last executing test programs: 10m24.859805441s ago: executing program 1 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x3accc0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_nofollow}]}) 10m24.574782531s ago: executing program 1 (id=1527): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r2, 0x400, 0x1) fchown(r2, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='mlxsw_sp_acl_tcam_vregion_rehash_rollback_failed\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x10}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}], 0x68) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x10000}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c64d2, &(0x7f0000000180)={r11, 0x80000}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 10m23.746186834s ago: executing program 1 (id=1530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r0}]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a300)=""/102358, 0x18fd6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r5, 0x2007ffb) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r9], 0x1c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/oss_mixer\x00', 0x4040, 0x0) ioctl$BTRFS_IOC_RM_DEV(r11, 0x5000940b, &(0x7f0000019300)={{r7}, "2ce69fea9a0752c0dd9a7f4f9ef2494d7888a238c6c36907f2cd6c2317c7e0b0e89344dafa7cd88be9975413deedb51633840cff2f63bfbc6d806425308e2ddfa5e15e4fa96c63c0ad7c959f0bdc07055d0328a8b3941c8522fbac2093a793a3272a0e40422e4341c6607a8d6fe3ee0a8f1c4a7e0d3ebc88796645a093643025f2b1cfdf88cea3f432562147d45cd530f4a53b559f06963e2df2c87809a3fc48ebf2635bb43bec67a8e212b3fa35a7b22311786077001914a12eda312806abf2840f1e3d6dd11a5941cdea6e8671c2c05addbcd8c93260892a887c1a9a9442db1b5d30546dfb9e85d81e21bd860486267038e720ccf647ad135e1fe0dc890e1a309f7652cda45d45d4c2b9dae257a428c9d735620b27ada56c7ac186b6fc4f81f78ef1a1517e771cfe050afe16f2db42bb776090d6c0b6cb77e5bbbd677d7298b1f76c714a16d1c1d66caebc594c1a42ffc21777f0b45e1b4338c167bcd08837b231e2f8aafa0a976ae48568caf03778ab37e075072e9035447623b39413ad9d66d9c32ceb00fe95b9387ba51ef7d099decbd5642c76d035130e070b033d306679564dd03e03adda1756f553bfdc59be1dd7767c450e398ef87bd8cb31e80bcdfde4dec6319fe3dd310dad4759d7f6fcc8581ac088776b902396c2b6ce468236fa72475611184dbe43201f1f00cbe3e27f04dedc8253c308d7b02b1740d11db58fd588d846640891861c03a9f10126e617a9e61c1176681e48c810dda634975ef7f87b1be7e1e4003f0f78d40b10d187d596af3a7c1d35ac2b6e1e78413527ce29c9ca68df0f5d429370baacb6bf8cb502f57056c0cd2b525bab1a0a3056d747289eadb27e42743bb6c288605a061e00c05569a9bb1302fc65d6089c2faaa11f0cef12dbf2e0b979cd998902a04a29e12172d8f390aabd6b161d5dac334bd6757a3d1b7fd08f367db2a8ad13e70a428d6aa2fe01655b88d0d5c47789fa528080e82c18b8ab895000ee730947ae1ff39bea4863eb05ee275c4377ae40ac89fce8ad9837a38f2b6b9de745de9712a47777dc35c8e75da8567ab00c9828c2fd14cfd4e35f93186fba6bebe964254ce78441c7073500d95f79a9c0614d2cb09df4abf635e653ee2ccfa9eb3336974f69f4f23bb3d0444e486a0f89bb2913684debece505eb1d351aa20dcb4c2ba57cc75c980611ea975e27bc71a1b2509636c4dabc5479483dfa1d12ff141485fd61d47ea11e5e01b8d92be7e0b678493e5da987168fb2f7ba273230010270d41e8e0bed5d976d80e89ba9ab315f8856f18012e2dbd88ee42309616c93d7c4d9b7f94e8dd53892b40b332eab7ab673106ae47042f5be4d9aa8fb6ff3f3b45a2c417a32cb2bb7c9a120e73bbf957612269d5b5cbc5a75ad754eec0483e095bf1ccc387d23dab483fc63195f617fabef50e1d5430bf0cd2a0607ea0b826dd1a65f58051bbb31a64a5fa5a252fdb3e7c4b5950e58b58225a6ce679fbd3dabb66da9a703a799bc0310f66ecb59bdf340aeea05ddd1a0ee65830ae15c9b07ad2fa9da2adf4c2f6bf1c3e26e70f8237abef6646c779a7deb6d8eea30fc67b8438da45c41985cabf1663a965ab3633c5bc725f22c31f93376999a79e999bd2c27ef2e4c544e2e305cac3eec73d85ddf5b7021e81654b5d9162662d560f7f9eb3fa119340db00dc8e5d048e4a4f134b3c73ef2cf0a0dd195b674e544324ea86a613c3ed36b700271034b27f656bcfe6c58c9bdf75cec1b52d71bc9a49400a1b48c2f0014c6e7853ddecd4ea005f9a96f9afdf36b50170ef29e18cf02ccf350dd1328590338ec17d17592cc2b6b6372db5831482f5aaa859ca35dbf030a2ff352ec26f00b63b402f49fca8892d355c619802264ae5531009047553ab4859a36f7a4381e46fdaa55497c242d6a678ab316b7b9c8d29c27f31b034e5057fadd2b640f64221cb154fbdb44f2a38ec390751079a4dbd10dde8c08a1264c8e8487830d288efebd419526eb6e2a69dfc83203ccb6e21942b5a23a1b1561985b218e7b6aaaa89bc665ddb14de02711f93488b46a8cf1f2af6ad28aca1c5e1985dfc10434c8dcc4ef30df8c72b414759d1e5e368820d9867d3114f71800b542e21e89edff6ec89edc8567d978ea449cb23f3dacd2131485f195d9c960156cb171aa66663d475fd7ab649ea5e42b30ccdb36fb9eca938638c4e7a82f0c8fc32d7527db566690b25d89a98c75b1546cffdfea46ee89c9fe4c8d66c0715c694d40d77ed8d9a7af403f31e6d254db44cb519ecde5fbb5a39389001b40b54516a72a3554720c20e75d1920d7b8e224c24eaef6f94cdbde4bd319b72b09097e01ebc10b2e80cd20c7e64e82d5b478490bb21cbb5ade44764dd778039a12361450f2344b3c6339b1fc60bc442101d2a60cd94307cc1ab2f529a10c083dff5b9cbb6f1242f69b41f7f7314e3447c77d7c3057f4733942fe5ffbeecff1212a12030c4f8e5e37db8b5d784f25dacc5f4554c53fa1b6bb7b68486f8fb1b5303b41f09f4c19fcaa3829eb742d4993a2a2a1af305d505563df1a2e7c3a2ee1b835345c581075fe2ade660007d25aa434ea193258b7ba83322647af304daaba76c4df4dcc1d1093e08cfa7ab8ca131374ebfd4f29b7ee45d0274774a5a3ac8f49f5c5f3f314ce1e911ec20edefc97c1ed33112bd8e3d29698c74e64522f8c73cb5d5486828252b925ec9fc8053cdf7c6c2dfda949897d9561f49a4e432b94a3b3d544c09e4666a25590d5e8af6c1d75adf05bb3397e5c9cd5ef79f06ac432596b141dd6f55d303de4f87fc1594bbebd5c39daa08f5ffdd6d26babba9cd2025b13d3cf1fa37de679fbbd4f26eefaab10874716812d762e56903ba8413f9291db7c067a5bb55e9bc34536e613f10b561692e1892118b0464e855ea3b5dd66dcb4652d6cbe0d4ae330176714e30a41295fc045a8e870ceae935d606787d98d4f8bb92c021ae79a99d90c1f25b578cf292f22503dc99168d050d18d5e0e8f3ebca8ed3e4c13bcda2999ac36658fd37c4e112eeed9f023bfef041a30e8569416c17e6a1c40a1ee0558fa71ef2dde17b0b93600410ea8f382613dff147669c651c9453ddd8967f68961fb6d3b9c4a8f825c7b7508b0888befe434875046787c386d39b66335725a63b3b10ee20f614e83e50a114e39df24a3532a8ac0d6cb947203e9c765b7dc8b506a2b56a08c72a0ea55d8108b1ddad2c03840573f339dfd66fd4623bd5b677362c26abacaeca5a2fcd6b3dc4ead8635f96568def72c0fb4fd139416ed7e44902af23ce9c6569ae72c9a247be3a99d1502be1d7215c710d2d9324a8ad349b538ff2de66fe8bee0d7ff671cebfe80c859895155557568954529845a6a6341dd15ab657b89fa78d33bd9d15e4b8eed7c700d308c79c764e1c9025e0747624b310199be1ae28030f029efbbf568844e9858a9888a20b99e5d2bc16a2ffbdf8edac6041542c9fa8f2e33da653e313a2db31ee5ce3123b4af41ed3b12a6703bfba49c5a0e76524a5e247513fa5a6cc78e0d552dfa4c785c466290dbf7b06765d5bb61775d79172988db0773ef6f16c50e006508e5cc20f1efcf9e358d09ad544cbb2138628ed12d27e30a1bdcab367f7094e5d0fe985934ba566ad45642c7f924a2e366374a605db9855b72bb6fcdf18d0da38e00c5a89581f26dea88adf84b024c1afb7cb9dac23bb50a7deab991a054772c6655be21172afe7269dae422655a3626f54d968b3b8859a19b40163bf485598d5cf9ebd92cb0563a188d368cb84cfbc7543d47f38daa6f22f3611f4def4bbb00af2c1b7a49080a7d797b74226b9e3532f28295aa466f172c55f18c8038a820439655e7cf28091e6cef83527d7d4de98e477f7a68884483be3b4c4095492b1f638c5e28a63ba0f33b36926576ac697d13ae276c3ca63a5e124911f7f1750ec83dc3b45c8d8d934f2dd1b92c4ca02c0589c7035207bd3c7e52fbb003115eddd8ab056deade17a6a41c7854920e6cf1caf899810d7a699508da4fde679000d949463790c10a36294ef85e5b82d585cd185d0eba5766340721dcc2c298391525d40c523bd4f80d60391c07c40d77ed07c8d9eed00f880dbdccfb491cb732cfec902f8c5d2b8eb74b3d56b52f5604ba3816848099e3b12fc79782d43d0819355562fe8571b05dba9d7c49553debf296a583ba2d959b033929df0ae5956673a234f8bf8447d70b12dcb440b0af5cf0c116becba912dee148fb45f73d4ecee16bfabef7bed3f842cd6a0e851c4393a2e07b2db822a641a8d72bcae3f62cfbe9c544c1279c384825da04661f7c790dd68050d4cc53057d571cbbc629930feb677a544beb58f82707b7ff29ba64a1203e0d027a32b97bc0343d3c1cb816d2c05a9d7a47f7f3e5fa6ac1cb25e4d10045cd65bc3bc0a3b0a8eb931230c2e8cd7247e485332143dbdb495604a6576acb6fec86d0470d6fe00d0120f16a54f8b3fa8ce782ec98d8872a43426427a0518ce4b15772d0f666d6bd89473da6af1225fd4792c7dca585464178322234810a8235531c82705d7a3f4b729870a7fa340fcf8c470dd1e910ebb7b32d379c48e5c9b7cccdd85bee0c1ad313936b7e5080c7eb50751ba31bc594eb0b929e355e8574da872e66c2123406c785ec3d8d01e73b9083ee9b7bdce53d218bb1e1a9435e6b4e6788fa77b4aa31e38e94f231bb1009f9467fa0936b213ad5a6603b27b6ace58d69b463e2926ad361b04c3abd6506a5366a6a2d660691e121fcd53178534a7c496cc31b8df51f5f22a0a51fde6ff5c8f2bbdc2efaff74ff3d357ee240017c15191374e90ffa2496e29986d457a2076eddceca5e7b4c7b59bf24a7c50de3a88bc2667eb27a861ae50194d94b3e767fb81ce48aa0b8088728e1f4b29635040b94fa8215ab25eb60ddac767f54fff643a2bc4a79f18fc2994e3859d2d18cafbe4186bd9310e7c0ba2073c470f933e6659dfc87b95d08e74b37a98a5ed0c23380d7cca5888c9f24b4a8461bd229200a9b8d8e10dc90644884e56382226987e23fd32e26297156a87280405ab490ec8fd8c5def19b81b9fbfb813cf56a4932e26b6df9ba5c3e6c3d7d001c1da2a63265057bc7f864735ba16662152f1a5ac0daa89a4716e597e688add28af9289f146f7f45650eb18542292e6784fca50b3e5be9029f720bb0fa4d05f2575af1450bd311687c9367bfd567f34c9e9a98b08fbb4328adead1449134c83b8efd61c47d24b668e660e0c6aa6d6c144fc35ffe2f0f77c48682a1c6615bb82f147407e3581dd17edcde0848cc69c63c27027a26ac69c2b38f421ac0fffea3a650594a3d258562b8ce6e3f80a9c048e564b62897998472494e54f98a546fbe09c1f0c80480d4587d1f5e6d6532256af520793d07ab2a8dd0e1aa924ceedf87cf57fcf2ca63bbf10f5f7634fb5b669429346e9251d9d1598f91abcaf76fc616ce95d061e999b3aa56bd6fd6ff5932d1690caebbd804b7d9df02f55e268590a72de8026ca75ca716391e35b26074cbc6cf5d3bdad1e273daceadee092839ec5b11f519efd6c74f64e2491f139f1c1c88da98b89519fcb8b99ed130f749523f3b54fcead4551596607a921718384b2216ea38632ed917c8a0ffd5aa7b6ebcc9cd8eb5f5e23e6e25d7698062b09bc5d65bf665925648e4d433eb9151c81842f1ffa9d5add7d1c8b3d89f8259a1960d7a5763cbf81e5820ce11241f4c20b906c3a649793d02660e183c8f2ed9f5b292db979ffd7487fd098c"}) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154659f3a1231c1a2bdca4d0dbf985bc000018801280000000000000", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10m21.468555548s ago: executing program 1 (id=1542): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a01d201"], 0x80}}, 0x0) socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x19, r3, 0xffffffffffffff7f, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e00"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000}, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x0, 0x4}) ioctl$TIOCL_PASTESEL(r6, 0x541c, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) getdents(0xffffffffffffffff, 0x0, 0x3b) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) 10m18.912739195s ago: executing program 1 (id=1552): r0 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x66d0, &(0x7f0000000080)={0x0, 0x1000002, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_setup(0x2d5b, &(0x7f00000002c0)={0x0, 0xae64, 0x1000, 0x2, 0x2a2}, &(0x7f0000000580), &(0x7f00000005c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="8d", 0x1}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8001, 0x18000) bind$x25(r5, &(0x7f0000000040), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r4) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pread64(r8, &(0x7f0000000480)=""/208, 0xd0, 0x3ff) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 10m18.030262635s ago: executing program 1 (id=1557): fchdir(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 10m2.882071123s ago: executing program 32 (id=1557): fchdir(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 4m34.310771513s ago: executing program 5 (id=2636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1016, &(0x7f0000000b00)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x3}}, {@generic={0x9805, "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"}}}, 0x0) 4m34.217034277s ago: executing program 5 (id=2638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000002c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05>S\xf3\xb3\x1e\\\x9c]\xe3\b\xfcP\x86b\xfd\x99p\x9e<\xa2\xd7\x183\x16eg&\x88\xdb\xb1Fg{\xed\xeb\x14\xcd\x8f\xb5;s\x9a\x94\x9bin\x02\xc12%\x12fv\x83\xe6\x1c\x9e\xe5\x9a~/\xc3\xbd\xb8\xd6m%\xe52\xa6aL\x9e \xdf\x0f\xe7^U\x1a\x95\x84\x8a\x1d', 0x2) ftruncate(r4, 0x400000fffb) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) syz_usb_connect(0x5, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100c3e915f4404c05c10693be9c01239ca6ea62420a1bb28547770a0000000109ffff0001000000000904f9"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='b\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010328bd70000000000034000000"], 0x14}}, 0x0) 4m30.293248269s ago: executing program 5 (id=2647): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000140)={0x0, r1, 'id1\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x8000000, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x10000000, 0x81, r6, 0x1, 0x3, 'syz0\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) r9 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r9, 0x200004) socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000077, 0x1c1b03) setsockopt$MRT_PIM(r9, 0x0, 0xcf, &(0x7f00000001c0)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth0_vlan\x00'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x58084}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000200)={0x1}) sendfile(r8, r9, 0x0, 0x80001d00c0d1) 4m29.264422281s ago: executing program 5 (id=2649): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x6) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000240012800c0001006d6163766c616e001400028008000300030000009a06ec080001001000000008000500ff7f4d77fe905e983314af2c3f9286ce172775cdcd9375b758f41acc92c0e36b9ef1a74210a1566c0627523bf5c171ecc5acda57e1b1294df349fcf2cb39d4ef89c3ef50f557030000000000000032595650b328d6c21967bb3642d8099dff6a9aa03cf2ca06bd96f0f6b10325cf353f428be33f794a0eb186425d573dcb253288d14332bd6f9d6d2fd13ae66be474a45de19c4809", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m28.022039057s ago: executing program 5 (id=2652): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 4m27.791225441s ago: executing program 5 (id=2653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x75) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000040), 0x8080, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYRES64=0x0]) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) socket(0x2b, 0x80801, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) r7 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, 0x0, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x4) 4m27.630475559s ago: executing program 33 (id=2653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x75) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000040), 0x8080, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYRES64=0x0]) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) socket(0x2b, 0x80801, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, 0x2, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) r7 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, 0x0, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x4) 1m19.994853784s ago: executing program 3 (id=3296): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) (async) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m19.692947843s ago: executing program 3 (id=3300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="3303", 0x2, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x61}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x800, 0x1, 0x40024e, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0x5}, {0x9}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r16 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r16, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r17 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r17, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r3, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r4, 0x627, 0x4c1, 0x63, 0x0, 0x0) 1m18.284285704s ago: executing program 3 (id=3306): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a0001000000e400000000001c140000fe00000700130000"], 0x1c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400702, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000080)={0x11}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x7, {0x60, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40cc184}, 0x8840) 1m16.263056693s ago: executing program 3 (id=3315): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) readv(0xffffffffffffffff, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) 1m15.448433195s ago: executing program 3 (id=3317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x21, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x945aaf0b8f519d9e}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0xd10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 1m14.525274413s ago: executing program 3 (id=3324): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x2, 0x80000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) accept4$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0xc0000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r7) 58.341283976s ago: executing program 34 (id=3324): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x2, 0x80000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) accept4$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0xc0000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r7) 8.783071458s ago: executing program 0 (id=3516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x5) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) 8.132612999s ago: executing program 4 (id=3517): r0 = socket(0x2d, 0x80002, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xfffffffd, @empty, 0xdd6}}, 0x24) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r1, &(0x7f00000001c0)={0x4000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xe, 0x8, 0x0, 0xc, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x0, 0x20, 0x0, @in6={0xa, 0x4e20, 0xe, @private2, 0x80009}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00', 0x5}}]}, 0x60}}, 0x804) 8.070181028s ago: executing program 4 (id=3518): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_clone(0x1210000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 7.462965454s ago: executing program 0 (id=3523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)="f03b4e7b265e7d72b2a3ef7c7fdaff60c4ddb6ae61ff9df3854919069c7bb1a0c1819d45658e8336ebdc18137eb1cacbc4433f869546d7b6dde303", 0x3b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0x8}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f0000000840)={0xa, 0x4e23, 0x0, @private2, 0x5}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) recvmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/135, 0x87}], 0x5, &(0x7f00000004c0)=""/54, 0x36}, 0x100) r8 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) pipe(&(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x40000023, 0x0) 7.096611464s ago: executing program 4 (id=3524): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x1000f0, 0x4, 0x60000}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="db4654", 0x3}], 0x1) readv(r2, &(0x7f00000001c0), 0x0) r4 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400100109021b000124a800800904000001030000000905", @ANYBLOB="e2ff"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x140a, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4c0a6) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000003431e51025250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x6048800) 6.533772539s ago: executing program 6 (id=3526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016000104fdffffff00000000e0000002000000000000000000000000200100000000000000000000000000020800000000111392f300802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff000000000000fcff000000000400000000000000feffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000feffffff000000000a000000900000000000000008000000fd"], 0xf8}}, 0x4808) 6.432958691s ago: executing program 6 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af8fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000600000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5.228526228s ago: executing program 6 (id=3530): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000300)=0x401, 0x4) sendmsg$nl_route(r3, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r5, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00') (async) r11 = fanotify_init(0x20, 0x400) socket$kcm(0x29, 0x2, 0x0) (async) pwritev(r5, &(0x7f0000000340), 0x0, 0x2, 0x7) (async) readv(r11, &(0x7f00000001c0)=[{0x0}], 0x1) (async) close_range(r10, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000030000000200000000000000000000000800000000000000200000000000"], 0x0, 0x42}, 0x28) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0)) 4.783225749s ago: executing program 6 (id=3531): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) set_tid_address(0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x47) 4.683855228s ago: executing program 7 (id=3532): syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x5, 0x4, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x13, 0xa2, [@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102, @broadcast]}, @generic={0x88, 0x8, "9e94000a3e88"}, @timestamp_prespec={0x44, 0x4, 0x34, 0x3, 0x2}]}}}}}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_open_dev$sndpcmp(0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\\-V\t,{*\\%/+}-\x0f/}\x00', 0x0, r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open_by_handle_at(r3, 0x0, 0x1) 4.583383394s ago: executing program 2 (id=3533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x5) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) 3.664557019s ago: executing program 4 (id=3534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000140), &(0x7f00000003c0)=0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="d875f110692b7fb267159b49424a5919bc1e22dfb2f1b964b511229320eb8a2bc3efebcf6fd8a935995fbf8b485f4d11c9f81c19e40fe9a6774d8328ead4fd240becd6a1bd92e7b9871db719184c841dfd2d7599002c3d585f6254176ebe95146e88", 0x62}, {&(0x7f0000000180)="9562be2575d13e9f716e10f86ecb84b71e0faeb6c3c4efd05bfda48dd9a1229df440d9b2a60ddc9727d9129262ed886bc89901b89b6b9354fc3fb432", 0x3c}, {&(0x7f00000001c0)="43d5d3aefea389046b57bd3342d5c34871d264df3317b05dc5ab6898b26cbfdecfd4e578e041e925cce6d9db27124e1dc9bcb113f3b69be63bb9ada448c4408cc838ed77135637e475f3d1a0f2e69512f18e908b1bc0e984bb05862a3aeea37456228c8b5549e472e0dea2420c897f171bf354701756356e9ea0f93dd72884f5cdbcb8c81db3159cdfb8d3d3d3cfe506fbab85404c29cd873be77a4b80b1b6db473aae462fe92a08a13b9f5fc76a8d7bca9ab5c92536c12737597febb6213d2c94a15cf6c5d0d1d60b78d2592b287df6374f94565be573f1d68d04da37af61055727d6", 0xe3}, {&(0x7f00000017c0)="942ed006140ff8b30303524c711fab49afe1fe093b5d1a2bb8302ee8e61a13a95305673cc1054e19bec8b9445dae8f08ca5c13500c58c24a232148d60647ed2e0729da9dae9ddc2324004b8d03c195cab04d89147fb67aa5b65f01000000854d393c088aa41d218c08863bd7cf0fbc38a782dc6159b0ea4a0d1fd756428bc52f981b97443e22197530242c2545c1008582e6e96232c8e0d9bcaca94e15c4bc1dfa830c640e3eaa5bf33a6bed750dd39e29838cd054ab7bfea748c891ca8610896331cc545723adad2859d3891b83b50474c27a951aa558a0", 0xd8}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000380)="99c2d7fe6232192d8916646d8cb03988192a6145d519da38030cfa7d94afb42a9a666f85e0a8a1d1dc6939cd68faf614ab381f29367a9fe125a76788099635ab56e7e8ea5c3315e28e35340928abd2cc9264b6939008f39ae30d32f6721bd8b8b1e52ab4712e0d6c7578d3efdf1fa84bd19d82826264ef551867e6dfa83d32d9ab51a3534d0a6edf456c878e6312b3e60079b79f0360176d0f2deb827a5d689febfa1674bc8565245eacb96781a7172edab11251c0945dab349d6e06b8e2bdd8dee357b53a309095d1af34b626db0fe87e6d11d18ae3905989b9b29f645b274b090f1e2bda6ae93fdf96f80f425543", 0xef}, {&(0x7f0000000480)="ca0f4903af7535846d7458881b71675c5df9678d728743bebbb285c9de995dae322cf69363def89a4c9c1cf8cfbc5e898156c5dab8b1c1ea61a21d6e812fa68d9a7cb438d4f035192872a6c0dafdb5068d7d36af7bb9c19b5306d2af8fc1b5d1f17962d01d3164243ed6d6004a076a0f8209d275254cd80c87d300dada5c0b103afdb6cf74112430d35649f8ec1c2382683792d703addef96e0deeb7834b76f1a37c8cdcdb", 0xa5}, {&(0x7f00000015c0)="d6d69531103d80f705b82a6f5c526c8176ca415af86ddab2cb92f8e2a446f4c99b9ae7b01f247e031f82f90d1a60faf914dba6b3800d68498654e7d2bda4a05d68b266bbbfa75c7af3375bca9620f9bc964318db7db66e9ac8e5f22837652110e81bc6dbb1feca54d5edc187d3069dd06c6511dc04fcc6a1db859efe1a40975b16eccd30475eb0fdda07f8699ac8bdf7b1e9e70a393dcb57e81f1c91519fbf3e038105561c7371d3d6b3c517f877f9591a70", 0xb2}], 0x8) syz_emit_ethernet(0x76, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, @multicast2, @local, {[@noop, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0x3}, @timestamp_addr={0x44, 0x4}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r5 = syz_io_uring_setup(0x1839, &(0x7f0000000080)={0x0, 0x679d, 0x10000, 0x2000006, 0x1c0}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0, 0x21}, 0x20) syz_usb_connect$cdc_ecm(0x6, 0x60, &(0x7f0000001680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x4, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x2, 0x6, 0x0, 0x41, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xffff, 0x6, 0x40}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xfff, 0x200, 0x5, 0x0, 0xa35, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x5, 0x6}}}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xf9, 0x57, 0x0, 0x38, 0x9}, 0x18, &(0x7f0000001700)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x2d, 0x1, 0x4, 0xff00, 0x8000, [0xff018f]}]}, 0x2, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x820}}, {0xa8, &(0x7f00000018c0)=ANY=[@ANYBLOB="a8031807670e9d415fad745f1ae202888fd05f9fa39c7f2d01b8e87dd8c8dc1d2c65733ee873d33449587e79f887847541bef92a2f81a9bce018b3b0f1c2c5c5dd15cf74ebc16cf1411ed2142189467b29fe69cddf6ffc0822e73f74b8bb5999bcfbc7e2eba3864a03f9b2bcb13081d717eef27e4cb8fc93983ed5d240ab847b1ead173c7bfda778567fd811bc614cf1422f8413c18eda32cfe2f493a680aa1f26"]}]}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001980)=""/248, 0xf8}, {&(0x7f0000001a80)=""/188, 0xbc}, {&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/67, 0x43}, {&(0x7f0000001c40)=""/150, 0x96}], 0x5, &(0x7f0000001d80)=""/66, 0x42}, 0x10023) 3.242926757s ago: executing program 2 (id=3535): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) socket$inet6(0xa, 0xa, 0xfffffffc) 2.950522554s ago: executing program 6 (id=3536): syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff0000030905013fb2e3879354"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x47, &(0x7f0000000000)=@string={0x47, 0x3, "54783c7ee0810546a1d10803eb9cb85351603acfcd41d60b790b271372743c17f0522047f323bda6dfb8b432ac7b2a504811f4f7d1b908ffcc5382ecd4e0ebc52709305ae6"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x807}}, {0x90, &(0x7f0000000180)=ANY=[@ANYRES64=0x0]}, {0xb3, &(0x7f0000000240)=@string={0xb3, 0x3, "f70de7dac20970b0737089745048f7803948fdb01badc40726f638f4e906241e7751e9bcfcc063b7f2906aa180c64563a05a29995b02880a4b384b7421a6cb961dacb5d3dfd991fd5748a3b5ee969f004d18c2d62b45725b724a4bf7b3413294ec55174aa5ea05add5c27b5e8f04dfcf6d95ab6e5e1440e258f01256b9baa474d888732daa40a69e29fe49d15fc55fa50729f75638140d7efc982859f1bc506ff6f74caa6225833a3db407875922427896"}}]}) 2.840345123s ago: executing program 7 (id=3537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016000104fdffffff00000000e0000002000000000000000000000000200100000000000000000000000000020800000000111392f300802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff000000000000fffff00000000400000000000000feffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000feffffff000000000a000000900000000000000008000000fd"], 0xf8}}, 0x4808) 2.839145096s ago: executing program 0 (id=3538): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32, @ANYBLOB="4000b00408000100e0"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000ffffffffff", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 2.764797889s ago: executing program 7 (id=3539): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f00000000c0)={0xcc, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[@rdmsr={0x66, 0x18, {0x40000084}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa9eb, 0x8, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x8040) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000880)={&(0x7f0000000800)=[{0x6, 0xe800, 0x65, &(0x7f0000000300)="6f1255f0843668247b20c626381288e9f1a6df6637d80e98194cc8a8b5078ab0e11d971b0447d1313c345f21f194de5c9f78a367040397386fc3d85972c8676508d3a93c2cab113e1818bc50d0bcdbd1fa700b1c9542dbedf4673b81c984cf6b330a9cf336"}, {0x6, 0xc01, 0x57, &(0x7f0000000380)="26e504f0a02c0b70920d0fae44ebeaa6d90885a3d9adeb8cd3fcc3382da056f65988a2fcd4c708a50dce8c37fe22164de88cce1ab0be094dadd03b8702f01f87357b098cc69ce97d9889a6996fa8ab9801ca83c2f54306"}, {0xd96, 0x800, 0x0, &(0x7f0000000240)}, {0x7, 0x6218, 0x5e, &(0x7f00000008c0)="80811f454358def2f97bf8d590fc626bcef5431132ab3087da46d797e390f4d02fa233cacf92b2e48e46e60429f93aed27f7ea95556ffac86356fdc04fb3c4bbbf213e6f7bdea94de3506c092b76848f982cb5bfcb233993265633fc863a"}, {0x6, 0x8000, 0xca, &(0x7f0000000480)="3bd4e3fb89e7a082e3a3a080a5182dc11f2f803a4622064838153e514fb3f4ce1bb7a33dab603a9b06aaf4e6727ad6b83247a35f9aa684f21a1c619d68d571fef78d295958c74fa087e75b58c39e9f1bf298d0c4ed4134d926c4f8ee41ae89fecd0449353d6d54da8bf5552eec2b8c44f8be6c3274cbf4046b51db1195663ad2452635ae747642c5970771dd3231b633408ea16f2f424fd78985a399f33d74edfbf4a6f5dc01ec36feb4e60372f88992e74129b4131442d0abd5196addf4e3e7cb2c7f54c3bc9be14e7a"}, {0x9, 0x9410, 0xea, &(0x7f0000000580)="12fe0bb2f9296b3bd862361bc166952848f084af9c6aab28d5b70974ebe2776af6c0e4675d8f48d245bf0355cbcdd3f400a4f95e1c4f0ed9956b8c9126857e659a2ec89a870ecabc50c2c51f6ee6cef915ede8e0710b822b2fe407945f16e1dabcca7f132272fff7ba81826a7011119da909cc42711417205d63b956c8ceba345dcd85c42c28c2fe5ef52f2bf8dea2c0564231311d178e7d998bd97d94222fee084916921879bb943177c16e1ea4147ebe2fcd0eb6f91a1c73829444daf66ae4d39785fbf8d23f239f922bb0687f75721011428e81aa1b9cf4080293d4ae7f8b8207c85f301da0086c95"}, {0x3, 0x6001, 0x62, &(0x7f0000000680)="0d933eb9b2d18421db212cb75f61a0a6de709e0cc0e38907bb09000000000000b386004d135dd32f1d8aec6c2d96fc6e67db6cdc75c0b9f859f1b3a13a03148876fd5bcf467b9142ad43df09379f575eb83763f4e115cc851d64ad0a1ee18660d47d"}, {0x86, 0x2e11, 0xbd, &(0x7f0000000700)="c3fde35f6ff68fda63de08cbe63371fb139c467edeedadbd78f97fdd9158b394278d714cf86adb6135aca9b0399c6bd5b19215294390a20c0ce78825d5069aa203cedb57e279115d7ca45c723c2dac65e797806d5ff27e437759467ffbd685a7924a36efbe61f3784aef393d2a24210c5948a6e7172e56d279c52538f8610c169896330a872440d4cd5b2100c770b3aaae5bf954de1acb6c93b2b6c08af3fdb443c954d9b7bf466d4176c771e771ee35c1869873f0514fa6995bca8475"}], 0x8}) 2.28180017s ago: executing program 7 (id=3540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.240804218s ago: executing program 4 (id=3541): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) syz_usb_disconnect(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffff5865}}}}}}}, 0xfdef) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.179628083s ago: executing program 0 (id=3542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000300)=@llc, 0x80, &(0x7f0000000500), 0x4, &(0x7f0000000580)=""/186, 0xba}, 0x10000}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x8, 0x3, 0x1000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x56}, 0x28) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x12, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCFLSH(r4, 0x540b, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000000)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) 1.282186312s ago: executing program 0 (id=3543): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f066bbee6, 0x8031, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) (async) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) bind$can_raw(r1, &(0x7f00000000c0), 0x10) 1.165420404s ago: executing program 7 (id=3544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4805}, 0x40) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltaction={0x58, 0x31, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) 1.06502229s ago: executing program 0 (id=3545): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02\\\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x91d1fa5a432ece68) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) pipe2(&(0x7f0000000040), 0x4000) 1.06376423s ago: executing program 6 (id=3546): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02\\\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x91d1fa5a432ece68) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) pipe2(&(0x7f0000000040), 0x4000) 1.033966335s ago: executing program 2 (id=3547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070009000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 975.822008ms ago: executing program 2 (id=3548): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x14, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) set_tid_address(0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6}, 0x47) 947.487282ms ago: executing program 7 (id=3549): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)="f03b4e7b265e7d72b2a3ef7c7fdaff60c4ddb6ae61ff9df3854919069c7bb1a0c1819d45658e8336ebdc18137eb1cacbc4433f869546d7b6dde303", 0x3b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0x8}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f0000000840)={0xa, 0x4e23, 0x0, @private2, 0x5}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x80, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x0, 0x9}, 0xe) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) recvmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/234, 0xea}, {&(0x7f00000006c0)=""/135, 0x87}], 0x5, &(0x7f00000004c0)=""/54, 0x36}, 0x100) r8 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) pipe(&(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x40000023, 0x0) 476.724539ms ago: executing program 2 (id=3550): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) unshare(0xc040400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80800) 25.708231ms ago: executing program 2 (id=3551): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x0, r2, 'id1\x00'}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1b}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xa7e4a71329317a60}, 0x20000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendfile(r5, r6, 0x0, 0x80001d00c0d1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x33e, 0x0) recvmmsg(r0, &(0x7f00000001c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 0s ago: executing program 4 (id=3552): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) unshare(0xc040400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60, 0x80800) kernel console output (not intermixed with test programs): number 88 using dummy_hcd [ 982.379619][T18516] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 982.403734][T16392] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 982.420945][T16392] usb 1-1: config 0 has no interface number 0 [ 982.428010][T16392] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 982.439655][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 982.447281][T16392] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x3 has an invalid bInterval 191, changing to 11 [ 982.461673][T16392] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x3 has invalid maxpacket 50590, setting to 1024 [ 982.561310][T16392] usb 1-1: config 0 interface 255 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 982.576440][T16392] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=9d.3b [ 982.586241][T16392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.594290][T16392] usb 1-1: Product: syz [ 982.598875][T16392] usb 1-1: Manufacturer: syz [ 982.604262][T16392] usb 1-1: SerialNumber: syz [ 982.610820][T16392] usb 1-1: config 0 descriptor?? [ 982.616371][T18504] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 982.628748][T16392] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 982.638489][ T5894] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 982.647639][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.754123][T18525] xt_cgroup: invalid path, errno=-2 [ 982.985421][ T5894] usb 3-1: config 0 descriptor?? [ 983.211104][T18504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.289106][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 983.437282][T18504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.861883][ T5938] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 984.004690][T18540] FAULT_INJECTION: forcing a failure. [ 984.004690][T18540] name failslab, interval 1, probability 0, space 0, times 0 [ 984.013503][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 984.027392][T18540] CPU: 1 UID: 0 PID: 18540 Comm: syz.3.3154 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.027411][T18540] Tainted: [L]=SOFTLOCKUP [ 984.027418][T18540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 984.027424][T18540] Call Trace: [ 984.027428][T18540] [ 984.027432][T18540] dump_stack_lvl+0x16c/0x1f0 [ 984.027448][T18540] should_fail_ex+0x512/0x640 [ 984.027461][T18540] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 984.027475][T18540] should_failslab+0xc2/0x120 [ 984.027489][T18540] kmem_cache_alloc_node_noprof+0x86/0x800 [ 984.027499][T18540] ? __alloc_skb+0x156/0x410 [ 984.027514][T18540] ? __alloc_skb+0x156/0x410 [ 984.027526][T18540] __alloc_skb+0x156/0x410 [ 984.027538][T18540] ? __alloc_skb+0x35d/0x410 [ 984.027550][T18540] ? __pfx___alloc_skb+0x10/0x10 [ 984.027568][T18540] ? netlink_autobind.isra.0+0x158/0x370 [ 984.027588][T18540] netlink_alloc_large_skb+0x69/0x140 [ 984.027599][T18540] netlink_sendmsg+0x698/0xdd0 [ 984.027611][T18540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.027626][T18540] ____sys_sendmsg+0xa5d/0xc30 [ 984.027638][T18540] ? copy_msghdr_from_user+0x10a/0x160 [ 984.027653][T18540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.027670][T18540] ___sys_sendmsg+0x134/0x1d0 [ 984.027685][T18540] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.027715][T18540] __sys_sendmsg+0x16d/0x220 [ 984.027730][T18540] ? __pfx___sys_sendmsg+0x10/0x10 [ 984.027753][T18540] do_syscall_64+0xcd/0xf80 [ 984.027765][T18540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.027776][T18540] RIP: 0033:0x7f276ff8f749 [ 984.027785][T18540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.027795][T18540] RSP: 002b:00007f2770d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.027806][T18540] RAX: ffffffffffffffda RBX: 00007f27701e5fa0 RCX: 00007f276ff8f749 [ 984.027813][T18540] RDX: 0000000000000014 RSI: 0000200000000940 RDI: 0000000000000004 [ 984.027819][T18540] RBP: 00007f2770d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 984.027825][T18540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.027831][T18540] R13: 00007f27701e6038 R14: 00007f27701e5fa0 R15: 00007ffc7b285e08 [ 984.027844][T18540] [ 984.252873][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 984.264453][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 984.276444][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 984.287623][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 984.299498][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 984.306975][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 984.317732][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 984.321972][ T6254] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 984.330158][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 984.349675][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 984.362088][ T5938] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 984.369505][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 984.380232][ T5938] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 984.391942][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 984.403168][ T5938] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 984.428990][T16392] gspca_zc3xx: reg_w_i err -71 [ 984.436599][ T5938] usb 7-1: string descriptor 0 read error: -22 [ 984.444148][ T5938] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 984.453288][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.461893][ T6254] usb 5-1: device descriptor read/64, error -71 [ 984.467033][ T5938] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 984.733404][ T6254] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 984.800841][ T5894] usb 3-1: Cannot read MAC address [ 984.809662][ T5894] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 984.904911][ T5894] usb 3-1: USB disconnect, device number 30 [ 984.931913][ T6254] usb 5-1: device descriptor read/64, error -71 [ 985.021924][T16392] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 985.028245][T16392] gspca_zc3xx 1-1:0.255: probe with driver gspca_zc3xx failed with error -71 [ 985.102896][ T6254] usb usb5-port1: attempt power cycle [ 985.123306][T16392] usb 1-1: unknown interface protocol 0x42, assuming v1 [ 985.161972][T16392] usb 1-1: cannot find UAC_HEADER [ 985.196290][T16392] snd-usb-audio 1-1:0.255: probe with driver snd-usb-audio failed with error -22 [ 985.231665][T16392] usb 1-1: USB disconnect, device number 88 [ 985.349879][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 985.349890][ T30] audit: type=1400 audit(1765497658.667:1151): avc: denied { accept } for pid=18534 comm="syz.6.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 985.442166][ T30] audit: type=1400 audit(1765497658.697:1152): avc: denied { write } for pid=18534 comm="syz.6.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 985.463018][ T6254] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 985.492280][ T6254] usb 5-1: device descriptor read/8, error -71 [ 985.742194][ T6254] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 985.832968][ T6254] usb 5-1: device descriptor read/8, error -71 [ 986.332468][ T6254] usb usb5-port1: unable to enumerate USB device [ 986.580447][T18567] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 986.791202][ T5893] usb 7-1: USB disconnect, device number 13 [ 987.160137][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3164'. [ 987.601890][ T5893] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 987.732668][ T30] audit: type=1400 audit(1765497661.047:1153): avc: denied { setopt } for pid=18584 comm="syz.3.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 987.774223][ T5893] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 987.782456][ T5893] usb 5-1: config 0 has no interface number 0 [ 987.788598][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 987.826866][ T5893] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 987.841065][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 987.853756][ T6254] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 987.884597][ T5893] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 987.909264][ T5893] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 987.930342][ T5893] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 987.974102][ T5893] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 987.991962][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.017023][ T5893] usb 5-1: config 0 descriptor?? [ 988.027286][T18581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 988.034992][T18581] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 988.044035][ T6254] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 988.052269][ T6254] usb 3-1: config 0 has no interface number 0 [ 988.058386][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 988.089562][ T5893] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 988.099521][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 988.113301][T16392] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 988.141020][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 988.156102][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 988.181853][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 988.196543][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 988.210343][ T6254] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 988.221888][ T6254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.238865][ T6254] usb 3-1: config 0 descriptor?? [ 988.246665][T18583] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 988.266009][T18583] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 988.301901][T16392] usb 7-1: Using ep0 maxpacket: 16 [ 988.311495][T16392] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 988.324806][T18608] 9p: Unknown uid 00000000004294967295 [ 988.331590][T16392] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.344633][ T30] audit: type=1400 audit(1765497661.647:1154): avc: denied { getopt } for pid=18607 comm="syz.0.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 988.365851][T16392] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.380835][ T30] audit: type=1400 audit(1765497661.647:1155): avc: denied { mounton } for pid=18607 comm="syz.0.3175" path="/498/file0" dev="tmpfs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 988.428114][ T6254] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 988.453206][ T30] audit: type=1400 audit(1765497661.777:1156): avc: denied { ioctl } for pid=18607 comm="syz.0.3175" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 988.483831][T16392] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.495424][T16392] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.942110][T16392] usb 7-1: Product: syz [ 988.946308][T16392] usb 7-1: Manufacturer: syz [ 988.950897][T16392] usb 7-1: SerialNumber: syz [ 989.127904][T18618] vlan2: entered promiscuous mode [ 989.133274][T18618] bridge0: entered promiscuous mode [ 989.460170][ T30] audit: type=1400 audit(1765497662.777:1157): avc: denied { read write } for pid=18594 comm="syz.6.3170" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 989.515211][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 989.541594][T16392] usb 7-1: 0:2 : does not exist [ 989.553295][ T30] audit: type=1400 audit(1765497662.777:1158): avc: denied { open } for pid=18594 comm="syz.6.3170" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 989.584902][T16392] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 989.618417][T16392] usb 7-1: USB disconnect, device number 14 [ 989.965806][ T5938] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 990.121995][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 990.128290][ T5938] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 990.136565][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.147003][ T5938] usb 1-1: config 0 has no interface number 0 [ 990.153188][ T5938] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 990.164608][ T5938] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 990.174562][ T5938] usb 1-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 990.189477][ T5938] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 990.199094][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.208493][ T5938] usb 1-1: Product: syz [ 990.213340][ T5938] usb 1-1: Manufacturer: syz [ 990.217994][ T5938] usb 1-1: SerialNumber: syz [ 990.224841][ T5938] usb 1-1: config 0 descriptor?? [ 990.231037][T18629] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 990.435469][ T6254] usb 5-1: USB disconnect, device number 49 [ 990.816491][ T6254] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 990.851905][ T5893] usb 3-1: USB disconnect, device number 31 [ 990.875254][ T5893] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 991.648535][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3181'. [ 992.402186][T18665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.439145][T18665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.512514][ T30] audit: type=1400 audit(1765497665.837:1159): avc: denied { read } for pid=18663 comm="syz.6.3185" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 992.693326][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.726098][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.742235][ T30] audit: type=1400 audit(1765497665.857:1160): avc: denied { ioctl } for pid=18663 comm="syz.6.3185" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 992.768082][ T6254] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 993.277466][ T5938] usb 1-1: NFC: intf ffff88807ad08000 id ffffffff8f322480 [ 993.408250][ T30] audit: type=1400 audit(1765497666.637:1161): avc: denied { name_bind } for pid=18674 comm="syz.6.3189" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 993.501535][ T5938] usb 1-1: USB disconnect, device number 89 [ 993.511248][ T30] audit: type=1400 audit(1765497666.667:1162): avc: denied { create } for pid=18672 comm="syz.4.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 993.661549][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 993.701236][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3191'. [ 993.901887][ T5938] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 994.083047][ T5938] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 994.094670][ T30] audit: type=1400 audit(1765497667.417:1163): avc: denied { mount } for pid=18691 comm="syz.2.3192" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 994.230960][ T5938] usb 1-1: config 0 has no interface number 0 [ 994.237874][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.251442][ T5938] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 994.268766][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 994.301848][ T5938] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 994.322127][ T5938] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 994.340538][ T5938] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 994.373588][ T5938] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 994.399846][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.418226][ T30] audit: type=1400 audit(1765497667.737:1164): avc: denied { connect } for pid=18696 comm="syz.4.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 994.439982][ T5938] usb 1-1: config 0 descriptor?? [ 994.471084][T18683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 994.478579][T18683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 994.500608][ T5938] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 994.511303][ T30] audit: type=1400 audit(1765497667.767:1165): avc: denied { read } for pid=18696 comm="syz.4.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 994.518428][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3193'. [ 994.613495][ T30] audit: type=1400 audit(1765497667.837:1166): avc: denied { create } for pid=18696 comm="syz.4.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 994.902026][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3195'. [ 995.007284][ T30] audit: type=1400 audit(1765497668.217:1167): avc: denied { bind } for pid=18702 comm="syz.3.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 995.362921][ T30] audit: type=1400 audit(1765497668.217:1168): avc: denied { mounton } for pid=18702 comm="syz.3.3195" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 995.402227][ T4026] wlan1: Trigger new scan to find an IBSS to join [ 996.387005][T18731] fuse: Bad value for 'fd' [ 996.560552][T18719] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 996.577979][T18719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 997.139690][T18739] xt_cgroup: invalid path, errno=-2 [ 997.160067][T18739] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 997.871735][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 997.871747][ T30] audit: type=1400 audit(1765497671.187:1176): avc: denied { append } for pid=18742 comm="syz.6.3204" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 997.961901][ T5816] Bluetooth: hci6: command 0x0c1a tx timeout [ 998.222246][ T5894] usb 1-1: USB disconnect, device number 90 [ 998.239848][ T5894] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 998.497064][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 998.523802][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 998.533457][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 998.553565][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 998.568000][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 998.585280][ T30] audit: type=1400 audit(1765497671.907:1177): avc: denied { mounton } for pid=18748 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 998.611886][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 998.860478][ T3432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.955794][ T3432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.965653][ T6254] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 999.064156][ T3432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.125634][ T6254] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 999.134977][ T6254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.151916][ T6254] usb 5-1: Product: syz [ 999.156397][ T6254] usb 5-1: Manufacturer: syz [ 999.168724][ T6254] usb 5-1: SerialNumber: syz [ 999.176699][ T6254] usb 5-1: config 0 descriptor?? [ 999.213425][ T3432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.398324][ T6254] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 999.406063][T18748] chnl_net:caif_netlink_parms(): no params data found [ 999.406980][ T9388] wlan1: Trigger new scan to find an IBSS to join [ 999.571565][T18766] FAULT_INJECTION: forcing a failure. [ 999.571565][T18766] name failslab, interval 1, probability 0, space 0, times 0 [ 999.617820][T18766] CPU: 0 UID: 0 PID: 18766 Comm: syz.0.3210 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.617851][T18766] Tainted: [L]=SOFTLOCKUP [ 999.617858][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 999.617868][T18766] Call Trace: [ 999.617874][T18766] [ 999.617882][T18766] dump_stack_lvl+0x16c/0x1f0 [ 999.617905][T18766] should_fail_ex+0x512/0x640 [ 999.617927][T18766] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 999.617949][T18766] should_failslab+0xc2/0x120 [ 999.617973][T18766] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 999.617992][T18766] ? alloc_inode+0x64/0x240 [ 999.618015][T18766] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 999.618040][T18766] ? alloc_inode+0x64/0x240 [ 999.618056][T18766] alloc_inode+0x64/0x240 [ 999.618074][T18766] new_inode+0x22/0x1c0 [ 999.618094][T18766] __debugfs_create_file+0x105/0x530 [ 999.618116][T18766] debugfs_create_file_full+0x41/0x60 [ 999.618136][T18766] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 999.618160][T18766] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 999.618183][T18766] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 999.618226][T18766] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 999.618252][T18766] ? __mutex_lock+0x1291/0x1ca0 [ 999.618269][T18766] ? lockdep_hardirqs_on+0x7c/0x110 [ 999.618285][T18766] ? alloc_netdev_mqs+0xd7/0x1550 [ 999.618311][T18766] ? lockdep_init_map_type+0x5c/0x270 [ 999.618343][T18766] alloc_netdev_mqs+0x314/0x1550 [ 999.618376][T18766] ieee802154_if_add+0xdc/0x1120 [ 999.618406][T18766] ? __pfx_ieee802154_if_add+0x10/0x10 [ 999.618432][T18766] ? __pfx___nla_validate_parse+0x10/0x10 [ 999.618461][T18766] ? mutex_is_locked+0x17/0x60 [ 999.618481][T18766] ? rtnl_is_locked+0x15/0x20 [ 999.618499][T18766] ? cfg802154_rdev_by_wpan_phy_idx+0xad/0x110 [ 999.618521][T18766] ? nl802154_pre_doit+0xf2/0xcf0 [ 999.618550][T18766] ieee802154_add_iface+0x44/0x90 [ 999.618573][T18766] nl802154_new_interface+0x2d8/0x510 [ 999.618598][T18766] genl_family_rcv_msg_doit+0x209/0x2f0 [ 999.618622][T18766] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 999.618651][T18766] ? bpf_lsm_capable+0x9/0x10 [ 999.618669][T18766] ? security_capable+0x7e/0x260 [ 999.618700][T18766] genl_rcv_msg+0x55c/0x800 [ 999.618723][T18766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.618742][T18766] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 999.618765][T18766] ? __pfx_nl802154_new_interface+0x10/0x10 [ 999.618785][T18766] ? __pfx_nl802154_post_doit+0x10/0x10 [ 999.618809][T18766] ? __lock_acquire+0x436/0x2890 [ 999.618833][T18766] netlink_rcv_skb+0x158/0x420 [ 999.618853][T18766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 999.618874][T18766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.618902][T18766] ? netlink_deliver_tap+0x1ae/0xd30 [ 999.618932][T18766] genl_rcv+0x28/0x40 [ 999.618949][T18766] netlink_unicast+0x5aa/0x870 [ 999.618971][T18766] ? __pfx_netlink_unicast+0x10/0x10 [ 999.618998][T18766] netlink_sendmsg+0x8c8/0xdd0 [ 999.619020][T18766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.619046][T18766] ____sys_sendmsg+0xa5d/0xc30 [ 999.619065][T18766] ? copy_msghdr_from_user+0x10a/0x160 [ 999.619088][T18766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.619119][T18766] ___sys_sendmsg+0x134/0x1d0 [ 999.619144][T18766] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.619202][T18766] __sys_sendmsg+0x16d/0x220 [ 999.619226][T18766] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.619268][T18766] do_syscall_64+0xcd/0xf80 [ 999.619287][T18766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.619304][T18766] RIP: 0033:0x7f38edb8f749 [ 999.619319][T18766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.619340][T18766] RSP: 002b:00007f38eea4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.619358][T18766] RAX: ffffffffffffffda RBX: 00007f38edde5fa0 RCX: 00007f38edb8f749 [ 999.619370][T18766] RDX: 0000000000000014 RSI: 0000200000000940 RDI: 0000000000000004 [ 999.619380][T18766] RBP: 00007f38eea4d090 R08: 0000000000000000 R09: 0000000000000000 [ 999.619390][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.619400][T18766] R13: 00007f38edde6038 R14: 00007f38edde5fa0 R15: 00007ffed83d4ee8 [ 999.619426][T18766] [ 999.681924][T18766] debugfs: out of free dentries, can not create file 'netdev@ffff88804dab0618' [ 999.811753][T18770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3211'. [ 1000.132560][ T5938] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1000.303349][ T5938] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.321919][ T5938] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.343724][ T5938] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1000.355726][ T5938] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1000.364221][ T5938] usb 7-1: Manufacturer: syz [ 1000.370856][ T5938] usb 7-1: config 0 descriptor?? [ 1000.541056][T18748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.562404][T18748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.573192][T18748] bridge_slave_0: entered allmulticast mode [ 1000.621839][ T30] audit: type=1400 audit(1765497673.937:1178): avc: denied { create } for pid=18782 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1000.653920][ T30] audit: type=1400 audit(1765497673.937:1179): avc: denied { write } for pid=18782 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1000.674570][ T5816] Bluetooth: hci4: command tx timeout [ 1000.686134][ T30] audit: type=1400 audit(1765497674.007:1180): avc: denied { setopt } for pid=18786 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1000.756770][T18748] bridge_slave_0: entered promiscuous mode [ 1000.847161][ T9414] wlan1: Creating new IBSS network, BSSID da:f3:cd:3d:01:44 [ 1000.989093][ T6254] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1001.003489][ T6254] usb 5-1: USB disconnect, device number 50 [ 1001.145551][ T3432] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1001.153562][ T3432] vcan1: left promiscuous mode [ 1001.159552][ T3432] bond1 (unregistering): Released all slaves [ 1001.171503][ T3432] bond2 (unregistering): Released all slaves [ 1001.184192][ T3432] bond3 (unregistering): Released all slaves [ 1001.197673][ T3432] bond4 (unregistering): Released all slaves [ 1001.212553][T18748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.220806][T18748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.228824][T18748] bridge_slave_1: entered allmulticast mode [ 1001.237547][T18748] bridge_slave_1: entered promiscuous mode [ 1001.294120][ T5938] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #200: -71 [ 1001.305804][T18748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.318987][ T5938] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 1001.338959][ T5938] uclogic 0003:256C:006D.002D: failed probing pen v2 parameters: -71 [ 1001.348792][ T5938] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 1001.359396][T18748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.369308][ T5938] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 1001.392048][ T5938] usb 7-1: USB disconnect, device number 16 [ 1001.464518][T18748] team0: Port device team_slave_0 added [ 1001.471610][T18748] team0: Port device team_slave_1 added [ 1001.623610][T18748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.631314][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.680277][T18748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.695262][ T6254] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 1001.901889][T18748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.919118][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.954586][T18748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.984126][ T6254] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1001.994044][ T6254] usb 3-1: config 0 has no interface number 0 [ 1002.000153][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1002.065170][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1002.089948][T18807] Device name cannot be null; rc = [-22] [ 1002.089974][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1002.125461][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1002.150353][ T6254] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1002.171603][ T6254] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1002.179897][T18748] hsr_slave_0: entered promiscuous mode [ 1002.191343][T18748] hsr_slave_1: entered promiscuous mode [ 1002.198643][T18748] debugfs: 'hsr0' already exists in 'hsr' [ 1002.204793][T18748] Cannot create hsr debugfs directory [ 1002.266384][ T6254] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1002.291488][ T6254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.338995][ T6254] usb 3-1: config 0 descriptor?? [ 1002.352837][T18790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1002.361206][T18790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1002.437048][ T6254] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1002.610307][ T30] audit: type=1400 audit(1765497675.927:1181): avc: denied { write } for pid=18814 comm="syz.0.3225" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1002.684340][ T5816] Bluetooth: hci4: command tx timeout [ 1002.743692][ T3432] hsr_slave_0: left promiscuous mode [ 1002.776908][ T3432] hsr_slave_1: left promiscuous mode [ 1002.797599][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.821311][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.832630][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.840175][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.911294][ T3432] veth1_macvtap: left promiscuous mode [ 1002.918426][ T3432] veth0_macvtap: left promiscuous mode [ 1002.924327][ T3432] veth1_vlan: left promiscuous mode [ 1002.929831][ T3432] veth0_vlan: left promiscuous mode [ 1004.271332][T18848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3231'. [ 1004.361959][ T5938] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1004.490216][T18848] bridge_slave_1: left allmulticast mode [ 1004.495931][T18848] bridge_slave_1: left promiscuous mode [ 1004.503568][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.513456][T18848] bridge_slave_0: left allmulticast mode [ 1004.519108][T18848] bridge_slave_0: left promiscuous mode [ 1004.528370][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.536070][ T5938] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1004.552837][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1004.571134][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.582309][ T5938] usb 1-1: config 0 descriptor?? [ 1004.763056][ T5816] Bluetooth: hci4: command tx timeout [ 1004.933474][ T5938] video4linux radio48: keene_cmd_main failed (-71) [ 1004.947934][ T5938] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1004.958549][ T5938] usb 1-1: USB disconnect, device number 91 [ 1005.379049][ T3432] IPVS: stop unused estimator thread 0... [ 1005.396425][T16392] usb 3-1: USB disconnect, device number 32 [ 1005.436379][T16392] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1006.582316][T18881] xt_cgroup: invalid path, errno=-2 [ 1006.921871][ T5816] Bluetooth: hci4: command tx timeout [ 1007.371560][T18890] FAULT_INJECTION: forcing a failure. [ 1007.371560][T18890] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1007.444675][T18890] CPU: 1 UID: 0 PID: 18890 Comm: syz.4.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.444706][T18890] Tainted: [L]=SOFTLOCKUP [ 1007.444712][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1007.444722][T18890] Call Trace: [ 1007.444728][T18890] [ 1007.444735][T18890] dump_stack_lvl+0x16c/0x1f0 [ 1007.444757][T18890] should_fail_ex+0x512/0x640 [ 1007.444783][T18890] should_fail_alloc_page+0xe7/0x130 [ 1007.444807][T18890] prepare_alloc_pages+0x401/0x670 [ 1007.444834][T18890] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1007.444854][T18890] ? stack_trace_save+0x8e/0xc0 [ 1007.444872][T18890] ? __pfx_stack_trace_save+0x10/0x10 [ 1007.444892][T18890] ? stack_depot_save_flags+0x29/0x9b0 [ 1007.444927][T18890] ? kasan_save_stack+0x42/0x60 [ 1007.444946][T18890] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1007.444963][T18890] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1007.444979][T18890] ? inode_init_always_gfp+0xced/0x1040 [ 1007.445003][T18890] ? new_inode+0x22/0x1c0 [ 1007.445019][T18890] ? __debugfs_create_file+0x105/0x530 [ 1007.445036][T18890] ? debugfs_create_file_full+0x41/0x60 [ 1007.445051][T18890] ? ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1007.445071][T18890] ? alloc_netdev_mqs+0x314/0x1550 [ 1007.445096][T18890] ? ieee802154_if_add+0xdc/0x1120 [ 1007.445124][T18890] ? look_up_lock_class+0x6b/0x130 [ 1007.445143][T18890] ? netlink_unicast+0x5aa/0x870 [ 1007.445158][T18890] ? netlink_sendmsg+0x8c8/0xdd0 [ 1007.445172][T18890] ? ____sys_sendmsg+0xa5d/0xc30 [ 1007.445188][T18890] ? __sys_sendmsg+0x16d/0x220 [ 1007.445213][T18890] ? __lock_acquire+0x436/0x2890 [ 1007.445231][T18890] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1007.445253][T18890] ? policy_nodemask+0xea/0x4e0 [ 1007.445277][T18890] alloc_pages_mpol+0x1fb/0x550 [ 1007.445300][T18890] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1007.445323][T18890] ? find_held_lock+0x2b/0x80 [ 1007.445351][T18890] alloc_pages_noprof+0x131/0x390 [ 1007.445374][T18890] get_free_pages_noprof+0x10/0xb0 [ 1007.445394][T18890] inode_doinit_with_dentry+0x8d5/0x12e0 [ 1007.445418][T18890] ? inode_set_ctime_current+0x29a/0x7f0 [ 1007.445444][T18890] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 1007.445462][T18890] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1007.445489][T18890] ? new_inode+0x15a/0x1c0 [ 1007.445509][T18890] selinux_d_instantiate+0x26/0x30 [ 1007.445526][T18890] security_d_instantiate+0x142/0x1a0 [ 1007.445547][T18890] d_make_persistent+0x6a/0x190 [ 1007.445564][T18890] __debugfs_create_file+0x26b/0x530 [ 1007.445585][T18890] debugfs_create_file_full+0x41/0x60 [ 1007.445602][T18890] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 1007.445621][T18890] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 1007.445642][T18890] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1007.445684][T18890] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1007.445705][T18890] ? __mutex_lock+0x1291/0x1ca0 [ 1007.445721][T18890] ? alloc_netdev_mqs+0xd7/0x1550 [ 1007.445742][T18890] ? lockdep_init_map_type+0x5c/0x270 [ 1007.445764][T18890] alloc_netdev_mqs+0x314/0x1550 [ 1007.445793][T18890] ieee802154_if_add+0xdc/0x1120 [ 1007.445817][T18890] ? __pfx_ieee802154_if_add+0x10/0x10 [ 1007.445842][T18890] ? __pfx___nla_validate_parse+0x10/0x10 [ 1007.445869][T18890] ? mutex_is_locked+0x17/0x60 [ 1007.445889][T18890] ? rtnl_is_locked+0x15/0x20 [ 1007.445905][T18890] ? cfg802154_rdev_by_wpan_phy_idx+0xad/0x110 [ 1007.445932][T18890] ? nl802154_pre_doit+0xf2/0xcf0 [ 1007.445959][T18890] ieee802154_add_iface+0x44/0x90 [ 1007.445978][T18890] nl802154_new_interface+0x2d8/0x510 [ 1007.445999][T18890] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1007.446017][T18890] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1007.446041][T18890] ? bpf_lsm_capable+0x9/0x10 [ 1007.446058][T18890] ? security_capable+0x7e/0x260 [ 1007.446083][T18890] genl_rcv_msg+0x55c/0x800 [ 1007.446102][T18890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.446117][T18890] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 1007.446137][T18890] ? __pfx_nl802154_new_interface+0x10/0x10 [ 1007.446154][T18890] ? __pfx_nl802154_post_doit+0x10/0x10 [ 1007.446175][T18890] ? __lock_acquire+0x436/0x2890 [ 1007.446194][T18890] netlink_rcv_skb+0x158/0x420 [ 1007.446209][T18890] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.446227][T18890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1007.446253][T18890] ? netlink_deliver_tap+0x1ae/0xd30 [ 1007.446280][T18890] genl_rcv+0x28/0x40 [ 1007.446297][T18890] netlink_unicast+0x5aa/0x870 [ 1007.446317][T18890] ? __pfx_netlink_unicast+0x10/0x10 [ 1007.446342][T18890] netlink_sendmsg+0x8c8/0xdd0 [ 1007.446359][T18890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.446383][T18890] ____sys_sendmsg+0xa5d/0xc30 [ 1007.446401][T18890] ? copy_msghdr_from_user+0x10a/0x160 [ 1007.446423][T18890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.446450][T18890] ___sys_sendmsg+0x134/0x1d0 [ 1007.446475][T18890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.446527][T18890] __sys_sendmsg+0x16d/0x220 [ 1007.446551][T18890] ? __pfx___sys_sendmsg+0x10/0x10 [ 1007.446591][T18890] do_syscall_64+0xcd/0xf80 [ 1007.446609][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.446624][T18890] RIP: 0033:0x7fa89c18f749 [ 1007.446638][T18890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.446654][T18890] RSP: 002b:00007fa89cfe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.446670][T18890] RAX: ffffffffffffffda RBX: 00007fa89c3e5fa0 RCX: 00007fa89c18f749 [ 1007.446681][T18890] RDX: 0000000000000014 RSI: 0000200000000940 RDI: 0000000000000004 [ 1007.446691][T18890] RBP: 00007fa89cfe4090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.446701][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.446711][T18890] R13: 00007fa89c3e6038 R14: 00007fa89c3e5fa0 R15: 00007ffeaf5f1208 [ 1007.446736][T18890] [ 1008.014982][T18748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.170163][T18748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.310142][T18748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.330281][T18748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.881301][ T30] audit: type=1400 audit(1765497682.177:1182): avc: denied { read } for pid=18896 comm="syz.0.3243" path="socket:[65857]" dev="sockfs" ino=65857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1008.974639][ T30] audit: type=1400 audit(1765497682.177:1183): avc: denied { ioctl } for pid=18896 comm="syz.0.3243" path="socket:[65857]" dev="sockfs" ino=65857 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1009.080268][ T30] audit: type=1400 audit(1765497682.177:1184): avc: denied { firmware_load } for pid=18892 comm="syz.4.3242" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1009.390681][T18748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.458676][T18748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.480275][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.487366][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.524265][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.531342][ T9418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.961891][T16246] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 1010.114265][T18748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.114318][T16246] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1010.349917][T18927] xt_cgroup: invalid path, errno=-2 [ 1010.465446][ T30] audit: type=1400 audit(1765497683.777:1185): avc: denied { write } for pid=18923 comm="syz.6.3247" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1010.779100][T18748] veth0_vlan: entered promiscuous mode [ 1010.952349][T16246] usb 1-1: config 0 has no interface number 0 [ 1010.955278][T18748] veth1_vlan: entered promiscuous mode [ 1010.958469][T16246] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1010.958494][T16246] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1010.985751][T16246] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1010.997370][T16246] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1011.012533][T16246] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1011.023500][T16246] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1011.037016][T16246] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1011.046296][T16246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.057698][T16246] usb 1-1: config 0 descriptor?? [ 1011.063592][T18915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1011.070919][T18915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1011.081131][T16246] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1011.194731][T18748] veth0_macvtap: entered promiscuous mode [ 1011.242519][T18748] veth1_macvtap: entered promiscuous mode [ 1011.312850][T18748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.371133][T18748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.417712][ T9398] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.450482][ T9398] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.482290][ T9398] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.510429][ T9398] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.783373][ T9398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.799663][ T9398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.823207][T16392] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1012.087447][T18949] xt_cgroup: invalid path, errno=-2 [ 1012.161925][T16392] usb 3-1: Using ep0 maxpacket: 32 [ 1012.178912][T16392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.330532][ T9398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.346793][T16392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.364243][ T9398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.405638][T16392] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1012.422389][T16392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.430462][ T30] audit: type=1400 audit(1765497685.747:1186): avc: denied { mounton } for pid=18748 comm="syz-executor" path="/root/syzkaller.cMLpRY/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1012.493822][ T30] audit: type=1400 audit(1765497685.747:1187): avc: denied { mount } for pid=18748 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1012.517920][ T30] audit: type=1400 audit(1765497685.747:1188): avc: denied { mount } for pid=18748 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1012.547733][T16392] usb 3-1: config 0 descriptor?? [ 1012.554848][ T30] audit: type=1400 audit(1765497685.747:1189): avc: denied { mounton } for pid=18748 comm="syz-executor" path="/root/syzkaller.cMLpRY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1012.591058][ T30] audit: type=1400 audit(1765497685.747:1190): avc: denied { mounton } for pid=18748 comm="syz-executor" path="/root/syzkaller.cMLpRY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1012.747695][ T30] audit: type=1400 audit(1765497685.777:1191): avc: denied { mounton } for pid=18748 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1012.841950][ T5894] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1012.991871][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 1012.999493][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.012030][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.022291][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1013.035479][ T5894] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1013.044828][T16246] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 1013.045463][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.075004][ T5894] usb 4-1: config 0 descriptor?? [ 1013.129079][T16392] ft260 0003:0403:6030.002E: unknown main item tag 0x7 [ 1013.214552][T16246] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1013.225747][T16246] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1013.237857][T16246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 54370, setting to 8 [ 1013.249615][T16246] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.262937][T16246] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1013.272081][T16246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.286844][T18954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.297306][T16246] usb 5-1: config 0 descriptor?? [ 1013.302654][T18954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.314044][T18956] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1013.330474][T16392] ft260 0003:0403:6030.002E: chip code: 6424 8183 [ 1013.339763][T16246] metro_usb 5-1:0.0: Metrologic USB to Serial converter detected [ 1013.354366][T16246] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 1013.525766][ T5894] input: HID 0955:7214 Haptics as /devices/virtual/input/input55 [ 1013.533879][T16392] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1013.569763][ T5894] shield 0003:0955:7214.002F: Registered Thunderstrike controller [ 1013.585975][ T5894] shield 0003:0955:7214.002F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1013.601076][ T5938] usb 5-1: USB disconnect, device number 51 [ 1013.617427][ T5938] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 1013.634083][ T5938] metro_usb 5-1:0.0: device disconnected [ 1013.731085][T16335] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1013.731927][T14432] usb 4-1: USB disconnect, device number 113 [ 1013.800370][T16392] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup [ 1013.809718][T16335] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1013.822109][T16335] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1013.834960][T16335] shield 0003:0955:7214.002F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1013.870616][ T5939] usb 1-1: USB disconnect, device number 92 [ 1013.881559][ T5939] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1013.958169][T16392] ft260 0003:0403:6030.002E: failed to retrieve status: -71 [ 1013.968195][T16392] ft260 0003:0403:6030.002E: failed to reset I2C controller: -71 [ 1013.990187][T16392] usb 3-1: USB disconnect, device number 33 [ 1014.390435][T18979] netlink: set zone limit has 4 unknown bytes [ 1015.237511][T18994] xt_cgroup: invalid path, errno=-2 [ 1017.123123][T19008] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1017.224781][T19011] loop9: detected capacity change from 0 to 7 [ 1017.414544][T19011] Dev loop9: unable to read RDB block 7 [ 1017.434621][T19011] loop9: AHDI p4 [ 1017.445649][T19011] loop9: partition table partially beyond EOD, truncated [ 1017.576122][T19019] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1017.702004][T16392] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1018.183887][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1018.183920][ T30] audit: type=1400 audit(1765497691.387:1198): avc: denied { write } for pid=19015 comm="syz.4.3272" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1018.463655][T16392] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1018.471760][T16392] usb 1-1: config 0 has no interface number 0 [ 1018.504679][T16392] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1018.515760][T16392] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1018.528391][T16392] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1018.646049][T19029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1018.820325][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3275'. [ 1019.804998][T16392] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1019.831492][T16392] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1019.846751][T16392] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.860834][T16392] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1019.869961][T16392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.916605][T16392] usb 1-1: config 0 descriptor?? [ 1020.194745][T19014] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1020.221465][T16392] usb 1-1: can't set config #0, error -71 [ 1020.249671][T16392] usb 1-1: USB disconnect, device number 93 [ 1020.291757][ T30] audit: type=1400 audit(1765497693.607:1199): avc: denied { ioctl } for pid=19044 comm="syz.3.3280" path="socket:[67327]" dev="sockfs" ino=67327 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1020.879084][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1021.463673][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 1021.483102][ T30] audit: type=1400 audit(1765497694.787:1200): avc: denied { create } for pid=19061 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1021.521600][ T30] audit: type=1400 audit(1765497694.797:1201): avc: denied { shutdown } for pid=19061 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1021.543010][ T30] audit: type=1400 audit(1765497694.797:1202): avc: denied { read } for pid=19061 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1021.681487][ T30] audit: type=1400 audit(1765497694.797:1203): avc: denied { ioctl } for pid=19061 comm="syz.2.3284" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1021.843195][T16392] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1021.854612][ T30] audit: type=1400 audit(1765497694.797:1204): avc: denied { create } for pid=19061 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1021.874998][ T30] audit: type=1400 audit(1765497694.797:1205): avc: denied { ioctl } for pid=19061 comm="syz.2.3284" path="socket:[66549]" dev="sockfs" ino=66549 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1022.305129][T16392] usb 3-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 1022.316490][T16392] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.326199][T19066] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1022.342127][T16392] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1022.351661][T16392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1022.359833][T16392] usb 3-1: SerialNumber: syz [ 1022.477063][T19071] loop9: detected capacity change from 0 to 7 [ 1022.620585][T19071] Dev loop9: unable to read RDB block 7 [ 1022.630556][T19071] loop9: AHDI p4 [ 1022.634451][T19071] loop9: partition table partially beyond EOD, truncated [ 1022.964423][T16392] usb 3-1: 0:2 : does not exist [ 1022.969307][T16392] usb 3-1: unit 5: unexpected type 0x0a [ 1023.300873][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 1023.486363][T16392] usb 3-1: USB disconnect, device number 34 [ 1024.095874][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1024.564777][T19090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.801864][ T5893] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1024.819806][T19090] bond_slave_0: entered promiscuous mode [ 1024.825801][T19090] bond_slave_1: entered promiscuous mode [ 1024.916659][T19090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1024.983231][ T5893] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1025.011246][ T5893] usb 3-1: config 0 has no interface number 0 [ 1025.029251][T19090] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1025.038881][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1025.104038][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1025.173615][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1025.271356][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1025.296190][ T5893] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1025.317781][ T5893] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1025.403738][ T5893] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1025.437879][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.497993][ T30] audit: type=1400 audit(1765497698.817:1206): avc: denied { unmount } for pid=8024 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1025.533268][ T5893] usb 3-1: config 0 descriptor?? [ 1025.595679][T19094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1025.603458][ T30] audit: type=1400 audit(1765497698.877:1207): avc: denied { write } for pid=19123 comm="syz.3.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1025.644399][T19094] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1025.781680][ T5893] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1026.437755][ T30] audit: type=1400 audit(1765497699.757:1208): avc: denied { ioctl } for pid=19137 comm="syz.6.3304" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1026.439386][T19139] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1026.439386][T19139] program syz.6.3304 not setting count and/or reply_len properly [ 1027.096301][ T30] audit: type=1400 audit(1765497700.417:1209): avc: denied { wake_alarm } for pid=19148 comm="syz.3.3306" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1027.190742][T19146] bridge0: entered promiscuous mode [ 1027.198158][T19146] macvlan2: entered promiscuous mode [ 1027.453481][T16392] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1027.470716][T19162] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1027.553461][T19163] loop9: detected capacity change from 0 to 7 [ 1027.564587][T19163] Dev loop9: unable to read RDB block 7 [ 1027.570289][T19163] loop9: AHDI p4 [ 1027.574240][T19163] loop9: partition table partially beyond EOD, truncated [ 1027.763437][ T5893] usb 3-1: USB disconnect, device number 35 [ 1027.770926][T16392] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1027.780605][ T5893] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1027.794586][ T30] audit: type=1400 audit(1765497701.117:1210): avc: denied { kexec_image_load } for pid=19148 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1027.826946][T16392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.857430][T16392] usb 1-1: Product: syz [ 1027.869281][T16392] usb 1-1: Manufacturer: syz [ 1027.906991][T16392] usb 1-1: SerialNumber: syz [ 1028.312222][T16392] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1028.525138][T16392] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1028.535683][T16392] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1028.579869][T16392] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1028.606559][T16392] usb 1-1: USB disconnect, device number 94 [ 1028.652647][ T30] audit: type=1400 audit(1765497701.977:1211): avc: denied { watch_mount watch_reads } for pid=19176 comm="syz.6.3313" path="/121" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1029.012016][ T5816] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1029.379495][ T30] audit: type=1400 audit(1765497702.247:1212): avc: denied { create } for pid=19178 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1029.406371][ T30] audit: type=1400 audit(1765497702.247:1213): avc: denied { getopt } for pid=19178 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1029.426974][ T30] audit: type=1400 audit(1765497702.247:1214): avc: denied { setopt } for pid=19178 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1029.450279][ T30] audit: type=1400 audit(1765497702.327:1215): avc: denied { bind } for pid=19178 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1030.398527][T19205] team0: No ports can be present during mode change [ 1030.514151][T16335] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1030.667713][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3321'. [ 1030.932885][ T9398] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1031.022408][T16335] usb 3-1: Using ep0 maxpacket: 8 [ 1031.034379][T16335] usb 3-1: config index 0 descriptor too short (expected 26, got 18) [ 1031.051652][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1031.051673][ T30] audit: type=1400 audit(1765497704.367:1220): avc: denied { create } for pid=19208 comm="syz.0.3323" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1031.086175][T16335] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1031.120617][T16335] usb 3-1: config 0 has no interface number 0 [ 1031.193280][T16335] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1031.271861][ T5893] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1031.310353][T16335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.375358][T16335] usb 3-1: Product: syz [ 1031.411026][T16335] usb 3-1: Manufacturer: syz [ 1031.447590][T16335] usb 3-1: SerialNumber: syz [ 1031.517597][T16335] usb 3-1: config 0 descriptor?? [ 1031.593401][T16335] redrat3 3-1:0.31: Couldn't find all endpoints [ 1031.897365][T16335] usb 3-1: USB disconnect, device number 36 [ 1032.242334][ T5893] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1032.270589][ T5893] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.288848][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1032.300942][ T5893] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1032.401903][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.413352][ T5893] usb 4-1: config 0 descriptor?? [ 1032.829171][T16335] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1033.021893][T16335] usb 7-1: device descriptor read/64, error -71 [ 1033.034924][T19237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 1033.456834][T19239] bridge3: entered promiscuous mode [ 1033.462082][T19239] bridge3: entered allmulticast mode [ 1033.541978][T16335] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1033.711848][T16335] usb 7-1: device descriptor read/64, error -71 [ 1033.983746][T19245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19245 comm=syz.3.3324 [ 1034.115143][T19248] syzkaller1: entered allmulticast mode [ 1034.143392][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.152949][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.159934][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1034.186947][T16335] usb usb7-port1: attempt power cycle [ 1034.622110][T16335] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1034.653521][T16335] usb 7-1: device descriptor read/8, error -71 [ 1035.019486][T16335] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1035.077936][T19245] infiniband syz2: set active [ 1035.084800][ T79] ip6_vti0 speed is unknown, defaulting to 1000 [ 1035.092033][T19245] infiniband syz2: added ip6_vti0 [ 1035.104779][T16335] usb 7-1: device descriptor read/8, error -71 [ 1035.881746][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'. [ 1036.122791][T16335] usb usb7-port1: unable to enumerate USB device [ 1037.414196][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1037.558280][T19245] RDS/IB: syz2: added [ 1037.570370][T19245] smc: adding ib device syz2 with port count 1 [ 1037.581246][T19245] smc: ib device syz2 port 1 has no pnetid [ 1037.643782][ T5893] usbhid 4-1:0.0: can't add hid device: -32 [ 1037.662192][T14432] ip6_vti0 speed is unknown, defaulting to 1000 [ 1037.673608][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1037.686548][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1037.756846][T19281] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1037.827143][T19284] loop9: detected capacity change from 0 to 7 [ 1038.066623][T19284] Dev loop9: unable to read RDB block 7 [ 1038.104609][T19284] loop9: unable to read partition table [ 1038.200756][T19284] loop9: partition table beyond EOD, truncated [ 1038.226208][T19284] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1038.241639][T19282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1038.601731][T19294] xt_cgroup: invalid path, errno=-2 [ 1038.816971][T19282] bond_slave_0: entered promiscuous mode [ 1038.822676][T19282] bond_slave_1: entered promiscuous mode [ 1038.828700][T19282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1038.837764][T19282] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1039.012786][ T30] audit: type=1400 audit(1765497712.337:1221): avc: denied { mount } for pid=19300 comm="syz.0.3345" name="/" dev="ramfs" ino=69089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1039.176035][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1039.470972][ T5893] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1039.953184][ T5893] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1039.963789][ T5893] usb 7-1: config 0 has no interface number 0 [ 1039.985435][ T5893] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1040.011692][ T5893] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1040.026644][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1040.049976][ T5893] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1040.070216][ T5893] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1040.090461][ T5893] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1040.113770][ T5893] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1040.141960][ T5893] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1040.161262][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.246217][ T5893] usb 7-1: config 0 descriptor?? [ 1040.259758][T19307] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1040.267176][T19307] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1040.310381][ T5893] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1041.400645][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1041.448451][ T30] audit: type=1400 audit(1765497714.767:1222): avc: denied { create } for pid=19322 comm="syz.2.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1041.514656][ T30] audit: type=1400 audit(1765497714.787:1223): avc: denied { setopt } for pid=19322 comm="syz.2.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1041.646202][T19333] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1042.425578][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 1042.965223][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1044.025676][ T30] audit: type=1400 audit(1765497717.167:1224): avc: denied { connect } for pid=19344 comm="syz.4.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1044.176293][ T30] audit: type=1326 audit(1765497717.497:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.3356" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa95a98f749 code=0x0 [ 1044.230926][ T30] audit: type=1400 audit(1765497717.547:1226): avc: denied { read write } for pid=19348 comm="syz.2.3356" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1044.263295][ T30] audit: type=1400 audit(1765497717.577:1227): avc: denied { open } for pid=19348 comm="syz.2.3356" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1044.289446][ T30] audit: type=1400 audit(1765497717.577:1228): avc: denied { associate } for pid=19348 comm="syz.2.3356" name=08 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1044.296152][T19245] ip6_vti0 speed is unknown, defaulting to 1000 [ 1044.353516][ T79] usb 7-1: USB disconnect, device number 21 [ 1044.360803][ T79] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1044.375511][T19352] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1045.967480][T19369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3360'. [ 1045.997955][ T5893] usb 4-1: USB disconnect, device number 114 [ 1047.666489][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1048.329383][T19385] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3365'. [ 1048.706217][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1048.734948][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1048.750651][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1048.782448][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1048.790311][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1048.817352][T19389] ip6_vti0 speed is unknown, defaulting to 1000 [ 1049.641896][T14432] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 1049.838771][T14432] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1049.857066][T14432] usb 5-1: config 0 has no interface number 0 [ 1049.885102][ T9388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.945363][T14432] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1049.990799][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1050.041837][T14432] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1050.078271][ T9388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.094286][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1050.126323][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1050.265059][T14432] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1050.279381][T14432] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1050.288649][T14432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.303895][T14432] usb 5-1: config 0 descriptor?? [ 1050.309787][T19397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1050.321978][T19397] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1050.338638][T14432] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1050.775778][ T9388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.841883][ T5816] Bluetooth: hci1: command tx timeout [ 1050.964159][T19389] chnl_net:caif_netlink_parms(): no params data found [ 1051.664386][ T9388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.071862][T14432] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1052.141440][T19389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.160057][T19389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.171193][T19389] bridge_slave_0: entered allmulticast mode [ 1052.186911][T19389] bridge_slave_0: entered promiscuous mode [ 1052.200300][T19389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.224008][T14432] usb 7-1: config 8 interface 0 has no altsetting 0 [ 1052.231182][T14432] usb 7-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 1052.241946][T19389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.280055][T19389] bridge_slave_1: entered allmulticast mode [ 1052.286047][T14432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.401155][T19389] bridge_slave_1: entered promiscuous mode [ 1052.732630][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1052.921902][ T5816] Bluetooth: hci1: command tx timeout [ 1052.946873][T14432] usb 7-1: string descriptor 0 read error: -71 [ 1052.955873][T14432] pwc: Logitech QuickCam detected (reserved ID). [ 1052.962770][T14432] pwc: Failed to set LED on/off time (-71) [ 1052.972137][T14432] pwc: send_video_command error -71 [ 1052.977391][T14432] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1052.997737][T14432] Philips webcam 7-1:8.0: probe with driver Philips webcam failed with error -71 [ 1053.027191][T16246] usb 5-1: USB disconnect, device number 52 [ 1053.041485][T14432] usb 7-1: USB disconnect, device number 22 [ 1053.063564][T16246] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1053.125512][T19389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.187830][T19389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.485857][T19389] team0: Port device team_slave_0 added [ 1053.498350][T19389] team0: Port device team_slave_1 added [ 1053.943907][T16246] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1053.973718][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.980020][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.992625][T19452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3378'. [ 1054.023692][ T9388] bridge_slave_1: left allmulticast mode [ 1054.249198][ T9388] bridge_slave_1: left promiscuous mode [ 1054.256290][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.274957][T16246] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1054.284765][ T9388] bridge_slave_0: left allmulticast mode [ 1054.290875][T16246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.303738][ T9388] bridge_slave_0: left promiscuous mode [ 1054.312196][T19464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3380'. [ 1054.371853][T16246] usb 5-1: Product: syz [ 1054.376180][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.383458][T16246] usb 5-1: Manufacturer: syz [ 1054.390246][T16246] usb 5-1: SerialNumber: syz [ 1054.509977][T16246] usb 5-1: config 0 descriptor?? [ 1054.755998][ T4162] smc: removing ib device syz2 [ 1055.375936][ T5816] Bluetooth: hci1: command tx timeout [ 1055.667810][T16246] usb 5-1: Firmware version (0.0) predates our first public release. [ 1055.675956][T16246] usb 5-1: Please update to version 0.2 or newer [ 1056.033508][ T9388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.237224][ T9388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.375270][ T9388] bond0 (unregistering): Released all slaves [ 1056.805137][ T5893] ip6_vti0 speed is unknown, defaulting to 1000 [ 1056.811407][ T5893] syz2: Port: 1 Link DOWN [ 1056.856444][T16246] usb 5-1: USB disconnect, device number 53 [ 1056.989756][T19389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.006804][T19389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.140229][T19389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.174083][T19389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.181165][T19389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.263733][T19389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.291676][T19498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1057.372059][ T5894] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1057.496404][ T5816] Bluetooth: hci1: command tx timeout [ 1057.830816][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1058.013459][ T5894] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1058.025782][ T5894] usb 7-1: config 0 has no interface number 0 [ 1058.043560][ T5894] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1058.092019][ T5894] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1058.108659][T19389] hsr_slave_0: entered promiscuous mode [ 1058.141673][T19389] hsr_slave_1: entered promiscuous mode [ 1058.148442][ T5894] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1058.177674][T19389] debugfs: 'hsr0' already exists in 'hsr' [ 1058.204864][T19389] Cannot create hsr debugfs directory [ 1058.216327][ T5894] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1058.243146][ T5894] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1058.271858][ T5894] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1058.305698][ T5894] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1058.340555][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.374652][ T5894] usb 7-1: config 0 descriptor?? [ 1058.380644][T19497] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1058.502325][T19497] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1058.532102][ T5894] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1058.686448][T19389] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1058.696373][T19389] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1058.706591][T19389] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1058.718695][T19389] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1058.731891][ T5894] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1058.793412][ T79] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1058.896701][T19389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.914135][ T9388] hsr_slave_0: left promiscuous mode [ 1058.922975][ T9388] hsr_slave_1: left promiscuous mode [ 1058.931283][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.938786][ T9388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.952539][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.953703][ T5894] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.960043][ T9388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.994237][ T79] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1059.011864][ T5894] usb 1-1: config 0 has no interface number 0 [ 1059.022361][ T79] usb 3-1: config 14 has an invalid interface number: 51 but max is 0 [ 1059.030774][ T5894] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1059.034941][ T9388] veth1_macvtap: left promiscuous mode [ 1059.047545][ T9388] veth0_macvtap: left promiscuous mode [ 1059.053753][ T9388] veth1_vlan: left promiscuous mode [ 1059.060992][ T9388] veth0_vlan: left promiscuous mode [ 1059.445800][ T79] usb 3-1: config 14 has no interface number 0 [ 1059.456455][ T79] usb 3-1: config 14 interface 51 has no altsetting 0 [ 1059.470136][ T5894] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1059.500420][ T79] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=68.06 [ 1059.509930][ T5894] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1059.523847][ T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.533057][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.541897][ T79] usb 3-1: Product: syz [ 1059.546085][ T79] usb 3-1: Manufacturer: syz [ 1059.550673][ T79] usb 3-1: SerialNumber: syz [ 1059.556801][ T5894] usb 1-1: config 0 descriptor?? [ 1059.565830][T19510] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1059.788373][ T79] ttusb_dec_send_command: command bulk message failed: error -22 [ 1059.806817][ T79] ttusb-dec 3-1:14.51: probe with driver ttusb-dec failed with error -22 [ 1059.818159][ T79] usb 3-1: USB disconnect, device number 37 [ 1059.912781][ T9388] team0 (unregistering): Port device team_slave_1 removed [ 1059.947584][ T9388] team0 (unregistering): Port device team_slave_0 removed [ 1060.011424][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.025690][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.033277][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.051484][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.068032][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.076227][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.087844][ T5894] prodikeys 0003:041E:2801.0030: unknown main item tag 0x0 [ 1060.106187][ T5894] prodikeys 0003:041E:2801.0030: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 1060.123868][ T5894] hid_prodikeys: hid-prodikeys: failed to find output report [ 1060.123868][ T5894] [ 1060.238092][ T30] audit: type=1400 audit(1765497733.557:1229): avc: denied { read } for pid=19509 comm="syz.0.3389" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1060.273811][T16246] usb 1-1: USB disconnect, device number 95 [ 1060.283887][ T30] audit: type=1400 audit(1765497733.587:1230): avc: denied { open } for pid=19509 comm="syz.0.3389" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1060.417997][T19389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.450024][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.457189][ T6202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.489117][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.496279][ T6202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.525904][T14432] usb 7-1: USB disconnect, device number 23 [ 1060.546788][T14432] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1060.594079][T19389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1060.608472][T19389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.771754][T19389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.264050][T16334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1062.960390][T19572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3399'. [ 1063.800850][T19389] veth0_vlan: entered promiscuous mode [ 1064.027238][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1064.076893][T19389] veth1_vlan: entered promiscuous mode [ 1064.187348][T19389] veth0_macvtap: entered promiscuous mode [ 1064.195274][T19584] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 1064.197757][T19389] veth1_macvtap: entered promiscuous mode [ 1064.208919][ T30] audit: type=1400 audit(1765497737.517:1231): avc: denied { relabelfrom } for pid=19583 comm="syz.6.3404" name="NETLINK" dev="sockfs" ino=70251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1064.221876][T19389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.258667][ T30] audit: type=1400 audit(1765497737.577:1232): avc: denied { relabelto } for pid=19583 comm="syz.6.3404" name="NETLINK" dev="sockfs" ino=70251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 1064.265005][T19389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.378491][T16335] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1064.403066][ T9401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.412196][ T9401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.424142][ T9401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.436019][ T9401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.538752][T16335] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1064.546910][T16335] usb 3-1: config 0 has no interface number 0 [ 1064.558125][T16335] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1064.588634][ T9401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.596866][T16335] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1064.608545][ T9401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.628414][T16335] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1064.653831][ T9385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.662017][ T9385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.669385][T16335] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1064.704796][T16335] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1064.720471][T16335] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1064.744783][T16335] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1064.774548][T16335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.799111][T16335] usb 3-1: config 0 descriptor?? [ 1064.819567][T19582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1064.829968][T19582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1064.987714][T16335] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1065.760863][T16246] usb 3-1: USB disconnect, device number 38 [ 1065.769298][T16246] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1066.972233][ T30] audit: type=1400 audit(1765497740.297:1233): avc: denied { read } for pid=19627 comm="syz.6.3410" path="socket:[70336]" dev="sockfs" ino=70336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1067.002687][T19629] EXT4-fs: Conflicting test_dummy_encryption options [ 1067.099742][T19633] netlink: 'syz.6.3410': attribute type 10 has an invalid length. [ 1067.107907][ T30] audit: type=1400 audit(1765497740.327:1234): avc: denied { read } for pid=19626 comm="syz.2.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1068.148468][T19633] team0: Port device netdevsim0 added [ 1068.600739][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1069.558599][ T30] audit: type=1400 audit(1765497742.877:1235): avc: denied { read } for pid=19653 comm="syz.0.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1069.703015][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1069.781890][ T5939] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1069.886601][ T30] audit: type=1400 audit(1765497743.037:1236): avc: denied { write } for pid=19653 comm="syz.0.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1070.121189][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1070.285991][T19669] input: syz1 as /devices/virtual/input/input57 [ 1070.612315][T16335] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1070.772993][T14432] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 1070.801619][T16335] usb 7-1: Using ep0 maxpacket: 8 [ 1070.815718][T16335] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1070.835732][T16335] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1070.864865][T16335] usb 7-1: Product: syz [ 1070.869152][T16335] usb 7-1: Manufacturer: syz [ 1070.892568][T16335] usb 7-1: SerialNumber: syz [ 1070.908151][T16335] usb 7-1: config 0 descriptor?? [ 1070.917356][T16335] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1071.101308][T14432] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1071.109709][T14432] usb 5-1: config 0 has no interface number 0 [ 1071.116102][T14432] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1071.460973][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1071.537737][T14432] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1071.550930][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1071.584220][T14432] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1071.595108][T14432] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1071.608157][T14432] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1071.617316][T14432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.626934][T14432] usb 5-1: config 0 descriptor?? [ 1071.633804][T19680] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1071.641458][T19680] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1071.648770][ T5939] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1071.660284][T14432] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1071.801819][ T5939] usb 8-1: Using ep0 maxpacket: 16 [ 1071.808427][ T5939] usb 8-1: config 0 has an invalid interface number: 199 but max is 0 [ 1071.816764][ T5939] usb 8-1: config 0 has no interface number 0 [ 1071.824663][ T5939] usb 8-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 1071.833951][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.844893][ T5939] usb 8-1: Product: syz [ 1071.849053][ T5939] usb 8-1: Manufacturer: syz [ 1071.853800][ T5939] usb 8-1: SerialNumber: syz [ 1071.860375][T19676] tipc: Started in network mode [ 1071.871839][T19676] tipc: Node identity 4, cluster identity 4711 [ 1071.887513][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1071.896617][T19676] tipc: Node number set to 4 [ 1071.908360][ T5939] usb 8-1: config 0 descriptor?? [ 1072.162099][T16335] gspca_zc3xx: reg_w_i err -110 [ 1072.320755][T16335] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1072.430817][T16335] usb 7-1: USB disconnect, device number 24 [ 1073.374806][ T30] audit: type=1400 audit(1765497746.277:1237): avc: denied { mount } for pid=19713 comm="syz.6.3429" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1073.604595][ T30] audit: type=1400 audit(1765497746.927:1238): avc: denied { unmount } for pid=16383 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1073.759268][ T5939] usb 8-1: USB disconnect, device number 2 [ 1074.097898][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3430'. [ 1074.382858][ T5894] usb 5-1: USB disconnect, device number 54 [ 1074.414241][ T5894] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1074.518456][T19722] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1074.544227][T19722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1074.659268][T19727] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1074.730687][T19728] loop9: detected capacity change from 0 to 7 [ 1074.772204][T19728] Dev loop9: unable to read RDB block 7 [ 1074.778406][T19728] loop9: unable to read partition table [ 1074.788833][T19728] loop9: partition table beyond EOD, truncated [ 1074.796082][T19728] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1075.093508][ T30] audit: type=1400 audit(1765497748.417:1239): avc: denied { read } for pid=19729 comm="syz.7.3434" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1075.257509][ T30] audit: type=1400 audit(1765497748.417:1240): avc: denied { open } for pid=19729 comm="syz.7.3434" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1075.281895][ T30] audit: type=1400 audit(1765497748.437:1241): avc: denied { ioctl } for pid=19729 comm="syz.7.3434" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1077.582156][ T5894] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 1077.634957][T19777] nbd: must specify at least one socket [ 1077.748692][ T5894] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1077.777774][ T5894] usb 8-1: config 0 has no interface number 0 [ 1078.485500][T19777] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1078.834632][ T5894] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1078.870260][ T5894] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1078.881132][ T30] audit: type=1400 audit(1765497752.197:1242): avc: denied { connect } for pid=19787 comm="syz.6.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1078.904829][ T5894] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1078.916467][ T5894] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1078.929806][ T30] audit: type=1400 audit(1765497752.217:1243): avc: denied { setopt } for pid=19787 comm="syz.6.3449" laddr=172.20.20.10 lport=2870 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1078.976371][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3449'. [ 1079.049776][ T5894] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1079.076276][ T5894] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1079.106039][ T30] audit: type=1400 audit(1765497752.217:1244): avc: denied { write } for pid=19787 comm="syz.6.3449" path="socket:[71590]" dev="sockfs" ino=71590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1079.242037][ T5894] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1079.271883][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.335747][T19799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1079.682423][ T30] audit: type=1400 audit(1765497752.227:1245): avc: denied { read } for pid=19787 comm="syz.6.3449" laddr=172.20.20.10 lport=2870 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1079.724738][ T5894] usb 8-1: config 0 descriptor?? [ 1079.732663][T19768] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1079.753712][T19768] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1079.776145][ T5894] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1079.880364][ T5894] usb 8-1: USB disconnect, device number 3 [ 1079.906995][ T5894] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1080.890655][T19820] fuse: Bad value for 'fd' [ 1080.918673][T19820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1080.970520][T19820] bridge0: entered promiscuous mode [ 1080.971036][ T30] audit: type=1400 audit(1765497754.287:1246): avc: denied { create } for pid=19817 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1081.093001][T19820] bridge0: entered allmulticast mode [ 1081.275015][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3459'. [ 1082.288482][ T30] audit: type=1400 audit(1765497755.607:1247): avc: denied { ioctl } for pid=19834 comm="syz.7.3462" path="socket:[71921]" dev="sockfs" ino=71921 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1082.398565][T19837] overlayfs: missing 'lowerdir' [ 1082.438823][T19837] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1082.447255][T19837] overlayfs: overlapping lowerdir path [ 1084.519420][T19863] ./file0: Can't lookup blockdev [ 1084.971889][T16246] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1086.023592][T16246] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1086.079562][T16246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.170002][T16246] usb 7-1: Product: syz [ 1086.201798][T16246] usb 7-1: Manufacturer: syz [ 1086.218416][T16246] usb 7-1: SerialNumber: syz [ 1086.292649][T16246] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1086.323623][ T5893] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1086.674363][T16246] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1086.742194][T19891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.756520][T19891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.840307][T16246] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1086.896199][T16246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.956702][ T1221] usb 7-1: USB disconnect, device number 25 [ 1087.411739][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1087.420354][ T5893] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1087.434020][T16246] usb 3-1: Product: syz [ 1087.438196][T16246] usb 3-1: Manufacturer: syz [ 1087.444191][ T5893] ath9k_htc: Failed to initialize the device [ 1087.456210][ T1221] usb 7-1: ath9k_htc: USB layer deinitialized [ 1087.480314][T16246] usb 3-1: SerialNumber: syz [ 1087.491251][ T30] audit: type=1400 audit(1765497760.807:1248): avc: denied { ioctl } for pid=19901 comm="syz.0.3479" path="socket:[72105]" dev="sockfs" ino=72105 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1087.821957][T16392] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1087.983958][T16392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1087.992452][T16392] usb 1-1: not running at top speed; connect to a high speed hub [ 1088.001553][T16392] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 1088.009839][T16392] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.020041][T16392] usb 1-1: config 4 has no interface number 0 [ 1088.035996][T16392] usb 1-1: Dual-Role OTG device on HNP port [ 1088.048994][T16392] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1088.058925][T16392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 1088.067133][T16392] usb 1-1: Product: syz [ 1088.071366][T16392] usb 1-1: Manufacturer: syz [ 1088.076141][T16392] usb 1-1: SerialNumber: syz [ 1088.134120][T16246] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1088.148767][T16246] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1088.162909][T16246] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1088.175950][T16246] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1088.191212][T16246] usb 3-1: USB disconnect, device number 39 [ 1088.695343][T16392] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1088.715316][T16392] uvcvideo 1-1:4.147: No valid video chain found. [ 1089.001104][T16392] usb 1-1: USB disconnect, device number 97 [ 1089.361847][ T6254] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1089.543413][ T6254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1089.553223][ T6254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1089.565275][ T6254] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1089.565568][T16392] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1089.585173][ T6254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.601908][ T6254] usb 3-1: Product: syz [ 1089.606088][ T6254] usb 3-1: Manufacturer: syz [ 1089.610654][ T6254] usb 3-1: SerialNumber: syz [ 1089.623230][ T6254] usb 3-1: config 0 descriptor?? [ 1089.755516][T16392] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1089.779214][T16392] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.791975][T16392] usb 7-1: Product: syz [ 1089.799927][T16392] usb 7-1: Manufacturer: syz [ 1089.811171][T16392] usb 7-1: SerialNumber: syz [ 1089.831886][ T5938] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1089.844799][T16392] usb 7-1: config 0 descriptor?? [ 1089.896139][ T6254] usb 3-1: USB disconnect, device number 40 [ 1090.001897][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 1090.042320][ T5938] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1090.067728][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.068407][T19930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.075960][ T5938] usb 1-1: Product: syz [ 1090.088532][ T5938] usb 1-1: Manufacturer: syz [ 1090.094897][ T5938] usb 1-1: SerialNumber: syz [ 1090.110013][ T5938] usb 1-1: config 0 descriptor?? [ 1090.116248][T19930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.140736][T16392] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 1090.152965][T16392] f81604 7-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1090.160582][T16392] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 1090.169978][ T5938] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1090.182771][T16392] usb 7-1: USB disconnect, device number 26 [ 1090.335162][ T30] audit: type=1400 audit(1765497763.657:1249): avc: denied { write } for pid=19943 comm="syz.7.3492" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1090.380713][ T5938] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 1090.688450][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 1090.778472][ T30] audit: type=1400 audit(1765497763.677:1250): avc: denied { ioctl } for pid=19943 comm="syz.7.3492" path="socket:[72941]" dev="sockfs" ino=72941 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.814278][ T5938] visor 1-1:0.0: probe with driver visor failed with error -5 [ 1090.825269][ T5938] usb 1-1: USB disconnect, device number 98 [ 1090.857878][ T30] audit: type=1400 audit(1765497763.687:1251): avc: denied { accept } for pid=19943 comm="syz.7.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.988686][ T30] audit: type=1400 audit(1765497764.307:1252): avc: denied { append } for pid=19952 comm="syz.6.3495" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1091.017568][T19949] netlink: 584 bytes leftover after parsing attributes in process `syz.7.3493'. [ 1091.260449][ T5894] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 1091.472121][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1091.630066][ T5894] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1091.981155][ T5894] usb 3-1: config 0 has no interface number 0 [ 1092.000503][ T5894] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1092.050001][ T5894] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1092.132687][ T5894] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1092.303376][ T5894] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1092.323122][ T5894] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1092.337743][ T5894] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1092.360792][ T5894] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1092.376678][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.403793][ T5894] usb 3-1: config 0 descriptor?? [ 1092.412211][T19951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1092.419425][T19951] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1092.514887][ T5894] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1092.544147][T19984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3502'. [ 1092.895027][ T30] audit: type=1400 audit(1765497766.217:1253): avc: denied { ioctl } for pid=19994 comm="syz.6.3504" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1093.647813][ T30] audit: type=1400 audit(1765497766.967:1254): avc: denied { remount } for pid=19994 comm="syz.6.3504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1093.774517][ T30] audit: type=1400 audit(1765497767.097:1255): avc: denied { write } for pid=20003 comm="syz.7.3506" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1094.405532][ T9397] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1094.803224][T16335] usb 3-1: USB disconnect, device number 41 [ 1094.998034][T16335] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1095.072565][T20033] netlink: 'syz.2.3512': attribute type 2 has an invalid length. [ 1095.274725][T20035] xt_cgroup: invalid path, errno=-2 [ 1095.374673][ T30] audit: type=1400 audit(1765497768.697:1256): avc: denied { mount } for pid=20037 comm="syz.0.3514" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1096.811828][ T5894] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1096.907216][ T30] audit: type=1400 audit(1765497770.227:1257): avc: denied { create } for pid=20052 comm="syz.4.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1097.041676][ T30] audit: type=1400 audit(1765497770.227:1258): avc: denied { bind } for pid=20052 comm="syz.4.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1097.061741][ T30] audit: type=1326 audit(1765497770.357:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20056 comm="syz.4.3518" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa89c18f749 code=0x0 [ 1097.090173][ T5894] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1097.124295][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.140437][ T5894] usb 8-1: Product: syz [ 1097.150625][ T5894] usb 8-1: Manufacturer: syz [ 1097.159781][ T5894] usb 8-1: SerialNumber: syz [ 1097.180540][ T5894] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1097.227595][ T5938] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1097.852352][ T6254] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 1097.878209][ T30] audit: type=1400 audit(1765497771.197:1260): avc: denied { connect } for pid=20027 comm="syz.7.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1098.034153][ T6254] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1098.044963][ T6254] usb 1-1: config 0 has no interface number 0 [ 1098.058879][ T6254] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1098.445591][ T5938] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1098.458024][ T6254] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1098.458302][ T5938] ath9k_htc: Failed to initialize the device [ 1098.513982][ T6254] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1098.535162][ T6254] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1098.541238][ T5938] usb 8-1: ath9k_htc: USB layer deinitialized [ 1098.686168][ T6254] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1098.697122][ T6254] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1098.713100][ T6254] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1098.723233][ T6254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.734452][ T6254] usb 1-1: config 0 descriptor?? [ 1098.740346][T20075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1098.945613][T16246] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1099.471119][T20075] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1099.499985][ T6254] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1099.519917][T20091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1099.527170][T20091] IPv6: NLM_F_CREATE should be set when creating new route [ 1099.787198][T16246] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1099.824052][T16246] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.204866][T16246] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.333127][T16246] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1100.351333][ T6254] usb 8-1: USB disconnect, device number 4 [ 1100.363312][T16246] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1100.377976][T16246] usb 5-1: Manufacturer: syz [ 1100.384627][T16246] usb 5-1: SerialNumber: syz [ 1100.565925][ T6254] libceph: connect (1)[c::]:6789 error -101 [ 1100.576502][ T6254] libceph: mon0 (1)[c::]:6789 connect error [ 1100.616763][T20114] loop2: detected capacity change from 0 to 7 [ 1100.645241][T20114] Dev loop2: unable to read RDB block 7 [ 1100.658130][T20114] loop2: AHDI p1 p2 p3 [ 1100.671242][T20114] loop2: partition table partially beyond EOD, truncated [ 1100.706670][T16246] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 1100.717021][T20114] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1100.728899][T16246] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input59 [ 1100.747084][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.754970][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.762804][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.769776][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.769817][T20114] loop2: p3 start 335544320 is beyond EOD, [ 1100.776747][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.789571][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.796542][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.803561][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 1100.808590][T20114] truncated [ 1100.810319][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1100.846307][ T6254] libceph: connect (1)[c::]:6789 error -101 [ 1100.854354][ T6254] libceph: mon0 (1)[c::]:6789 connect error [ 1100.863267][T16246] usb 5-1: USB disconnect, device number 55 [ 1101.127648][T20121] ./file0: Can't lookup blockdev [ 1101.376172][T20109] ceph: No mds server is up or the cluster is laggy [ 1101.393751][T16246] libceph: connect (1)[c::]:6789 error -101 [ 1101.410211][T16246] libceph: mon0 (1)[c::]:6789 connect error [ 1101.589826][ T30] audit: type=1400 audit(1765497774.887:1261): avc: denied { ioctl } for pid=20122 comm="syz.4.3534" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1102.072054][T16246] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1102.111088][ T5938] usb 1-1: USB disconnect, device number 99 [ 1102.134549][ T5938] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1102.241848][T16246] usb 3-1: Using ep0 maxpacket: 16 [ 1102.247339][T20133] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 1102.323611][T20134] loop9: detected capacity change from 0 to 7 [ 1102.549263][T16246] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.551951][T16335] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1102.571856][T16246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1102.581955][T20134] Dev loop9: unable to read RDB block 7 [ 1102.586761][T16246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1102.588981][T20134] loop9: unable to read partition table [ 1102.624548][T20134] loop9: partition table beyond EOD, truncated [ 1102.634657][T20134] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1102.677679][T16246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1102.712335][T16335] usb 7-1: Using ep0 maxpacket: 16 [ 1102.781830][T16246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.795550][T16335] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1102.823143][T16335] usb 7-1: config 159 has an invalid interface number: 195 but max is 0 [ 1102.831488][T16335] usb 7-1: config 159 has no interface number 0 [ 1102.854581][T16335] usb 7-1: config 159 interface 195 altsetting 5 endpoint 0x1 has an invalid bInterval 135, changing to 11 [ 1102.867553][T16246] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1102.882159][T16335] usb 7-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 58290, setting to 1024 [ 1102.889422][T16246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.932785][T16246] usb 3-1: Product: syz [ 1102.936965][T16246] usb 3-1: Manufacturer: syz [ 1102.951850][T16246] usb 3-1: SerialNumber: syz [ 1102.994320][T16246] usb 3-1: config 0 descriptor?? [ 1103.020889][T16335] usb 7-1: config 159 interface 195 has no altsetting 0 [ 1103.031943][T16335] usb 7-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 1103.040979][T16335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.049132][T16335] usb 7-1: Manufacturer: ࠇ [ 1103.053788][T16335] usb 7-1: SerialNumber: ෷ূ끰灳璉䡐胷䠹냽괛߄۩Ḥ具볩샼띣郲ꅪ욀捅媠餩ɛઈ㡋瑋꘡雋객펵﶑䡗떣雮Ÿᡍ훂䔫孲䩲䆳鐲嗬䨗괅싕幻ҏ쿟镭溫ᑞ嘒몹璤裘⵳䂪麦︩텉앟ꕟ⤇囷ᐸ縍飼夨볱潐ꩌ╢㪃됽蜇≙硂 [ 1103.139189][T20146] 9p: Bad value for 'rfdno' [ 1103.155607][T16246] xbox_remote_probe: endpoint_in message size==0? [ 1103.321839][ T5938] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1103.406158][T16335] udl 7-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 1103.441075][ T5894] usb 3-1: USB disconnect, device number 42 [ 1103.502612][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 1103.516948][T16335] [drm:udl_init] *ERROR* Selecting channel failed [ 1103.551023][ T5938] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1103.569891][ T5938] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1103.581647][T16335] [drm] Initialized udl 0.0.1 for 7-1:159.195 on minor 2 [ 1103.606428][T16335] [drm] Initialized udl on minor 2 [ 1103.611854][ T5938] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1103.635720][T16335] udl 7-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1103.648518][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1103.677475][T16335] udl 7-1:159.195: [drm] Cannot find any crtc or sizes [ 1103.689901][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1103.764424][T16392] udl 7-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1103.775461][T16335] usb 7-1: USB disconnect, device number 27 [ 1103.783735][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1103.797291][T16392] udl 7-1:159.195: [drm] Cannot find any crtc or sizes [ 1103.812927][ T5938] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1103.883518][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.896615][ T5938] usb 5-1: config 0 descriptor?? [ 1104.013762][T20162] nbd: must specify at least one socket [ 1104.038683][T20161] nbd: must specify at least one socket [ 1104.044322][T20164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3547'. [ 1104.107782][ T5938] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1104.332741][ T6254] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1104.384537][ T5939] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1104.403739][ T5893] usb 5-1: USB disconnect, device number 56 [ 1104.411402][ T5893] usblp0: removed [ 1104.431956][T16246] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1104.497520][ T6254] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1104.508122][ T6254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.531819][ T6254] usb 1-1: Product: syz [ 1104.536000][ T6254] usb 1-1: Manufacturer: syz [ 1104.540590][ T6254] usb 1-1: SerialNumber: syz [ 1104.549531][ T5939] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1104.568815][ T6254] usb 1-1: config 0 descriptor?? [ 1104.574185][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.583962][T16246] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1104.593149][T16246] usb 8-1: config 0 has no interface number 0 [ 1104.599413][ T5939] usb 7-1: Product: syz [ 1104.604264][ T5939] usb 7-1: Manufacturer: syz [ 1104.623310][T16246] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1104.785313][ T5939] usb 7-1: SerialNumber: syz [ 1104.822750][T16246] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1104.892455][ T5939] usb 7-1: config 0 descriptor?? [ 1104.918697][T16246] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1104.930546][T16246] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1104.943850][T16246] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1104.955995][T16246] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1104.969110][T16246] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1104.978692][T16246] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.997851][T16246] usb 8-1: config 0 descriptor?? [ 1105.005260][T20170] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1105.012632][T20170] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1105.023316][T16246] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1109.090821][T20162] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1109.097118][ T6254] usb 1-1: Firmware version (0.0) predates our first public release. [ 1109.106040][ T5939] usb 7-1: Firmware version (0.0) predates our first public release. [ 1109.114172][T14850] usb 8-1: USB disconnect, device number 5 [ 1109.131568][ T6254] usb 1-1: Please update to version 0.2 or newer [ 1109.151917][ T5939] usb 7-1: Please update to version 0.2 or newer [ 1210.561723][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1210.568666][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20185/1:b..l [ 1210.577080][ C1] rcu: (detected by 1, t=10502 jiffies, g=89773, q=629 ncpus=2) [ 1210.584763][ C1] task:syz.2.3551 state:R running task stack:26392 pid:20185 tgid:20176 ppid:16081 task_flags:0x400140 flags:0x00080000 [ 1210.598867][ C1] Call Trace: [ 1210.602127][ C1] [ 1210.605032][ C1] ? __schedule+0x10b9/0x6150 [ 1210.609695][ C1] __schedule+0x1139/0x6150 [ 1210.614193][ C1] ? __pfx___schedule+0x10/0x10 [ 1210.619035][ C1] preempt_schedule_irq+0x51/0x90 [ 1210.624049][ C1] irqentry_exit+0x1d8/0x8c0 [ 1210.628625][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1210.634604][ C1] RIP: 0010:lock_acquire+0x7f/0x330 [ 1210.639778][ C1] Code: 35 1a b4 ee 0e 85 f6 0f 85 8d 00 00 00 48 8b 44 24 30 65 48 2b 05 99 36 18 12 0f 85 ad 02 00 00 48 83 c4 38 5b 5d 41 5c 41 5d <41> 5e 41 5f e9 18 9a e0 09 65 8b 05 a5 36 18 12 83 f8 07 0f 87 81 [ 1210.659359][ C1] RSP: 0018:ffffc9000e53ee20 EFLAGS: 00000296 [ 1210.665400][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000068c1bacb [ 1210.673350][ C1] RDX: 0000000000000000 RSI: ffffffff8daa563c RDI: ffffffff8bf2a580 [ 1210.681298][ C1] RBP: ffffc9000e53eef8 R08: 00000000ffffffff R09: 00000000ffffffff [ 1210.689245][ C1] R10: 0000000000000002 R11: ffff88801cff8b30 R12: ffffffff81a95e80 [ 1210.697185][ C1] R13: ffffc9000e53eeb0 R14: 0000000000000000 R15: 0000000000000000 [ 1210.705129][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1210.711264][ C1] unwind_next_frame+0xd1/0x20a0 [ 1210.716178][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 1210.721268][ C1] ? netlink_attachskb+0x880/0x970 [ 1210.726352][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1210.732477][ C1] arch_stack_walk+0x94/0x100 [ 1210.737132][ C1] ? netlink_attachskb+0x880/0x970 [ 1210.742213][ C1] stack_trace_save+0x8e/0xc0 [ 1210.746859][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1210.752371][ C1] ? trace_sched_exit_tp+0xd1/0x110 [ 1210.757539][ C1] kasan_save_stack+0x33/0x60 [ 1210.762187][ C1] ? kasan_save_stack+0x33/0x60 [ 1210.767007][ C1] ? kasan_save_track+0x14/0x30 [ 1210.771827][ C1] ? kasan_save_free_info+0x3b/0x60 [ 1210.776996][ C1] ? __kasan_slab_free+0x5f/0x80 [ 1210.781901][ C1] ? kmem_cache_free+0x2d8/0x770 [ 1210.786813][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1210.791460][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1210.796629][ C1] ? netlink_attachskb+0x880/0x970 [ 1210.801741][ C1] kasan_save_track+0x14/0x30 [ 1210.806388][ C1] kasan_save_free_info+0x3b/0x60 [ 1210.811388][ C1] __kasan_slab_free+0x5f/0x80 [ 1210.816121][ C1] kmem_cache_free+0x2d8/0x770 [ 1210.820854][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1210.825501][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1210.830147][ C1] kfree_skbmem+0x1a4/0x1f0 [ 1210.834620][ C1] sk_skb_reason_drop+0x136/0x1a0 [ 1210.839621][ C1] netlink_attachskb+0x880/0x970 [ 1210.844529][ C1] ? __pfx_netlink_attachskb+0x10/0x10 [ 1210.849964][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1210.855745][ C1] ? netlink_lookup+0x116/0x270 [ 1210.860572][ C1] netlink_unicast+0x20b/0x870 [ 1210.865305][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1210.870561][ C1] nl_fib_input+0x2aa/0x350 [ 1210.875037][ C1] ? __rcu_read_unlock+0x2b5/0x5a0 [ 1210.880128][ C1] netlink_unicast+0x5aa/0x870 [ 1210.884863][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1210.890114][ C1] ? __asan_memset+0x23/0x50 [ 1210.894672][ C1] ? __build_skb_around+0x278/0x390 [ 1210.899844][ C1] netlink_sendmsg+0x8c8/0xdd0 [ 1210.904576][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.909828][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1210.915185][ C1] sock_sendmsg+0x3cc/0x470 [ 1210.919683][ C1] ? do_splice_read+0x2bd/0x370 [ 1210.924515][ C1] ? __pfx_sock_sendmsg+0x10/0x10 [ 1210.929506][ C1] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1210.934856][ C1] splice_to_socket+0xaf4/0x1110 [ 1210.939775][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 1210.945140][ C1] ? __pfx_splice_to_socket+0x10/0x10 [ 1210.950484][ C1] direct_splice_actor+0x192/0x6c0 [ 1210.955571][ C1] splice_direct_to_actor+0x345/0xa30 [ 1210.960917][ C1] ? __pfx_direct_splice_actor+0x10/0x10 [ 1210.966523][ C1] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1210.972390][ C1] ? __pfx_file_has_perm+0x10/0x10 [ 1210.977476][ C1] do_splice_direct+0x174/0x240 [ 1210.982299][ C1] ? __pfx_do_splice_direct+0x10/0x10 [ 1210.987643][ C1] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1210.993507][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 1210.998848][ C1] ? security_file_permission+0x71/0x210 [ 1211.004451][ C1] ? rw_verify_area+0xcf/0x6c0 [ 1211.009186][ C1] do_sendfile+0xb06/0xe50 [ 1211.013577][ C1] ? __pfx_do_sendfile+0x10/0x10 [ 1211.018490][ C1] ? __sys_sendmsg+0x18c/0x220 [ 1211.023227][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1211.028137][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 1211.033046][ C1] __x64_sys_sendfile64+0x1d8/0x220 [ 1211.038223][ C1] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1211.043935][ C1] do_syscall_64+0xcd/0xf80 [ 1211.048416][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.054278][ C1] RIP: 0033:0x7fa95a98f749 [ 1211.058661][ C1] RSP: 002b:00007fa95b820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1211.067042][ C1] RAX: ffffffffffffffda RBX: 00007fa95abe6270 RCX: 00007fa95a98f749 [ 1211.074982][ C1] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1211.082919][ C1] RBP: 00007fa95aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1211.090865][ C1] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000000 [ 1211.098803][ C1] R13: 00007fa95abe6308 R14: 00007fa95abe6270 R15: 00007ffd178fc5f8 [ 1211.106753][ C1] [ 1211.109747][ C1] rcu: rcu_preempt kthread starved for 10191 jiffies! g89773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1211.120911][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1211.130845][ C1] rcu: RCU grace-period kthread stack dump: [ 1211.136699][ C1] task:rcu_preempt state:R running task stack:27792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1211.150139][ C1] Call Trace: [ 1211.153390][ C1] [ 1211.156299][ C1] ? __schedule+0x10b9/0x6150 [ 1211.160952][ C1] __schedule+0x1139/0x6150 [ 1211.165430][ C1] ? __lock_acquire+0x436/0x2890 [ 1211.170340][ C1] ? __mod_timer+0x8f2/0xd30 [ 1211.174904][ C1] ? __pfx___schedule+0x10/0x10 [ 1211.179727][ C1] ? find_held_lock+0x2b/0x80 [ 1211.184375][ C1] ? schedule+0x2d7/0x3a0 [ 1211.188678][ C1] schedule+0xe7/0x3a0 [ 1211.192732][ C1] schedule_timeout+0x123/0x290 [ 1211.197569][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1211.202922][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1211.208197][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1211.213987][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1211.219420][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1211.224158][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1211.229418][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1211.234329][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1211.239164][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1211.244962][ C1] rcu_gp_kthread+0x26d/0x380 [ 1211.249622][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1211.254792][ C1] ? rcu_is_watching+0x12/0xc0 [ 1211.259524][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1211.264691][ C1] ? __kthread_parkme+0x19e/0x250 [ 1211.269686][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1211.274854][ C1] kthread+0x3c5/0x780 [ 1211.278894][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.283459][ C1] ? rcu_is_watching+0x12/0xc0 [ 1211.288193][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.292752][ C1] ret_from_fork+0x983/0xb10 [ 1211.297312][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.302392][ C1] ? __switch_to+0x7af/0x10d0 [ 1211.307038][ C1] ? __pfx_kthread+0x10/0x10 [ 1211.311599][ C1] ret_from_fork_asm+0x1a/0x30 [ 1211.316341][ C1] [ 1211.319330][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1211.325616][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1211.330814][ C0] NMI backtrace for cpu 0 [ 1211.330826][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1211.330844][ C0] Tainted: [L]=SOFTLOCKUP [ 1211.330849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.330856][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1211.330871][ C0] Code: 36 60 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 e9 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1211.330883][ C0] RSP: 0000:ffffffff8e007df8 EFLAGS: 000002c6 [ 1211.330895][ C0] RAX: 0000000003df6b8f RBX: 0000000000000000 RCX: ffffffff8b7776d9 [ 1211.330903][ C0] RDX: 0000000000000000 RSI: ffffffff8dacb6cd RDI: ffffffff8bf2a580 [ 1211.330912][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1211.330920][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1211.330928][ C0] R13: ffffffff8e097b40 R14: ffffffff90887cd0 R15: 0000000000000000 [ 1211.330937][ C0] FS: 0000000000000000(0000) GS:ffff8881248fd000(0000) knlGS:0000000000000000 [ 1211.330951][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1211.330960][ C0] CR2: 0000001b345d9ff8 CR3: 0000000036f5a000 CR4: 00000000003526f0 [ 1211.330968][ C0] Call Trace: [ 1211.330974][ C0] [ 1211.330978][ C0] default_idle+0x13/0x20 [ 1211.330992][ C0] default_idle_call+0x6c/0xb0 [ 1211.331005][ C0] do_idle+0x38d/0x510 [ 1211.331024][ C0] ? __pfx_do_idle+0x10/0x10 [ 1211.331043][ C0] cpu_startup_entry+0x4f/0x60 [ 1211.331061][ C0] rest_init+0x16b/0x2b0 [ 1211.331075][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1211.331089][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1211.331104][ C0] start_kernel+0x3ef/0x4d0 [ 1211.331118][ C0] x86_64_start_reservations+0x18/0x30 [ 1211.331132][ C0] x86_64_start_kernel+0x130/0x190 [ 1211.331146][ C0] common_startup_64+0x13e/0x148 [ 1211.331166][ C0]