usb 4-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 459.038976][ T29] audit: type=1400 audit(2000000243.620:1010): avc: denied { open } for pid=10507 comm="syz.0.1120" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 459.162440][ T29] audit: type=1400 audit(2000000243.680:1011): avc: denied { setattr } for pid=10507 comm="syz.0.1120" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 459.254331][ T5876] usb 4-1: config 253 interface 109 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 459.277699][ T5923] usb 2-1: USB disconnect, device number 33 [ 459.331182][ T5876] usb 4-1: config 253 interface 95 has no altsetting 0 [ 459.419058][ T5876] usb 4-1: config 253 interface 98 has no altsetting 0 [ 459.455729][T10523] fuse: Unknown parameter '0x00000000000000006ºhV1ñÌ{…&‘gMÖJO(¶¬«Š\©%Ÿ˜PÎ!¶×†T“fKØùõ‚Ñß*GÀLø¬%“Aâ̓ô:‰ZüìË‚' [ 459.490433][ T5876] usb 4-1: config 253 interface 143 has no altsetting 0 [ 459.536999][ T5876] usb 4-1: config 253 interface 132 has no altsetting 0 [ 459.568459][ T5876] usb 4-1: config 253 interface 109 has no altsetting 0 [ 459.628502][ T5876] usb 4-1: string descriptor 0 read error: -71 [ 459.680973][ T5876] usb 4-1: Dual-Role OTG device on HNP port [ 459.733934][ T5876] usb 4-1: can't set HNP mode: -71 [ 460.939013][T10546] FAULT_INJECTION: forcing a failure. [ 460.939013][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.952948][T10546] CPU: 1 UID: 0 PID: 10546 Comm: syz.5.1129 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.952973][T10546] Tainted: [L]=SOFTLOCKUP [ 460.952979][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.952989][T10546] Call Trace: [ 460.952994][T10546] [ 460.953001][T10546] dump_stack_lvl+0x100/0x190 [ 460.953026][T10546] should_fail_ex.cold+0x5/0xa [ 460.953049][T10546] _copy_from_user+0x2e/0xd0 [ 460.953066][T10546] copy_msghdr_from_user+0x9f/0x4f0 [ 460.953086][T10546] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 460.953107][T10546] ? rcu_is_watching+0x12/0xc0 [ 460.953128][T10546] ? ___sys_recvmsg+0x177/0x1a0 [ 460.953146][T10546] ? kfree+0x1dd/0x6c0 [ 460.953168][T10546] ___sys_recvmsg+0xdd/0x1a0 [ 460.953187][T10546] ? __pfx____sys_recvmsg+0x10/0x10 [ 460.953218][T10546] ? __pfx___might_resched+0x10/0x10 [ 460.953246][T10546] do_recvmmsg+0x301/0x760 [ 460.953269][T10546] ? __pfx_do_recvmmsg+0x10/0x10 [ 460.953287][T10546] ? ksys_write+0x190/0x250 [ 460.953314][T10546] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 460.953337][T10546] ? kernel_write+0x683/0x6c0 [ 460.953366][T10546] ? __fget_files+0x21f/0x3d0 [ 460.953388][T10546] __x64_sys_recvmmsg+0x22a/0x280 [ 460.953404][T10546] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 460.953427][T10546] ? rcu_is_watching+0x12/0xc0 [ 460.953452][T10546] do_syscall_64+0x10b/0xf80 [ 460.953472][T10546] ? clear_bhb_loop+0x40/0x90 [ 460.953492][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.953508][T10546] RIP: 0033:0x7f145639c819 [ 460.953522][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.953540][T10546] RSP: 002b:00007f1457265028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 460.953556][T10546] RAX: ffffffffffffffda RBX: 00007f1456615fa0 RCX: 00007f145639c819 [ 460.953567][T10546] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 460.953577][T10546] RBP: 00007f1457265090 R08: 0000000000000000 R09: 0000000000000000 [ 460.953587][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.953595][T10546] R13: 00007f1456616038 R14: 00007f1456615fa0 R15: 00007ffdb23d5708 [ 460.953617][T10546] [ 461.467951][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 461.740724][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.764086][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.903638][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.994812][T10555] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 462.074894][T10556] overlayfs: conflicting lowerdir path [ 462.345350][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.355193][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.396650][ T5876] usb 2-1: config 0 descriptor?? [ 463.196382][ T5876] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 463.440086][ T5870] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 463.561972][T10544] lo speed is unknown, defaulting to 1000 [ 463.638006][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 463.681432][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 463.721696][ T5870] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.813059][ T5870] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.907286][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 463.946678][ T5870] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 464.004708][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.088179][ T5922] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 464.234981][ T5870] usb 4-1: config 0 descriptor?? [ 464.253744][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 464.277763][ T5922] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 464.296512][ T5922] usb 1-1: config 0 has no interface number 0 [ 464.308573][ T29] audit: type=1400 audit(2000000248.990:1012): avc: denied { firmware_load } for pid=10590 comm="syz.5.1142" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 464.335148][T10544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.380652][ T5922] usb 1-1: config 0 interface 184 has no altsetting 0 [ 464.389443][T10544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.410984][ T5922] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 464.423943][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.455056][ T5922] usb 1-1: Product: syz [ 464.462647][ T5922] usb 1-1: Manufacturer: syz [ 464.483347][ T5922] usb 1-1: SerialNumber: syz [ 464.512792][ T5922] usb 1-1: config 0 descriptor?? [ 464.560302][ T29] audit: type=1400 audit(2000000249.110:1013): avc: denied { getopt } for pid=10543 comm="syz.1.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 464.734360][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.741918][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.752517][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.764567][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.774072][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.811620][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.824255][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.832283][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.839760][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.848241][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.856135][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.939106][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.946652][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.953760][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.955906][ T5870] pantherlord 0003:0810:0001.000D: unknown main item tag 0x0 [ 464.980937][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.031039][ T5870] pantherlord 0003:0810:0001.000D: hidraw1: USB HID v0.04 Device [HID 0810:0001] on usb-dummy_hcd.3-1/input0 [ 465.056627][ T5922] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 465.113417][ T5922] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 465.150796][ T5817] usb 2-1: USB disconnect, device number 34 [ 465.156830][ T5870] pantherlord 0003:0810:0001.000D: no output reports found [ 465.162569][ T5922] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 465.226928][ T5922] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 465.248844][T10595] syz.5.1142 (10595) used greatest stack depth: 18896 bytes left [ 465.489946][ T5870] usb 4-1: USB disconnect, device number 38 [ 465.494810][T10612] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1144'. [ 465.581029][T10614] FAULT_INJECTION: forcing a failure. [ 465.581029][T10614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.620717][T10614] CPU: 1 UID: 0 PID: 10614 Comm: syz.5.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.620746][T10614] Tainted: [L]=SOFTLOCKUP [ 465.620752][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.620760][T10614] Call Trace: [ 465.620765][T10614] [ 465.620770][T10614] dump_stack_lvl+0x100/0x190 [ 465.620794][T10614] should_fail_ex.cold+0x5/0xa [ 465.620815][T10614] _copy_to_user+0x32/0xd0 [ 465.620834][T10614] simple_read_from_buffer+0xcb/0x170 [ 465.620855][T10614] proc_fail_nth_read+0x1af/0x230 [ 465.620881][T10614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.620908][T10614] ? rw_verify_area+0xce/0x6d0 [ 465.620935][T10614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.620958][T10614] vfs_read+0x1e4/0xb30 [ 465.620985][T10614] ? __pfx_vfs_read+0x10/0x10 [ 465.621008][T10614] ? __fget_files+0x215/0x3d0 [ 465.621031][T10614] ? __fget_files+0x21f/0x3d0 [ 465.621054][T10614] ksys_read+0x12a/0x250 [ 465.621076][T10614] ? __pfx_ksys_read+0x10/0x10 [ 465.621102][T10614] ? rcu_is_watching+0x12/0xc0 [ 465.621130][T10614] do_syscall_64+0x10b/0xf80 [ 465.621153][T10614] ? clear_bhb_loop+0x40/0x90 [ 465.621174][T10614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.621191][T10614] RIP: 0033:0x7f145635d04e [ 465.621206][T10614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 465.621228][T10614] RSP: 002b:00007f1457264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.621245][T10614] RAX: ffffffffffffffda RBX: 00007f14572656c0 RCX: 00007f145635d04e [ 465.621256][T10614] RDX: 000000000000000f RSI: 00007f14572650a0 RDI: 0000000000000004 [ 465.621265][T10614] RBP: 00007f1457265090 R08: 0000000000000000 R09: 0000000000000000 [ 465.621275][T10614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.621284][T10614] R13: 00007f1456616038 R14: 00007f1456615fa0 R15: 00007ffdb23d5708 [ 465.621308][T10614] [ 466.066683][T10620] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 466.147135][T10621] overlayfs: conflicting lowerdir path [ 467.243461][ T798] usb 1-1: USB disconnect, device number 39 [ 468.209332][ T5454] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 468.429358][ T5454] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 468.461006][ T5454] usb 6-1: config 0 has no interface number 0 [ 468.478330][ T5454] usb 6-1: config 0 interface 176 has no altsetting 0 [ 468.503764][ T5454] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 468.537493][ T5454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.569513][ T5454] usb 6-1: Product: syz [ 468.588012][ T5454] usb 6-1: Manufacturer: syz [ 468.600704][ T5454] usb 6-1: SerialNumber: syz [ 468.645684][ T5454] usb 6-1: config 0 descriptor?? [ 468.678121][ T798] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 468.925873][ T798] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 468.979919][T10644] trusted_key: encrypted_key: insufficient parameters specified [ 469.004982][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.063531][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.092821][ T798] usb 2-1: config 0 descriptor?? [ 469.098725][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.121502][ T798] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 469.354152][ T29] audit: type=1400 audit(2000000254.040:1014): avc: denied { listen } for pid=10657 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 471.167978][T10645] syz.6.1153 (10645): drop_caches: 2 [ 472.159326][ T798] gspca_stv06xx: I2C: Read error writing address: -71 [ 472.221491][ T798] usb 2-1: USB disconnect, device number 35 [ 472.322877][ T5454] usb 6-1: USB disconnect, device number 22 [ 472.582532][T10686] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 472.598289][T10693] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 472.758337][ T5817] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 472.759187][T10695] netlink: 'syz.5.1157': attribute type 1 has an invalid length. [ 472.774215][T10695] netlink: 'syz.5.1157': attribute type 4 has an invalid length. [ 472.782063][T10695] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1157'. [ 472.829112][ T5922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 472.968047][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 473.028864][ T5923] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 473.032159][T10696] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 473.044528][T10696] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 473.053224][T10696] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1161'. [ 473.176239][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 473.285222][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.308652][T10696] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 473.323464][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 473.338631][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.358103][ T5923] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 82, changing to 7 [ 473.371308][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.385928][ T5922] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 473.398119][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.410113][ T5923] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 473.420762][ T5817] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 473.432278][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.441060][ T5922] usb 7-1: Product: syz [ 473.445272][ T5922] usb 7-1: Manufacturer: syz [ 473.449992][ T5923] usb 1-1: Product: syz [ 473.454309][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.463085][ T5922] usb 7-1: SerialNumber: syz [ 473.467798][ T5923] usb 1-1: Manufacturer: syz [ 473.474039][ T5922] usb 7-1: config 0 descriptor?? [ 473.479615][ T5923] usb 1-1: SerialNumber: syz [ 473.485538][ T5817] usb 2-1: config 0 descriptor?? [ 473.500487][ T5922] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 473.512383][T10696] netlink: 'syz.3.1161': attribute type 4 has an invalid length. [ 473.542331][T10696] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1161'. [ 473.733810][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.756745][ T5922] gspca_ov534_9: reg_w failed -71 [ 473.791616][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.056264][ T5923] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 474.079639][ T5923] usb 1-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 474.099247][ T5923] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 474.117237][ T5923] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 474.166738][ T5817] waterforce 0003:1044:7A4D.000E: item fetching failed at offset 2/41 [ 474.188053][ T5922] gspca_ov534_9: Unknown sensor 0000 [ 474.188126][ T5922] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 474.212888][ T5817] waterforce 0003:1044:7A4D.000E: hid parse failed with -22 [ 474.224846][ T5923] usb 1-1: USB disconnect, device number 40 [ 474.251583][ T5817] waterforce 0003:1044:7A4D.000E: probe with driver waterforce failed with error -22 [ 474.281948][ T5922] usb 7-1: USB disconnect, device number 2 [ 474.417419][ T5817] usb 2-1: USB disconnect, device number 36 [ 474.784513][T10730] syzkaller1: entered promiscuous mode [ 474.797539][T10730] syzkaller1: entered allmulticast mode [ 475.989952][ T29] audit: type=1400 audit(2000000260.670:1015): avc: denied { setopt } for pid=10748 comm="syz.6.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 476.839593][ T5870] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 477.019605][ T29] audit: type=1400 audit(2000000261.710:1016): avc: denied { getopt } for pid=10762 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 477.096024][ T5870] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 477.174045][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.244281][ T5870] usb 1-1: Product: syz [ 477.265123][T10765] netlink: 'syz.5.1171': attribute type 4 has an invalid length. [ 477.274551][ T5870] usb 1-1: Manufacturer: syz [ 477.279441][ T5870] usb 1-1: SerialNumber: syz [ 477.293350][ T5870] usb 1-1: config 0 descriptor?? [ 477.314938][T10765] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1171'. [ 477.386748][T10765] .`: renamed from bond0 (while UP) [ 477.540403][ T5870] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 477.742875][T10757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.768617][T10757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.175602][T10774] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 478.293724][T10775] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 478.301677][T10775] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 478.311136][T10775] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1173'. [ 478.384668][T10775] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 478.392721][T10775] netlink: 'syz.3.1173': attribute type 4 has an invalid length. [ 478.401069][T10775] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1173'. [ 478.892514][T10779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10779 comm=syz.3.1174 [ 479.155407][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1174'. [ 479.283951][ T5870] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 479.351083][ T5870] usb 1-1: USB disconnect, device number 41 [ 479.740096][T10777] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 479.960186][T10785] loop2: detected capacity change from 0 to 7 [ 479.985416][T10785] Dev loop2: unable to read RDB block 7 [ 480.014037][T10785] loop2: AHDI p1 p2 p3 [ 480.039483][T10785] loop2: partition table partially beyond EOD, truncated [ 480.093362][T10785] loop2: p1 start 1818582900 is beyond EOD, truncated [ 480.131242][T10785] loop2: p3 start 335544320 is beyond EOD, truncated [ 480.547376][ T29] audit: type=1400 audit(2000000265.230:1017): avc: denied { ioctl } for pid=10793 comm="syz.3.1180" path="cgroup:[4026532809]" dev="nsfs" ino=4026532809 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.634579][T10810] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 481.707573][T10807] lo speed is unknown, defaulting to 1000 [ 481.746678][T10812] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1183'. [ 481.748130][ T5817] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 481.758278][T10812] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1183'. [ 482.210402][ T5817] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 482.221839][ T5817] usb 4-1: config 0 has no interface number 0 [ 482.249734][ T5817] usb 4-1: config 0 interface 176 has no altsetting 0 [ 482.269670][ T5817] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 482.279011][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.287081][ T5817] usb 4-1: Product: syz [ 482.294145][ T5817] usb 4-1: Manufacturer: syz [ 482.299032][ T5817] usb 4-1: SerialNumber: syz [ 482.332571][ T5817] usb 4-1: config 0 descriptor?? [ 482.398051][ T5922] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 482.768213][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 482.779585][ T5922] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.791178][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 482.804546][ T5922] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.819559][T10805] trusted_key: encrypted_key: insufficient parameters specified [ 482.854584][ T5922] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.861673][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.898764][ T5922] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.899817][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.936403][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.132407][T10822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10822 comm=syz.5.1185 [ 483.763894][ T5922] usb 2-1: GET_CAPABILITIES returned 0 [ 483.789126][ T5922] usbtmc 2-1:16.0: can't read capabilities [ 484.216582][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1187'. [ 484.489810][ T798] usb 2-1: USB disconnect, device number 37 [ 484.608673][ T5817] usb 4-1: USB disconnect, device number 39 [ 484.696207][T10839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10839 comm=syz.0.1189 [ 485.147227][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'. [ 485.618079][ T5922] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 485.731575][ T5927] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 485.922907][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.965467][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 486.064782][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.092584][ T5927] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 486.136888][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 486.149279][ T5922] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 486.226796][ T5927] usb 2-1: Product: syz [ 486.233421][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.269147][ T5927] usb 2-1: Manufacturer: syz [ 486.299704][ T5927] usb 2-1: SerialNumber: syz [ 486.362864][ T5922] usb 6-1: config 0 descriptor?? [ 486.613182][ T5927] usb 2-1: config 0 descriptor?? [ 487.644629][ T5922] usbhid 6-1:0.0: can't add hid device: -71 [ 487.656196][ T5922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 487.805362][ T5922] usb 6-1: USB disconnect, device number 23 [ 487.890021][ T5927] usb 2-1: USB disconnect, device number 38 [ 488.032247][T10869] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 488.096015][ T5870] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 488.181406][T10873] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 488.189318][T10873] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 488.197081][T10873] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1196'. [ 488.274804][T10873] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 488.282785][T10873] netlink: 'syz.1.1196': attribute type 4 has an invalid length. [ 488.290785][T10873] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1196'. [ 488.462567][ T6923] udevd[6923]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.501413][T10879] dns_resolver: Unsupported content type (152) [ 488.640414][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 488.652077][T10882] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 488.715627][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 488.753482][T10886] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1200'. [ 488.770825][T10886] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1200'. [ 488.951636][ T5870] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 488.983392][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.025928][ T5870] usb 4-1: Product: syz [ 489.041834][ T5870] usb 4-1: Manufacturer: syz [ 489.054869][ T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 489.093514][ T5870] usb 4-1: SerialNumber: syz [ 489.116712][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 489.131052][ T5870] usb 4-1: config 0 descriptor?? [ 489.173872][ T5870] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 489.196869][ T10] usb 7-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 489.227430][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.282542][ T10] usb 7-1: Product: syz [ 489.298514][ T10] usb 7-1: Manufacturer: syz [ 489.322341][ T10] usb 7-1: SerialNumber: syz [ 489.458050][ T7641] wlan1: Trigger new scan to find an IBSS to join [ 489.747933][ T5927] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 489.843864][ T5870] gspca_ov534_9: reg_w failed -71 [ 489.866997][T10871] xt_hashlimit: max too large, truncated to 1048576 [ 489.912030][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.929116][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.938943][ T29] audit: type=1400 audit(2000000274.600:1018): avc: denied { map } for pid=10870 comm="syz.6.1197" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 489.989983][ T29] audit: type=1400 audit(2000000274.600:1019): avc: denied { execute } for pid=10870 comm="syz.6.1197" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 490.043727][ T5927] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 490.072038][ T5927] usb 2-1: config 0 has no interface number 0 [ 490.085742][ T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 490.103192][ T5927] usb 2-1: config 0 interface 176 has no altsetting 0 [ 490.188152][ T5927] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 490.200451][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.214844][ T5927] usb 2-1: Product: syz [ 490.220316][ T5927] usb 2-1: Manufacturer: syz [ 490.248037][ T5870] gspca_ov534_9: Unknown sensor 0000 [ 490.248086][ T5870] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 490.251360][ T5927] usb 2-1: SerialNumber: syz [ 490.304046][ T5870] usb 4-1: USB disconnect, device number 40 [ 490.315396][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 490.335434][ T5927] usb 2-1: config 0 descriptor?? [ 490.439442][ T10] usb 7-1: USB disconnect, device number 3 [ 490.513271][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.797422][T10904] trusted_key: encrypted_key: insufficient parameters specified [ 490.940839][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.048314][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.470247][T10908] 9pnet_virtio: no channels available for device 127.0.0.1 [ 492.287979][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 492.450763][ T5923] usb 7-1: Using ep0 maxpacket: 16 [ 492.468802][ T5923] usb 7-1: config 4 has an invalid interface number: 226 but max is 0 [ 492.493842][ T5923] usb 7-1: config 4 has no interface number 0 [ 492.517780][ T5923] usb 7-1: config 4 interface 226 has no altsetting 0 [ 492.541214][ T5923] usb 7-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=44.7a [ 492.567504][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.582377][ T5923] usb 7-1: Product: syz [ 492.607245][ T5923] usb 7-1: Manufacturer: syz [ 492.619225][ T5923] usb 7-1: SerialNumber: syz [ 492.858980][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.878252][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.896633][ T5923] cypress_cy7c63 7-1:4.226: Cypress CY7C63xxx device now attached [ 492.924923][ T5923] usb 7-1: USB disconnect, device number 4 [ 492.945193][ T5923] cypress_cy7c63 7-1:4.226: Cypress CY7C63xxx device now disconnected [ 493.448854][ T3574] wlan1: Trigger new scan to find an IBSS to join [ 494.096428][ T5927] usb 2-1: USB disconnect, device number 39 [ 494.670671][ T7641] wlan1: Creating new IBSS network, BSSID 3a:04:5f:b3:92:a5 [ 494.998726][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 495.758927][T10941] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 495.992829][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.999364][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.300319][ T10] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 496.341901][ T10] usb 6-1: config 0 has no interface number 0 [ 496.441660][ T10] usb 6-1: config 0 interface 176 has no altsetting 0 [ 496.488935][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 496.531880][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.548284][T10947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10947 comm=syz.1.1219 [ 496.585612][ T10] usb 6-1: Product: syz [ 496.618149][ T10] usb 6-1: Manufacturer: syz [ 496.762311][ T10] usb 6-1: SerialNumber: syz [ 496.812945][ T10] usb 6-1: config 0 descriptor?? [ 497.421547][T10933] trusted_key: encrypted_key: insufficient parameters specified [ 497.444775][T10933] trusted_key: encrypted_key: insufficient parameters specified [ 497.579061][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.672370][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.490772][T10956] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 498.631734][T10957] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 498.639759][T10957] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1220'. [ 498.663997][T10957] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 498.672288][T10957] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1220'. [ 499.016777][ T10] usb 6-1: USB disconnect, device number 24 [ 499.156692][T10967] fuse: Bad value for 'user_id' [ 499.170152][T10968] FAULT_INJECTION: forcing a failure. [ 499.170152][T10968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.197672][T10967] fuse: Bad value for 'user_id' [ 499.228478][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.5.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.228506][T10968] Tainted: [L]=SOFTLOCKUP [ 499.228511][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 499.228521][T10968] Call Trace: [ 499.228526][T10968] [ 499.228533][T10968] dump_stack_lvl+0x100/0x190 [ 499.228561][T10968] should_fail_ex.cold+0x5/0xa [ 499.228585][T10968] _copy_to_user+0x32/0xd0 [ 499.228604][T10968] simple_read_from_buffer+0xcb/0x170 [ 499.228624][T10968] proc_fail_nth_read+0x1af/0x230 [ 499.228651][T10968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.228679][T10968] ? rw_verify_area+0xce/0x6d0 [ 499.228703][T10968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.228729][T10968] vfs_read+0x1e4/0xb30 [ 499.228759][T10968] ? __pfx_vfs_read+0x10/0x10 [ 499.228784][T10968] ? __fget_files+0x215/0x3d0 [ 499.228807][T10968] ? __fget_files+0x21f/0x3d0 [ 499.228831][T10968] ksys_read+0x12a/0x250 [ 499.228856][T10968] ? __pfx_ksys_read+0x10/0x10 [ 499.228881][T10968] ? rcu_is_watching+0x12/0xc0 [ 499.228908][T10968] do_syscall_64+0x10b/0xf80 [ 499.228931][T10968] ? clear_bhb_loop+0x40/0x90 [ 499.228952][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.228970][T10968] RIP: 0033:0x7f145635d04e [ 499.228985][T10968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 499.229001][T10968] RSP: 002b:00007f1457243fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.229017][T10968] RAX: ffffffffffffffda RBX: 00007f14572446c0 RCX: 00007f145635d04e [ 499.229028][T10968] RDX: 000000000000000f RSI: 00007f14572440a0 RDI: 0000000000000009 [ 499.229038][T10968] RBP: 00007f1457244090 R08: 0000000000000000 R09: 0000000000000000 [ 499.229048][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.229056][T10968] R13: 00007f1456616128 R14: 00007f1456616090 R15: 00007ffdb23d5708 [ 499.229079][T10968] [ 499.486373][T10961] 9pnet_virtio: no channels available for device 127.0.0.1 [ 499.674272][ T29] audit: type=1400 audit(2000000284.360:1020): avc: denied { watch } for pid=10972 comm="syz.5.1226" path="/131/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 499.780759][ T29] audit: type=1400 audit(2000000284.360:1021): avc: denied { watch_reads } for pid=10972 comm="syz.5.1226" path="/131/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 499.841319][T10985] mkiss: ax0: crc mode is auto. [ 500.284903][T10990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.368895][T10993] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 501.758824][T11009] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 501.830190][T11011] netlink: 'syz.5.1234': attribute type 1 has an invalid length. [ 501.838343][T11011] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1234'. [ 501.868727][T11011] netlink: 'syz.5.1234': attribute type 1 has an invalid length. [ 501.876583][T11011] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1234'. [ 502.317942][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 502.562500][ T10] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 503.080838][ T10] usb 7-1: config 0 has no interface number 0 [ 503.124559][ T10] usb 7-1: config 0 interface 176 has no altsetting 0 [ 503.583278][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 503.592371][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.607715][ T10] usb 7-1: Product: syz [ 503.618050][ T10] usb 7-1: Manufacturer: syz [ 503.693676][ T10] usb 7-1: SerialNumber: syz [ 503.757272][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.766633][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.809179][ T10] usb 7-1: config 0 descriptor?? [ 503.968932][ T5454] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 504.141171][T11037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.161234][ T5454] usb 6-1: Using ep0 maxpacket: 16 [ 504.190195][T11010] trusted_key: encrypted_key: insufficient parameters specified [ 504.199715][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.215885][ T5454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.306155][ T5454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.365802][ T5454] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.402174][ T5454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.421707][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.468538][ T5454] usb 6-1: config 0 descriptor?? [ 504.469518][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.628385][T11045] FAULT_INJECTION: forcing a failure. [ 504.628385][T11045] name failslab, interval 1, probability 0, space 0, times 0 [ 504.641058][T11045] CPU: 0 UID: 0 PID: 11045 Comm: syz.1.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.641078][T11045] Tainted: [L]=SOFTLOCKUP [ 504.641082][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 504.641089][T11045] Call Trace: [ 504.641094][T11045] [ 504.641101][T11045] dump_stack_lvl+0x100/0x190 [ 504.641118][T11045] should_fail_ex.cold+0x5/0xa [ 504.641134][T11045] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 504.641150][T11045] should_failslab+0xc2/0x120 [ 504.641160][T11045] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 504.641179][T11045] __kmalloc_node_noprof+0xe6/0x850 [ 504.641194][T11045] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 504.641214][T11045] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 504.641229][T11045] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 504.641243][T11045] crypto_create_tfm_node+0x85/0x350 [ 504.641258][T11045] crypto_alloc_tfm_node+0x102/0x260 [ 504.641273][T11045] tls_set_sw_offload+0xd4d/0x1670 [ 504.641291][T11045] tls_setsockopt+0xecf/0x1df0 [ 504.641309][T11045] ? __pfx_tls_setsockopt+0x10/0x10 [ 504.641329][T11045] ? selinux_socket_setsockopt+0x6a/0x80 [ 504.641344][T11045] ? sock_common_setsockopt+0x2e/0xf0 [ 504.641357][T11045] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 504.641370][T11045] do_sock_setsockopt+0xf3/0x1d0 [ 504.641384][T11045] __sys_setsockopt+0x195/0x220 [ 504.641403][T11045] __x64_sys_setsockopt+0xbd/0x160 [ 504.641417][T11045] ? do_syscall_64+0x90/0xf80 [ 504.641433][T11045] ? lockdep_hardirqs_on+0x78/0x100 [ 504.641447][T11045] do_syscall_64+0x10b/0xf80 [ 504.641462][T11045] ? clear_bhb_loop+0x40/0x90 [ 504.641475][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.641486][T11045] RIP: 0033:0x7ff21419c819 [ 504.641496][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.641507][T11045] RSP: 002b:00007ff215013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.641518][T11045] RAX: ffffffffffffffda RBX: 00007ff214416090 RCX: 00007ff21419c819 [ 504.641525][T11045] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000005 [ 504.641531][T11045] RBP: 00007ff215013090 R08: 0000000000000038 R09: 0000000000000000 [ 504.641537][T11045] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 504.641543][T11045] R13: 00007ff214416128 R14: 00007ff214416090 R15: 00007fffa24001c8 [ 504.641557][T11045] [ 505.075257][ T5454] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 505.082316][ T5454] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 505.133250][ T5454] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 505.133274][ T5454] microsoft 0003:045E:07DA.000F: no inputs found [ 505.133282][ T5454] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 505.674145][T11052] overlayfs: missing 'workdir' [ 505.797667][T11054] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 505.907649][T11055] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 505.907750][T11055] netlink: 'syz.1.1246': attribute type 4 has an invalid length. [ 505.907764][T11055] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1246'. [ 507.948050][ T5923] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 507.971037][ T798] usb 6-1: USB disconnect, device number 25 [ 508.161902][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.193386][ T5923] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.225473][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.255535][ T5923] usb 1-1: config 0 descriptor?? [ 508.283308][ T5923] pwc: Askey VC010 type 2 USB webcam detected. [ 508.318313][ T10] usb 7-1: USB disconnect, device number 5 [ 508.678287][ T5923] pwc: recv_control_msg error -32 req 02 val 2b00 [ 508.752168][T11069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11069 comm=syz.5.1251 [ 508.903288][ T29] audit: type=1400 audit(2000000293.590:1022): avc: denied { ioctl } for pid=11058 comm="syz.0.1248" path="socket:[35018]" dev="sockfs" ino=35018 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 508.929031][ T5923] pwc: recv_control_msg error -71 req 02 val 2c00 [ 508.945912][ T5923] pwc: recv_control_msg error -71 req 04 val 1000 [ 508.956292][ T5923] pwc: recv_control_msg error -71 req 04 val 1300 [ 508.978233][ T5923] pwc: recv_control_msg error -71 req 04 val 1400 [ 509.013777][ T5923] pwc: recv_control_msg error -71 req 02 val 2000 [ 509.039309][ T5923] pwc: recv_control_msg error -71 req 02 val 2100 [ 509.064816][ T5923] pwc: recv_control_msg error -71 req 04 val 1500 [ 509.111577][ T5923] pwc: recv_control_msg error -71 req 02 val 2500 [ 509.142038][ T5923] pwc: recv_control_msg error -71 req 02 val 2400 [ 509.163647][ T5923] pwc: recv_control_msg error -71 req 02 val 2600 [ 509.177710][ T5923] pwc: recv_control_msg error -71 req 02 val 2900 [ 509.197228][ T5923] pwc: recv_control_msg error -71 req 02 val 2800 [ 509.221313][ T5923] pwc: recv_control_msg error -71 req 04 val 1100 [ 509.243486][ T5923] pwc: recv_control_msg error -71 req 04 val 1200 [ 509.359175][ T5923] pwc: Registered as video103. [ 509.390876][ T5923] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 509.429050][ T5923] usb 1-1: USB disconnect, device number 42 [ 511.398020][T11099] syzkaller0: entered allmulticast mode [ 512.394477][ T798] hid_parser_main: 14 callbacks suppressed [ 512.394491][ T798] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 512.438459][ T29] audit: type=1400 audit(2000000297.110:1023): avc: denied { lock } for pid=11125 comm="syz.6.1264" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 513.725058][ T798] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.810159][T11134] netlink: 'syz.5.1266': attribute type 1 has an invalid length. [ 514.013139][T11135] fido_id[11135]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 514.366536][T11146] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 514.459203][T11148] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 514.467082][T11148] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 514.474912][T11148] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1271'. [ 514.696596][T11144] FAULT_INJECTION: forcing a failure. [ 514.696596][T11144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.936439][T11144] CPU: 1 UID: 0 PID: 11144 Comm: syz.5.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.936459][T11144] Tainted: [L]=SOFTLOCKUP [ 514.936463][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 514.936469][T11144] Call Trace: [ 514.936473][T11144] [ 514.936478][T11144] dump_stack_lvl+0x100/0x190 [ 514.936496][T11144] should_fail_ex.cold+0x5/0xa [ 514.936511][T11144] _copy_from_iter+0x1f4/0x1690 [ 514.936525][T11144] ? __asan_memset+0x23/0x50 [ 514.936539][T11144] ? __pfx__copy_from_iter+0x10/0x10 [ 514.936550][T11144] ? __pfx___alloc_skb+0x10/0x10 [ 514.936570][T11144] netlink_sendmsg+0x808/0xda0 [ 514.936585][T11144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.936597][T11144] ? __might_fault+0xc0/0x140 [ 514.936617][T11144] ____sys_sendmsg+0x9e1/0xb70 [ 514.936628][T11144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.936642][T11144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.936659][T11144] ___sys_sendmsg+0x190/0x1e0 [ 514.936673][T11144] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.936700][T11144] __sys_sendmsg+0x170/0x220 [ 514.936717][T11144] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.936738][T11144] ? rcu_is_watching+0x12/0xc0 [ 514.936755][T11144] do_syscall_64+0x10b/0xf80 [ 514.936769][T11144] ? clear_bhb_loop+0x40/0x90 [ 514.936782][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.936793][T11144] RIP: 0033:0x7f145639c819 [ 514.936802][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.936812][T11144] RSP: 002b:00007f1457244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.936823][T11144] RAX: ffffffffffffffda RBX: 00007f1456616090 RCX: 00007f145639c819 [ 514.936830][T11144] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 514.936836][T11144] RBP: 00007f1457244090 R08: 0000000000000000 R09: 0000000000000000 [ 514.936843][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.936849][T11144] R13: 00007f1456616128 R14: 00007f1456616090 R15: 00007ffdb23d5708 [ 514.936862][T11144] [ 516.174770][T11167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11167 comm=syz.1.1276 [ 517.725549][T11191] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 517.952203][T11194] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 517.960530][T11194] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1283'. [ 518.774738][T11191] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 518.782594][T11191] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1283'. [ 518.919396][ T29] audit: type=1326 audit(2000000303.610:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 518.984892][ T29] audit: type=1326 audit(2000000303.610:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.138944][ T29] audit: type=1326 audit(2000000303.660:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.206970][ T29] audit: type=1326 audit(2000000303.750:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.268032][ T29] audit: type=1326 audit(2000000303.750:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.324822][ T29] audit: type=1326 audit(2000000303.760:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.368091][ T798] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 519.379861][ T5876] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 519.405825][ T29] audit: type=1326 audit(2000000303.760:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.462663][ T29] audit: type=1326 audit(2000000303.760:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.521013][ T29] audit: type=1326 audit(2000000303.760:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.585480][ T29] audit: type=1326 audit(2000000303.760:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11198 comm="syz.6.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107dd9c819 code=0x7ffc0000 [ 519.585630][ T798] usb 2-1: Using ep0 maxpacket: 32 [ 519.689786][ T5876] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 519.718138][ T5876] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.745903][ T5876] usb 1-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 519.763304][ T798] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 519.785581][ T5876] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 519.806283][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.929433][ T5876] usb 1-1: Product: syz [ 519.936730][ T798] usb 2-1: Product: syz [ 519.954312][ T5876] usb 1-1: Manufacturer: syz [ 519.968948][ T798] usb 2-1: Manufacturer: syz [ 519.995497][ T798] usb 2-1: SerialNumber: syz [ 520.434193][ T798] usb 2-1: config 0 descriptor?? [ 520.441072][ T5876] hub 1-1:4.0: USB hub found [ 520.479377][ T798] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 520.523807][ T798] dvb-usb: bulk message failed: -22 (4/0) [ 520.572908][ T798] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.699247][ T798] dvb-usb: bulk message failed: -22 (5/0) [ 520.707999][ T5876] hub 1-1:4.0: 2 ports detected [ 520.717666][ T798] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 520.936838][ T798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.038763][ T798] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 521.093906][ T798] usb 2-1: media controller created [ 521.118427][T11222] input: syz1 as /devices/virtual/input/input26 [ 521.152411][ T5876] hub 1-1:4.0: set hub depth failed [ 521.204868][ T5876] usb 1-1: USB disconnect, device number 43 [ 521.211481][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.772274][T11229] cgroup: fork rejected by pids controller in /syz1 [ 524.452493][ C0] sched: DL replenish lagged too much [ 524.456387][ T798] usb 2-1: selecting invalid altsetting 3 [ 525.440454][ T798] ttusb2: set interface to alts=3 failed [ 526.414339][ T7641] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.705365][ T798] DVB: Unable to find symbol tda10086_attach() [ 527.769381][ T798] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 528.112655][ T798] dvb-usb: bulk message failed: -22 (4/0) [ 528.202056][ T798] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 528.500973][ T798] dvb-usb: bulk message failed: -22 (5/0) [ 528.555567][ T798] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 528.642626][ T798] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 528.666956][T11279] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 528.768109][T11280] netlink: 'syz.5.1299': attribute type 1 has an invalid length. [ 528.776158][T11280] netlink: 'syz.5.1299': attribute type 4 has an invalid length. [ 528.784470][T11280] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1299'. [ 529.487756][T11280] netlink: 'syz.5.1299': attribute type 1 has an invalid length. [ 529.501474][T11280] netlink: 'syz.5.1299': attribute type 4 has an invalid length. [ 529.512689][T11280] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1299'. [ 529.596980][ T798] usb 2-1: USB disconnect, device number 40 [ 530.120092][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1300'. [ 530.234901][T11292] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1300'. [ 530.244398][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 530.244429][ T29] audit: type=1400 audit(2000000314.820:1046): avc: denied { setopt } for pid=11288 comm="syz.6.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 530.466471][ T798] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 532.178732][T11310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.199535][T11310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.209491][T11310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.219341][T11310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.228543][T11310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.284164][T11309] lo speed is unknown, defaulting to 1000 [ 532.627146][T11309] chnl_net:caif_netlink_parms(): no params data found [ 532.798463][ T5870] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 533.488682][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 533.501843][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.603346][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.616826][ T5870] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 533.641436][T11309] bridge_slave_0: entered allmulticast mode [ 533.672608][T11326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11326 comm=syz.6.1309 [ 533.686081][T11309] bridge_slave_0: entered promiscuous mode [ 533.711016][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.732467][ T5870] usb 1-1: config 0 has no interface number 0 [ 533.820025][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.847558][T11309] bridge_slave_1: entered allmulticast mode [ 534.083125][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1309'. [ 534.309468][ T5870] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.321191][ T5870] usb 1-1: config 0 interface 85 has no altsetting 0 [ 534.321944][T11309] bridge_slave_1: entered promiscuous mode [ 534.335354][ T5822] Bluetooth: hci2: command tx timeout [ 534.399035][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 534.425761][T11334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11334 comm=syz.5.1308 [ 534.473353][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.576433][ T5870] usb 1-1: Product: syz [ 534.587522][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.597981][ T5927] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 534.609717][ T5870] usb 1-1: Manufacturer: syz [ 534.731586][ T5870] usb 1-1: SerialNumber: syz [ 534.761682][ T5870] usb 1-1: config 0 descriptor?? [ 534.767996][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 535.223520][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 535.284007][ T5927] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 535.300251][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.386600][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.415725][ T5927] usb 2-1: Product: syz [ 535.445323][ T5927] usb 2-1: Manufacturer: syz [ 535.473429][ T5927] usb 2-1: SerialNumber: syz [ 535.693506][T11309] team0: Port device team_slave_0 added [ 535.733259][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.846291][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'. [ 536.001250][ T5927] usb 2-1: USB disconnect, device number 41 [ 536.032017][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1312'. [ 536.047670][ T5870] usb 1-1: can't set config #0, error -71 [ 536.093028][ T5870] usb 1-1: USB disconnect, device number 44 [ 536.096433][ T6011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.255073][T11353] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 536.432101][ T5822] Bluetooth: hci2: command tx timeout [ 536.642249][T11309] team0: Port device team_slave_1 added [ 536.699366][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.800598][T11344] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 536.839035][T11361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11361 comm=syz.1.1315 [ 536.960180][ T6011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.149270][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.219580][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.437908][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.526784][T11370] ubi31: attaching mtd0 [ 537.886660][T11370] ubi31: scanning is finished [ 537.891578][T11370] ubi31: empty MTD device detected [ 537.895251][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.962890][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.055941][T11370] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 538.080452][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.335922][T11380] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 538.417893][T11381] overlayfs: conflicting lowerdir path [ 538.488554][ T5822] Bluetooth: hci2: command tx timeout [ 538.754116][ T6011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.872322][ T5870] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 540.311382][ T5870] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 540.321413][ T6011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.343099][T11393] input: syz1 as /devices/virtual/input/input27 [ 540.362517][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.398377][ T5870] usb 6-1: Product: syz [ 540.410464][ T5870] usb 6-1: Manufacturer: syz [ 540.435376][ T5870] usb 6-1: SerialNumber: syz [ 540.452878][T11309] hsr_slave_0: entered promiscuous mode [ 540.526542][T11309] hsr_slave_1: entered promiscuous mode [ 540.544719][T11309] debugfs: 'hsr0' already exists in 'hsr' [ 540.570622][T11309] Cannot create hsr debugfs directory [ 540.578109][ T5822] Bluetooth: hci2: command tx timeout [ 540.657505][T11393] xt_hashlimit: max too large, truncated to 1048576 [ 542.931440][ T5870] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 542.975499][ T5870] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 543.079282][T11414] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 543.155367][ T5870] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 543.186633][T11415] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 543.195642][T11415] netlink: 'syz.1.1326': attribute type 4 has an invalid length. [ 543.205736][T11415] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1326'. [ 543.271376][T11415] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 543.279436][T11415] netlink: 'syz.1.1326': attribute type 4 has an invalid length. [ 543.288849][T11415] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1326'. [ 543.461916][ T29] audit: type=1400 audit(2000000328.150:1047): avc: denied { name_connect } for pid=11417 comm="syz.0.1327" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 543.517703][ T5870] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 543.615811][ T6011] bridge_slave_1: left allmulticast mode [ 543.641457][ T5870] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 543.644288][ T6011] bridge_slave_1: left promiscuous mode [ 543.659665][ T5822] Bluetooth: hci6: unexpected cc 0x0c13 length: 85 > 1 [ 543.690416][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.909277][ T6011] bridge_slave_0: left allmulticast mode [ 544.007281][ T6011] bridge_slave_0: left promiscuous mode [ 544.044359][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.060877][ T5822] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 544.605797][ T5870] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 544.627728][ T5870] usb 6-1: USB disconnect, device number 26 [ 544.845037][T11443] random: crng reseeded on system resumption [ 544.860118][ T29] audit: type=1400 audit(2000000329.530:1048): avc: denied { write } for pid=11442 comm="syz.1.1333" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 545.040178][T11447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1333'. [ 545.094308][ T29] audit: type=1800 audit(2000000329.700:1049): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1329" name="/" dev="fuse" ino=4 res=0 errno=0 [ 545.177969][ T5870] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 545.490034][ T5870] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 545.584854][ T5870] usb 6-1: config 0 has no interface number 0 [ 545.592354][ T5870] usb 6-1: config 0 interface 176 has no altsetting 0 [ 545.606937][ T5870] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 545.624450][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.079924][ T5870] usb 6-1: Product: syz [ 546.122926][ T5870] usb 6-1: Manufacturer: syz [ 546.130725][ T5870] usb 6-1: SerialNumber: syz [ 546.141421][ T5870] usb 6-1: config 0 descriptor?? [ 546.578868][ T6011] bond1 (unregistering): (slave geneve2): Releasing active interface [ 546.693147][T11471] trusted_key: encrypted_key: insufficient parameters specified [ 547.436124][ T29] audit: type=1400 audit(2000000332.120:1050): avc: denied { read } for pid=11470 comm="syz.6.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 547.832608][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.863230][ T29] audit: type=1400 audit(2000000332.260:1051): avc: denied { connect } for pid=11470 comm="syz.6.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.922787][T11479] slcan: can't register candev [ 547.944096][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.156949][ T6011] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 548.186574][ T6011] bridge2 (unregistering): left promiscuous mode [ 548.372473][ T6011] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 548.417715][ T6011] bridge3 (unregistering): left promiscuous mode [ 548.507071][ T6011] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 548.529312][ T6011] bridge4 (unregistering): left promiscuous mode [ 548.595413][ T6011] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 548.633863][ T6011] bridge5 (unregistering): left promiscuous mode [ 548.650706][T11486] netlink: 'syz.6.1342': attribute type 30 has an invalid length. [ 548.746289][T11489] netlink: 'syz.6.1342': attribute type 30 has an invalid length. [ 548.758505][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.813088][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.856865][ T6011] bond0 (unregistering): Released all slaves [ 548.908206][ T6011] bond1 (unregistering): Released all slaves [ 549.016734][ T6011] bond2 (unregistering): Released all slaves [ 549.061206][ T6011] bond3 (unregistering): Released all slaves [ 549.117138][ T6011] bond4 (unregistering): Released all slaves [ 549.141783][ T6011] bond5 (unregistering): Released all slaves [ 549.174295][ T6011] bond6 (unregistering): Released all slaves [ 549.213148][ T5478] 8021q: adding VLAN 0 to HW filter on device eth5 [ 549.224785][T11476] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 549.388446][ T5922] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 549.593854][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 549.616836][ T5922] usb 7-1: config 1 has an invalid descriptor of length 87, skipping remainder of the config [ 549.651215][ T5922] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 549.786867][ T5922] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 549.798673][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.817313][ T5922] usb 7-1: Product: syz [ 550.040746][ T29] audit: type=1400 audit(2000000334.700:1052): avc: denied { ioctl } for pid=11501 comm="syz.0.1343" path="socket:[36832]" dev="sockfs" ino=36832 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 550.775009][ T5922] usb 7-1: Manufacturer: syz [ 550.779874][ T5922] usb 7-1: SerialNumber: syz [ 550.861481][ T5870] usb 6-1: USB disconnect, device number 27 [ 551.308475][T11510] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 551.451703][T11512] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 551.459665][T11512] netlink: 'syz.0.1345': attribute type 4 has an invalid length. [ 551.467503][T11512] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1345'. [ 552.333419][T11309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 552.381101][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.444373][ T5922] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 552.535861][T11309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 552.570886][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.603745][ T5922] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 552.616941][T11309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 552.643214][ T5922] usb 7-1: disable ehci-hcd to run US-144 [ 552.664431][ T5922] usb 7-1: disable ehci-hcd to run US-144 [ 552.693469][ T5922] usb 7-1: USB disconnect, device number 6 [ 552.777533][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.219254][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.332722][ T6011] hsr_slave_0: left promiscuous mode [ 553.458480][ T6011] hsr_slave_1: left promiscuous mode [ 553.495684][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.536672][ T5922] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 553.822995][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.856210][ T5922] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.921293][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.033314][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.250085][T11556] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in; [ 554.250085][T11556] program syz.6.1353 not setting count and/or reply_len properly [ 554.860270][ T6011] veth1_macvtap: left promiscuous mode [ 554.885516][T11558] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1354'. [ 554.913620][ T6011] veth0_macvtap: left promiscuous mode [ 554.956999][ T6011] veth1_vlan: left promiscuous mode [ 554.996148][ T6011] veth0_vlan: left promiscuous mode [ 556.016511][T11573] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 556.074068][T11574] overlayfs: conflicting lowerdir path [ 556.286970][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 556.306128][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 556.423618][T11309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.432925][T11309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.445035][ T5478] 8021q: adding VLAN 0 to HW filter on device eth6 [ 556.815934][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.889793][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.911128][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.911200][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.912034][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.912083][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.383952][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.384003][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.111269][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.699961][ T504] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 559.744071][T11624] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1364'. [ 560.420488][ T29] audit: type=1326 audit(2000000345.110:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 560.501541][ T29] audit: type=1326 audit(2000000345.130:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 560.556433][T11640] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1367'. [ 560.565568][T11640] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1367'. [ 560.680235][ T29] audit: type=1326 audit(2000000345.130:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 560.722260][ T29] audit: type=1326 audit(2000000345.140:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f115df5d04e code=0x7ffc0000 [ 560.785494][T11643] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 560.863725][T11644] overlayfs: conflicting lowerdir path [ 561.163457][ T29] audit: type=1326 audit(2000000345.140:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f115df9db17 code=0x7ffc0000 [ 561.213416][ T29] audit: type=1326 audit(2000000345.140:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 561.305629][ T29] audit: type=1326 audit(2000000345.140:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f115df9db17 code=0x7ffc0000 [ 561.397113][T11309] veth0_vlan: entered promiscuous mode [ 561.429795][ T29] audit: type=1326 audit(2000000345.140:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f115df5d04e code=0x7ffc0000 [ 561.493725][T11309] veth1_vlan: entered promiscuous mode [ 561.576157][ T29] audit: type=1326 audit(2000000345.140:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 561.611061][ T5478] 8021q: adding VLAN 0 to HW filter on device eth7 [ 561.636524][T11309] veth0_macvtap: entered promiscuous mode [ 561.706969][T11309] veth1_macvtap: entered promiscuous mode [ 561.758661][ T29] audit: type=1326 audit(2000000345.140:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11628 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115df9c819 code=0x7ffc0000 [ 561.794053][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.842371][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.265377][ T7644] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.265663][ T5923] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 562.302818][ T5923] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.324088][ T7644] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.380344][ T7644] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.398824][T11664] input: syz1 as /devices/virtual/input/input28 [ 562.449970][ T7644] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.551937][ T5923] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 562.593669][ T5923] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 563.332963][T11682] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 563.434955][T11683] netlink: 'syz.6.1374': attribute type 1 has an invalid length. [ 563.442877][T11683] netlink: 'syz.6.1374': attribute type 4 has an invalid length. [ 563.450779][T11683] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1374'. [ 563.469414][T11683] netlink: 'syz.6.1374': attribute type 1 has an invalid length. [ 563.477481][T11683] netlink: 'syz.6.1374': attribute type 4 has an invalid length. [ 563.485314][T11683] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1374'. [ 564.474871][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.567944][T11310] Bluetooth: hci6: command 0x0406 tx timeout [ 564.588463][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.772155][ T5478] 8021q: adding VLAN 0 to HW filter on device eth8 [ 564.808560][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.840858][T11703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11703 comm=syz.5.1378 [ 564.858763][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.889242][T11707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11707 comm=syz.6.1380 [ 565.212800][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1378'. [ 565.934027][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1380'. [ 566.353040][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1382'. [ 566.524256][ T5927] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 566.693798][ T5923] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 566.872012][ T5927] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 567.030763][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.062036][ T5923] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.105170][ T5923] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 567.143303][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.172181][ T5923] usb 7-1: config 0 descriptor?? [ 567.601288][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.630253][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.662904][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.791430][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.827892][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 567.837942][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.867299][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.900454][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.935356][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 567.971850][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 568.008464][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 568.008675][ T5923] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 568.031601][ T10] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 568.056181][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.082721][ T5923] kovaplus 0003:1E7D:2D50.0015: item fetching failed at offset 76/203 [ 568.119496][ T10] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 568.120593][ T5923] kovaplus 0003:1E7D:2D50.0015: parse failed [ 568.166760][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.191941][ T5923] kovaplus 0003:1E7D:2D50.0015: probe with driver kovaplus failed with error -22 [ 568.194623][ T10] usb 1-1: Product: syz [ 568.230214][ T10] usb 1-1: Manufacturer: syz [ 568.247481][ T10] usb 1-1: SerialNumber: syz [ 568.306184][ T5923] usb 7-1: USB disconnect, device number 7 [ 568.308871][ T10] usb 1-1: config 0 descriptor?? [ 568.370787][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 569.752569][ T10] gspca_sunplus: reg_r err -110 [ 570.189982][T11759] netlink: 'syz.1.1391': attribute type 6 has an invalid length. [ 570.344565][T11759] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1391'. [ 570.915506][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 570.915522][ T29] audit: type=1400 audit(2000000355.600:1068): avc: denied { watch watch_reads } for pid=11772 comm="syz.1.1394" path="/298/file1" dev="tmpfs" ino=1669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 571.195576][T11775] netlink: 'syz.1.1394': attribute type 32 has an invalid length. [ 572.758696][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 572.781210][ T10] usb 1-1: USB disconnect, device number 45 [ 573.982079][T11804] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 574.086958][T11806] netlink: 'syz.7.1401': attribute type 1 has an invalid length. [ 574.095040][T11806] netlink: 'syz.7.1401': attribute type 4 has an invalid length. [ 574.103234][T11806] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1401'. [ 574.163974][T11806] netlink: 'syz.7.1401': attribute type 1 has an invalid length. [ 574.171879][T11806] netlink: 'syz.7.1401': attribute type 4 has an invalid length. [ 574.179716][T11806] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1401'. [ 574.477898][ T5923] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 574.522212][T11811] FAULT_INJECTION: forcing a failure. [ 574.522212][T11811] name failslab, interval 1, probability 0, space 0, times 0 [ 574.632314][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.6.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.632334][T11811] Tainted: [L]=SOFTLOCKUP [ 574.632338][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 574.632344][T11811] Call Trace: [ 574.632349][T11811] [ 574.632353][T11811] dump_stack_lvl+0x100/0x190 [ 574.632375][T11811] should_fail_ex.cold+0x5/0xa [ 574.632390][T11811] ? tomoyo_encode2+0xfb/0x3c0 [ 574.632400][T11811] should_failslab+0xc2/0x120 [ 574.632412][T11811] __kmalloc_noprof+0xe0/0x850 [ 574.632430][T11811] ? d_absolute_path+0x136/0x1b0 [ 574.632448][T11811] tomoyo_encode2+0xfb/0x3c0 [ 574.632461][T11811] tomoyo_encode+0x29/0x50 [ 574.632470][T11811] tomoyo_realpath_from_path+0x18c/0x690 [ 574.632484][T11811] tomoyo_mount_acl+0x1b6/0x8b0 [ 574.632500][T11811] ? is_bpf_text_address+0x8a/0x1a0 [ 574.632514][T11811] ? bpf_ksym_find+0x128/0x1c0 [ 574.632528][T11811] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 574.632541][T11811] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 574.632556][T11811] ? kernel_text_address+0x8d/0x100 [ 574.632570][T11811] ? unwind_get_return_address+0x59/0xa0 [ 574.632599][T11811] ? tomoyo_domain+0xb2/0x150 [ 574.632610][T11811] ? tomoyo_profile+0x47/0x60 [ 574.632623][T11811] tomoyo_mount_permission+0x214/0x460 [ 574.632639][T11811] ? tomoyo_mount_permission+0x1f6/0x460 [ 574.632656][T11811] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 574.632688][T11811] security_sb_mount+0xdd/0x270 [ 574.632713][T11811] path_mount+0x158/0x23d0 [ 574.632741][T11811] ? __pfx_path_mount+0x10/0x10 [ 574.632760][T11811] ? lockdep_hardirqs_on+0x78/0x100 [ 574.632778][T11811] ? putname+0xb1/0x110 [ 574.632790][T11811] ? kmem_cache_free+0x127/0x6c0 [ 574.632809][T11811] ? __x64_sys_mount+0x293/0x310 [ 574.632822][T11811] __x64_sys_mount+0x293/0x310 [ 574.632836][T11811] ? __pfx___x64_sys_mount+0x10/0x10 [ 574.632851][T11811] ? rcu_is_watching+0x12/0xc0 [ 574.632868][T11811] do_syscall_64+0x10b/0xf80 [ 574.632882][T11811] ? clear_bhb_loop+0x40/0x90 [ 574.632895][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.632906][T11811] RIP: 0033:0x7f107dd9c819 [ 574.632915][T11811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.632926][T11811] RSP: 002b:00007f107ec4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 574.632937][T11811] RAX: ffffffffffffffda RBX: 00007f107e015fa0 RCX: 00007f107dd9c819 [ 574.632943][T11811] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000000000000000 [ 574.632949][T11811] RBP: 00007f107ec4e090 R08: 0000200000000080 R09: 0000000000000000 [ 574.632956][T11811] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000001 [ 574.632962][T11811] R13: 00007f107e016038 R14: 00007f107e015fa0 R15: 00007ffe8f2888e8 [ 574.632976][T11811] [ 574.635990][T11811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.952328][ T5923] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 574.972169][ T5923] usb 1-1: config 0 has no interface number 0 [ 575.007611][ T5923] usb 1-1: config 0 interface 176 has no altsetting 0 [ 575.048709][ T5923] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 575.062900][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.087935][T11819] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 575.103316][ T5923] usb 1-1: Product: syz [ 575.113482][ T5923] usb 1-1: Manufacturer: syz [ 575.123641][ T5923] usb 1-1: SerialNumber: syz [ 575.224209][T11821] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1407'. [ 575.404241][ T5923] usb 1-1: config 0 descriptor?? [ 575.671617][T11805] trusted_key: encrypted_key: insufficient parameters specified [ 575.687960][ T5927] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 575.703567][T11805] trusted_key: encrypted_key: insufficient parameters specified [ 575.841429][ T5927] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 575.860989][ T5927] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 575.878075][ T5922] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 575.886788][ T5927] usb 2-1: Product: syz [ 575.893445][ T5927] usb 2-1: Manufacturer: syz [ 575.916634][ T5927] usb 2-1: SerialNumber: syz [ 575.937098][ T5927] usb 2-1: config 0 descriptor?? [ 576.039488][ T5922] usb 7-1: config 0 has an invalid interface number: 176 but max is 0 [ 576.058867][ T5922] usb 7-1: config 0 has no interface number 0 [ 576.086254][ T5922] usb 7-1: config 0 interface 176 has no altsetting 0 [ 576.120637][ T5922] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=33.b4 [ 576.135406][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.143839][ T5922] usb 7-1: Product: syz [ 576.148453][ T5922] usb 7-1: Manufacturer: syz [ 576.158740][ T5927] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 576.169805][ T5922] usb 7-1: SerialNumber: syz [ 576.214420][ T5922] usb 7-1: config 0 descriptor?? [ 576.449338][T11833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1409'. [ 577.099838][T11826] trusted_key: encrypted_key: insufficient parameters specified [ 577.146740][T11826] trusted_key: encrypted_key: insufficient parameters specified [ 577.204999][ T5923] usb 1-1: USB disconnect, device number 46 [ 577.208367][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.295993][ T5927] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 577.315401][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.342787][T11839] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 577.352255][ T5927] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 577.602417][T11839] bond2: entered promiscuous mode [ 577.651055][T11839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.865192][ T7823] ------------[ cut here ]------------ [ 577.870779][ T7823] time_after(jiffies, warn_timeout) [ 577.870787][ T7823] WARNING: io_uring/io-wq.c:1369 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.4.487/7823 [ 577.885942][ T7823] Modules linked in: [ 577.889893][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.4.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.900698][ T7823] Tainted: [L]=SOFTLOCKUP [ 577.905027][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 577.915476][ T7823] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 577.921534][ T7823] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 5f c5 4d 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 0f 37 16 fd 4d 85 ff 79 aa e8 25 3c 16 fd 90 <0f> 0b 90 eb 9f e8 1a 3c 16 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 577.941226][ T7823] RSP: 0018:ffffc9000f0df8d0 EFLAGS: 00010293 [ 577.947289][ T7823] RAX: 0000000000000000 RBX: ffff88802b434000 RCX: ffffffff84f32d31 [ 577.955355][ T7823] RDX: ffff888028134a00 RSI: ffffffff84f32d3b RDI: ffff888028134a00 [ 577.963376][ T7823] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000 [ 577.971467][ T7823] R10: ffffffffffffe9ad R11: 0000000000000000 R12: 00000001000055ad [ 577.979492][ T7823] R13: 0000000000001b58 R14: ffff88802b434018 R15: ffffffffffffe9ad [ 577.987467][ T7823] FS: 00007f79694126c0(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000 [ 577.996434][ T7823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.003056][ T7823] CR2: 0000200000022000 CR3: 0000000035816000 CR4: 00000000003526f0 [ 578.011317][ T7823] Call Trace: [ 578.014581][ T7823] [ 578.017491][ T7823] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 578.023582][ T7823] ? __pfx___might_resched+0x10/0x10 [ 578.029005][ T7823] ? io_wq_set_exit_on_idle+0x156/0x290 [ 578.034573][ T7823] io_uring_clean_tctx+0x114/0x180 [ 578.039794][ T7823] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 578.045442][ T7823] ? percpu_counter_add_batch+0xb9/0x230 [ 578.051226][ T7823] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 578.057761][ T7823] io_uring_cancel_generic+0x7b9/0x810 [ 578.063308][ T7823] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 578.069373][ T7823] ? __pfx___file_ref_put+0x10/0x10 [ 578.074576][ T7823] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.080728][ T7823] ? fput+0xd9/0x100 [ 578.084746][ T7823] ? io_uring_unreg_ringfd+0xca/0x140 [ 578.090615][ T7823] do_exit+0x344/0x2a60 [ 578.094915][ T7823] ? __pfx_do_exit+0x10/0x10 [ 578.099567][ T7823] ? do_raw_spin_lock+0x128/0x260 [ 578.104614][ T7823] ? find_held_lock+0x2b/0x80 [ 578.109344][ T7823] ? get_signal+0x7e0/0x21e0 [ 578.114185][ T7823] do_group_exit+0xd5/0x2a0 [ 578.119062][ T7823] get_signal+0x1ec7/0x21e0 [ 578.123575][ T7823] ? __pfx_get_signal+0x10/0x10 [ 578.128502][ T7823] ? do_futex+0x192/0x350 [ 578.132844][ T7823] arch_do_signal_or_restart+0x91/0x7a0 [ 578.138424][ T7823] ? rcu_is_watching+0x12/0xc0 [ 578.143182][ T7823] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.149353][ T7823] ? __pfx___x64_sys_futex+0x10/0x10 [ 578.154633][ T7823] ? rcu_is_watching+0x12/0xc0 [ 578.159443][ T7823] exit_to_user_mode_loop+0x86/0x4a0 [ 578.164727][ T7823] ? do_syscall_64+0x52d/0xf80 [ 578.169606][ T7823] do_syscall_64+0x706/0xf80 [ 578.174196][ T7823] ? clear_bhb_loop+0x40/0x90 [ 578.178893][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.184774][ T7823] RIP: 0033:0x7f796859c819 [ 578.189220][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.208861][ T7823] RSP: 002b:00007f79694120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.217517][ T7823] RAX: fffffffffffffe00 RBX: 00007f7968816098 RCX: 00007f796859c819 [ 578.225769][ T7823] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7968816098 [ 578.233811][ T7823] RBP: 00007f7968816090 R08: 0000000000000000 R09: 0000000000000000 [ 578.241796][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.249841][ T7823] R13: 00007f7968816128 R14: 00007ffd1c2ec4f0 R15: 00007ffd1c2ec5d8 [ 578.257814][ T7823] [ 578.260893][ T7823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.268150][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.4.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.278891][ T7823] Tainted: [L]=SOFTLOCKUP [ 578.283188][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 578.293228][ T7823] Call Trace: [ 578.296483][ T7823] [ 578.299391][ T7823] dump_stack_lvl+0x100/0x190 [ 578.304050][ T7823] vpanic+0x552/0x970 [ 578.308009][ T7823] ? __pfx_vpanic+0x10/0x10 [ 578.312491][ T7823] panic+0xd1/0xe0 [ 578.316190][ T7823] ? __pfx_panic+0x10/0x10 [ 578.320596][ T7823] ? check_panic_on_warn+0x1f/0x90 [ 578.325690][ T7823] check_panic_on_warn.cold+0x19/0x34 [ 578.331048][ T7823] ? io_wq_put_and_exit+0x36c/0x9d0 [ 578.336235][ T7823] __warn.cold+0x191/0x328 [ 578.340633][ T7823] __report_bug+0x296/0x3d0 [ 578.345122][ T7823] ? io_wq_put_and_exit+0x36c/0x9d0 [ 578.350299][ T7823] ? __pfx___report_bug+0x10/0x10 [ 578.355303][ T7823] ? irqentry_exit+0x246/0x790 [ 578.360061][ T7823] ? lockdep_hardirqs_on+0x78/0x100 [ 578.365240][ T7823] ? irqentry_exit+0x246/0x790 [ 578.369988][ T7823] ? io_wq_put_and_exit+0x36c/0x9d0 [ 578.375164][ T7823] ? io_wq_put_and_exit+0x36c/0x9d0 [ 578.380340][ T7823] report_bug+0xb2/0x220 [ 578.384566][ T7823] ? io_wq_put_and_exit+0x36c/0x9d0 [ 578.389753][ T7823] handle_bug+0x16a/0x2a0 [ 578.394155][ T7823] exc_invalid_op+0x17/0x50 [ 578.398652][ T7823] asm_exc_invalid_op+0x1a/0x20 [ 578.403488][ T7823] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 578.409278][ T7823] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 5f c5 4d 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 0f 37 16 fd 4d 85 ff 79 aa e8 25 3c 16 fd 90 <0f> 0b 90 eb 9f e8 1a 3c 16 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 578.428866][ T7823] RSP: 0018:ffffc9000f0df8d0 EFLAGS: 00010293 [ 578.434909][ T7823] RAX: 0000000000000000 RBX: ffff88802b434000 RCX: ffffffff84f32d31 [ 578.442853][ T7823] RDX: ffff888028134a00 RSI: ffffffff84f32d3b RDI: ffff888028134a00 [ 578.450798][ T7823] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000 [ 578.458756][ T7823] R10: ffffffffffffe9ad R11: 0000000000000000 R12: 00000001000055ad [ 578.466709][ T7823] R13: 0000000000001b58 R14: ffff88802b434018 R15: ffffffffffffe9ad [ 578.474683][ T7823] ? io_wq_put_and_exit+0x361/0x9d0 [ 578.479862][ T7823] ? io_wq_put_and_exit+0x36b/0x9d0 [ 578.485042][ T7823] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 578.490567][ T7823] ? __pfx___might_resched+0x10/0x10 [ 578.495836][ T7823] ? io_wq_set_exit_on_idle+0x156/0x290 [ 578.501372][ T7823] io_uring_clean_tctx+0x114/0x180 [ 578.506461][ T7823] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 578.512076][ T7823] ? percpu_counter_add_batch+0xb9/0x230 [ 578.517692][ T7823] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 578.524211][ T7823] io_uring_cancel_generic+0x7b9/0x810 [ 578.529665][ T7823] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 578.535627][ T7823] ? __pfx___file_ref_put+0x10/0x10 [ 578.540810][ T7823] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.546865][ T7823] ? fput+0xd9/0x100 [ 578.550734][ T7823] ? io_uring_unreg_ringfd+0xca/0x140 [ 578.556092][ T7823] do_exit+0x344/0x2a60 [ 578.560229][ T7823] ? __pfx_do_exit+0x10/0x10 [ 578.564800][ T7823] ? do_raw_spin_lock+0x128/0x260 [ 578.569804][ T7823] ? find_held_lock+0x2b/0x80 [ 578.574478][ T7823] ? get_signal+0x7e0/0x21e0 [ 578.579059][ T7823] do_group_exit+0xd5/0x2a0 [ 578.583544][ T7823] get_signal+0x1ec7/0x21e0 [ 578.588038][ T7823] ? __pfx_get_signal+0x10/0x10 [ 578.592873][ T7823] ? do_futex+0x192/0x350 [ 578.597199][ T7823] arch_do_signal_or_restart+0x91/0x7a0 [ 578.602735][ T7823] ? rcu_is_watching+0x12/0xc0 [ 578.607480][ T7823] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.613633][ T7823] ? __pfx___x64_sys_futex+0x10/0x10 [ 578.618911][ T7823] ? rcu_is_watching+0x12/0xc0 [ 578.623670][ T7823] exit_to_user_mode_loop+0x86/0x4a0 [ 578.628934][ T7823] ? do_syscall_64+0x52d/0xf80 [ 578.633679][ T7823] do_syscall_64+0x706/0xf80 [ 578.638255][ T7823] ? clear_bhb_loop+0x40/0x90 [ 578.642909][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.648785][ T7823] RIP: 0033:0x7f796859c819 [ 578.653173][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.672752][ T7823] RSP: 002b:00007f79694120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.681154][ T7823] RAX: fffffffffffffe00 RBX: 00007f7968816098 RCX: 00007f796859c819 [ 578.689120][ T7823] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7968816098 [ 578.697070][ T7823] RBP: 00007f7968816090 R08: 0000000000000000 R09: 0000000000000000 [ 578.705014][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.712968][ T7823] R13: 00007f7968816128 R14: 00007ffd1c2ec4f0 R15: 00007ffd1c2ec5d8 [ 578.720938][ T7823] [ 578.724342][ T7823] Kernel Offset: disabled [ 578.728651][ T7823] Rebooting in 86400 seconds..