last executing test programs: 58.781785391s ago: executing program 0 (id=2949): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)={0x29, 0x3, 0x0, {0x1, 0x8, 0x500, 'group_id'}}, 0x29) 57.657399461s ago: executing program 0 (id=2959): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000010140100fcffffff000000000800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000000308", @ANYBLOB="9efed82d98ed7202cb1c722794bc326a109182a99359564300c12cccba0b6aca7841047eb0747a1a9ba12bb9e33b9d07f410e1d8954df8301955d468759302727a08ecf0ec1b53b70a15d83823e5ffa67ab9d7ba09c9c78753469a8211dd55197f0264df5d5ea5cab2d958baa3c198346edab9a2e09adb467dd7697f81d4f834a873ed16f4053c4281797987057d"], 0x80}}, 0xc804) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3, 0xf0, 0x2}}, 0x18) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) fstat(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, r8, 0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, r8, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x3, 0xb7, 0x1dbe, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 56.636746454s ago: executing program 0 (id=2960): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x41], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4000, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x63, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x10000, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc48, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xffffffff, 0x84, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x9, 0x2, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x5, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000005, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14f, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x6, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x43, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 56.044702174s ago: executing program 0 (id=2963): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x2, {0x0, 0x1}, {0x61, 0x2}, @cond=[{0x5, 0xffff, 0x8, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x7ff, 0x1ab1, 0xe00}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 54.389160466s ago: executing program 0 (id=2974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x41], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4000, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x63, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x10000, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc48, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0xffffffff, 0x84, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x9, 0x2, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x5, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000005, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14f, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x6, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x43, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 52.443217993s ago: executing program 0 (id=2981): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, 0x0, &(0x7f0000000300)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x6, 0x77, 0x10, 0x65a, 0x9, 0x1f2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x6d, 0xae, 0x0, [], [{{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) 36.809242241s ago: executing program 32 (id=2981): socket(0xa, 0x3, 0x3a) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, 0x0, &(0x7f0000000300)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000003c0)={0xa, 0x0, 0x0, {0x80000004, 0x1, 0x2, 0x8800001}}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x6) dup3(r1, r2, 0x80000) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0x6, 0x77, 0x10, 0x65a, 0x9, 0x1f2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x46, 0x6d, 0xae, 0x0, [], [{{0x9, 0x5, 0x87, 0x2}}]}}]}}]}}, 0x0) 27.562805333s ago: executing program 3 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @multicast}, 0x10) 27.409658052s ago: executing program 3 (id=3047): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="35010000ff0c68106d0440083000100009044100009de38400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2}, &(0x7f0000000080)=0x8) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000080)={0x40, 0x31, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.521051716s ago: executing program 3 (id=3055): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) 20.64764532s ago: executing program 3 (id=3061): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$loop(0x0, 0x3fc3107e, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x1, @loopback={0x800000000000000}, 0xfff, 0x4}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) connect$pppl2tp(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 16.288657038s ago: executing program 3 (id=3068): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181080, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = fsmount(r0, 0x1, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000580)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x4, 0x6, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0x0, [{@multicast1, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x81}]}, @noop, @generic={0x7, 0xf, "67f6ca5e12406716fd277f656e"}, @ssrr={0x89, 0xf, 0xb4, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @ssrr={0x89, 0xf, 0x90, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000008066080000000000001800000000000000000000fbffffff00950000000000000095000000000000000de2084b4db08c533cbf8dcacd93a1e402713adb39097e71e5ac8bbd7d26508fa9176242951532e0cc9703d7e34af7a57ce7ead5e35dba53371a038e4b73d5634b6c3d5c7c1b391b4a37487f969728c38126acb415e13f24c926f5fe5d5f8cebf7"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@can_newroute={0x34, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "384a2e9fd7abfa1a"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0xfffffffffffffff8, 0x8, 0x2}}]}, 0x34}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080), 0x1}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) bind$bt_sco(r1, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 10.469211218s ago: executing program 2 (id=3077): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'sit0\x00', @random="e80300001000"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) 9.222635712s ago: executing program 2 (id=3079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x4000810) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp', 0x2) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xffffffff, 0x1, {0x0}, {}, 0x8, 0xe}) sched_setattr(r5, &(0x7f0000000200)={0x38, 0x6, 0x2, 0x8, 0xd93, 0x5, 0x9, 0x2, 0x4, 0x6}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 9.194777238s ago: executing program 3 (id=3080): socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$unix(0x1, 0x5, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) 8.289253015s ago: executing program 4 (id=3082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x336, 0x40, 0xa1, 0x5, 0x9, @multicast}, 0x10) 8.112058909s ago: executing program 5 (id=3018): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x0) 7.967340632s ago: executing program 4 (id=3084): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x9}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.918490522s ago: executing program 5 (id=3085): mlockall(0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x5, 0x1, 0x1, 0xe0a, 0x7f, "3f3c5e0000ff77dcfffffffff903ffee00", 0xb1, 0x5}) syz_usb_connect(0x5, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0xa4, 0x22, 0x94, 0x40, 0xab4, 0x14, 0xc109, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x11, 0x48, 0x0, 0xc6, 0x66, 0x64}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd090000850100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xffffffffffffffa5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x14}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) 5.807843362s ago: executing program 1 (id=3086): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 5.062871793s ago: executing program 4 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x0) 5.055319422s ago: executing program 1 (id=3088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/169, 0xa9) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x208, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, 0x0, &(0x7f0000000500)=""/120}, 0x20) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101000000000000005e2d2bc574"], 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000014) 4.974138192s ago: executing program 2 (id=3089): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) 4.965945181s ago: executing program 4 (id=3090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/169, 0xa9) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x208, 0x4, 0x6, 0x6}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, 0x0, &(0x7f0000000500)=""/120}, 0x20) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000040a0101000000000000005e2d2bc574"], 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000014) 3.865437548s ago: executing program 1 (id=3091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000005000000000000000400000000000000a9aa043d46d8b49ef934dc017f7ecd5f7bd2b0a6bd27e98c4101a949e1aa8a3e4b029af49d", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x98, 0x9, 0x2, 0x5, 0xb, "0f5201b70f5b43345a9187b067ccfea511c280"}) r2 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00007e5000/0x2000)=nil, 0x2000}, 0x4}) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000040)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 3.736061449s ago: executing program 2 (id=3092): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000010140100fcffffff000000000800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="050000000308", @ANYBLOB="9efed82d98ed7202cb1c722794bc326a109182a99359564300c12cccba0b6aca7841047eb0747a1a9ba12bb9e33b9d07f410e1d8954df8301955d468759302727a08ecf0ec1b53b70a15d83823e5ffa67ab9d7ba09c9c78753469a8211dd55197f0264df5d5ea5cab2d958baa3c198346edab9a2e09adb467dd7697f81d4f834a873ed16f4053c4281797987057d"], 0x80}}, 0xc804) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3, 0xf0, 0x2}}, 0x18) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x1, {0x2, 0x1, 0x2}, 0xfd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000302, 0x0, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x3, 0xb7, 0x1dbe, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 3.396204258s ago: executing program 4 (id=3093): socket$inet6_sctp(0xa, 0x5, 0x84) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$unix(0x1, 0x5, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) 3.309110222s ago: executing program 5 (id=3094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.856592506s ago: executing program 1 (id=3095): rt_sigqueueinfo(0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0xaa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000015c0)={0x24, 0x2e, 0x11, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str=']+&\\\x00'}]}, @nested={0x4, 0x117}]}, 0x24}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, &(0x7f0000000100)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0xa) dup(r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000000c0)) r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_pidfd_open(r6, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000240), 0x0, 0x0, 0x0) ftruncate(r4, 0x200004) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402", 0x60, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYRES16=r10, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x40004) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) 1.949518669s ago: executing program 5 (id=3096): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@rose, @remote, @netrom, @remote, @netrom, @default, @null, @rose]}, &(0x7f0000000080)=0x48, 0x800) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x180}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {}, {0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r3, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x804}, 0x2000c001) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000001000)=""/91) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, 0x0}, 0x94) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x2e, 0x60]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) sendto$inet6(r11, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x800) splice(r1, &(0x7f00000000c0)=0x5, r12, &(0x7f0000000180)=0x9, 0x1ff, 0x0) socket(0x22, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12, {0x2, 0xff}}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040003, 0x0, 0x2, 0xf000000}}) 1.885027395s ago: executing program 4 (id=3097): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000300)={0x7fff, 'syz0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000380), 0x9}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.74448409s ago: executing program 2 (id=3098): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000007000000"], 0x10}, 0x4000810) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='lp', 0x2) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xffffffff, 0x1, {0x0}, {}, 0x8, 0xe}) sched_setattr(r5, &(0x7f0000000200)={0x38, 0x6, 0x2, 0x8, 0xd93, 0x5, 0x9, 0x2, 0x4, 0x6}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.507665056s ago: executing program 1 (id=3099): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x101000) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x1, {0x0, 0x8, 0xf8, 0x3, 0x8, 0x1, 0x25, 0x5, 0xe6, "ad33fa1c74df28be6bb48149623b5ae2162671004ce7a8c3a83525237b0ee921100472546d0cb68762af3b1a0064057269997d7c1d984d6555deb57c7f876cd09ae564828511960ba029cd87257e645c7f030e1e623dcea9de6ff86c82041c1506d8e883ba7e320f8ac7ea162e8294b249506e8b3902c4b924da4320bbedff8fdac55964b01a530a111dbccf9c864a6d96728219b950cc93ac3ff62e18ead35f9c613cdd9265e8da003e98b5b47e5d8ab4ce21e334a42d88a4626f963f44a9b301abfab5d23c31be2ca6a887cac4679eaebd02ada55abc39849d3720617f6ded34178a3add78"}}, 0xf7) 741.237359ms ago: executing program 1 (id=3100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1}) r8 = dup3(r7, 0xffffffffffffffff, 0x80000) write$uinput_user_dev(r8, &(0x7f00000009c0)={'syz1\x00', {0xee, 0x1, 0x6, 0xfff8}, 0x24, [0x3, 0xfffffff9, 0x5, 0x164, 0x1, 0x7, 0x1ff, 0x4, 0x40, 0x4, 0x8001, 0x7ff, 0x3, 0x0, 0x0, 0xe0, 0x9, 0x3, 0x9, 0x100, 0x8, 0x5, 0xfffffffd, 0x0, 0x0, 0x8, 0x1, 0x6, 0xae, 0x6b, 0x31c, 0x5, 0xb6e, 0x3, 0x10001, 0x80, 0x6, 0x5, 0x9eb5, 0x2, 0x9, 0x3ff, 0x7fffffff, 0x1, 0x4, 0xd0ad, 0x40, 0x10000100, 0x80000001, 0x10000000, 0x7, 0x7, 0x800, 0x4, 0x0, 0x4f, 0x5, 0xd, 0x1, 0x127, 0x4, 0x2, 0xffff], [0x10000, 0xc953, 0x9, 0x7, 0x800, 0x9, 0x80000001, 0x4, 0x37e8, 0x1, 0x4, 0x4, 0x6, 0x4, 0x2, 0x5, 0x29f0da4, 0x3d, 0x3, 0x3ff, 0x6, 0xfffffffc, 0x7, 0x8000, 0x9, 0x8c, 0x7, 0x9, 0x40, 0x8, 0x8, 0x71b, 0x2, 0x1, 0x829, 0x5, 0x5, 0x3, 0x4, 0x100, 0x81, 0x5, 0x2, 0x0, 0x3, 0x5, 0xf, 0x7f, 0x101, 0xe, 0xffff8001, 0x9, 0x9, 0xffffffff, 0x11f, 0xa, 0x800, 0xad, 0xffffffff, 0x1, 0x200000, 0x4d8f, 0x81, 0x8], [0x4, 0x1, 0xa5d, 0x2, 0x0, 0xc, 0x400, 0x10, 0x0, 0xa8d7, 0x3c3, 0x0, 0x3, 0x4, 0x0, 0x3aa, 0x6, 0x4c2, 0xffffffff, 0xb2d, 0x4, 0x6, 0x7, 0xffff, 0x81, 0xab, 0x4, 0x8, 0x1, 0x1, 0x31ad87af, 0x4, 0x400, 0x7, 0x6, 0xc, 0x8, 0x7, 0x650, 0x5, 0x6, 0x2, 0x101, 0x44, 0x4, 0x5, 0x14d8, 0x1, 0x7, 0x6, 0x100, 0x1, 0x101, 0x1, 0x7c91, 0x5, 0x9, 0x7, 0x1, 0x10, 0x5, 0x10001, 0xd2, 0xb6fc], [0x3, 0x70e7, 0x2d, 0x4, 0x9, 0x8, 0x7, 0x8, 0xd0, 0x1, 0x0, 0x8000, 0xfffffff7, 0x8, 0x8, 0x4, 0x2, 0x7, 0x2, 0x8, 0x5, 0x4, 0x4, 0xffffffff, 0x8000, 0x7, 0x9, 0x1, 0xff, 0x5, 0x6, 0x8, 0xfff, 0xffffff48, 0x10, 0xc, 0x6, 0x1ba5fb2b, 0x0, 0x7, 0x5d5, 0x2, 0x0, 0xf, 0xff, 0x2ea, 0x8, 0x4, 0x7, 0x79, 0xb, 0x10, 0xd4a8, 0x0, 0x3, 0x0, 0x4, 0x2, 0x8, 0x6, 0x4, 0xd, 0x5, 0xfa7]}, 0x45c) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x17a2f64806d13b53}, 0xc, &(0x7f00000001c0)={&(0x7f0000006980)=ANY=[@ANYBLOB="d44400000d0a01020000000000000000010000000900020073797a320000000008000440000000010900020073797a30000000000800044000000003804403800400008048360080c4350b808c3501800a00010072616e67650000007c350280bc1103807e0001008f5555e017bfb9664a3810be5d2fc795374961247b80c4c2ad487e1a0effc901609c2f29e22e538a30b81b4559f1703e928352301e7389fec3374af7594ef5626b8144ae23b131ec78a477851a937e26ab08b8d5fa09609b864f447db4dab15c30700d9d4781e25165c21f8d1954e42b2edce64307a6d20ed52e00000400028004100100f1676e5f815669a475a4a03e85686967b2d3d099a1c645fdee1e79bf45830ce09dc470a1d5a07bf9d989e4da02e37c3c0737d26e44d8102936425ef6f64ff5902b1ff850ca7ce9dfe872dcef41a52c75c04b8181b5c2f9046825d99df3b07bdebe19f04bc6a1e44cab1b4df59051a4896cf6f62dcdc468657e4ddfb1f3215f2171215f3dc99ccb9d91cf9ef8eaf3d8c587b17160a23f00c0f724225ed9dfa13c9d005611377068aa2e555255ed2793e591a7800075a6267d3e36eb5f90e492b73fc0a4a11881417a7495e9ad0eba9baf261d3c157571aa626fb0dd679e4d43ab714d3b6f1b9487c2649dc6ec0c528a82081e1871177f11a2aa2e565870663c6154f73879db1355e6d7b8586b352ccff6dd77d3e4a39b5f202e888ce61b2f1a826f55baaf5c5eb192033e2ed747d66e57f45e3da2fff53198745adbbd016e872f4f428a5bcbe5ea8c6a4cd1c0c5c3c1a5833511f71749e433a5ffbb02bdcc51ccb98707e488450328d006455be86b4faa652803f224a8e7d067097ea94016e0ba39b30a42aef3780443f804c3de6e233f7214bea88528dc93eb810896c82b665818e8205a0c4372d166eafffb3a5cc23aa4c72f91cc1d4acd1fa4685563ab1d23b2f655cbf57f4f0a9721cde6f03ecbcd7bb50b737afed6e03cef253e02efd15a688d67752634cfd92905e827c9c3c8c36f34fb84ed36a2868b65fd631b3635b8d5924fd08d5dd90213e9c1d9aaa185afea53ba6fc4d36da4dc3924d9afe3508028c9ef785b28b5f39f5433949ef12923e30bdb0af4d9138c44606f9ee5e41def3a45c3ffc28c0f867da089b8a445752e025d17b94ebf896a07f3ae7937db16b30df195934d80ee59d8463e406a2634039f8a20a9aacd42f24649c58bdef54ced6fd5c9d8939fa1c05a4ce3808dbc52e7f10b224e1abe1daf46a2eefa12d3ff4f5f6a6588246e08c505c870493bf5a027a3996ad61d0647daf64088f3acb53a80539512f633b069f5e96d9af9a707358a1aa924238f5de5ce5876d3c00850603cefdbf2d50f469c68b0dae71032dab4580cdaed0ab426f5c6fe4c63c1066aff65c4c64532f456e1d1dcdebbea8aaf1bc6605592c476b3db1838ff4852be3d58c5708ff4d3f1064ee23ac5e632944a93779d64df65ea068b25a47dbcd2e1e29c9b711f7af79e7b9b77290b4d7cf06f67250e52b7db7fd32fb9b4d3f8fa1ee0a6ca263ad7f3cca4a66123605ee4a606d2f32be0d5392fada01ce2642c597085a8a4585a397c085b60463174210c614d4d414bac78c9cec438161b360ae5ee15eca2297c67ed34054a87fb1863b4bed479828471627cd209a2aec5c1ca2e158dc15aaeab7df21b202e18e03c9b705ffc60a0a95788369e1a81d1fe6817da0f87c26e3e24ebd216086229c65c39b22f2c90d251ae8378fdecd988eab870b03b9933cc412d34f94e26f75bb1fe489d1dc8a4a42df45711503e23007544331e96a7d3cebdb6208844c6be723906e63990890ad47a7b026fd2c7e78bd15f04e92165a5fc0405d90599b9dfb52a8ca48595a9a60bcf6ca3682d400227dd266e69b225283cb85d23443858d642a376aca29ba490911de0aa9cc73a48829a473a0ec7f687fbbd1b583161e4a03f7115f8cb4a9aa88caf34642d551be8a5a6a11206f17f3c87870eab3b55dd4bb6b6a4eeae2a6443ee004135b6adbd70527baa919a8fd58886741a05b0fdc1637af4040235544a9160e4cf5428c05e137461a6c77a66abe9cf75732f1bd640dbdc1de2e8a596616eb47a6073069033b7a8cbb5574c862e7bf03db637a8e706b1df505b02aca5dcc0d665ab0351009601ed9c39f1f5535848f83a3fea8bc2ba330d6e0f3dda26cb31ed77e1d9b0e62a9516e90dc7ef89f0c6fab06d5111b56e309765b96f37c4d6beb2d6f1108d2b8e80de018e4daaf0940f6ad2159e98be0e12de059911f918cdec89924b229af813710e41ebc86adff469002012b49ba3151d83488179ce595a6d255f9c804237ec0944bc2de8d9ade7351aab292c03a9f19311b1f41d037558a54bda3ee92b0e84970089ae9f0d8ed12e6928d735025a531e93b2d98e38a162c8b3674953345e9ddd45de215d72bafdeeeabb1e4c5c8421a444e982b228c7b3ec357bed3cfee00f56f61227c8d7ba82039830e24ea70cdbbbb3c12e69162100b10061a03309b189b477a01b89183a66376f82e29e1f722eaee22938aa50f1b3f8f14fc27688a5448b327586e94c61e83a701263b4f0b848535b7322bff61b1ac217a833e54efe8ff61b50d669abd0f7a2ffdf0beb5eb422ea31dc492b6a7295393d5e2a27efd6e20f872338b8a7a1ec9caa3fb2d36660b686aa15272458f4eac9e37c238286638aa0efe24d6b9b34fe56722b39a219fc17a134d161b37d8354f305864f915a44ab187137205dcf289e955da8fd822283e4c63a7636503ab11f624c4ad274fc3da3d6b9daece8562f285d86cec07bb519fedd4f5bd6eda80c638a9d1f204ca1786cc74be5fb88a4a7043b7344262891db2bc50c9b00d6f33cfd7103da6698fb657c2e365d52c9f9eba987251b665030ca1504a97ba250de62cbc71c3fd60a5e7d86a31088f0b210fcdb826d657fdd4cc98120a9155e2b80aed09cb4d0856945246ff11f11ca6f4525960a00cedfdccd55af6f477652830e8791ce08abe35debf5b50f866ace3f7ec3bb8d737c48b5eaa90aef7e976113de73d3d9138c1862ba91f5cd6fb8dc16ae49bae47950cd3538f4932106a852842f71f2b12d633bc7cda77cf5a3c21e0ba31293bec51a24e74f69568a1e0a4919769d152727a9ca977b36f4f308263ea12f2f1a20835ffe6e17125a261e3b53bb41b09d4ebd234f03b2a222439a7c43b09b8f427d35c74b23f5930c7d783f02fefefc4c4f15b12e513715732c4ebb3a0e65c46b679adb0f68f34e840fe010eb8a6a5cb45dee6f6e9baecda85ae2cbd9150adc50b5833a8b338f7f21ca8c923b197ac4e810fd5ba17dbe5b207733d1dd36e503b269cd961f2d7520df22b24e7ae09046d6976ca001e98e570a260f62006abd75bf0150eb4902cf19a39839be141f3032bbaddd35f2d15a2e353c650481ae75c7ad43ec7640091b02e451409277d232c90cd28cad361c33c8ebaf71dd12fe552613f290384e9a7cf091add1eded897e384bd01cef4214bd3278ddad56c3f1bb6239c066da7d31f731bc9f08304b979519f8fd9ca6e284d1a1b349096ca6eeef40070f79f7c568ffc9445614fb2fc033ef8247038458a567a1ac7db5999dd2279d91aaf8123450d51cdcaea2840b75bf8426b8b16d500ca597243de9cdf842ba93ba3a2caeea23b4adabf7b5b9b881216e66eed5a3872dacfb476db0881bdfc07fff5c5423843259e9202d1233a7d172e274b644332f1a92f24e1680051774cc39cdfcb2d2f031b4a35bb3a2b2b2dfcd893ddb4026f6a78056bdb3202a71251b0bb429125c133e9adb4fde51c32f015c4664611372e0852d8af404620b01bdf7c8d40ca06c890472e2373226c4602186e7f51c9d7495398f31001818a02c6c4c3ac5bf4c64a42cbdc721f7750e69a2648e3c4d4c7f3c37c2edfe2b57e446fae150fe724e6adb1a7865c3baf25cf1d560e1f13572b5bf93107bbfe7193307d3d3c6ad4862286ba80ebd2cca88ffb313703dc4b954c3a9af86ca10e4d4e1253ba4d9a4a917afdb671e00bd43793d883af357e1775e7bb29dc6d7f04674f86a541163eb9cb521c77dc0b878bfadb2871adc0dcf140e8275bc48cc166fe84d420c95dd490e91539c226916012f276c9082d08096bb6b216d9fff5dfe3e7e7bc8bdbc1d3fc115cb5a8527a2204a465c43ece9041cb185b3d9d19aba5382b02ff914040faf32f8329f55a60dada753ddec9203ce6040aca255185b7c094794272e1e9645e84507e676655333ca39d62dbf5c9f08e8a3f53f35ff5bf30486fbf6bcdf6a11d128c38c89583aa73e3fbecfb779c3ed238a1f85870ee264143597045a46fc73d3816dc1503b83a22890d407bd860b1f96ca37a43c29da879bda214cf06e76a9fd2b93d1f4a1e1426919152079bb559dd74150fa34ad09d24ac7b01f2c777afa665b6f23e3b1660a2e0542a4b99e4394abef210ec62e1e6c362e594a85aeb76eb8c72642d34ad9247ab8f3f3c20190bc96fb7ce26042b98e54ebfd1fae4a158abbc26a5645214cab55b3f837fde92b230c14649df906806e0fd0d2623b046be86071d509e632bbbae866b657006cf779c5f365274d3247f5242eac6a51b8cbd0ca12129dd309bbb72fabf94706fca7d420296cfd8ef7bb11e7ea634852da685331faff087ed0dbaad1564a2bf71925ce73e49ba312b7e22faca14abf8daf4197fac4f6a989f9f119963bfaf825e12df29070f603fbe06d83ba413100730ac0d1dee32edbd1faf1fc7f10e98bee54fcb2f649abd008b78ee06ec1fe5c1a5a0b530f26ac2b14ad12cd8c3c24a1f58c586b30d9112eb7f42c26f147394a778c64f1dc0e188db6d5ec4b36be2d0c5df5ec7c270c8ad0f25915e9094f9a192f67db3566aeab57497f4277d2cd28855aa1a1f7021a3e1cf30bf83df1c9ac628b0e4d17c0c1352b1ab9bff92ebc83597c18113afd6ef44ac62effd129d0b3f864964a41885747024ab74949254b9a3ded2239628c3633803dd366b9f5ae26c104c31ae69536f4c682b699dc5b2e47a6343cdf8504b7aed9da188b2e2d82854440fc28d5006c173af9b9c590d6ff7f3751917da2d7a6664cc2e576fb602a622917bc26163797576c684f1437bd916ef05d1312a874d32264db2cedf6837b07a66a5866cddbbad63428435fcd202c91b5d5de482fdd2fab333af711270224407fe7f2002ced9d9a62693a9655b7c64ef6d083abfbbb14b255b7915d8825580a1d7bd39ee9a8bbdd7f71d49c7f021e6f13d58404b376b6a8df0453518d3f82ed54fdd49c0853713e21cd5a152743346e6600cfa3f907e1cffc5a3926f527870708083487ca0224b1c7959f52798a1dc476faf552e03c0439a84404459e34226b498703adf525f78c78a2897ebb6dede624ab30e626fafad3eecd0224a8ad2d9083aa9f243ff6dac0940b96d37395e4d986b13776edc86694656d41afe9bf826ad1ef1d6248b4ea443a557d9ca5a65a716925be90463fa394e5642460fb2221d9c0cbc66644a374dca035b6d7bf4ccea6febf8f27dab2765ee9ec0b720b6f6aec1f64177642f3d4d9352d2b10a762fd1c656015e4909de3a19542d6be5096e8c7c20090558adfeaef844fa88ddd990ee3f97277869533548be63700b40a41007a8a6ee1d713d922e1bc8c1720ddc96323e2e1563fcce165a0f515fa80066e7c7ee6f365c180071f6f86d246845db3549464fdf4b1aed68df4a420ab885cc92437f3ddd52ab88fe85c8327877b176b5ca8c5eb29faaf0f63137f839bc770851a507233f948a6e83026eda88cfb536530870d9bbcda22aeea2587c30b67fd4448dd3d1cfc79ff451068de1cb68ad4355ac057f32980ee7ee86b810dbc379154cd1c762c3fa4267c346a169cfd00bc2969c70dfcaa4b6bfb524db7b9c1e50541d212e6fbe8642746cab158a2b19c480beea23eb0e2b94ee959219b1aa32671d2c5263322862b1b27f4500ae5560e7ce104d825d51339c95d014fcbb03d9e1158a0b44d51d84561500a88b32997ced437d2b65068b610b54285561cb39d3e23020ae20ad5e1822c6a7bc70a30ab4f37cdbc734e699e607d95ba74261730cea9b5be710f389cdd5969b40d7f00010039380c77e189a16e37c760d67814ba9959b1a59987314e214d85e1da98c20ba4f3805141d6f24f88b82c8026ce8123db6c398f422287dd4660b1ba261685f11b08bfd7326fdcb6037eb9ade26254bff7a1a3475aa01ea5e60b600e0b8b77a57f3af1c8a613659f214f223719c0a6adeabaec72ad21ea4245bce759001f00010058c31e72d62d8eda301e99529b5bcb75bf915c132b6d382d93761900500002800900020073797a300000000008000180fffffffb080001800000000008000180ffffffff080003400000000108000180fffffffe0900020073797a32000000000900020073797a3000000000240001001e704220b9711f0f0b110ae1eefce51f947e74dfbe293f67853ec4cfa50d67b81c00028008000180fffffffb08000340000000020800034000000003ec0104804c00028008000180ffffffff08000180fffffffb0800034000000001080003400000000308000180fffffffb080003400000000408000180fffffffc08000340000000040800034000000002cb0001005975bf98711b3ef7b94cd52426d0b58bccb3bbdc01aa56a4afa03351489e9be8ba5b8a97d9489e2ad376b12f027c9965c8c24e37a6532f8af15b45668d3fbdf1e69a5c41a1f9c2890696265ae4ae2ce163a2fe202de25cabb7d5276e351666465292c94bd599145f15f760ef6addeaf8b9538718888641b750ef026db665086ce509bdcc21831b36a8c5dc3502ff3d43462d5dfe0338e81a6ca7f1b61a58e800c711737d05be8e7bcb72462a926cedfb7143121780ecb4e41e562f9654e1f4e97f0ad4614d3b13003f000100ee884f5f727e36fe96a365c0d8594918131acd440016a2a4717a8ddb657d6cdea0f03f21effbb43e4206fcc863994638f07817000aabb66589f8df002800028008000180fffffffd08000340000000010900020073797a300000000008000180fffffffb650001006ef036fa98c062ed3757ddec3686d776e3387aec0f16e33fe77ae1775a16b5040c336e2fd3f2a8a0e8c1b5af24eb73bfb5298e6610f022d08b713b015b9592454595b59555ef13443db31f0798af9ba58fdff5c6c1e33cd177ff599565a7e0c2820000005800038054000280080003400000000108000180fffffffe08000180fffffffc08000180ffffffff08000180fffffffb0900020073797a30000000000900020073797a300000000008000340000000040800034000000004d820048030000280080003400000000408000180ffffffff0900020073797a320000000008000180fffffffe0800034000000003100002800900020073797a30000000000c00028008000180ffffffff44000280080003400000000308000180fffffffb08000180ffffffff08000180fffffffe0900020073797a32000000000900020073797a3100000000080003400000000204100100b96c6171eadc36322450b23f8138043f16874b423d032369868338a5d2c1452e9f2387d25cce39385e390b78c622a24cbf82caea0c33a07fb275e096e69ccb20fbaababff8698ac2989fc1e1ab5bb2a2067960b68bd3ea898e32d873993ead58390b2a79534bc4ab81dd543faaefea090f379867d3bddf2943d3ff2f6fe152898962340dc6ee723f6392589b2b2562a77099e05422e64ab82848667b411b5421c00d56ee9d84e7a3ab5295733222133c05cc01d8fee620148218bca519c86cc898f5ba75ad278f6a44030a38246c3b3cdcd35e08b9be64b1ca867cbc81319b167427de3f7012ebf2e8a4ca28eda8a82d03c40e18f2081e9f889bbc7abd00189de8639b775f0c1319761421169d1d512c664044d755225722413b34f127fc1a7c992c3d504f7072533d782bd98e9476f5528b974787855c9f494e5bdc04375ea4a75514102fa2e836d4a18824d49abcd3b9aa465f4ed75e50837cdb9359aab44807ad592338fb97e3bb9dde3fd419b2ef7c6969d885a94c52ff247c08abe0482581677a8032b85bf4f4e258ac91b1f2048af5d3850f01465bb1563b459767236e221c67e71d295946e8d6066f269a171c060c02a3ae101daa8a430cce42e249490c5b2c41b2689b78483f4173653664d38b63a9916700d63ea589ff9946e9e9eb9c2722e30636d33576c73808d5b569580df0462b287d1bd8c7837da3231693a8eadcac52949510a880c8371808e4a8cd356e150ec7874b1a5c4ca04818ea810d8a654f4cd67cf3fe7a94fc7ce598efbfbb4db8b2edcdbf1f79cab7a99e9d26e230432ac7e33e5941a908dfb0fed846358ebd4530ec4e803df5fd074e9813c975401a1c303c850a83a136bb5dcc5ee9cacf52f097275c641e67f443b00019485213043bc5a6bee1aa8b0b9c422b4d2d07a74c5187b3d3370d69d4793f485cd2edaf45b4cbee9ac4defa7338e6a04a0a2ae782d2f2bb08b3e778c14aa0aed3f25027308556ef72bb9f87de82b6be2cec5881a5c2fffe9292df4c476fb055b8c0ee36bf716f80da4039d0fd252abfa89159847d7b45c951eefb7ddc427a2429d6296564dee3af1020c72a5cf7afc536529875ebb5aa39b5aa92c13d6e50e075ad41c3efe4c23557f28f1d6684c4b554265de1e96e080a3b2dbd85f6507eae81ae64e69a8d29c5d8bfa7c444f3a55147ca2aa63e5b1ccf01dde1dc66839cb116752f982934a53dff68f7521614a56bea4030b684f2715293a74cbfd628e35ae6da83f70ca23f0899b0a29793cdd144770f9bddab4bc24b035d2af9e6e7a07a8af1d45dbb5c81299c090caef2f94dd904308b98f5a403a34dea485bd6079191549311d841a50bed53eb6f8556011eb960c26fba90090bff3bc5bbc303e72d9606526dbffc25f5b75a8786c2a4f3006247bd4be40a448171c635f1900c42bd91e316b376ec64996f2297d7d2834c69143b45dc3568078cf3cdbaaa0a362b3a920e7f5ff3a12d6713d52ef2d102b1d486454938a46c814bc20c9597191cffcaae9e3fc38403cc743fde70a485bdff253317dabc542cc5b5a6e0b0872b41e816bbe4efb4065291f0b1dfaa5eaa137f8c815ae3ab9eae37fc2c891ac443f25e2c8fecf7ca9605d1c9ee469221e0bb520e7b49a596d1afbf900cc7b9296c4e3c6c6e6b593fde07722f01a4440733d897e579c1bf7f92a2ec48d0aad9ff0ab6419261a37a70a5b425e088add18b7f1733d4ef7b1f6264c8d9cc6852715363c806023802b2d673f556b0c9e1e650c66045137bc30efab91183d9c9ef67f15b3be33b5d34356c9099d5321b35a53065c8f3e3079c0dfe3649de20a1220a0f991c23fa3c078c6c0dbbbef6ffaf6c41898cede9677e670104b6a02cf9a5b47a3941b2068c47347ff816db0226024666953e47bf7240f7c440004996c52edaee80c838234f09403f20321075c6c6a7dbe423f1ad4c0e7d64a0bbfccba65c726b9c196460022e9ba79b82706d531f19372ac8b61380b54ad9b4040edc051c0417183139008f2aae8c305ed98468cc6f7d6e5ff48eb33995007e3a234230df86206db77449fbeff058a9c6482a4838a22b151e5bac7da2d330f59825787330f99061a7fa8dbacaff166f0707e16618f508e631994b79479d9081bfb8a1b3270bdf37ad01c09d6c986bb61593ac76d3fb16e35489bd408dc0cd61349c7880057d01066d5984389baee640dc55cc738d918f659a3add5bff7646fd17c6be32c56a304570b984efb9ec27fd2aac5886812c761f2d41144d499218893c974cc85bf4d672d8fcd9a289f36db0a599b8b95d05ac72cd314c5e94e675a828bf04438071b2120f5d83bccc6d7006ce2310a1d44f436d4dedeba64b6640131dce3279e9b732542a9265b1c079cfdc81794dba76c089d517576c1869e702b8f6147f6519539abf5676b073a3ee9c520f2bd521db3d3134ec43f6a3df9b8f06e0c374b462fde61e744bea99756d6a35c66114be0652da4cb4b676d76060d0c62f9713a91f426157239d08b7d3877c97f3eeb946f72e3fb8cf937a815dec2b0ea25e635750d206cc25e7eb60bafd6581871525265191fd183a41490057fd12ae19a9be1fe5e0f5586c9c73e00ed5e93b53c78f9f191530918b843448fdb3a63980037548ed7287b203699e4982b522b25f6fb2826e8c5a9e66bb0475b0882ab78ec53bdbc36c9ec896c76d53ea01f431671fbfb3b0c2fa3efff8c50224cd7227a6fa1db5554f898520537932dacb5e56ee1ff535c04f4c719cea05a5a984b9cf26173f7b946441520d3ba67658a90735c86bda460df437beb004c2bef0078f574fdbd1329446da4a984d45243f863711764e1794cd9a28aed588cca0e44e216e43a36730c21d6b0b85b546a086ec902e9fb400df189db1c14cb151414cd305b6bb351f98cd189bf62d188e6a71b595f256cda79cf97ce82428d1648d34ebf2fea7ff895520e1f3a412c8fb13ff6e6d1ab6fa0fd714edc627f2b816bb7e9e56a9f4f57ab6abf84dde924b21a1e06969bccc2d7a49430455dc3cc0a92c095017574ed8efb8ff6f93c7f8eaf49f2396c8060c5b39c86d53d2380374236dca31ff0bf72551841ee1076bf883e87fee4bcb9cd3ff809ee2cc6eb6c635a1c2c4f3559bee3be8512996c2246d758c8f9917345f69ded19c8140d70e835a993b5dce5230f4ccaf5bb7bf07461c34c18f2c610e5d7b5f7ca681d8b4273883f3918b7f9954e0a9c8004b00ef53413a3a8c19b32ba2e8915dddf04cf28262f2cdb08788a586421f191933b35d0737fc25f430e92615e19157fad6ff4c883a23bc6e0500bc76b5cb820a9adf9a5c70136bd9fa9e20b960bbbe8fa8fa2da75b88a05c73cf359db2c9a32f1a7545e9c5fa6fe942fa364997ad3c71e5eab11c710dcc7f8d0c770c1a3085ca1b4ad17ac4272064296fd19e6d74fe404afd87cd0841eb4c9d3645e1afca7a1ea962ac3ed577543142b36d52d287c56a9a4f7292ef2dcbe53394844ca049476e10697f721f657e2478e7a5b40ba1bd56dd843528e072ea3d18c3cec325a5b995091f096ed6f1ae843c51ffba4fb4805f1db1fd063fe136e55c9e89b5579815d2f60a5dd57bb1b6cd5cead68873d5de884f97718c3d46e0e311d38351ba270df242319e00be096926598fbd6ef21d65270e6a710d0cfabb16fcbf4075f0b3c3eb41b04ae5d58048fbf43c1232c5cc5f4fa5c28d6fe43cb34f281c0d645cc7eb81ad1306b35da129264803fed551b2a9bccdcb37919b163cbbbd47b1f27fb646098a80e1de3500773e3423fecddac2cd7e46036ff94c28b5544f1c6d799df7ca1f223da19a960454eabb0a50fbdcbfa18e0b70899ef6eb32d2d0985c61484d3e7063e72d04dd11ceac4f9d5051791a938b736646bb32c99188748f3ff48dfb5abdc6704b2d13d4110ed4e0c9db1e5e6d26e8db580ce2f95e78b53b5cf7e0a1389f40241df68a27602431273b5db4d836f79f65c1240a1d747ac1b185c4c45c26081e12bcdf01cad679fa4632ed2f8bc38e33193f225a5744c6f4acbfb23ba1781ce615b18d41cd89e8780a1cbcd56d5a44c3f5d88269c811d37b8e90f3dc8dccaa4f9515ceaa1ec9cd0353bff5f6baa4dccea09669a52a51b1afee8a40f46bcbdd6f2ad36e8dc10a6ca4e45d9383d6b11c09d7091b02f26e7d3ff09ab3985ccc675ee060df0cb802b0f370d6ce345c86721a4fe5fd233660c8baf0a803c580efbb0451594e9865d574cd06e2f40f84bf235a15049f11aa905cb8c6aa6b82ffe5aed544e10ae3532dbbf7462eac688c3ba4ba4e3e536efe20ae4419c279a5997c168995192d83372ba12c228e2f7fa50cd2eeb3b70c23560d94b9b573dba7fb4747611ed7e18a8942ed626666916681b3038c543a9c51ec07ee3dc9095792e920ccad3c87151409db8017f4660f66bb0195cee41cf16f78b3e58601bf7454eb3f504f21cb53341f966dbe511704c8ba151c41c12152158a02daa086a4791c03ade60d6da054720e51ab406c5c7c5e5a92da47e038df6849d7072ce5594d4646c2f2cd53bcde9c4bed63b952235f80f7ac7229eb50441bc0082acc00d5329520dd33852003429e4c5da9cbb8c6f9b56f3cbc873be2f565d52193bc7ef861ab558e49a43cf43a9f89e8c57fb793842d4f7d2bb2443d2e3398a77cd865bfcba332ab5ee25ce8d458c2e8dbb995159f394727888613331018b609fb3a8983d77cbd1570ba1cb7951ef1035c310907edf63a87baada7d909aa1c11b77ca15af38cc03e7974d8814d7063fadbcf07a428b5001009a70549690f738191bc74ec47b09f5a42baebdaa718d09ce40dc25e744d8be2deb51045d571a99a571f4416db60efc3342efda0221ceb04fc20d374d305df91e0004d8ffbabb6d44557001f971ed67679eff96e7aadf1314f1149a22fbba08b86e8a5d526a7ad1f68f24a45ffed4da1fb073ebafa63e48d0b7d8bf5cbed39fcabd31b89a86df0fd0c9756f9bb64814cabe75aa970b77042c67719117c385c729720ad57f62c0e0628b61a6a2ce1fab6dc0c122349e635489aedae33f4282aa4c5aec7590c0bb88aa2cc6198da1f28032bd9e062cc76ee2bd6021c7d925c3ce17085bfbcc93faf4dbc22db7489ecdbe95cff8eb1bc5dd8d708fdaa4ec37fc864f9c8b22cef4c91123ef591804ac232169a9ec133cda03a14adb34ba36becbc7249f571f7fdfe2664569a819e066f95d343fc8cf2cf5eb396fdbe85d57c5d14f35088699af20e24da41c62a2b06bd26ac3f1d8763a4048737ec3abe0f8653206c445d0ceaddf260d7b851d1bef71afaf1daa7b3f90a463d1bddba094f0eba0269e3bc2991d08566bf2e92210511ce9a2009187470fcb7be9b3e78f4d35715f75b948c1f3a12b98e776eacd16758c2fb4e40ebdd8cf4421a71c07ada7aeb238d6ce0c85c573f0aee60149bc2e1c814055e2ae6b10af8586862565b925b4d495ce58a66bbd6c7a19781e755fb7e28e8eb8586ac79f95c532874cd73b660a2d86a079ba13cbce4540455b06dbd76f2f52a264755b18684b2356cccd40a30b992e9ba9daed2d24c83aa364e3637222029022c2c65ad0716ef0183955fa16f9440f65080ebd6969cec6f6a139f1878613d9c8d672809b70a5609ffa9486a53e106ce2f544566f172178518f4602606c025ad62262f38b303ad8f44e57ab0450b82fdd9a6ebec896bb3e1943a21d0e5b0fd7e3798e15d4baebc8a62e00106f50af1607a2057a86f1bb28c04f33e988bf12e8c704b8efa99e703ebde89b74e003800028008000180fffffffc08000340000000010900020073797a31000000000900020073797a31000000000900020073797a300000000004100100f9ad544dc0cf9608cce5102b8d38e35ef8016777b7845a83a6330470266a59502be8dee3419d8f4613adc586a31a9d9f425ea1b19f1d9af0d40eafbd913c3dd8382e6ce450e29515947e109e483aae81386bb4c97f5c0a72b2eb217746c53dbea670d42b5c7029534f0f9c92f375c37868beeddcf829a295561955f9039b6847f53ac9b515131d68ce16783392ad2b33cc3f0392f27c97f658982736b12a11e5de6618b6b5a15640d633ddbce71e49de53c0f64d42c4f0cec0027b505ad296cc290a2c0db3309ea098a8ba4c74a3ea783fb24e1ede129ad0ce5779d88b48dba4305a75451b1dea2828eadfca4a71bd3e3d6d5acd946aa1a9469db053dc21e4c58c00a5a25c69231bcaa6b66c12368494edee80ab62b72a2a94ec1f22e51caf520bca69c03ab2d39a6e83c0f8b240dc19ca0562c906cf096f0e70050590927ab23b044069c6a57bc5d68618a715fa9e9433cb89ba2eacc8207b4f55d840e0bc96d734e9dcb26ae2901e2be57dca6e3a0a325dd07603c677c4f48ccc81e7f8ca74e62535e0d22350e9eb07a0d9ac3808351bff6b8347ffcebb16a1e8c5b73de37a6a036224bbf5a9c45c059f3e25b3ada6447fd5adf6acf1d62badc97aa857895c7d6c39578adf5257f7cab986a763d23f14945e0d148160f2e5fe9a2c63fabcded866b80e438c75c100070b7c851b8cc01ee0a081c818f7911415734b7d2c06f85f0e530aca12a13a8ba4e95e0f6784c4c693f5af94bde444727216d21f9e3b78d2857972d9ee2876b88f850726d0fb380959ca8cba88330a802e88f49a14c440248adfca01cc597e8e91c7c029278c5952cb910f6cd756ae0b47e090906b6e984187184a89c5b494058c7be310243fb5983eaba0610ced88c4229c0be823bf65f310401213930d8b72ba12709b85980cd387d6d4fd6d1324f79ac43216e911416388e4bb66dd14623a273f310065be1ce51ecde280c6675bb07e7ce6036272541719ab311e20ff40e6c840bdef6cd0f11a6b4831812d74a8714cc3bd210fabc77ade49732131e92e085e322cd98f2d881edcf8ab8bdb83cd59283dbda796006a26379655221e58cec4f2d25b6ac70a59b9565b95cfbbe1613d06f44431a533adcff3a0a9e0325d7cec2cbf8b7509177a2a21a3588474bff7ce3167114f01742b937f9fe5aaa5b15bf460f9d265585201ae7f577434a3769f1c3fe4a4e10ded1859f76eee788ff22155c1b3f2c614ff5b86c1327b01b4ef488025ae61ffc0774a7f01fee65334a75b0c851b4f4cc53d896b55da46e21d031cfb78bfa3021637d31013f19c797932eaab1042d92cb57d440ced4213672efd90b28fff8012bcfb9650cffa7f4c6257868695fc47553e6da4b1e890aef896e5f4ccb24928b5b9e1b617504b1a55d11660af11256ff62a45c7c6e5629173efed00cff123e969bd0a978c8100b4a0349fe0d3f9666371553d45eafce58d0114f5847b8e6c7bb3f32388c5f2ade6752112d82bf78c9ba803e548412d00b42a4024427b8658238531e7f0e1e32fe7e5f935c0fed9aeec2cdcc1930b330168fda236c57168ab77ff6b51b21001892287d6de0143069ef40b66d2b4ac4ea702ab5cd364936c93d291028dd2e000340c692a2aa8d8062cd432fbf881a44a8eb86e863f278a9479b563110562144b20dc133b9c91adc238e9cb8e6f899fa2225e73d0283d318ca0d2459a4dbfcb2437cbd81cc3031c2e7310a5517293d4fc705b8b3aeb1ca923a1e46a14a461b4f1faa442052158afdf22e5ad4dc6b43eee24498769f60efb74443b59076ba84faaa1c86e875227270f23234f28d9f0b55963817a088f4f5e50df6ac6e3a9555e952e03ad0155dc4dbc4b5ce883e53ef30d242e13eaca8424efb4aeab54ca60268ba122e6146f2da1adb332b3b2ba06ccd98fbac268c78fe93c9656832c46e8cba28824875670fbb743c3153e0ac50a086c9759dd68371b07384acf993e13a1a74cf8873408d8c09053f709dca97cb7f38459b8802921f8da3f177cd5a7268b004330395d1fe234888467df0eb512b4e16bbf547f89dbb9d192671af6b8a7c9800d919bee66f17dffe57e67e744f5d480fea0387fc7654328ca8f73d01c9bf195d3e2c3903395f7a1c472eea9a89e0fb78f38dcc245211dd06e8225fce421d7c7308a9dc3ba53a11e3d4d70f0d64b779592bd09f66c1704b7279036e04abf29bfb0d8afe3d28f16e45a9734a933875a3def44269992f5228e97e40116c93afc8e3f2879002a4a7a964a5fabd9f01b9046891d1411d3143f1fc5971defbd4a4687cd8e30ee61489b8850a008abc17231e4b12f89387ddbec8924bf760962928afcb6520c7af041631294d4f3d27f8755cea80122c7594b5346e9767c3bc4995d9b236b3eb2b5e920d1892c4458973a32be02ac2edb94e5539c33fb664a5f6723b66b8e462a5e8a1fbf70867280c86c531728103cf7c2ca85e993b810697417d6d5b50a0a63aa703d4a559fc16ec99d3f3c238c5149d05a208b1a7ad5ffaf0ab25ad76b4b185fd7cfdf09574eb36c6ec07aea8efe6eebf8852dbf10930b3e95179ccc5d9625b96f33322b38358752de93252f0c64e9cfee3839853f02494d953c4b3793872cbbeaa401b17c914edc7d79ebb389b0e2f63845eeda86b8b344996b3be7518c9c63fb3b4e43e9e746c8adff9fea4e09387eb0a7eb68ba66eb5416d1c713b5dd8a8d5929a8d481a7faefa1869821e466f745746653c7437f479cdfaee16fcae7363787ed01fa1b292ef5ca66372add2da77944d25d68dfaf709f7f06d5472634854c8f9d975f493a700f696f8f4dc46caf627992570a3f20b1946a13a00faf4445d0825bd8e09c94b9e62c0a5a2f6d8b3385a24a7c61d2756895559e836c5cea702c04e2a4f3f9888a1163eb1e1a2bead5f318a86147234e065b35eece0b857c655f69f76aac27f8d7011316153d05dd5d8afd98fec29e08522344736708f39d977fc690fdac73e8aae75c4ccb831455cc4ed8bb1384d7797670b445a976514d6a369756833c4b768fffbc2efdf9f048f8b368b363df79ca3105f26db0789a32dbc7959501839c639a72af53c00c394f6f80afe8c08dd5977035ec30c5c09be59041bf0ab0b2731c70622d2537fe84dbbb4b76a7b299170ae7793c5233c55acc8eef14cd22fd708a70e3d164b705d05eb1603918c256d6529d029a6625e25a3e5df0c68c272bfd129f38ea38bca132779e9123c9444e5dd7595344c82dc56d1f401da674d4a8a62a0ca3c813a0309a387e567fa016a05944e7f2351956ac6055496012d718e8b9a41773af4d16de487d3e2fe4538a22bc906ceed7e9cb20476987cec748ee9d830dd2ef638097f3593c6df29f52ab77817398b49ab72336cf2cb4a31eb8c46ad38ae5e4302e303774bf3862bbc51693cf56b5251659fb5a8f160168e79adf9b15011c1099179cbcdd8401ca00cf1b4085e5b02faffa8b5394660a5a25b19a3d1e2474edaed7e34f707ddbc987ade5366b266109ce690c888a203fb786c4eb9c805dd39479dc3c82cf934b3f970035dd635cdf87b499776de25bec0b8ae2ed43fdd1423f8932870a495184d25619546aab44af7ee7cba8868969ae267e25c35f788bcd23b97bf20bf3149885f003ddb35817ca8baa9e5ac6641f840ef3170060daca545162c4671a190fb8c3f26ae158086b3981874f5dc6238d4dc18abc3326b7767799f9321839ab7aee291944a9c013eca2278ee7ecf3deca6871d54346a4000b84fba0b8d14e21a420cc4c80ffe8b9d9e61ad2ff3ab6b4da1ea25a26713d8ba757c83c2c960138eda0ff01e65d7da367256183002090597404c85afd7b8f2930cd0d7b7b7e9fa960b5e215383671b694942833584d359cdbb473200aea30adfa251e37cb62fdd083d4a76be9a46466b262c5012955d7b4ab5be0d59883d241fecf8fda74a5b1bc52dc9cf34a6fc2da6e072e6f4ef223f0da9343dd07ccc7871ba7dca41eca2c6245b424cd30bfda6a5f050a76ed414dd78204ad5213014e3ec9fa9bf062a32b251680bd27b56ed7b378cdeeb788a6c25976007e4f1995df6aa7a423ba43f18f3dc21e718ace0b90fe10c9bb6127f78559ec97949eedec50eb1f8f6b3a2e18872c5c20e812ebe39fe9e8feb915f76531a46b0533a46568b98cd14d9567e9dd8333f20903f5e4492ecef8962fb2074cdd6abfbb6747ef84e08a765789e11af479cdc766a31b0575fc02c1e567c49eb14ecc5e04d39bd9a309fc9c78c5576390c2f4d53e6f38369eb986631f3c783326f213d2ebbb424a84b96682c2fbdd9ee6325cb6755caff0d909b8f22d7e8966c73a17c6ac014e8e888de74f5cb605539e63a0cba31af1c23e38ede9247545b1a6544da1fd3ae9b9cc3f373df47ee6b36f10e023c19bad87f064aa1e50ae3467cf858711210aa014f96ba9f5b756213f93ef13de485798a484402319268beefef8030f8a180247af1ae8df0658c962c97bf8ebe89d964e2e831ccc3483375433ea9af27187987ba14467b5ab3a0995f57ca7b06b1400124cbe6a3e39607e7d117e415c2ef79d86be7024c653d4e4c5b0001180b394c0290b01a445928f61ca41f85858e9d5abf1b097cd2d9de571ce0ed24336383ce761aa760887bd851f95edd3f3ec2b51539ac25de3e2b74bc49219449c13779896a9742a60de2c5b680f345edfb4d2eca19fc828208ce346fbfd2f3fa6607fcf592a8003398500a8f90805719acda9c23a84ff3f227c788f0e52893a3f543ec325dcf2ec3213085b41a8ae77d8214969248d1d32f29a03f6a73b8a24bc3c0397343159326279ad2b22da188bd863ae15550fd7d3dab02327a5136283c9a621255e656b0c5bcbf6cba9b98f2bc1ac10b6cd552898e221d6ab7078a20b6d9e9fc39a99c9df0e61509b9cacc11a92276e92ca6eeaff37372df1e8253f6bf442db7e1133652918c8e90d17d654edc230f23e62cbba0a126e01f4b759509ae4efed87c298419bb65d99d81489553a2f641e4a28cb00945e0641d37c84c7923ef820cfb6bc534e2e30771f35a2154d36a5176c7ddfd74223f60dde63b5ec9e1e9b1b19dc2680539e7715c561f077fc070d039ad5cf2682c41eedc447ab57d2cf9fa0449cde8efbdb9b42cff39e147d0f7dc476fac395794f5250808f689ac24ac3dc8bb4a94684b5b595e0948d6de6db3198b2870d3a112590f73791ea1430528565fca3de9dbe233666287b4377034e6dc113e79d9d59f680403c7c500edccdbee7f96f9a9560d6d6a0bd5ee089832e2e394c4b8bfe73fe5e0f85036b32492cb4320ea6c3da93f4ee8d4e317b1452493c997422967489423f54d86fe1514dd9aacd898c914ed6d646f13848ea44ea8c5577850263dda8516297a26e0a05fdeb9a791f5d748a6bd29867bf508e0309ee6defbe56752c781581045ce4e5a226ceea39d79688e17c88b5866fa8a4ad45f70770c70b8dbd4d803c5d86946fc2bb323f49ebfb7f462f0a82a40c5a357f4abffaf0f4df5e3b72de92e706620ce2b09186165b1f6eeef6587badb88fc3c67a761cb07e2b7cd2671099fc91dec4cd14475a01f2dd081074972539f140975caffdfb47a081a31dbf3b9bc5757b047db7588c30e6efda89d06dfedc82e42ac8e6fd16280c868dcd88fbdacc47f9e80445bf31c56e7da5be61edab8a325f1bf70aaddac9881e7e97b4431716326294fedef96b62f8d98da3d054390afd91ff0d12fae9619bdeb52a31f8adf161b1eaf5b1882b19121ecb43eb0aa2fe334f2f2498245a2d438d4773c1a2ff8a50e48f0400010088000380440002800900020073797a32000000000900020073797a320000000008000340000000020900020073797a300000000008000340000000020900020073797a31000000000c00028008000340000000033000028008000180fffffffd08000180fffffffe0900020073797a300000000008000340000000010800034000000001040002800800014000000000080001400000000e0800014000000001340001800a00010071756f74610000002400028008000240000000010c00014000000000000080000c00044000000000000000058000028079000100864e9fdbdad1e1e2d03674150008986a50413b6d23e0c278649e1d3f414a1a27019f8279514d5768d30767da67af2f4dbbcbf9e24434e53e0d986544e18495d6fefd8486ac102349b52ef127693adbc1f2280ce3cbe6ad6a90963df57ad741bc827c15e7958c9970e7e64167e53d9d0ba5af952bb6000000c4030080b8030280a200010027049080891c1c7339c673d503b61bc258ec855a401a62f950ad3cacf3cd4410f2146c36f05508339557369144b51ce128263e921f42b9827d8b4283cdc6f64014134b782399997bac54d0750f2eb1f9632e5a59cd588834211c39229925a27b163a784ac1568c2c4e092ad623b279234944d7b25810837b7755b020bb96f291f0da7da26e241e4754982c1759b11685d9f1f9ee695e03fd11dad5e0643800002c0002800800034000000001080001800000000608000180fffffffc08000180fffffffe0800034000000003030101001cd5750bb2a1ad0bf0b9ddfd2f590209e5c7edf034a98d768016338edbba22edc17ac4e6ced5b0f4e82d2d23d9b00f5dc270b19efcf5adf73d7ab9ba8d43d7a46ac2aebbdd773630439fdeedec69ac69e1ac5723667cda2307f0e54253f02325d33c5e2c45201097bd07dfb31a4baa6812afe1e48c8f960ff563e7fe7928f914477c97a4efe6779d612e4e0cc5e162bfd3f3aa73ba1ba571e785bb3068af7cd6f4c069344b197fc60ddda84cf478f76911189702d99e292fb393d6a4376f873aa29537b5cb0826f88539f3acafc1406f12d0ef6afb69e01d39038446428e5806c9bf58d789e71825972fe1728f82d5862e8f15e108d9e569627842f49c805900b20001004a419e2f70645da69c1c731943d6158e2bf2fb63588de46509c0b2393382b9ea17edc25cbf23ccf4209ca7829879c26b5482c01831e25b14001949398462daabe0c193a4a70b4ff883bdaee626442bd0c40dc2cab386c42f544fea06ed5206b891320555a4100220ffb20ecc87d26178e34814273d90fccf8d8471dce8b397ff4ee882944fa402607379a751f36f64e900d88c09981fa414f977baf66438608f9b43cbb079a5feeaea2d0718788e0000300002800900020073797a300000000008000180ffffffff0800034000000002080003400000000108000180fffffffbf8000100ec5b94c9bd06aeb7e97beeca1ad7f2a2399e0590d6d76eb246e9c6f88db2d66350e1a0f89991340099e6b4c62f7796445f676fba24c9094766cbf4ac1b521e1242dfdf8381273f799be2d284c3f39d5939d7bf072abab636150077cd02d41731d6594db33720317576f73ef8694cb993632f682a2282d9835b32f7cc7ed0fd7ba7b1b51d315d34b1f4dd86b04608b31b8933ecbd42ec7489916da03628d7304154616aaddeeb47e18e86af8dac4525fc4d0a32453717e369ffaf4ddc1f311b2be8850b0ec16258674d889edd69bf4bbb96bcf8ee0d0f004476a5d3503a23eb9af2381b8d90d837fb1a6bb45549e1f7bb710bdb58040002800800034000000002280200800900090073797a300000000098010280ff0001006f211dc6084ae1e4cf4a86927e8840e8874a49c26521bd666a39f418107fd433c9374eb1bded27fcd0370c1630fa94dbda37d1c65d8d388b229689226edc87f0ffd1736cb99ce88acc3bab6642ddb1e8454bf70850b36c378f74cbf6cd0d63d9b3f1f6a5893a077b2af8c1d60446959c1d5a71c023be793456098c16bfdee4976834adc89d9d0864723f55280d59e96e0c0253d8f5b8e9ef6124af756bc72724cc4469318f4e40eacc089d03b503e6fd0aae2a7f12eae1fbcfb2acb55f5dab6945b9544130106e15f0cc98dcf7a11cdc8817d81eb6984f4a292bef08a81202b520afb26a023dcc76475f746c4ed1cdd1cc8f70531e1b5cee18af64004c00010075a5eb490154411350ae07ae714dab74fd51475236ddf369d08c6c02a3d47970af10fc9567794772cb692184a12349f8f895a7f7dc4e98cbca8145f241442dc4cdd9b5e60fb32c78040002804200010087908e8ac36a403c3d194b642f2f12f0960289cf877115c4905f41647299a6bcd400d14bdb92687cface50dd03e84e1edb75dd8b7736e80f97e71e5d334b00005c00028057000100c70f20840c7920dbcad01bc6bb7163ad8cf89c9bc383619adc08d44efc70c82537dd69593ca5f7fee2e85da38067c9e7bd925c5d2340048738c3899e24b8561fe315a56df5b80e468ec8909e8a969ce69459e4000900090073797a32000000000c00044000000000000000040c00044000000000000000016400008054000b8050000180080001006475700044000280080002400000000a0800014000000009080002400000000f080002400000000b08000240000000170800024000000014080002400000000008000240000000160900090073797a3000000000e00700800900090073797a320000000074050b807c0001800b00010074617267657400006c000280080002400000000008000240000000020d000100434c415353494659000000000f0001004d4153515545524144450000080002400000000308000100534554000d000100434f4e4e4d41524b000000001500030066ab8e92680c9ca25732cd0fd2740ebbd400000010000180090001006861736800000000140001800a000100696e6e657200000004000280100001800b000100736f636b657400001c0001800b0001006f626a72656600000c0002800800034000000016440001800c000100636f756e74657200340002800c000240000000000000000f0c00024000000000000000040c000140000000000000005f0c000140000000000000237324000180090001006d657461000000001400028008000240000000130800014000000012100001800a00010072616e67650000002c04018008000100636d700020040280280203809d000100f77282be7587de8b9cdbbf729c0fc767ae8c0431684240f794c86c042d9bdabbbc6ef7ee8a95bb5f407a7d4d5338cc755db298efe53f505cfede71dd85ed598668e0847d6daccd5d1788d2a456429eb275d845344e3d0d6ded33c4358bcd425e98d7e313e9d93f93048e754f3e2d0ec5298845983d776fddf23a80c752a08dbf29d72e22e2a978974a44e525b2ae8e5bab55e9ab0e73ca962c0000008300010099f3bdfb8bf3f9d11fb1ed86a14b3ad863b9e365b7379a7c574dbc6194c6cb2354d708ef61097f1601625ed53970912885e3d3a2de865eaf06dcb3f826e78d5b474ca7c2af1427842b5ca014482f47604bf5fc3f0c9b60cce5a4908df629b2ad53794100c952c10920de40811a7cb2d93e698c4de524bbff3dbf55596534e4001e00010009e01e9dd6ec70f7b20f28ff3d2f8e7285c90c65bd1e0fbebdec0000dd000100b76da7c5bbd3286e9d4a6b5c59175877f57f01365120045cca9aa731bd11999098f8390a0f701a6dce025bec89adac93bf95ed4193268ecea7294ce7e3582ffd580beb8ae58f8330078ca43d14955344ecb6f079f8dad6976523bff40739e751b7ab1522c9f990feb639375394b788f955a971e85e181c1dc9f3062d5e4aee5096d92a198d16b0ae5a75d4757680cabe0fd1af932c16add63bd39fe2ab0b807acc14b6e236ad154e6da417bf0632a3be9d4b7bce3196236863ffa4e58c6c2e52502f24e9238000393668e4484d233c38518c92c96c81152baf0000000800024000000005080002400000000008000240000000013c0103804a0001006d36489a361e5dc5226ca9acae9ed3cb23686fe86cb6d302a4ea35de6d00e362cedbd5ceffd40a9d121093a16b910155bdc14202d3d8f0ced37b754809a8be185a809c37297b000048000280080001800000000008000340000000030900020073797a31000000000900020073797a320000000008000340000000030900020073797a320000000008000180fffffffe7900010076d4685b4bd8b930b5a4e22cc805b71c530edd034ee735fe4da5a2ac678768fad8113c6084ca2e4a3794b78fee97abe26362ef40caec3d0b7d01be97b76e6b2cbcb8386ea33b635dc9f12466eccd8672a58414c60559bdbc513d8546b8678ef52842bb85bcd82e953cdcc75af2fbceaba0dd796ad2000000240002800900020073797a310000000008000180000000000900020073797a3100000000040001000800014000000011080001400000000c880003803c0002800900020073797a32000000000900020073797a32000000000900020073797a32000000000900020073797a3200000000080003400000000135000100ceb3b110684354ff82e46e23bd92c50a5388bd6d2476110840f3f06528062648c68035934566dc052ec8cf287370fbfc1f0000000f0001008a08bfd5d09c05a30f85970008000240000000050800034000000003480202800500010062000000300002800900020073797a3100000000080003400000000408000180fffffffb080003400000000308000180fffffffb400002800900020073797a300000000008000340000000040900020073797a31000000000900020073797a310000000008000180fffffffc08000340000000030c0002800800034000000001df000100882a644aaf2a9f7815328f832a415ffb031ff6777ecfa17ed478d82bc1b655e6120df370320a36eb8c48fa4510dc4a900275bba892dac8d6f3558769afdd1e96a2a4e9b805a5dd3f40a21a103405feee90e110e6aa8325425917d0f8dee49f9dfaf318e05c47a30143e3a661dc497760032b53db82a55a788c82f154753353060f020a102d9e12d26b4a8e79cda77d9fce9ead3421da1bda1d668ae40bc0f7323a226659815771d81dd9dfc8621c8061d3cb48369dc187a5f16e584c452b1a8a406747f7f6d34cf5f31638cdc23996755e12df1b344b3c504bcccf0096000100ac971ceef3f800f57bf69015eadd316786efde0d8c88d8ec55fe1ca2088f048dd397e082879cc6fcaa56061d0070a865b0d73d994c77ddbbc274737e2c466150b381c9d7d9c0ee8bf8aa9bd5378d082a3713a501794984daa809f4cf0eef15836eeb832d12ae7431a031d34ca153e451e5181110364cd98729953c116ae5b13a5bb141b45e3435ab9c6bd07ac252c35b8cb80000200002800900020073797a300000000008000340000000020800034000000002100002800900020073797a3200000000180002800900020073797a300000000008000340000000040900090073797a32000000000900010073797a30000000000900020073797a3200000000"], 0x44d4}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a0009409000008002600940900000800270000000000"], 0x48}}, 0x0) 70.337525ms ago: executing program 5 (id=3101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r8 = socket(0x10, 0x3, 0x0) close(r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=3102): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x20000023893) kernel console output (not intermixed with test programs): on message failed [ 820.958161][ T5956] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 821.531106][ T5956] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 822.585903][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.598164][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 822.610777][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.664155][ T5956] usb 2-1: config 0 descriptor?? [ 822.691789][ T5956] em28xx 2-1:0.0: audio device (2040:1605): interface 0, class 1 [ 822.826437][ T5956] usb 1-1: USB disconnect, device number 43 [ 822.887924][ T9451] usb 2-1: USB disconnect, device number 56 [ 822.898672][ T30] audit: type=1400 audit(1766130724.153:554): avc: denied { connect } for pid=15621 comm="syz.3.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 823.868436][T15632] xt_hashlimit: max too large, truncated to 1048576 [ 823.901346][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 824.450317][ T5827] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 824.591109][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 824.643929][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.684314][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.719373][ T5827] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 824.758421][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 824.820060][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.837454][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 824.861302][ T5827] usb 1-1: config 0 descriptor?? [ 824.885148][ T30] audit: type=1400 audit(1766130726.143:555): avc: denied { append } for pid=15649 comm="syz.2.2526" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 824.988643][T15646] ceph: No mds server is up or the cluster is laggy [ 825.072577][ T30] audit: type=1400 audit(1766130726.333:556): avc: denied { lock } for pid=15642 comm="syz.4.2525" path="socket:[45913]" dev="sockfs" ino=45913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 825.724155][T15658] FAULT_INJECTION: forcing a failure. [ 825.724155][T15658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.781123][T15658] CPU: 0 UID: 0 PID: 15658 Comm: syz.1.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.781153][T15658] Tainted: [L]=SOFTLOCKUP [ 825.781160][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.781169][T15658] Call Trace: [ 825.781177][T15658] [ 825.781184][T15658] dump_stack_lvl+0x16c/0x1f0 [ 825.781215][T15658] should_fail_ex+0x512/0x640 [ 825.781245][T15658] _copy_to_user+0x32/0xd0 [ 825.781273][T15658] simple_read_from_buffer+0xcb/0x170 [ 825.781299][T15658] proc_fail_nth_read+0x197/0x240 [ 825.781323][T15658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.781343][T15658] ? rw_verify_area+0xcf/0x6c0 [ 825.781362][T15658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.781379][T15658] vfs_read+0x1e4/0xcf0 [ 825.781400][T15658] ? __pfx___mutex_lock+0x10/0x10 [ 825.781425][T15658] ? __pfx_vfs_read+0x10/0x10 [ 825.781453][T15658] ? __fget_files+0x20e/0x3c0 [ 825.781484][T15658] ksys_read+0x12a/0x250 [ 825.781505][T15658] ? __pfx_ksys_read+0x10/0x10 [ 825.781534][T15658] do_syscall_64+0xcd/0xf80 [ 825.781558][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.781574][T15658] RIP: 0033:0x7f1809d8e15c [ 825.781587][T15658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 825.781603][T15658] RSP: 002b:00007f180acff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 825.781621][T15658] RAX: ffffffffffffffda RBX: 00007f1809fe5fa0 RCX: 00007f1809d8e15c [ 825.781633][T15658] RDX: 000000000000000f RSI: 00007f180acff0a0 RDI: 0000000000000004 [ 825.781644][T15658] RBP: 00007f180acff090 R08: 0000000000000000 R09: 0000000000000000 [ 825.781654][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 825.781664][T15658] R13: 00007f1809fe6038 R14: 00007f1809fe5fa0 R15: 00007ffeb06de798 [ 825.781690][T15658] [ 825.801112][ T5827] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 826.343036][ T5956] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 826.515270][ T5956] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 826.544245][ T5956] usb 2-1: config 0 has no interface number 0 [ 826.588685][ T5956] usb 2-1: config 0 interface 17 has no altsetting 0 [ 826.631698][ T5956] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 826.685458][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.687683][ T5827] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 826.704714][ T5827] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 826.708056][ T5956] usb 2-1: Product: syz [ 826.716115][ T5827] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 826.726386][ T5956] usb 2-1: Manufacturer: syz [ 826.729683][ T5827] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 826.737755][ T5956] usb 2-1: SerialNumber: syz [ 826.779708][ T5956] usb 2-1: config 0 descriptor?? [ 826.798483][ T5956] esd_usb 2-1:0.17: sending version message failed [ 826.805198][ T5956] esd_usb 2-1:0.17: probe with driver esd_usb failed with error -22 [ 826.850685][ T5827] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 826.859175][ T5827] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 826.882544][ T5827] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -32 [ 827.312108][ T5827] usb 1-1: USB disconnect, device number 44 [ 827.595256][T15674] delete_channel: no stack [ 829.172742][ T5956] usb 2-1: USB disconnect, device number 57 [ 830.111268][T15708] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2538'. [ 830.125245][T15704] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2538'. [ 830.772511][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2542'. [ 830.888414][T15729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15729 comm=syz.2.2542 [ 831.490315][ T5956] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 831.499298][ T30] audit: type=1400 audit(1766130732.753:557): avc: denied { create } for pid=15737 comm="syz.3.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 832.050060][ T5956] usb 1-1: Using ep0 maxpacket: 8 [ 832.442623][ T5956] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 832.451026][ T5956] usb 1-1: config 179 has no interface number 0 [ 832.457318][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 832.468452][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 832.480056][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 832.493935][ T5956] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 832.505923][ T5956] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 832.519201][ T5956] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 832.528437][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.539195][T15733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 833.011670][ T5956] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 833.272776][ T5956] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 833.292913][ T5956] usb 4-1: config 0 has no interface number 0 [ 833.308541][ T5956] usb 4-1: config 0 interface 17 has no altsetting 0 [ 833.321461][ T5956] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 833.339057][T15733] smc: net device bond0 applied user defined pnetid SYZ0 [ 833.347761][T15733] smc: net device bond0 erased user defined pnetid SYZ0 [ 833.357026][T15733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.366229][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.368506][T15733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.382596][ T5956] usb 4-1: Product: syz [ 833.387003][ T5956] usb 4-1: Manufacturer: syz [ 833.391782][ T5956] usb 4-1: SerialNumber: syz [ 833.400263][ T5956] usb 4-1: config 0 descriptor?? [ 833.503885][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.537726][ T5956] esd_usb 4-1:0.17: sending version message failed [ 833.539628][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.550134][ T5956] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 833.575584][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.587676][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 834.802241][ T5956] usb 1-1: USB disconnect, device number 45 [ 834.808193][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 834.808236][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 836.243060][T13919] usb 4-1: USB disconnect, device number 48 [ 838.476735][T15799] bond3: down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 838.503960][T15799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 839.136455][ T5944] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 839.351867][T15817] fuse: Unknown parameter '01777777777777777777777' [ 839.368377][T15817] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2565'. [ 839.378866][T15817] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2565'. [ 839.421594][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.496942][ T5944] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 839.939864][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.963085][ T5944] usb 2-1: config 0 descriptor?? [ 839.971277][ T5944] em28xx 2-1:0.0: audio device (2040:1605): interface 0, class 1 [ 840.333255][ T5956] usb 2-1: USB disconnect, device number 58 [ 840.700106][ T5944] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 841.360414][ T8955] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 841.442187][ T5944] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 842.189433][ T5944] usb 1-1: config 0 has no interface number 0 [ 842.196327][ T5944] usb 1-1: config 0 interface 17 has no altsetting 0 [ 842.205181][ T5944] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 842.214638][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.227952][ T5944] usb 1-1: Product: syz [ 842.233832][ T5944] usb 1-1: Manufacturer: syz [ 842.238435][ T5944] usb 1-1: SerialNumber: syz [ 842.245138][ T5944] usb 1-1: config 0 descriptor?? [ 842.252241][ T5944] esd_usb 1-1:0.17: sending version message failed [ 842.258802][ T5944] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 842.330171][ T8955] usb 4-1: Using ep0 maxpacket: 16 [ 842.855455][ T8955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.900086][ T8955] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 842.929523][ T8955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.972638][ T8955] usb 4-1: config 0 descriptor?? [ 843.126576][T15858] dvmrp0: entered allmulticast mode [ 843.723633][ T8955] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 843.986655][T15875] overlay: Unknown parameter 'appraise' [ 844.018839][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 844.177762][ T5944] usb 1-1: USB disconnect, device number 46 [ 844.291785][ T8955] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 844.349079][T15876] can0: slcan on ttyS3. [ 844.511319][ T8955] usb 2-1: Using ep0 maxpacket: 32 [ 844.535213][ T8955] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 844.547000][ T8955] usb 2-1: config 0 has no interface number 0 [ 844.560152][ T8955] usb 2-1: config 0 interface 184 has no altsetting 0 [ 844.606467][ T8955] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 844.620185][ T8955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.628233][ T8955] usb 2-1: Product: syz [ 844.632455][ T8955] usb 2-1: Manufacturer: syz [ 844.637062][ T8955] usb 2-1: SerialNumber: syz [ 844.673544][ T8955] usb 2-1: config 0 descriptor?? [ 845.055580][ T30] audit: type=1400 audit(1766130746.203:558): avc: denied { link } for pid=15885 comm="syz.2.2585" name="#43" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 845.262036][ T8955] smsc75xx v1.0.0 [ 845.265799][ T8955] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 845.311014][ T8955] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 845.313675][ T30] audit: type=1400 audit(1766130746.203:559): avc: denied { rename } for pid=15885 comm="syz.2.2585" name="#44" dev="tmpfs" ino=2766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 845.342194][ T30] audit: type=1804 audit(1766130746.233:560): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2585" name="/newroot/515/bus/file0" dev="overlay" ino=2767 res=1 errno=0 [ 845.383791][ T30] audit: type=1804 audit(1766130746.233:561): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2585" name="/newroot/515/bus/file0" dev="overlay" ino=2767 res=1 errno=0 [ 845.461181][T15834] can0 (unregistered): slcan off ttyS3. [ 845.480539][T13919] usb 4-1: USB disconnect, device number 49 [ 845.655713][ T30] audit: type=1400 audit(1766130746.913:562): avc: denied { setopt } for pid=15894 comm="syz.2.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 845.780800][T15899] FAULT_INJECTION: forcing a failure. [ 845.780800][T15899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.807360][T15899] CPU: 1 UID: 0 PID: 15899 Comm: syz.2.2590 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.807379][T15899] Tainted: [L]=SOFTLOCKUP [ 845.807383][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 845.807389][T15899] Call Trace: [ 845.807393][T15899] [ 845.807397][T15899] dump_stack_lvl+0x16c/0x1f0 [ 845.807417][T15899] should_fail_ex+0x512/0x640 [ 845.807436][T15899] _copy_to_user+0x32/0xd0 [ 845.807453][T15899] simple_read_from_buffer+0xcb/0x170 [ 845.807468][T15899] proc_fail_nth_read+0x197/0x240 [ 845.807480][T15899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.807492][T15899] ? rw_verify_area+0xcf/0x6c0 [ 845.807504][T15899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.807515][T15899] vfs_read+0x1e4/0xcf0 [ 845.807529][T15899] ? __pfx___mutex_lock+0x10/0x10 [ 845.807544][T15899] ? __pfx_vfs_read+0x10/0x10 [ 845.807561][T15899] ? __fget_files+0x20e/0x3c0 [ 845.807581][T15899] ksys_read+0x12a/0x250 [ 845.807594][T15899] ? __pfx_ksys_read+0x10/0x10 [ 845.807611][T15899] do_syscall_64+0xcd/0xf80 [ 845.807626][T15899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.807638][T15899] RIP: 0033:0x7f3dc4f8e15c [ 845.807646][T15899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 845.807656][T15899] RSP: 002b:00007f3dc5ea0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.807666][T15899] RAX: ffffffffffffffda RBX: 00007f3dc51e5fa0 RCX: 00007f3dc4f8e15c [ 845.807673][T15899] RDX: 000000000000000f RSI: 00007f3dc5ea00a0 RDI: 0000000000000005 [ 845.807679][T15899] RBP: 00007f3dc5ea0090 R08: 0000000000000000 R09: 0000000000000000 [ 845.807685][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.807691][T15899] R13: 00007f3dc51e6038 R14: 00007f3dc51e5fa0 R15: 00007ffc2b024fe8 [ 845.807705][T15899] [ 846.100251][T13919] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 846.400419][T13919] usb 4-1: Using ep0 maxpacket: 16 [ 846.424451][T13919] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 846.456296][T13919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.478970][T13919] usb 4-1: Product: syz [ 846.484125][T13919] usb 4-1: Manufacturer: syz [ 846.499672][T13919] usb 4-1: SerialNumber: syz [ 846.514692][T13919] usb 4-1: config 0 descriptor?? [ 846.529247][T13919] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 846.546783][T13919] usb 4-1: Detected FT4233HP [ 846.721723][ T5956] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 847.041698][ T5956] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 847.051148][ T5956] usb 3-1: config 0 has no interface number 0 [ 847.057325][ T5956] usb 3-1: config 0 interface 17 has no altsetting 0 [ 847.068209][ T5956] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 847.081613][T13919] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 847.089103][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.097369][T13919] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 847.104356][ T5956] usb 3-1: Product: syz [ 847.109859][T13919] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 847.120630][ T5956] usb 3-1: Manufacturer: syz [ 847.125542][ T5956] usb 3-1: SerialNumber: syz [ 847.134604][T13919] usb 4-1: USB disconnect, device number 50 [ 847.142258][ T5956] usb 3-1: config 0 descriptor?? [ 847.152433][ T5956] esd_usb 3-1:0.17: sending version message failed [ 847.158937][ T5956] esd_usb 3-1:0.17: probe with driver esd_usb failed with error -22 [ 847.167270][T13919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 847.176754][T13919] ftdi_sio 4-1:0.0: device disconnected [ 847.548182][ T5956] usb 2-1: USB disconnect, device number 59 [ 847.577744][T15923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2595'. [ 847.880249][T13919] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 847.890316][ T30] audit: type=1400 audit(1766130749.143:563): avc: denied { listen } for pid=15928 comm="syz.0.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 848.080297][ T5956] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 848.523719][T13919] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 848.532403][T13919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.546764][T13919] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 848.555881][T13919] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 848.563946][T13919] usb 4-1: Manufacturer: syz [ 848.569872][T13919] usb 4-1: config 0 descriptor?? [ 848.630458][T13919] rc_core: IR keymap rc-hauppauge not found [ 848.636531][T13919] Registered IR keymap rc-empty [ 848.643644][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.654259][T13919] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 848.664428][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 848.674392][T13919] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 848.685470][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.698372][ T5956] usb 2-1: config 0 descriptor?? [ 848.802347][ T5827] usb 4-1: USB disconnect, device number 51 [ 848.908502][ T5956] usb 2-1: USB disconnect, device number 60 [ 849.593561][ T5827] usb 3-1: USB disconnect, device number 43 [ 849.708573][T15951] No such timeout policy "syz1" [ 850.114021][T15955] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 850.124216][T15955] PKCS7: Only support pkcs7_signedData type [ 850.392593][T15958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2607'. [ 850.531625][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.543206][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.477003][ T8955] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 854.245462][ T30] audit: type=1400 audit(1766130755.503:564): avc: denied { watch watch_reads } for pid=15985 comm="syz.3.2615" path=2F6D656D66643A5217084B8558A31BC7701310A846B42E27198BE2D8F8A2317B2E3B3017110A8DFAA8051BDD2AF8F35F1AD14616884E23C2B11C05202864656C6574656429 dev="tmpfs" ino=1420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 855.091907][T16010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2620'. [ 855.230081][ T8955] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 855.382760][ T8955] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 855.392840][ T8955] usb 4-1: config 0 has no interface number 0 [ 855.399911][ T8955] usb 4-1: config 0 interface 17 has no altsetting 0 [ 855.406718][ T5927] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 855.417241][ T8955] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 855.427507][ T8955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.436010][ T8955] usb 4-1: Product: syz [ 855.440400][ T8955] usb 4-1: Manufacturer: syz [ 855.445626][ T8955] usb 4-1: SerialNumber: syz [ 855.470851][ T8955] usb 4-1: config 0 descriptor?? [ 855.611735][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.628079][ T8955] esd_usb 4-1:0.17: sending version message failed [ 855.636763][ T5927] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 855.658780][ T8955] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 856.112228][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.136986][ T5927] usb 2-1: config 0 descriptor?? [ 856.791823][ T30] audit: type=1400 audit(1766130758.043:565): avc: denied { name_connect } for pid=16029 comm="syz.4.2626" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 856.815681][ T5927] usb 2-1: USB disconnect, device number 62 [ 858.526960][ T6911] usb 4-1: USB disconnect, device number 52 [ 859.079865][T16077] trusted_key: encrypted_key: master key parameter '3¹ø­Ž‹aÓÓ¢1DhëÌà¿í9`R4SÕïʘ' is invalid [ 859.098753][T16082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2639'. [ 859.558937][ T30] audit: type=1400 audit(1766130760.813:566): avc: denied { read } for pid=16080 comm="syz.2.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 861.846701][ T30] audit: type=1400 audit(1766130763.103:567): avc: denied { read } for pid=16114 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 862.110104][ T5827] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 862.313512][ T5827] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 862.395802][ T5827] usb 4-1: config 0 has no interface number 0 [ 862.439645][ T5827] usb 4-1: config 0 interface 17 has no altsetting 0 [ 862.466631][ T5827] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 862.490101][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.549153][ T5827] usb 4-1: Product: syz [ 862.706776][ T5827] usb 4-1: Manufacturer: syz [ 862.712168][ T30] audit: type=1326 audit(1766130763.813:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 862.739919][T16135] tmpfs: Unknown parameter 'nâ1G¿ÛŠþ›;0x0000000000000000' [ 862.754570][ T5827] usb 4-1: SerialNumber: syz [ 863.236936][ T5827] usb 4-1: config 0 descriptor?? [ 863.249003][ T5827] esd_usb 4-1:0.17: sending version message failed [ 863.267884][ T5827] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 863.282317][ T30] audit: type=1326 audit(1766130763.813:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 863.336045][ T30] audit: type=1326 audit(1766130763.813:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 864.336004][ T30] audit: type=1326 audit(1766130763.813:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 865.340514][ T30] audit: type=1326 audit(1766130763.813:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 865.548001][ T30] audit: type=1326 audit(1766130763.813:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.360604][ T30] audit: type=1326 audit(1766130763.813:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.361708][ T30] audit: type=1326 audit(1766130763.813:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.907003][ T30] audit: type=1326 audit(1766130763.813:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.908085][ T30] audit: type=1326 audit(1766130763.813:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.910212][ T30] audit: type=1326 audit(1766130763.813:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.915497][ T30] audit: type=1326 audit(1766130763.813:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.916587][ T30] audit: type=1326 audit(1766130763.823:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 866.926040][ T30] audit: type=1326 audit(1766130763.823:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16134 comm="syz.4.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4878f749 code=0x7ffc0000 [ 867.465148][T16163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16163 comm=syz.4.2657 [ 867.466138][ T9451] usb 4-1: USB disconnect, device number 53 [ 867.495583][T16163] netlink: 'syz.4.2657': attribute type 16 has an invalid length. [ 867.685601][T16155] xt_hashlimit: max too large, truncated to 1048576 [ 867.700723][T16163] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2657'. [ 867.732967][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 868.591695][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 868.941381][ T8954] libceph: connect (1)[c::]:6789 error -101 [ 868.963090][ T8954] libceph: mon0 (1)[c::]:6789 connect error [ 869.251530][T16186] ceph: No mds server is up or the cluster is laggy [ 869.260395][ T8954] libceph: connect (1)[c::]:6789 error -101 [ 869.282034][ T8954] libceph: mon0 (1)[c::]:6789 connect error [ 869.327415][T16199] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.341282][T16199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.348870][T16199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.356485][T16199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.365911][T16199] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 869.375917][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 869.383181][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 869.390995][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 869.400740][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 869.434044][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 869.532439][ T5045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.702064][ T5045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.849868][T16206] FAULT_INJECTION: forcing a failure. [ 869.849868][T16206] name failslab, interval 1, probability 0, space 0, times 0 [ 869.922738][ T5045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.930335][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.939260][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.465276][T16206] CPU: 1 UID: 0 PID: 16206 Comm: syz.1.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.465306][T16206] Tainted: [L]=SOFTLOCKUP [ 870.465312][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.465322][T16206] Call Trace: [ 870.465328][T16206] [ 870.465335][T16206] dump_stack_lvl+0x16c/0x1f0 [ 870.465360][T16206] should_fail_ex+0x512/0x640 [ 870.465384][T16206] ? __kmalloc_cache_noprof+0x5f/0x800 [ 870.465403][T16206] should_failslab+0xc2/0x120 [ 870.465425][T16206] __kmalloc_cache_noprof+0x80/0x800 [ 870.465442][T16206] ? fuse_create_open+0x1e7/0xe40 [ 870.465471][T16206] ? fuse_create_open+0x1e7/0xe40 [ 870.465494][T16206] fuse_create_open+0x1e7/0xe40 [ 870.465521][T16206] ? do_raw_spin_lock+0x12c/0x2b0 [ 870.465546][T16206] ? __pfx_fuse_create_open+0x10/0x10 [ 870.465568][T16206] ? fuse_dentry_settime+0x19a/0x590 [ 870.465591][T16206] ? do_raw_spin_unlock+0x172/0x230 [ 870.465614][T16206] ? _raw_spin_unlock+0x28/0x50 [ 870.465642][T16206] ? __pfx_fuse_lookup+0x10/0x10 [ 870.465688][T16206] fuse_atomic_open+0x285/0x460 [ 870.465718][T16206] ? __pfx_fuse_atomic_open+0x10/0x10 [ 870.465744][T16206] lookup_open.isra.0+0x844/0x1780 [ 870.465772][T16206] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 870.465797][T16206] ? find_held_lock+0x2b/0x80 [ 870.465828][T16206] ? __pfx_down_write+0x10/0x10 [ 870.465857][T16206] path_openat+0xa95/0x3140 [ 870.465889][T16206] ? __pfx_path_openat+0x10/0x10 [ 870.465916][T16206] ? __lock_acquire+0x436/0x2890 [ 870.465938][T16206] do_filp_open+0x20b/0x470 [ 870.465962][T16206] ? __pfx_do_filp_open+0x10/0x10 [ 870.466004][T16206] ? _raw_spin_unlock+0x28/0x50 [ 870.466021][T16206] ? alloc_fd+0x471/0x7d0 [ 870.466053][T16206] do_sys_openat2+0x121/0x290 [ 870.466069][T16206] ? __pfx_do_sys_openat2+0x10/0x10 [ 870.466086][T16206] ? __fget_files+0x20e/0x3c0 [ 870.466115][T16206] __x64_sys_creat+0xcc/0x120 [ 870.466139][T16206] ? __pfx___x64_sys_creat+0x10/0x10 [ 870.466154][T16206] ? __pfx_ksys_write+0x10/0x10 [ 870.466178][T16206] ? rcu_is_watching+0x12/0xc0 [ 870.466194][T16206] ? do_syscall_64+0x91/0xf80 [ 870.466215][T16206] do_syscall_64+0xcd/0xf80 [ 870.466238][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.466255][T16206] RIP: 0033:0x7f1809d8f749 [ 870.466269][T16206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.466285][T16206] RSP: 002b:00007f180acde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 870.466302][T16206] RAX: ffffffffffffffda RBX: 00007f1809fe6090 RCX: 00007f1809d8f749 [ 870.466313][T16206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 870.466323][T16206] RBP: 00007f180acde090 R08: 0000000000000000 R09: 0000000000000000 [ 870.466332][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 870.466342][T16206] R13: 00007f1809fe6128 R14: 00007f1809fe6090 R15: 00007ffeb06de798 [ 870.466367][T16206] [ 871.520778][T16199] Bluetooth: hci4: command tx timeout [ 871.894709][ T5045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.120569][ T8954] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 872.341290][ T8954] usb 4-1: Using ep0 maxpacket: 32 [ 872.347797][ T8954] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 872.356676][ T8954] usb 4-1: config 0 has no interface number 0 [ 872.362930][ T8954] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.381933][ T8954] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 872.408091][ T8954] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 872.433441][ T8954] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 872.451969][ T5956] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 872.465914][ T8954] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.500417][ T8954] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 872.509582][ T8954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.519065][ T8954] usb 4-1: Product: syz [ 872.532312][ T8954] usb 4-1: Manufacturer: syz [ 872.538123][ T8954] usb 4-1: SerialNumber: syz [ 872.552088][ T8954] usb 4-1: config 0 descriptor?? [ 872.566540][T16223] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 872.576976][ T8954] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input25 [ 872.594834][ T5173] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 872.606704][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 872.618296][ T5956] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 872.626439][ T5956] usb 1-1: config 0 has no interface number 0 [ 872.635526][ T5956] usb 1-1: config 0 interface 17 has no altsetting 0 [ 872.654471][ T5956] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 872.668526][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.684516][ T5956] usb 1-1: Product: syz [ 872.688824][ T5956] usb 1-1: Manufacturer: syz [ 872.695454][ T5956] usb 1-1: SerialNumber: syz [ 872.712037][ T5956] usb 1-1: config 0 descriptor?? [ 872.721925][ T5956] esd_usb 1-1:0.17: sending version message failed [ 872.732168][ T5956] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 873.175476][ T5045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.193524][ T5045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.203888][ T5045] bond0 (unregistering): Released all slaves [ 873.344901][ T5045] bond1 (unregistering): (slave veth5): Releasing active interface [ 873.353559][ T5045] bond1 (unregistering): Released all slaves [ 873.389579][ T24] usb 4-1: USB disconnect, device number 54 [ 873.471423][ T5045] [†’Ì: left promiscuous mode [ 873.534078][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 873.554628][ T5045] tipc: Left network mode [ 873.600488][T16199] Bluetooth: hci4: command 0x041b tx timeout [ 873.619109][T16197] chnl_net:caif_netlink_parms(): no params data found [ 873.753331][ T24] libceph: connect (1)[c::]:6789 error -101 [ 873.768572][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 873.865692][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.885475][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.906207][T16197] bridge_slave_0: entered allmulticast mode [ 873.921052][T16197] bridge_slave_0: entered promiscuous mode [ 873.946204][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.966607][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.983112][T16197] bridge_slave_1: entered allmulticast mode [ 874.208013][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 874.213527][T16197] bridge_slave_1: entered promiscuous mode [ 874.221446][T16245] ceph: No mds server is up or the cluster is laggy [ 874.222328][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 874.222339][ T30] audit: type=1400 audit(1766130775.473:598): avc: denied { write } for pid=16253 comm="syz.1.2674" path="socket:[47672]" dev="sockfs" ino=47672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 874.259963][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 874.352500][T16197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.370256][ T30] audit: type=1400 audit(1766130775.623:599): avc: denied { ioctl } for pid=16253 comm="syz.1.2674" path="socket:[47672]" dev="sockfs" ino=47672 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 874.608168][T16197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.616610][T16257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 875.279462][ T30] audit: type=1400 audit(1766130776.533:600): avc: denied { write } for pid=16255 comm="syz.3.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 875.740164][T16199] Bluetooth: hci4: command 0x041b tx timeout [ 875.815062][ T9855] usb 1-1: USB disconnect, device number 47 [ 875.874635][T16197] team0: Port device team_slave_0 added [ 875.899444][ T30] audit: type=1400 audit(1766130777.153:601): avc: denied { watch watch_reads } for pid=16274 comm="syz.0.2679" path="/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs" dev="sysfs" ino=1883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 875.941552][ T30] audit: type=1400 audit(1766130777.203:602): avc: denied { read } for pid=16274 comm="syz.0.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 875.964431][T16197] team0: Port device team_slave_1 added [ 876.125390][ T5045] hsr_slave_0: left promiscuous mode [ 876.136257][ T5045] hsr_slave_1: left promiscuous mode [ 876.146770][T16281] 9pnet_fd: p9_fd_create_tcp (16281): problem binding to privport [ 876.153105][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.883097][ T30] audit: type=1400 audit(1766130778.133:603): avc: denied { mount } for pid=16280 comm="syz.1.2680" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 877.418262][ T30] audit: type=1400 audit(1766130778.673:604): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 877.770544][T16199] Bluetooth: hci4: command 0x041b tx timeout [ 878.341637][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2686'. [ 878.816600][ T5045] team0 (unregistering): Port device team_slave_1 removed [ 878.880373][ T5045] team0 (unregistering): Port device team_slave_0 removed [ 879.840770][T16199] Bluetooth: hci4: command 0x041b tx timeout [ 879.905107][T16328] xt_hashlimit: max too large, truncated to 1048576 [ 880.223098][ T5045] lo (unregistering): left allmulticast mode [ 880.358573][T16197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.375575][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.438928][T16197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.490159][T16197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.510999][T16197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.587194][T16197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.846278][T16197] hsr_slave_0: entered promiscuous mode [ 880.857895][T16197] hsr_slave_1: entered promiscuous mode [ 880.866371][T16197] debugfs: 'hsr0' already exists in 'hsr' [ 880.872426][T16197] Cannot create hsr debugfs directory [ 880.922448][T16340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2692'. [ 880.941460][T16335] bridge3: entered allmulticast mode [ 881.954339][T16353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 882.952760][T16374] xt_hashlimit: max too large, truncated to 1048576 [ 882.971699][T16197] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.100407][T16197] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.139334][T16197] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.165214][T16197] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 883.308770][T16197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.322231][T16197] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.422304][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.429439][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.530881][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.537954][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.113185][ T30] audit: type=1400 audit(1766130785.363:605): avc: denied { mounton } for pid=16398 comm="syz.1.2706" path="/501/file0" dev="tmpfs" ino=2714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 884.325090][T16197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.250409][T16197] veth0_vlan: entered promiscuous mode [ 885.299879][T16197] veth1_vlan: entered promiscuous mode [ 885.367670][T16197] veth0_macvtap: entered promiscuous mode [ 885.376792][T16197] veth1_macvtap: entered promiscuous mode [ 885.394857][T16197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.405400][T16197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.453950][T16426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.471260][ T1139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.522188][ T1139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.692153][ T1139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.008948][ T1139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.200698][ T6205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.218782][ T6205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.251373][ T3749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.282481][ T3749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.305725][ T30] audit: type=1400 audit(1766130787.563:606): avc: denied { mounton } for pid=16197 comm="syz-executor" path="/root/syzkaller.7nARB1/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 886.380458][ T30] audit: type=1400 audit(1766130787.593:607): avc: denied { mounton } for pid=16197 comm="syz-executor" path="/root/syzkaller.7nARB1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 886.425630][ T5956] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 886.648728][ T30] audit: type=1400 audit(1766130787.593:608): avc: denied { mounton } for pid=16197 comm="syz-executor" path="/root/syzkaller.7nARB1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=49361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 887.106055][ T30] audit: type=1400 audit(1766130787.673:609): avc: denied { mounton } for pid=16197 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 887.130593][ T5956] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 887.138684][ T5956] usb 1-1: config 0 has no interface number 0 [ 887.144931][ T5956] usb 1-1: config 0 interface 17 has no altsetting 0 [ 887.157476][ T5956] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 887.167454][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.175568][ T5956] usb 1-1: Product: syz [ 887.179755][ T5956] usb 1-1: Manufacturer: syz [ 887.184922][ T5956] usb 1-1: SerialNumber: syz [ 887.282351][ T5956] usb 1-1: config 0 descriptor?? [ 887.287880][T16452] xt_hashlimit: max too large, truncated to 1048576 [ 887.414948][ T5956] esd_usb 1-1:0.17: sending version message failed [ 887.451097][ T5956] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 888.211979][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2722'. [ 888.454968][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 888.949540][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 889.079164][T16471] ceph: No mds server is up or the cluster is laggy [ 889.226122][ T8954] usb 1-1: USB disconnect, device number 48 [ 889.377255][T16478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.492019][T16482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.757476][T16478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.030115][ T8954] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 890.406038][ T8954] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 890.419731][ T8954] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 890.429703][ T8954] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 891.145037][ T8954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.156040][T16479] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 891.165984][ T8954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.370952][ T24] usb 1-1: USB disconnect, device number 49 [ 892.838293][T16508] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 892.911495][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 893.057121][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 893.100318][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 893.180062][ T8954] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 893.391830][ T8954] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 893.411055][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 893.439696][ T8954] usb 4-1: config 0 has no interface number 0 [ 893.461124][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 893.591519][ T8954] usb 4-1: config 0 interface 17 has no altsetting 0 [ 893.613434][T16523] ceph: No mds server is up or the cluster is laggy [ 893.668499][ T8954] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 893.687717][ T8954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.695932][ T8954] usb 4-1: Product: syz [ 893.700342][ T8954] usb 4-1: Manufacturer: syz [ 893.705157][ T8954] usb 4-1: SerialNumber: syz [ 893.715634][ T8954] usb 4-1: config 0 descriptor?? [ 893.724146][ T8954] esd_usb 4-1:0.17: sending version message failed [ 893.732223][ T8954] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 894.356648][T16540] syzkaller0: entered promiscuous mode [ 894.362316][T16540] syzkaller0: entered allmulticast mode [ 894.372085][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2741'. [ 895.465156][T16553] ipvlan2: entered promiscuous mode [ 895.511603][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 895.521079][T16553] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2744'. [ 896.165103][ T8954] usb 4-1: USB disconnect, device number 55 [ 897.257860][ T8954] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 897.782636][ T8954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 897.812866][ T8954] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 897.854747][ T8954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 897.887161][ T8954] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 897.905190][ T8954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.923768][ T8954] usb 4-1: Product: syz [ 897.930142][ T8954] usb 4-1: Manufacturer: syz [ 897.939121][ T8954] usb 4-1: SerialNumber: syz [ 898.039558][ T8954] usb 4-1: config 0 descriptor?? [ 898.060828][T16579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 898.085072][T16579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 898.113922][ T8954] usb 4-1: ucan: probing device on interface #0 [ 898.451348][T16602] bridge0: entered allmulticast mode [ 898.480196][ T30] audit: type=1400 audit(1766130799.703:610): avc: denied { append } for pid=16601 comm="syz.0.2758" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 898.702817][ T8954] usb 4-1: ucan: device reported invalid tx-fifo size [ 898.710035][ T8954] usb 4-1: ucan: probe failed; try to update the device firmware [ 899.840780][ T9855] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 900.071479][ T9855] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 900.079752][ T9855] usb 3-1: config 0 has no interface number 0 [ 900.086023][ T9855] usb 3-1: config 0 interface 17 has no altsetting 0 [ 900.100916][ T9855] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 900.110593][ T9855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.122809][ T9855] usb 3-1: Product: syz [ 900.134110][ T9855] usb 3-1: Manufacturer: syz [ 900.142833][ T9855] usb 3-1: SerialNumber: syz [ 900.195170][ T9855] usb 3-1: config 0 descriptor?? [ 900.203422][ T9855] esd_usb 3-1:0.17: sending version message failed [ 900.214835][ T9855] esd_usb 3-1:0.17: probe with driver esd_usb failed with error -22 [ 900.402586][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2763'. [ 900.554121][T16636] netlink: 'syz.4.2764': attribute type 12 has an invalid length. [ 900.576196][T16636] netlink: 'syz.4.2764': attribute type 29 has an invalid length. [ 900.602326][T16636] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2764'. [ 900.724492][T16636] netlink: 'syz.4.2764': attribute type 2 has an invalid length. [ 900.744820][T16636] netlink: 23 bytes leftover after parsing attributes in process `syz.4.2764'. [ 901.506763][ T9451] usb 4-1: USB disconnect, device number 56 [ 902.242961][T16658] FAULT_INJECTION: forcing a failure. [ 902.242961][T16658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 902.256579][T16658] CPU: 1 UID: 0 PID: 16658 Comm: syz.1.2770 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.256606][T16658] Tainted: [L]=SOFTLOCKUP [ 902.256612][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.256622][T16658] Call Trace: [ 902.256628][T16658] [ 902.256635][T16658] dump_stack_lvl+0x16c/0x1f0 [ 902.256661][T16658] should_fail_ex+0x512/0x640 [ 902.256691][T16658] should_fail_alloc_page+0xe7/0x130 [ 902.256715][T16658] prepare_alloc_pages+0x401/0x670 [ 902.256739][T16658] ? rcu_is_watching+0x12/0xc0 [ 902.256760][T16658] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 902.256782][T16658] ? rcu_is_watching+0x12/0xc0 [ 902.256798][T16658] ? trace_mm_page_alloc+0x11b/0x180 [ 902.256820][T16658] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 902.256842][T16658] ? finish_task_switch.isra.0+0x207/0xbd0 [ 902.256872][T16658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 902.256889][T16658] ? trace_sched_exit_tp+0xd1/0x110 [ 902.256917][T16658] ? mark_held_locks+0x49/0x80 [ 902.256948][T16658] alloc_pages_bulk_noprof+0x77a/0x1410 [ 902.256966][T16658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 902.256987][T16658] ? policy_nodemask+0xea/0x4e0 [ 902.257012][T16658] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 902.257031][T16658] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 902.257055][T16658] ? is_vmalloc_addr+0x10/0xa0 [ 902.257079][T16658] __kasan_populate_vmalloc+0xfb/0x220 [ 902.257103][T16658] alloc_vmap_area+0x98d/0x2a50 [ 902.257135][T16658] ? __pfx_alloc_vmap_area+0x10/0x10 [ 902.257163][T16658] vm_map_ram+0x7b0/0x1020 [ 902.257183][T16658] ? frame_vector_to_pages+0x4e5/0x770 [ 902.257215][T16658] vb2_vmalloc_get_userptr+0x3e1/0x540 [ 902.257241][T16658] ? unwind_get_return_address+0x59/0xa0 [ 902.257269][T16658] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 902.257293][T16658] __prepare_userptr.constprop.0+0x744/0x1680 [ 902.257322][T16658] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 902.257380][T16658] ? irqentry_exit+0x1dd/0x8c0 [ 902.257401][T16658] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 902.257422][T16658] ? vb2_queue_or_prepare_buf+0x5c7/0x29f0 [ 902.257449][T16658] __buf_prepare+0x634/0x810 [ 902.257476][T16658] vb2_core_prepare_buf+0xa9/0x2e0 [ 902.257501][T16658] vb2_prepare_buf+0x269/0x330 [ 902.257527][T16658] v4l2_m2m_prepare_buf+0xe8/0x1e0 [ 902.257550][T16658] v4l_prepare_buf+0x93/0xc0 [ 902.257573][T16658] __video_do_ioctl+0xb77/0xf00 [ 902.257599][T16658] ? __might_fault+0xe3/0x190 [ 902.257615][T16658] ? __pfx___video_do_ioctl+0x10/0x10 [ 902.257643][T16658] video_usercopy+0x4d0/0x16c0 [ 902.257664][T16658] ? __pfx___video_do_ioctl+0x10/0x10 [ 902.257682][T16658] ? selinux_kernel_read_file+0x60/0x120 [ 902.257706][T16658] ? __pfx_video_usercopy+0x10/0x10 [ 902.257742][T16658] v4l2_ioctl+0x1bd/0x250 [ 902.257759][T16658] ? __pfx_v4l2_ioctl+0x10/0x10 [ 902.257778][T16658] __x64_sys_ioctl+0x18e/0x210 [ 902.257799][T16658] do_syscall_64+0xcd/0xf80 [ 902.257822][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.257844][T16658] RIP: 0033:0x7f1809d8f749 [ 902.257858][T16658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.257873][T16658] RSP: 002b:00007f180acbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.257890][T16658] RAX: ffffffffffffffda RBX: 00007f1809fe6180 RCX: 00007f1809d8f749 [ 902.257901][T16658] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003 [ 902.257911][T16658] RBP: 00007f180acbd090 R08: 0000000000000000 R09: 0000000000000000 [ 902.257921][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 902.257931][T16658] R13: 00007f1809fe6218 R14: 00007f1809fe6180 R15: 00007ffeb06de798 [ 902.257955][T16658] [ 902.653314][ T8955] usb 3-1: USB disconnect, device number 44 [ 902.661840][ T30] audit: type=1400 audit(1766130803.923:611): avc: denied { getopt } for pid=16650 comm="syz.0.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 903.252281][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.262198][ T30] audit: type=1400 audit(1766130803.943:612): avc: denied { map } for pid=16650 comm="syz.0.2769" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 903.299264][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.804813][T16678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2775'. [ 903.985818][ T9855] IPVS: starting estimator thread 0... [ 904.109514][T16686] IPVS: using max 43 ests per chain, 103200 per kthread [ 905.478240][ T30] audit: type=1400 audit(1766130806.733:613): avc: denied { create } for pid=16697 comm="syz.2.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 905.497582][T16699] 9pnet_fd: Insufficient options for proto=fd [ 906.185124][ T30] audit: type=1400 audit(1766130806.743:614): avc: denied { ioctl } for pid=16697 comm="syz.2.2782" path="socket:[50566]" dev="sockfs" ino=50566 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 906.228196][ T30] audit: type=1400 audit(1766130806.743:615): avc: denied { bind } for pid=16697 comm="syz.2.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 906.400259][ T9409] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 906.410061][T13919] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 906.417660][ T9855] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 906.751275][T13919] usb 1-1: Using ep0 maxpacket: 8 [ 906.757744][T13919] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 906.765982][ T9409] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 906.775728][ T9409] usb 4-1: config 0 has no interface number 0 [ 906.787803][T13919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 906.815106][ T9855] usb 3-1: Using ep0 maxpacket: 32 [ 906.849817][ T9409] usb 4-1: config 0 interface 17 has no altsetting 0 [ 906.870032][T13919] usb 1-1: can't read configurations, error -61 [ 906.880406][ T9855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.911952][ T9855] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 906.921131][ T9409] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 906.940024][ T9855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.948040][ T9409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.961213][ T9855] usb 3-1: Product: syz [ 906.968674][ T9409] usb 4-1: Product: syz [ 906.980015][ T9855] usb 3-1: Manufacturer: syz [ 906.984657][ T9855] usb 3-1: SerialNumber: syz [ 906.990102][ T9409] usb 4-1: Manufacturer: syz [ 906.994675][ T9409] usb 4-1: SerialNumber: syz [ 907.006047][ T9855] usb 3-1: config 0 descriptor?? [ 907.025552][ T9855] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 907.033740][T13919] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 907.042207][ T9409] usb 4-1: config 0 descriptor?? [ 907.061580][ T9409] esd_usb 4-1:0.17: sending version message failed [ 907.080052][ T9409] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 907.220078][T13919] usb 1-1: Using ep0 maxpacket: 8 [ 907.282771][T13919] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 907.293244][ T9409] usb 3-1: USB disconnect, device number 45 [ 907.342607][T13919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 907.352620][T13919] usb 1-1: can't read configurations, error -61 [ 907.371610][T13919] usb usb1-port1: attempt power cycle [ 907.421397][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2785'. [ 907.753517][T13919] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 907.791584][T13919] usb 1-1: Using ep0 maxpacket: 8 [ 907.836400][T13919] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 907.846637][T13919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 907.861745][T13919] usb 1-1: can't read configurations, error -61 [ 907.886490][T16720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16720 comm=syz.1.2786 [ 908.186668][T13919] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 908.220444][T13919] usb 1-1: Using ep0 maxpacket: 8 [ 908.231839][T13919] usb 1-1: too many configurations: 72, using maximum allowed: 8 [ 908.241180][T13919] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 908.241997][ T30] audit: type=1326 audit(1766130809.503:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 908.253238][T13919] usb 1-1: can't read configurations, error -61 [ 908.280524][T13919] usb usb1-port1: unable to enumerate USB device [ 908.710109][ T30] audit: type=1326 audit(1766130809.533:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 908.841755][T13919] usb 4-1: USB disconnect, device number 57 [ 908.882237][ T30] audit: type=1326 audit(1766130809.533:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 908.976498][ T30] audit: type=1326 audit(1766130809.533:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 909.000334][ T30] audit: type=1326 audit(1766130809.963:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 909.027845][ T30] audit: type=1326 audit(1766130809.963:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 909.071928][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2791'. [ 909.900219][ T30] audit: type=1326 audit(1766130809.963:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16726 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942878f749 code=0x7ffc0000 [ 910.895044][T16747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 914.020071][T10780] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 914.250926][T16789] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2803'. [ 914.262983][T16788] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2803'. [ 914.687293][T10780] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 914.717359][T10780] usb 2-1: config 0 has no interface number 0 [ 914.800477][T10780] usb 2-1: config 0 interface 17 has no altsetting 0 [ 914.984906][T10780] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 915.011734][T10780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.049119][T10780] usb 2-1: Product: syz [ 915.062295][T10780] usb 2-1: Manufacturer: syz [ 915.074451][T10780] usb 2-1: SerialNumber: syz [ 915.177088][T10780] usb 2-1: config 0 descriptor?? [ 915.182325][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 915.689730][T10780] esd_usb 2-1:0.17: sending version message failed [ 915.722672][T10780] esd_usb 2-1:0.17: probe with driver esd_usb failed with error -22 [ 915.735570][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 915.763615][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2806'. [ 915.773569][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 915.903209][T16819] ceph: No mds server is up or the cluster is laggy [ 915.922768][T13919] libceph: connect (1)[c::]:6789 error -101 [ 915.934184][T13919] libceph: mon0 (1)[c::]:6789 connect error [ 915.960041][ T9409] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 916.052095][T16826] ceph: No mds server is up or the cluster is laggy [ 916.120561][ T9409] usb 5-1: Using ep0 maxpacket: 16 [ 916.146769][ T9409] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 916.235081][ T9409] usb 5-1: config 0 has no interface number 0 [ 916.366260][ T9409] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 916.538221][ T9409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.555613][ T9409] usb 5-1: Product: syz [ 916.560839][ T9409] usb 5-1: Manufacturer: syz [ 916.568493][ T9409] usb 5-1: SerialNumber: syz [ 916.581120][ T9409] usb 5-1: config 0 descriptor?? [ 916.589463][ T9409] hub 5-1:0.132: bad descriptor, ignoring hub [ 916.598418][ T9409] hub 5-1:0.132: probe with driver hub failed with error -5 [ 916.618759][ T9409] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input29 [ 917.067915][ T9855] usb 2-1: USB disconnect, device number 63 [ 919.039057][ T9409] usb 5-1: USB disconnect, device number 31 [ 919.066628][T16868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2817'. [ 919.077600][T16868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16868 comm=syz.1.2817 [ 919.305406][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 919.305445][ T30] audit: type=1400 audit(1766130820.563:662): avc: denied { write } for pid=16871 comm="syz.3.2819" lport=42527 faddr=::ffff:172.30.1.4 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 919.345320][ T30] audit: type=1400 audit(1766130820.603:663): avc: denied { setopt } for pid=16871 comm="syz.3.2819" lport=42527 faddr=::ffff:172.30.1.4 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 919.501700][T16873] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 919.511074][T16878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=16878 comm=syz.2.2820 [ 919.880545][ T9409] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 920.028812][T16894] tipc: Started in network mode [ 920.035389][T16894] tipc: Node identity ac14140f, cluster identity 4711 [ 920.047361][T16894] tipc: New replicast peer: 255.255.255.255 [ 920.063873][ T9409] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 920.084386][T16894] tipc: Enabled bearer , priority 10 [ 920.091576][ T9409] usb 3-1: config 0 has no interface number 0 [ 920.098900][ T9409] usb 3-1: config 0 interface 17 has no altsetting 0 [ 920.141160][ T9409] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 920.175719][ T9409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.204135][ T9409] usb 3-1: Product: syz [ 920.219879][ T9409] usb 3-1: Manufacturer: syz [ 920.260840][ T9409] usb 3-1: SerialNumber: syz [ 920.353679][ T9409] usb 3-1: config 0 descriptor?? [ 920.386981][ T9409] esd_usb 3-1:0.17: sending version message failed [ 920.427825][ T9409] esd_usb 3-1:0.17: probe with driver esd_usb failed with error -22 [ 920.614220][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 920.707789][T16900] FAULT_INJECTION: forcing a failure. [ 920.707789][T16900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.721512][T16900] CPU: 1 UID: 0 PID: 16900 Comm: syz.4.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.721539][T16900] Tainted: [L]=SOFTLOCKUP [ 920.721546][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.721554][T16900] Call Trace: [ 920.721560][T16900] [ 920.721566][T16900] dump_stack_lvl+0x16c/0x1f0 [ 920.721591][T16900] should_fail_ex+0x512/0x640 [ 920.721618][T16900] _copy_from_user+0x2e/0xd0 [ 920.721642][T16900] wext_handle_ioctl+0xc2/0x2a0 [ 920.721663][T16900] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 920.721694][T16900] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 920.721714][T16900] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 920.721740][T16900] sock_ioctl+0x3a1/0x6b0 [ 920.721762][T16900] ? __pfx_sock_ioctl+0x10/0x10 [ 920.721781][T16900] ? hook_file_ioctl_common+0x144/0x410 [ 920.721812][T16900] ? selinux_file_ioctl+0x180/0x270 [ 920.721829][T16900] ? selinux_file_ioctl+0xb4/0x270 [ 920.721848][T16900] ? __pfx_sock_ioctl+0x10/0x10 [ 920.721867][T16900] __x64_sys_ioctl+0x18e/0x210 [ 920.721887][T16900] do_syscall_64+0xcd/0xf80 [ 920.721909][T16900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.721926][T16900] RIP: 0033:0x7f942878f749 [ 920.721939][T16900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.721953][T16900] RSP: 002b:00007f942961d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.721968][T16900] RAX: ffffffffffffffda RBX: 00007f94289e5fa0 RCX: 00007f942878f749 [ 920.721978][T16900] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 920.721988][T16900] RBP: 00007f942961d090 R08: 0000000000000000 R09: 0000000000000000 [ 920.721998][T16900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.722008][T16900] R13: 00007f94289e6038 R14: 00007f94289e5fa0 R15: 00007ffd62e62738 [ 920.722031][T16900] [ 920.924580][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 920.930712][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 920.970284][ T9409] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 921.029520][T16908] ceph: No mds server is up or the cluster is laggy [ 921.080775][ T6131] tipc: Node number set to 2886997007 [ 921.287199][ T9409] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.318774][ T9409] usb 2-1: config 0 has no interface number 0 [ 921.353191][ T9409] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 921.397054][ T9409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.422579][ T9409] usb 2-1: config 0 descriptor?? [ 921.434845][ T9409] usb 2-1: selecting invalid altsetting 1 [ 921.453468][ T9409] dvb_ttusb_budget: ttusb_init_controller: error [ 921.468537][ T9409] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 921.840230][ T9409] DVB: Unable to find symbol cx22700_attach() [ 921.984362][ T9409] DVB: Unable to find symbol tda10046_attach() [ 922.050548][ T6131] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 922.059000][ T9409] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 922.069094][ T9409] usb 2-1: USB disconnect, device number 64 [ 922.137061][ T30] audit: type=1400 audit(1766130823.393:664): avc: denied { listen } for pid=16934 comm="syz.0.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 922.221889][ T6131] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 922.231226][ T6131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.242723][ T6131] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 922.252951][ T6131] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 922.261566][ T6131] usb 5-1: Manufacturer: syz [ 922.268704][ T6131] usb 5-1: config 0 descriptor?? [ 922.340078][ T6131] rc_core: IR keymap rc-hauppauge not found [ 922.346074][ T6131] Registered IR keymap rc-empty [ 922.355419][ T6131] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 922.367200][ T6131] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 922.450060][ T9409] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 922.623528][ T6131] usb 3-1: USB disconnect, device number 46 [ 922.856587][ T9409] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 924.086423][ T9409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.453760][ T9409] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 924.509861][ T9409] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 924.775620][ T9409] usb 1-1: Manufacturer: syz [ 924.830573][ T9409] usb 1-1: config 0 descriptor?? [ 924.895918][ T6131] usb 5-1: USB disconnect, device number 32 [ 924.999397][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 925.191474][ T5944] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 925.262473][ T9409] rc_core: IR keymap rc-hauppauge not found [ 925.277195][ T9409] Registered IR keymap rc-empty [ 925.408166][T16977] FAULT_INJECTION: forcing a failure. [ 925.408166][T16977] name failslab, interval 1, probability 0, space 0, times 0 [ 925.422202][T16977] CPU: 1 UID: 0 PID: 16977 Comm: syz.0.2837 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.422228][T16977] Tainted: [L]=SOFTLOCKUP [ 925.422234][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 925.422244][T16977] Call Trace: [ 925.422251][T16977] [ 925.422258][T16977] dump_stack_lvl+0x16c/0x1f0 [ 925.422284][T16977] should_fail_ex+0x512/0x640 [ 925.422309][T16977] ? __kmalloc_cache_noprof+0x5f/0x800 [ 925.422329][T16977] should_failslab+0xc2/0x120 [ 925.422351][T16977] __kmalloc_cache_noprof+0x80/0x800 [ 925.422372][T16977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.422394][T16977] ? io_wq_create+0x6a/0x9a0 [ 925.422413][T16977] ? io_wq_create+0x6a/0x9a0 [ 925.422427][T16977] io_wq_create+0x6a/0x9a0 [ 925.422444][T16977] io_uring_alloc_task_context+0x1e1/0x650 [ 925.422470][T16977] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 925.422501][T16977] __io_uring_add_tctx_node+0x2dd/0x500 [ 925.422524][T16977] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 925.422550][T16977] ? __fget_files+0x20e/0x3c0 [ 925.422576][T16977] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 925.422601][T16977] __do_sys_io_uring_enter+0x1242/0x1630 [ 925.422622][T16977] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 925.422636][T16977] ? __pfx_bpf_trace_run2+0x10/0x10 [ 925.422651][T16977] ? __might_fault+0xe3/0x190 [ 925.422663][T16977] ? __might_fault+0x13b/0x190 [ 925.422674][T16977] ? find_held_lock+0x2b/0x80 [ 925.422694][T16977] ? syscall_trace_enter+0x1cb/0x220 [ 925.422715][T16977] ? rcu_is_watching+0x12/0xc0 [ 925.422733][T16977] do_syscall_64+0xcd/0xf80 [ 925.422751][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.422765][T16977] RIP: 0033:0x7f92bbb8f749 [ 925.422776][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.422789][T16977] RSP: 002b:00007f92bc93e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 925.422802][T16977] RAX: ffffffffffffffda RBX: 00007f92bbde6180 RCX: 00007f92bbb8f749 [ 925.422811][T16977] RDX: 0000000000003e82 RSI: 00000000000047ba RDI: 0000000000000008 [ 925.422819][T16977] RBP: 00007f92bc93e090 R08: 0000000000000000 R09: 0000000000000000 [ 925.422826][T16977] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 925.422834][T16977] R13: 00007f92bbde6218 R14: 00007f92bbde6180 R15: 00007ffe9e3f1928 [ 925.422853][T16977] [ 925.690626][ T9409] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 925.717912][ T9409] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input32 [ 925.860431][ T9409] usb 1-1: USB disconnect, device number 54 [ 925.889806][T10780] libceph: connect (1)[c::]:6789 error -101 [ 925.897521][T10780] libceph: mon0 (1)[c::]:6789 connect error [ 925.920223][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 925.981603][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.011900][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 926.023138][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 926.034258][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 926.208541][T16971] ceph: No mds server is up or the cluster is laggy [ 926.215432][ T5944] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 926.256524][T10780] libceph: connect (1)[c::]:6789 error -101 [ 926.458587][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 926.466838][T10780] libceph: mon0 (1)[c::]:6789 connect error [ 926.490312][ T5944] usb 3-1: Product: syz [ 926.509374][ T5944] usb 3-1: Manufacturer: syz [ 926.520521][ T5944] usb 3-1: SerialNumber: syz [ 926.553010][ T5944] usb 3-1: config 0 descriptor?? [ 926.563236][ T5944] usb 3-1: no audio or video endpoints found [ 926.771409][ T5944] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 926.851426][ T24] usb 3-1: USB disconnect, device number 47 [ 926.941608][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.954726][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 926.974632][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 926.983902][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.992943][ T5944] usb 5-1: Product: syz [ 926.997276][ T5944] usb 5-1: Manufacturer: syz [ 927.001954][ T5944] usb 5-1: SerialNumber: syz [ 927.090073][T10780] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 927.221708][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.232694][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.241476][T16990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.251622][T10780] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 927.260316][T16990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.268120][T10780] usb 4-1: config 0 has no interface number 0 [ 927.276223][T10780] usb 4-1: config 0 interface 17 has no altsetting 0 [ 927.284909][ T5944] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 927.296545][T10780] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 927.314961][ T5944] usb 5-1: USB disconnect, device number 33 [ 927.322591][T10780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.334111][T10780] usb 4-1: Product: syz [ 927.338333][T10780] usb 4-1: Manufacturer: syz [ 927.343020][T10780] usb 4-1: SerialNumber: syz [ 927.349720][T10780] usb 4-1: config 0 descriptor?? [ 927.356463][T10780] esd_usb 4-1:0.17: sending version message failed [ 927.358013][T17011] syzkaller0: entered promiscuous mode [ 927.363099][T10780] esd_usb 4-1:0.17: probe with driver esd_usb failed with error -22 [ 927.379463][T17011] syzkaller0: entered allmulticast mode [ 927.392309][T17011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2854'. [ 927.732121][ T30] audit: type=1400 audit(1766130828.993:665): avc: denied { ioctl } for pid=17012 comm="syz.2.2855" path="socket:[51768]" dev="sockfs" ino=51768 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 927.886700][ T30] audit: type=1400 audit(1766130829.143:666): avc: denied { read } for pid=17021 comm="syz.1.2857" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 927.999544][T17028] sd 0:0:1:0: PR command failed: 1026 [ 928.005283][T17028] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 928.012250][T17028] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 928.233722][ T5944] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 928.370198][ T30] audit: type=1400 audit(1766130829.143:667): avc: denied { open } for pid=17021 comm="syz.1.2857" path="/532/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 928.408096][ T30] audit: type=1400 audit(1766130829.243:668): avc: denied { ioctl } for pid=17021 comm="syz.1.2857" path="/532/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 928.436203][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 928.451661][ T5944] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 928.468183][ T5944] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 928.488650][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 928.508813][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 928.528054][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 928.555921][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.577656][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.595241][ T5944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 928.607696][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.081371][T17044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.122778][T17044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.184296][ T5944] usb 5-1: usb_control_msg returned -71 [ 929.189890][ T5944] usbtmc 5-1:16.0: can't read capabilities [ 929.196794][ T5944] usbtmc 5-1:16.0: Failed to submit iin_urb [ 929.203115][ T5944] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -90 [ 929.214893][T17048] netlink: 'syz.1.2865': attribute type 2 has an invalid length. [ 929.218861][ T5944] usb 5-1: USB disconnect, device number 34 [ 929.495713][T17064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2868'. [ 929.600964][ T5944] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 929.903993][ T6131] usb 4-1: USB disconnect, device number 58 [ 930.099728][T17074] Invalid logical block size (65279) [ 930.125955][ T5944] usb 5-1: unable to get BOS descriptor or descriptor too short [ 930.197751][ T5944] usb 5-1: not running at top speed; connect to a high speed hub [ 930.211389][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.223942][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.492196][ T5944] usb 5-1: string descriptor 0 read error: -22 [ 930.502751][ T5944] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 930.526797][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.568414][ T5944] usb 5-1: 0:2 : does not exist [ 931.000334][T17083] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2873'. [ 931.364289][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.370671][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.379695][T17090] netlink: 'syz.0.2876': attribute type 12 has an invalid length. [ 931.442401][T17090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2876'. [ 931.486587][T17054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.518235][T17054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.554933][ T5944] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 931.699162][ T5944] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 931.735141][ T5944] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 931.816614][ T5944] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 931.867061][ T5944] usb 5-1: USB disconnect, device number 35 [ 932.322562][ T3807] Bluetooth: hci5: Frame reassembly failed (-84) [ 932.328540][T17112] veth0_vlan: entered allmulticast mode [ 932.429081][ T3807] Bluetooth: hci5: Frame reassembly failed (-84) [ 933.069419][ T9451] libceph: connect (1)[c::]:6789 error -101 [ 933.129677][ T9451] libceph: mon0 (1)[c::]:6789 connect error [ 933.226324][T17121] ceph: No mds server is up or the cluster is laggy [ 933.718017][T17132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 934.115804][T17139] lo speed is unknown, defaulting to 1000 [ 934.131818][T17139] lo speed is unknown, defaulting to 1000 [ 934.148117][T17139] lo speed is unknown, defaulting to 1000 [ 934.176544][T17139] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 934.217897][T17139] lo speed is unknown, defaulting to 1000 [ 934.234697][T17139] lo speed is unknown, defaulting to 1000 [ 934.248426][T17139] lo speed is unknown, defaulting to 1000 [ 934.264998][T17139] lo speed is unknown, defaulting to 1000 [ 934.282086][T17139] lo speed is unknown, defaulting to 1000 [ 934.332872][ T5830] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 934.524051][T17164] kAFS: unable to lookup cell '/,c¾ûL' [ 935.288703][ T30] audit: type=1400 audit(1766130836.543:669): avc: denied { execmod } for pid=17180 comm="syz.0.2898" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=53266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 935.770326][T17197] program syz.1.2901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 936.444699][T17204] IPVS: sed: FWM 3 0x00000003 - no destination available [ 936.520628][ T9409] IPVS: starting estimator thread 0... [ 936.527175][ T30] audit: type=1400 audit(1766130837.473:670): avc: denied { mounton } for pid=17195 comm="syz.1.2901" path="/542/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 936.669420][T17212] openvswitch: netlink: IP tunnel dst address not specified [ 936.785883][T17209] IPVS: using max 48 ests per chain, 115200 per kthread [ 937.421882][ T30] audit: type=1400 audit(1766130838.683:671): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 938.010471][T17229] comedi comedi3: comedi_config --init_data is deprecated [ 938.018696][ T30] audit: type=1400 audit(1766130839.273:672): avc: denied { setopt } for pid=17227 comm="syz.0.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 938.043276][ T30] audit: type=1400 audit(1766130839.303:673): avc: denied { connect } for pid=17227 comm="syz.0.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 938.119258][T17229] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 938.125772][T17229] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.157118][T17229] vhci_hcd vhci_hcd.0: Device attached [ 938.170217][ T5944] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 938.192307][T17237] input: syz0 as /devices/virtual/input/input34 [ 938.342589][T17233] vhci_hcd: connection closed [ 938.342974][ T1139] vhci_hcd vhci_hcd.4: stop threads [ 938.353117][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 938.361372][ T5944] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.379195][ T1139] vhci_hcd vhci_hcd.4: release socket [ 938.404636][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 938.413678][ T1139] vhci_hcd vhci_hcd.4: disconnect device [ 938.424260][ T5944] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 938.433717][T10780] usb 42-1: enqueue for inactive port 0 [ 938.464804][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.503168][ T5944] usb 3-1: config 0 descriptor?? [ 938.921215][T10780] usb usb42-port1: attempt power cycle [ 938.957345][ T5944] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 939.400265][T13919] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 939.523449][T10780] usb usb42-port1: unable to enumerate USB device [ 939.710290][T13919] usb 1-1: device descriptor read/64, error -71 [ 939.840255][T17267] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2919'. [ 939.871890][ T30] audit: type=1400 audit(1766130841.133:674): avc: denied { module_load } for pid=17266 comm="syz.1.2919" path="/545/bus" dev="tmpfs" ino=2945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 939.875307][T17267] Invalid ELF header magic: != ELF [ 939.950015][T13919] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 939.962481][ T30] audit: type=1400 audit(1766130841.223:675): avc: denied { recv } for pid=17269 comm="syz.3.2920" saddr=10.128.0.169 src=30006 daddr=10.128.0.224 dest=46904 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 940.080071][T13919] usb 1-1: device descriptor read/64, error -71 [ 940.160087][T10780] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 940.205885][T13919] usb usb1-port1: attempt power cycle [ 940.231755][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 940.248370][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 940.272347][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 940.301630][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 940.320190][T10780] usb 2-1: Using ep0 maxpacket: 8 [ 940.328603][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 940.337203][T10780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.347484][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 940.375486][T10780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 940.400434][T10780] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 940.416668][T10780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 940.428879][T10780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 940.439090][T10780] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.453951][T10780] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 940.463367][T10780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.472394][T10780] usb 2-1: Product: syz [ 940.476576][T10780] usb 2-1: Manufacturer: syz [ 940.481823][T10780] usb 2-1: SerialNumber: syz [ 940.488181][T10780] usb 2-1: config 0 descriptor?? [ 940.560300][T13919] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 940.580788][T13919] usb 1-1: device descriptor read/8, error -71 [ 940.622190][T10780] libceph: connect (1)[c::]:6789 error -101 [ 940.628258][T10780] libceph: mon0 (1)[c::]:6789 connect error [ 940.634570][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 940.640844][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 940.701385][ T5944] usb 2-1: USB disconnect, device number 65 [ 940.778922][T17277] ceph: No mds server is up or the cluster is laggy [ 940.820068][T13919] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 940.838207][T10780] usb 3-1: USB disconnect, device number 48 [ 940.851095][T13919] usb 1-1: device descriptor read/8, error -71 [ 940.980152][T13919] usb usb1-port1: unable to enumerate USB device [ 941.194183][T10780] libceph: connect (1)[c::]:6789 error -101 [ 941.210525][T17281] ceph: No mds server is up or the cluster is laggy [ 941.217252][T10780] libceph: mon0 (1)[c::]:6789 connect error [ 941.263614][T17292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=17292 comm=syz.3.2924 [ 942.260946][T17312] fuse: Unknown parameter 'fÕÒd' [ 942.340393][ T5944] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 942.648443][ T30] audit: type=1400 audit(1766130843.903:676): avc: denied { create } for pid=17311 comm="syz.0.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 942.673436][ T30] audit: type=1400 audit(1766130843.923:677): avc: denied { write } for pid=17311 comm="syz.0.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 942.742164][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.775352][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 942.823138][ T5944] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 942.862677][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.870885][T10780] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 942.900011][ T5944] usb 2-1: config 0 descriptor?? [ 943.043330][T10780] usb 4-1: Using ep0 maxpacket: 32 [ 943.078786][T10780] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 943.121354][T10780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.148631][ T30] audit: type=1400 audit(1766130844.403:678): avc: denied { create } for pid=17321 comm="syz.4.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 943.182532][T10780] usb 4-1: Product: syz [ 943.199747][T10780] usb 4-1: Manufacturer: syz [ 943.210496][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'. [ 943.225819][T10780] usb 4-1: SerialNumber: syz [ 943.274035][T10780] usb 4-1: config 0 descriptor?? [ 943.288823][ T30] audit: type=1400 audit(1766130844.453:679): avc: denied { ioctl } for pid=17321 comm="syz.4.2933" path="socket:[52879]" dev="sockfs" ino=52879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 943.334455][T10780] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 943.359318][ T5944] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 943.368839][T10780] dvb-usb: bulk message failed: -22 (2/0) [ 943.382548][ T30] audit: type=1400 audit(1766130844.523:680): avc: denied { map } for pid=17321 comm="syz.4.2933" path="socket:[52878]" dev="sockfs" ino=52878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 943.407435][ T5944] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0 [ 943.415077][T10780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 943.426348][ T5944] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0022/input/input37 [ 943.438289][T10780] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 943.446884][T10780] usb 4-1: media controller created [ 943.454087][ T5944] cm6533_jd 0003:0D8C:0022.0022: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 943.502463][T10780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 943.508092][ T9409] libceph: connect (1)[c::]:6789 error -101 [ 943.541919][ T9409] libceph: mon0 (1)[c::]:6789 connect error [ 943.605536][T10780] usb 4-1: selecting invalid altsetting 7 [ 943.624275][T10780] cxusb: set interface failed [ 943.638418][T10780] dvb-usb: bulk message failed: -22 (1/0) [ 943.741507][T17328] ceph: No mds server is up or the cluster is laggy [ 943.753102][T10780] DVB: Unable to find symbol lgdt330x_attach() [ 943.760636][ T5944] usb 2-1: USB disconnect, device number 66 [ 943.783387][T10780] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 943.816195][ T9409] libceph: connect (1)[c::]:6789 error -101 [ 943.823912][ T9409] libceph: mon0 (1)[c::]:6789 connect error [ 943.915029][T10780] rc_core: IR keymap rc-dvico-portable not found [ 943.962476][ T30] audit: type=1400 audit(1766130845.193:681): avc: denied { cmd } for pid=17334 comm="syz.4.2934" path="socket:[53804]" dev="sockfs" ino=53804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 943.989992][T10780] Registered IR keymap rc-empty [ 943.995702][T10780] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 944.031912][T10780] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input38 [ 944.080733][T10780] dvb-usb: schedule remote query interval to 100 msecs. [ 944.120489][T10780] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 944.142258][T10780] usb 4-1: USB disconnect, device number 59 [ 944.151716][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 944.801695][T10780] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 946.722260][ T30] audit: type=1400 audit(1766130847.983:682): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 946.845870][ T30] audit: type=1400 audit(1766130847.983:683): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 947.025456][ T9855] libceph: connect (1)[c::]:6789 error -101 [ 947.290703][ T9855] libceph: mon0 (1)[c::]:6789 connect error [ 947.488528][T17395] netlink: 'syz.3.2948': attribute type 1 has an invalid length. [ 947.538651][T17382] ceph: No mds server is up or the cluster is laggy [ 947.630613][ T9855] libceph: connect (1)[c::]:6789 error -101 [ 947.637658][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2950'. [ 947.701141][ T9855] libceph: mon0 (1)[c::]:6789 connect error [ 948.535884][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 949.738124][T17412] lo speed is unknown, defaulting to 1000 [ 950.112309][T17444] netlink: 'syz.2.2962': attribute type 39 has an invalid length. [ 950.201343][T17441] syzkaller0: entered promiscuous mode [ 950.206806][T17441] syzkaller0: entered allmulticast mode [ 950.420099][ T9451] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 950.582376][ T9451] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 950.601048][ T9451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.668475][ T9451] usb 1-1: config 0 descriptor?? [ 951.106978][T13919] libceph: connect (1)[c::]:6789 error -101 [ 951.117192][T13919] libceph: mon0 (1)[c::]:6789 connect error [ 951.197980][ T9451] usb 1-1: Cannot read MAC address [ 951.220569][ T9451] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 951.261737][ T9451] usb 1-1: USB disconnect, device number 59 [ 951.292276][T17472] tipc: Enabled bearer , priority 0 [ 951.348520][T17472] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2970'. [ 951.375346][T17472] tipc: Resetting bearer [ 951.381490][T13919] libceph: connect (1)[c::]:6789 error -101 [ 951.388362][T17462] ceph: No mds server is up or the cluster is laggy [ 951.401409][T13919] libceph: mon0 (1)[c::]:6789 connect error [ 951.431825][ T30] audit: type=1400 audit(1766130852.693:684): avc: denied { nlmsg_read } for pid=17474 comm="syz.2.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 951.467735][T17471] tipc: Disabling bearer [ 951.520632][ T30] audit: type=1400 audit(1766130852.773:685): avc: denied { setopt } for pid=17466 comm="syz.1.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 952.424233][T10780] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 952.635364][T10780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 952.655338][T10780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.670491][T10780] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 952.679561][T10780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.698073][T10780] usb 3-1: config 0 descriptor?? [ 952.723504][T17496] x_tables: ip_tables: osf match: only valid for protocol 6 [ 953.315028][T10780] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 953.916821][T17510] fuse: Bad value for 'user_id' [ 953.922303][T17510] fuse: Bad value for 'user_id' [ 953.984185][ T9409] usb 3-1: USB disconnect, device number 49 [ 954.043702][T17515] bridge0: entered allmulticast mode [ 954.733286][T17515] netlink: 'syz.3.2982': attribute type 2 has an invalid length. [ 955.490596][ T9409] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 955.525826][T17529] tipc: Enabled bearer , priority 0 [ 955.544660][T17529] syzkaller0: entered promiscuous mode [ 955.554350][T17529] syzkaller0: entered allmulticast mode [ 955.572351][T17529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2987'. [ 955.600173][T13919] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 955.613100][T17528] tipc: Resetting bearer [ 955.648088][T17528] tipc: Disabling bearer [ 955.663529][ T9409] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 955.681957][ T9409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.690975][ T9409] usb 5-1: config 0 descriptor?? [ 955.693993][ T9409] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 955.694066][ T9409] dvb-usb: bulk message failed: -22 (3/0) [ 955.698570][ T9409] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 955.699205][ T9409] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 955.699234][ T9409] usb 5-1: media controller created [ 955.699261][ T9409] dvb-usb: bulk message failed: -22 (5/0) [ 955.699294][ T9409] dvb-usb: MAC address reading failed. [ 955.710981][ T9409] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 955.717679][ T9409] dvb-usb: bulk message failed: -22 (6/0) [ 955.717807][ T9409] dvb-usb: bulk message failed: -22 (6/0) [ 955.717847][ T9409] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 955.909231][ T9409] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 955.993380][T13919] usb 1-1: Using ep0 maxpacket: 16 [ 956.063853][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2985'. [ 956.074282][T17526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.082926][T17526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.101515][T13919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 956.128872][T13919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 956.159512][T13919] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 956.208144][T13919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.257319][T13919] usb 1-1: Product: syz [ 956.282133][ T9409] dvb-usb: schedule remote query interval to 100 msecs. [ 956.290808][T13919] usb 1-1: Manufacturer: syz [ 956.295395][T13919] usb 1-1: SerialNumber: syz [ 956.300556][ T9409] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 956.316062][T13919] usb 1-1: config 0 descriptor?? [ 956.346492][ T9409] usb 5-1: USB disconnect, device number 36 [ 956.352558][ T6131] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 956.388364][T13919] opticon 1-1:0.0: opticon converter detected [ 956.403816][T13919] usb 1-1: opticon converter now attached to ttyUSB0 [ 956.457904][ T9409] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 956.509994][ T6131] usb 2-1: Using ep0 maxpacket: 32 [ 956.640100][ T6131] usb 2-1: config 4 has an invalid interface number: 1 but max is 0 [ 956.652264][ T6131] usb 2-1: config 4 has no interface number 0 [ 956.677514][ T6131] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice=a4.ed [ 956.687897][ T6131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.730034][T17551] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 957.021652][ T30] audit: type=1400 audit(1766130857.923:686): avc: denied { setopt } for pid=17546 comm="syz.3.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 957.041986][ T30] audit: type=1400 audit(1766130857.983:687): avc: denied { watch } for pid=17546 comm="syz.3.2990" path="/590/file0" dev="tmpfs" ino=3177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 957.087413][ T6131] usb 2-1: can't set first interface for hiFace device. [ 957.102366][T17542] ceph: No mds server is up or the cluster is laggy [ 957.114206][ T30] audit: type=1400 audit(1766130857.983:688): avc: denied { watch_sb } for pid=17546 comm="syz.3.2990" path="/590/file0" dev="tmpfs" ino=3177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 957.142286][ T9855] libceph: connect (1)[c::]:6789 error -113 [ 957.149282][ T6131] snd-usb-hiface 2-1:4.1: probe with driver snd-usb-hiface failed with error -5 [ 957.169487][ T9855] libceph: mon0 (1)[c::]:6789 connect error [ 958.743874][ T30] audit: type=1400 audit(1766130860.003:689): avc: denied { recv } for pid=17552 comm="syz.3.2992" saddr=10.128.0.169 src=35788 daddr=10.128.0.224 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 958.812576][T10780] usb 2-1: USB disconnect, device number 67 [ 959.833167][T17577] tipc: Enabled bearer , priority 0 [ 959.850082][T17577] syzkaller0: entered promiscuous mode [ 959.880845][T17577] syzkaller0: entered allmulticast mode [ 959.900709][T17577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2998'. [ 960.135814][T17586] No such timeout policy "syz1" [ 960.149085][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2999'. [ 960.623714][T17576] tipc: Resetting bearer [ 960.649598][T17576] tipc: Disabling bearer [ 960.736715][T17592] No such timeout policy "syz1" [ 960.746798][T17592] No control pipe specified [ 960.753713][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 961.866798][T13919] libceph: connect (1)[c::]:6789 error -113 [ 961.962112][T17620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40 [ 962.020119][T13919] libceph: mon0 (1)[c::]:6789 connect error [ 962.032295][T17617] ceph: No mds server is up or the cluster is laggy [ 967.981029][T17649] tipc: Enabled bearer , priority 0 [ 967.988197][T17649] syzkaller0: entered promiscuous mode [ 967.993867][T17649] syzkaller0: entered allmulticast mode [ 968.000829][T17649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3017'. [ 969.622882][T17657] No such timeout policy "syz1" [ 969.638588][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3015'. [ 970.118338][T16199] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 970.127650][T16199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 970.135264][T16199] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 970.142877][T16199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 970.151464][T16199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 970.172119][T17645] tipc: Resetting bearer [ 970.482272][T17645] tipc: Disabling bearer [ 970.536753][T17664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input42 [ 971.819354][T17661] lo speed is unknown, defaulting to 1000 [ 972.249158][T16199] Bluetooth: hci5: command tx timeout [ 972.712873][ T30] audit: type=1400 audit(1766130873.953:690): avc: denied { write } for pid=17701 comm="syz.3.3028" path="socket:[55531]" dev="sockfs" ino=55531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 972.825909][T17661] chnl_net:caif_netlink_parms(): no params data found [ 973.321861][T17715] No such timeout policy "syz1" [ 973.338963][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 974.320338][T16199] Bluetooth: hci5: command tx timeout [ 974.830973][T17661] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.872873][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.910290][T17661] bridge_slave_0: entered allmulticast mode [ 974.939181][T17661] bridge_slave_0: entered promiscuous mode [ 975.169569][T17732] tipc: Enabled bearer , priority 0 [ 975.187104][T17661] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.208326][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.226072][T17661] bridge_slave_1: entered allmulticast mode [ 975.240681][T17661] bridge_slave_1: entered promiscuous mode [ 975.365869][T17725] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3034'. [ 975.385613][T17726] syzkaller0: entered promiscuous mode [ 975.391673][T17726] syzkaller0: entered allmulticast mode [ 975.406315][T17728] tipc: Resetting bearer [ 975.464566][T17661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.488446][T17661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.229958][T16199] Bluetooth: hci5: command tx timeout [ 977.235653][T17721] tipc: Resetting bearer [ 977.265477][T17721] tipc: Disabling bearer [ 977.279597][ T8955] tipc: Node number set to 3009975988 [ 977.298174][T17661] team0: Port device team_slave_0 added [ 977.332207][T17661] team0: Port device team_slave_1 added [ 977.338252][T17752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.410434][T17661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.417403][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.451979][T17661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.552482][T17661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.725497][T17661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.753005][T17661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.817531][T17765] blktrace: Concurrent blktraces are not allowed on loop2 [ 977.826700][T17763] blktrace: Concurrent blktraces are not allowed on loop8 [ 978.969903][T17779] No such timeout policy "syz1" [ 978.978946][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 979.060149][ T8955] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 979.280132][T16199] Bluetooth: hci5: command tx timeout [ 979.451174][ T8955] usb 4-1: Using ep0 maxpacket: 16 [ 979.469764][ T8955] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 979.477489][ T8955] usb 4-1: can't read configurations, error -61 [ 979.612105][ T8955] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 979.780025][ T8955] usb 4-1: Using ep0 maxpacket: 16 [ 979.798508][ T8955] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 979.816264][ T8955] usb 4-1: can't read configurations, error -61 [ 979.836940][ T8955] usb usb4-port1: attempt power cycle [ 980.190149][ T8955] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 980.421223][ T8955] usb 4-1: Using ep0 maxpacket: 16 [ 980.436147][ T8955] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 980.448224][T17661] hsr_slave_0: entered promiscuous mode [ 980.449311][ T8955] usb 4-1: can't read configurations, error -61 [ 980.470994][T17661] hsr_slave_1: entered promiscuous mode [ 980.488146][T17661] debugfs: 'hsr0' already exists in 'hsr' [ 980.507671][T17661] Cannot create hsr debugfs directory [ 980.620180][ T8955] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 980.660450][ T8955] usb 4-1: Using ep0 maxpacket: 16 [ 980.668151][ T8955] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 980.677073][ T8955] usb 4-1: can't read configurations, error -61 [ 980.698056][ T8955] usb usb4-port1: unable to enumerate USB device [ 980.753825][ T30] audit: type=1400 audit(1766130882.013:691): avc: denied { listen } for pid=17786 comm="syz.2.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 981.136636][T17798] tipc: Enabled bearer , priority 0 [ 981.388762][T17798] syzkaller0: entered promiscuous mode [ 981.395711][T17798] syzkaller0: entered allmulticast mode [ 981.432971][T17661] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 981.473540][T17797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input43 [ 981.493736][T17798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3052'. [ 981.518207][T17801] tipc: Resetting bearer [ 981.527558][T17661] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 981.652411][T17661] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 981.725618][T17796] tipc: Resetting bearer [ 981.746071][T17796] tipc: Disabling bearer [ 981.758069][T17661] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 983.904258][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.965296][T17661] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.992185][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.999330][ T5045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.037629][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.044765][ T5045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.940364][T17839] No such timeout policy "syz1" [ 985.946843][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 986.705005][T17841] blktrace: Concurrent blktraces are not allowed on loop2 [ 987.503230][ T30] audit: type=1400 audit(1766130888.763:692): avc: denied { ioctl } for pid=17844 comm="syz.4.3062" path="socket:[55895]" dev="sockfs" ino=55895 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 987.730106][ T7350] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 987.958187][T17661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.965060][ T7350] usb 4-1: Using ep0 maxpacket: 32 [ 987.977822][ T7350] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 988.001551][ T7350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.292848][ T7350] usb 4-1: config 0 descriptor?? [ 989.060062][T10780] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 989.072873][T17661] veth0_vlan: entered promiscuous mode [ 989.087111][T17661] veth1_vlan: entered promiscuous mode [ 989.230027][T10780] usb 2-1: Using ep0 maxpacket: 32 [ 990.092954][T17661] veth0_macvtap: entered promiscuous mode [ 990.193627][ T7350] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 990.198625][T17661] veth1_macvtap: entered promiscuous mode [ 990.952019][T10780] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 990.973245][T17661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.063592][T10780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.122806][ T7350] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 991.273256][T10780] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 991.290172][ T7350] dib0700: firmware download failed at 7 with -22 [ 991.304887][T17661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.332603][ T7350] usb 4-1: USB disconnect, device number 64 [ 991.372415][ T6317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.517122][ T6317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.038182][T10780] gspca_nw80x: reg_w err -110 [ 992.044042][T10780] nw80x 2-1:3.0: probe with driver nw80x failed with error -110 [ 992.047950][ T6317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.105323][T10780] usb 2-1: USB disconnect, device number 68 [ 992.121856][ T6317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.838024][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.564203][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.103531][T13919] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 994.957410][T13919] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 994.976316][T13919] usb 2-1: config 0 has no interface number 0 [ 994.989955][T13919] usb 2-1: config 0 interface 17 has no altsetting 0 [ 995.003371][T13919] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 995.020359][T13919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.038464][T13919] usb 2-1: Product: syz [ 995.047739][T13919] usb 2-1: Manufacturer: syz [ 995.056326][T13919] usb 2-1: SerialNumber: syz [ 995.200839][ T6131] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 995.300869][T13919] usb 2-1: config 0 descriptor?? [ 995.317331][T13919] usb 2-1: can't set config #0, error -71 [ 995.331246][T13919] usb 2-1: USB disconnect, device number 69 [ 995.590689][ T6131] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 995.600950][ T6131] usb 5-1: config 0 has no interface number 0 [ 995.621306][ T6131] usb 5-1: config 0 interface 17 has no altsetting 0 [ 995.630519][ T6131] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 995.639577][ T6131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.657727][ T6131] usb 5-1: Product: syz [ 995.665256][ T6131] usb 5-1: Manufacturer: syz [ 995.669864][ T6131] usb 5-1: SerialNumber: syz [ 995.698595][ T6131] usb 5-1: config 0 descriptor?? [ 995.719513][ T6131] esd_usb 5-1:0.17: sending version message failed [ 995.747983][ T6131] esd_usb 5-1:0.17: probe with driver esd_usb failed with error -22 [ 995.761746][T13919] usb 1-1: USB disconnect, device number 60 [ 995.769239][T13919] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 995.788068][T13919] opticon 1-1:0.0: device disconnected [ 995.798554][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.811667][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.917013][T17908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input44 [ 996.443666][ T6205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.454602][ T6205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.706504][ T30] audit: type=1400 audit(1766130897.953:693): avc: denied { shutdown } for pid=17920 comm="syz.1.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 996.987271][ T30] audit: type=1400 audit(1766130897.953:694): avc: denied { read } for pid=17920 comm="syz.1.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 997.847312][ T8955] usb 5-1: USB disconnect, device number 37 [ 998.219504][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 998.229641][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 998.237504][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 998.245858][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 998.253508][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 998.372797][ T8955] libceph: connect (1)[c::]:6789 error -113 [ 998.630429][ T6911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 999.330825][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 1000.332046][ T8955] libceph: connect (1)[c::]:6789 error -113 [ 1000.332131][T16199] Bluetooth: hci0: command tx timeout [ 1000.338092][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 1000.363292][T17947] ceph: No mds server is up or the cluster is laggy [ 1000.578298][ T6911] usb 6-1: config 0 has an invalid interface number: 17 but max is 0 [ 1000.594912][ T6911] usb 6-1: config 0 has no interface number 0 [ 1000.621559][ T6911] usb 6-1: config 0 interface 17 has no altsetting 0 [ 1000.657791][ T6911] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 1000.677850][ T6911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.933483][ T6911] usb 6-1: Product: syz [ 1000.937665][ T6911] usb 6-1: Manufacturer: syz [ 1000.969976][ T6911] usb 6-1: SerialNumber: syz [ 1000.993063][ T6911] usb 6-1: config 0 descriptor?? [ 1001.021147][ T6911] esd_usb 6-1:0.17: sending version message failed [ 1001.027708][ T6911] esd_usb 6-1:0.17: probe with driver esd_usb failed with error -22 [ 1001.060885][T17939] lo speed is unknown, defaulting to 1000 [ 1001.496283][ T6317] smc: removing ib device syz1 [ 1002.196692][ T8955] syz1: Port: 1 Link DOWN [ 1002.400237][T16199] Bluetooth: hci0: command tx timeout [ 1002.718556][T17939] chnl_net:caif_netlink_parms(): no params data found [ 1002.759479][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1002.851785][ T9451] usb 6-1: USB disconnect, device number 2 [ 1004.480627][T16199] Bluetooth: hci0: command tx timeout [ 1004.520256][ T9451] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1004.541918][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.558345][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.576310][T17939] bridge_slave_0: entered allmulticast mode [ 1004.594688][T17939] bridge_slave_0: entered promiscuous mode [ 1004.611128][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.639802][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.662097][T17939] bridge_slave_1: entered allmulticast mode [ 1004.704586][T17939] bridge_slave_1: entered promiscuous mode [ 1004.716852][ T9451] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 1004.735320][ T9451] usb 6-1: config 0 has no interface number 0 [ 1004.766839][ T9451] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1004.784511][ T9451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.907644][ T9451] usb 6-1: config 0 descriptor?? [ 1005.029790][ T6911] libceph: connect (1)[c::]:6789 error -113 [ 1005.126151][ T6911] libceph: mon0 (1)[c::]:6789 connect error [ 1005.126827][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.175339][ T9451] usb 6-1: USB disconnect, device number 3 [ 1005.196226][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.316799][T18023] ceph: No mds server is up or the cluster is laggy [ 1005.343248][T17939] team0: Port device team_slave_0 added [ 1005.401225][T17939] team0: Port device team_slave_1 added [ 1005.446927][ T6911] libceph: connect (1)[c::]:6789 error -113 [ 1005.484889][ T6911] libceph: mon0 (1)[c::]:6789 connect error [ 1005.751188][T18031] No such timeout policy "syz1" [ 1005.779937][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1006.364894][ T6317] ------------[ cut here ]------------ [ 1006.370665][ T6317] GID entry ref leak for dev syz1 index 2 ref=1 [ 1006.376905][ T6317] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:21/6317 [ 1006.388897][ T6317] Modules linked in: [ 1006.393184][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.404409][ T6317] Tainted: [L]=SOFTLOCKUP [ 1006.408711][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.418870][ T6317] Workqueue: ib-unreg-wq ib_unregister_work [ 1006.424821][ T6317] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1006.430920][ T6317] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 9a 67 4d f9 48 8d 3d 13 ae 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 80 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1006.450600][ T6317] RSP: 0018:ffffc9000b777ac8 EFLAGS: 00010293 [ 1006.456676][ T6317] RAX: 0000000000000000 RBX: ffff88802f9c3600 RCX: 0000000000000001 [ 1006.464666][ T6317] RDX: 0000000000000002 RSI: ffff8880344db720 RDI: ffffffff90952d10 [ 1006.472664][ T6317] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10087e6280 [ 1006.480671][ T6317] R10: ffff888043f31403 R11: ffffffff8228bf2b R12: ffffed1005f386db [ 1006.488867][ T6317] R13: ffff8880773d0000 R14: 0000000000000002 R15: dffffc0000000000 [ 1006.496986][ T6317] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1006.505984][ T6317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1006.512601][ T6317] CR2: 00007fe7fdfccf98 CR3: 0000000033b40000 CR4: 00000000003526f0 [ 1006.520580][ T6317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1006.528551][ T6317] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 1006.536532][ T6317] Call Trace: [ 1006.539795][ T6317] [ 1006.542733][ T6317] ib_device_release+0xef/0x1e0 [ 1006.547575][ T6317] ? __pfx_ib_device_release+0x10/0x10 [ 1006.553033][ T6317] device_release+0xa4/0x240 [ 1006.557616][ T6317] kobject_put+0x1ef/0x6f0 [ 1006.562059][ T6317] put_device+0x1f/0x30 [ 1006.566203][ T6317] process_one_work+0x9ba/0x1b20 [ 1006.571156][ T6317] ? __pfx_process_one_work+0x10/0x10 [ 1006.576541][ T6317] ? assign_work+0x1a0/0x250 [ 1006.581145][ T6317] worker_thread+0x6c8/0xf10 [ 1006.585898][ T6317] ? __kthread_parkme+0x19e/0x250 [ 1006.591012][ T6317] ? __pfx_worker_thread+0x10/0x10 [ 1006.596177][ T6317] kthread+0x3c5/0x780 [ 1006.596393][T16199] Bluetooth: hci0: command tx timeout [ 1006.600272][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.610245][ T6317] ? rcu_is_watching+0x12/0xc0 [ 1006.615003][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.619606][ T6317] ret_from_fork+0x983/0xb10 [ 1006.624419][ T6317] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.629546][ T6317] ? __switch_to+0x7af/0x10d0 [ 1006.634227][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.638821][ T6317] ret_from_fork_asm+0x1a/0x30 [ 1006.643701][ T6317] [ 1006.646708][ T6317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1006.653961][ T6317] CPU: 1 UID: 0 PID: 6317 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.665040][ T6317] Tainted: [L]=SOFTLOCKUP [ 1006.669426][ T6317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1006.679465][ T6317] Workqueue: ib-unreg-wq ib_unregister_work [ 1006.685341][ T6317] Call Trace: [ 1006.688594][ T6317] [ 1006.691500][ T6317] dump_stack_lvl+0x3d/0x1f0 [ 1006.696068][ T6317] vpanic+0x640/0x6f0 [ 1006.700024][ T6317] ? gid_table_release_one+0x1ad/0x450 [ 1006.705471][ T6317] panic+0xca/0xd0 [ 1006.709186][ T6317] ? __pfx_panic+0x10/0x10 [ 1006.713581][ T6317] ? check_panic_on_warn+0x1f/0xb0 [ 1006.718670][ T6317] check_panic_on_warn+0xab/0xb0 [ 1006.723587][ T6317] __warn+0x108/0x3c0 [ 1006.727560][ T6317] __report_bug+0x2a0/0x520 [ 1006.732034][ T6317] ? gid_table_release_one+0x1ad/0x450 [ 1006.737466][ T6317] ? __pfx___report_bug+0x10/0x10 [ 1006.742474][ T6317] report_bug_entry+0xe1/0x290 [ 1006.747212][ T6317] ? gid_table_release_one+0x1b6/0x450 [ 1006.752820][ T6317] handle_bug+0x18a/0x260 [ 1006.757132][ T6317] exc_invalid_op+0x17/0x50 [ 1006.761614][ T6317] asm_exc_invalid_op+0x1a/0x20 [ 1006.766437][ T6317] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1006.772475][ T6317] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 9a 67 4d f9 48 8d 3d 13 ae 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 80 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1006.792055][ T6317] RSP: 0018:ffffc9000b777ac8 EFLAGS: 00010293 [ 1006.798093][ T6317] RAX: 0000000000000000 RBX: ffff88802f9c3600 RCX: 0000000000000001 [ 1006.806035][ T6317] RDX: 0000000000000002 RSI: ffff8880344db720 RDI: ffffffff90952d10 [ 1006.813978][ T6317] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed10087e6280 [ 1006.821917][ T6317] R10: ffff888043f31403 R11: ffffffff8228bf2b R12: ffffed1005f386db [ 1006.829859][ T6317] R13: ffff8880773d0000 R14: 0000000000000002 R15: dffffc0000000000 [ 1006.837806][ T6317] ? kasan_save_free_info+0x3b/0x60 [ 1006.842987][ T6317] ? gid_table_release_one+0x1a6/0x450 [ 1006.848430][ T6317] ib_device_release+0xef/0x1e0 [ 1006.853260][ T6317] ? __pfx_ib_device_release+0x10/0x10 [ 1006.858700][ T6317] device_release+0xa4/0x240 [ 1006.863275][ T6317] kobject_put+0x1ef/0x6f0 [ 1006.867671][ T6317] put_device+0x1f/0x30 [ 1006.871807][ T6317] process_one_work+0x9ba/0x1b20 [ 1006.876734][ T6317] ? __pfx_process_one_work+0x10/0x10 [ 1006.882098][ T6317] ? assign_work+0x1a0/0x250 [ 1006.886693][ T6317] worker_thread+0x6c8/0xf10 [ 1006.891264][ T6317] ? __kthread_parkme+0x19e/0x250 [ 1006.896265][ T6317] ? __pfx_worker_thread+0x10/0x10 [ 1006.901354][ T6317] kthread+0x3c5/0x780 [ 1006.905405][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.909972][ T6317] ? rcu_is_watching+0x12/0xc0 [ 1006.914708][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.919274][ T6317] ret_from_fork+0x983/0xb10 [ 1006.923840][ T6317] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.928927][ T6317] ? __switch_to+0x7af/0x10d0 [ 1006.933582][ T6317] ? __pfx_kthread+0x10/0x10 [ 1006.938148][ T6317] ret_from_fork_asm+0x1a/0x30 [ 1006.942900][ T6317] [ 1006.946171][ T6317] Kernel Offset: disabled [ 1006.950480][ T6317] Rebooting in 86400 seconds..