last executing test programs: 4m55.811044059s ago: executing program 2 (id=1683): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x2}, {0xf}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01031500000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @multicast2}, &(0x7f00000003c0)=0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f00000000c0)={'netdevsim0\x00', @random="0100012010ff"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) 4m53.564427395s ago: executing program 2 (id=1692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m52.631226254s ago: executing program 2 (id=1695): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(0x0, 0x0, &(0x7f0000002180), 0x0, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="bd7000fddbdf250b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44010) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x87, @remote, 0x6}, {0xa, 0x4e20, 0xb195000, @private1, 0x80}, r3, 0x81}}, 0x48) umount2(&(0x7f00000000c0)='./file0\x00', 0x5) ioctl$KDSETLED(r2, 0x4b32, 0xf1a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4m51.396558716s ago: executing program 2 (id=1697): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0xc001) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00F\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="4000a6000a000200aaaaaaaaaabb00000600050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 4m49.855102224s ago: executing program 2 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m49.406639901s ago: executing program 2 (id=1704): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000580)="0125", 0x2}], 0x1, 0xf) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d43d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b0905e7022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead783acf5e9960b78172cee5cf148a84453239e84e0e513347117423804b3e605c5fee826960698e8fcb3ed028f3686f7e7c4fc44974d6987f3a16f956683194e67b59a1225efa8d91d82fa9115ce443a8e13e7a3e934b017d087333eef373067226b5e8d836f1f1bdb35584b0e08c8edcc0f3390725010106ff7f090504", @ANYBLOB="b2"], 0x0) 4m33.683300773s ago: executing program 32 (id=1704): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r2}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000580)="0125", 0x2}], 0x1, 0xf) syz_usb_connect(0x2, 0x440, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100da0fe42101caf61f785b7bd6f9a40324b2b8253d68e955dd65abfed59c829185881ffcf5071e69d83a94cccf753dd12f7dafdf5b2d4e3c8bf7d1851b891f21b183913d49bf953bab3ee777ab2030fd27eea9c11becf582bd1b62acc0c22b85cc4a21fdf944da65c501f2bcfe60009f9fd3182f3ef9ea028b761d8d18b12c0fbf64e01fdc16ab3f19ccea2d43d16c315afe1e0654083cd85bdecc1d0c08b65aa2b2b59ecb592696ae75b74bced0a71a55e78c444bc6465fc101e4d0d773fceabb706647834c3dac7f5053ba0fc5a1b7012444dace5c0a0be4300e09210200040122e20b0905e7022000050b08090580014001030607cc31074fbfe106909c0e2a9e3c8f70de1215b05b4e75f54d1fa06a425bb8c7fef594d2ffdf29b12ec1b945fa8258e29da5d13e03ec0c272e99523b2a0be430b629f7fa5bb1d4efc8455fff57efa9f30ce50458ae7f8b794ead783acf5e9960b78172cee5cf148a84453239e84e0e513347117423804b3e605c5fee826960698e8fcb3ed028f3686f7e7c4fc44974d6987f3a16f956683194e67b59a1225efa8d91d82fa9115ce443a8e13e7a3e934b017d087333eef373067226b5e8d836f1f1bdb35584b0e08c8edcc0f3390725010106ff7f090504", @ANYBLOB="b2"], 0x0) 16.128217747s ago: executing program 4 (id=2648): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 14.706551667s ago: executing program 4 (id=2654): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{}]}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 11.977197078s ago: executing program 0 (id=2661): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x2c01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.899970401s ago: executing program 4 (id=2662): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "dd90b5c47ec0d56c953cb3de44c3fa93d21ecf6f229cfd33994e25c83d86ac3a9c17cbea5f3b23c6578d673a8f03b3a4d7336bda47aecbac91e6d4eb220807c5b634f073145b50304357c04c292def2e774b978d89cfcf66711ef18965847d088fe5f6242e31053582742d818b2ebc5161cc27cb96bba59065e1bb70e920afe21ff5cbe4a9660ccb6503cc7ce516a08ea14f6328949056bffe96cc5e3c47fb8930c72a1260c6a4a5bd5b35efee9fb015a8a0614354850b4e2d2aa5ffabe5c739c0ce20f8b166faaf261c9cba25e3ccd191b48ad2"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 10.742398765s ago: executing program 0 (id=2667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000400)={0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {{}, {0x95, 0x0, 0x1f00}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.506241786s ago: executing program 0 (id=2672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xb47b}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xffffffffffffffff) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x5, 0x7, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x80, 0x8, 0x0, 0xfffffff6}}) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_deladdr={0x20, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, {0xa, 0x78, 0x4, 0xff, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a01700000000b3"], 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.400352512s ago: executing program 4 (id=2673): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x6}, {0x0, 0xffff, 0x1}}}}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x11, 0x80, 0x3, 0x7b, 0xa, 0x80, 0x6, 0x2, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x200003, 0x4]}}) setns(r0, 0x80) 8.661389733s ago: executing program 0 (id=2677): r0 = syz_open_procfs(0x0, &(0x7f0000002140)='net/psched\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) epoll_create(0x76f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x76a3, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = creat(0x0, 0x12a) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00'/15, @ANYBLOB="eaa65349992045b4dc72bb2ed09844944fee3f4c6e1106ae1e3135bb0e75ced20e705a12eab24d26dfea2d3e1c321a0b8535e6ad29426b5520ce076518f07ea74f74341f646c45bf1210bf77e7cd0325205f4e1dda2159ffc42949a47bf6f4e6702c46ad137ced03b57bf0a68547ad090ab2648946cf13093890a0c6b38f9665499b7db513", @ANYRES64=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r4}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x8010, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x101}}, './file0\x00'}) tee(r5, r6, 0xfffffffffffffc01, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18db80, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x3000000, 0x1000, 0x1}}) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) sigaltstack(&(0x7f0000000480)={&(0x7f0000002180)=""/4124, 0x2, 0xfffffe89}, 0x0) sigaltstack(&(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000200)={0x0}) fchdir(r0) 7.121091353s ago: executing program 3 (id=2680): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 6.823411918s ago: executing program 5 (id=2681): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000040000000d00000000000001000000004e0048020f0000000000000b040000000600000009000006040000000100000003000000060000000d00000003000000ff0300000d000000050000000a0000000400000004000000020000000a0009000800000010000000fdffffff0f00000081090000002e3000"], &(0x7f0000000380)=""/114, 0x8c, 0x72, 0x1, 0x10, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r5, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e000c000000a0000100000350200993bdfbcd7c0e0d97a8ceaf7cbf375c6f1c0a442a2131cae9bee14851a51e5a43a5da75f8143fc739e51d39834996240c03049fc4e539bd8d9d3a2c4bfa4d65494b18ef40c8e596b8f4f508d274e97e8ef9949a8b0e64900a33df04b56f75b16a8a1c1623a8c509fb89f12db5ca64be8044f4a1b530f6fec72d8af438444cdb63341f9dcb546b63a62661922372aeb3f04be20c27b29ff8fc063a7fdc5a2d77f7a241dca9d8060b345c3b3072fd36db0bf50108c378c8545b22a5819e40fdf3c525828a3f707d7357c55044e662084f83150ffeceb14c6901da"], 0x0) 6.529506848s ago: executing program 3 (id=2682): socketpair$unix(0x1, 0x2, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) pipe2(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = fcntl$getown(r3, 0x9) ptrace$ARCH_SHSTK_LOCK(0x1e, r8, 0x1, 0x5003) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x0, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xa}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r11, 0x917, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x620b}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.51533225s ago: executing program 5 (id=2683): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140000001100010000000000000000006a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) r2 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x24, 0x64, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000500)="926f130a672102cdcc6801f377e465b07c721359fff10d20d20ae16e81a6e0eea1be99f1c5a32dbc41c89a65b3e44f2ba14a771e7c9194e6b4b083b3cef3d29e72669e45fc8a0d6d26ff8f1705d7469ae21af48d6956de5bd0785a8256739e6a05525920a411c43df764f67d50ee34f69108c52e397fdb90c914c7ca04e3cabf5f3cd2fe03fc75e637b9fff653f07091dcbe1c8a169777e1caff9703f450fcf74d11ab703256539815b266f699c56cd8dc2d0db18d011559f460af78ffc262a97a3f3e3c5e105382366fbc5af6fbda7e05c5dbf2790480c0ff8d489a86885778889f1a8ff4", 0xe5}, {&(0x7f0000000340)}, {&(0x7f0000000600)="9d6eb9845c2dc1c3ce3cd9322dd401d68e4e0248e1d8b96ee37ea84a461dc59769a3782808b21fc44e65c37a7f6f15741bdbd67ac95e7824a76fbe2bfc9ba4e12185b62413593ec52c3aae8b6de867ce16d836b327b2598bad874cdeb73ab8da805a90cafe1f8d9f8b435de4bf4fb78114ac7e365bb2c22b8c4373f42b87d15ab64b51fe726c6099571263acacd0a6f60f5cc3068a7e5cb81129ac30c9e63d", 0x9f}], 0x3, 0x60a, 0xfffffffe) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000000010002", 0x7) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r6, r5, 0x0) finit_module(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x6, r1, 0x0, 0x0, 0x1}}, 0x20) 5.466309915s ago: executing program 4 (id=2684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000400)={0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {{}, {0x95, 0x0, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.825120481s ago: executing program 5 (id=2686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x60442) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x0, 0x0}], 0x1}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x161c00, 0x1c) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150001"], 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000240)={0x2, 0xffffffffffffffff, 0x3}) 4.306727849s ago: executing program 3 (id=2687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, r3, 0x325, 0x70bd27}, 0x14}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="d92d11393da35419276b1c43244719af698ff7bf9e40eaa89b6a0b04cb66931b02a23ee89d474b18c76b6d673f1ea5be3d189e59d1e7507c99c58cd8f1c31185d869c5f67702f000082c655de2", &(0x7f0000000000)=""/60, &(0x7f0000000140)="8cae398f9865f1160c719c744f67b211f703c10c99472c07dfeed0524a674a84f1f948fe0f3230b25cc7a64d8e8deead2075518b23141274ba4e11d3d523a573abd4aea5b4e93d1b17588d90fae274ab08e51672f647b9d37b6bef1f4dff7f14ae03e55b57a20994d6e783cb40f998", &(0x7f00000001c0)="d758b89d9c1a1a18b0f2b398c53dd598c01dfa19564995fb4e04e534fb93d4742cf32032f07390100b4969b3f53efa43170ef91239999193e6fd88a238e9586f1919160f3390074b08178cf5e43c4b8502c2f58305d745dfd05de4e2231a876258b543c0a699ff8c154de38a801521868aca0b7eb0e3bc32a50f76f5d9e5aa5a02fd9e97461a1f3cc398d0abd0c294d2d806f8b5968ea8795afb8495be9642b5d2437978321ebdc589cb87c577b3bdcc6cc6d8c2", 0x401, r1, 0x4}, 0x38) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) 4.290079288s ago: executing program 3 (id=2688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.230831733s ago: executing program 3 (id=2689): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902"], 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000800)={0x0, 0x4e292, 0x0, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x4}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.996235164s ago: executing program 1 (id=2690): fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000060fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d000000040105"], 0x254}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') io_uring_setup(0x1694, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[], 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0xc06c4124, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socket$inet_tcp(0x2, 0x1, 0x0) 3.36648262s ago: executing program 0 (id=2691): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0x4, 0xe, 0x4, 0x4, 0x1a, {0x0, 0x2710}, {0x1, 0xc, 0x0, 0x5, 0x36, 0x0, "eaba0c23"}, 0x3, 0x4, {0x0}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) process_madvise(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x15, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x2, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}]}) 2.586427865s ago: executing program 1 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x402000, 0x0) recvmsg$can_raw(r3, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000000a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c00018006000106000000000000004000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040002) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0x3, 0xc}, {0xfff3, 0xfff1}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.467104089s ago: executing program 1 (id=2693): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000040000000d00000000000001000000004e0048020f0000000000000b040000000600000009000006040000000100000003000000060000000d00000003000000ff0300000d000000050000000a0000000400000004000000020000000a0009000800000010000000fdffffff0f00000081090000002e3000"], &(0x7f0000000380)=""/114, 0x8c, 0x72, 0x1, 0x10, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, @fallback=0xc, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e000c000000a0000100000350200993bdfbcd7c0e0d97a8ceaf7cbf375c6f1c0a442a2131cae9bee14851a51e5a43a5da75f8143fc739e51d39834996240c03049fc4e539bd8d9d3a2c4bfa4d65494b18ef40c8e596b8f4f508d274e97e8ef9949a8b0e64900a33df04b56f75b16a8a1c1623a8c509fb89f12db5ca64be8044f4a1b530f6fec72d8af438444cdb63341f9dcb546b63a62661922372aeb3f04be20c27b29ff8fc063a7fdc5a2d77f7a241dca9d8060b345c3b3072fd36db0bf50108c378c8545b22a5819e40fdf3c525828a3f707d7357c55044e662084f83150ffeceb14c6901da"], 0x0) 2.403557196s ago: executing program 4 (id=2694): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_le_read_buffer_size={{0x6}, {0x0, 0xffff, 0x1}}}}, 0xa) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x11, 0x80, 0x3, 0x7b, 0xa, 0x80, 0x6, 0x2, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x200003, 0x4]}}) setns(r0, 0x80) 2.337610995s ago: executing program 0 (id=2695): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000004000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.196427339s ago: executing program 1 (id=2696): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="20ed63266f6a66bfb330ed3f4a4f51fa25da71726dc89293d8f3fe5d696d86ceda8ca67c8a39107e4c9e5d057f0f01748067557c226cd5b1feaaf008e353d42f61642867de138acff7c00290788aa2bbae37e596ff4c33c2bf5e3bd958d55023c658e618c8185ea5983c441e61338f614be651348bdaa0a8dffd281a1bdd51c9662266215894b3910cc2483c441c6d7def6bcadf6c9c8a2cd68097210a0fd10286a352102422", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[], 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9030, r7, 0xe75f0000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r11, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) 1.306546733s ago: executing program 5 (id=2697): r0 = socket(0xa, 0x3, 0x3a) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000440)={r0, 0x6, 0x4, "3282e343abadc99b18f0e22805bceed43403e95cc09522d42a1e0f491fa78a68989df2f3bd7525d89f0e849de51ee6c004c7a2d149382ea9ce907acb67c07dddd2a001b18cbe73e6b9f5ba9c487141a4aa733dcccd6b65906edffbff9572c85f475c884622a2225ba0d2cf8990ba104f477ad6ec7cf4e230d90d998c0394fcb0b9631310e86da5afabaeb6fb965045efcaf851b7efd4afc8ba88bae7a5ee7a72e5370ce65d61ec008e29aae7fe8625b54be78d8c9cd747be4e9a38c234c349c235c79915857a6ad8755e6cc7eb9ed16cc616ca47fddd03881a494d8259262f216a96cf4512b206a2252cf862"}) r1 = socket$kcm(0x11, 0xa, 0x300) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x1f7) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000001000/0x3000)=nil, 0x1000, 0x1, 0x10, r3, 0x82000000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0xad59) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000020, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) fsopen(&(0x7f0000000340)='afs\x00', 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) 827.962693ms ago: executing program 1 (id=2698): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xffffffffffffff2f, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xfffffcf5, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7ff}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xe}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4048840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000640)={0x5, 0x1, 0xf, 0x3, 0xce, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0xc0002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x2, r6, 0x66d3}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 694.380715ms ago: executing program 5 (id=2699): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8001) waitid(0x2, 0x0, 0xfffffffffffffffd, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) semget$private(0x0, 0x1, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000002000000fdffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, 0x0, 0x4800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b9) fdatasync(r3) r6 = openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x26, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, r6}, 0x94) socket(0x10, 0x3, 0x0) 618.476528ms ago: executing program 1 (id=2700): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0x4, 0xe, 0x4, 0x4, 0x1a, {0x0, 0x2710}, {0x1, 0xc, 0x0, 0x5, 0x36, 0x0, "eaba0c23"}, 0x3, 0x4, {0x0}, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) process_madvise(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x15, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000480)={0x2, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}]}) 166.826362ms ago: executing program 5 (id=2701): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="9f2c", 0x2}], 0x1}}], 0x1, 0x24080001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r9, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) recvmmsg(r9, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40010000, 0x0) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x8, [[0x7f, 0x7, 0x410, 0xc0, 0x0, 0x0, 0xfffffff8, 0x8d], [0x9, 0x0, 0xc, 0x3, 0x9, 0x6, 0x6, 0x2], [0x0, 0x8, 0xe, 0x967, 0x8, 0x0, 0x0, 0xe]], '\x00', [{0x9, 0x40, 0x0, 0x0, 0x1, 0x1}, {0x1c00000, 0x7, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x800, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x401, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0xd, 0x1}, {0x800, 0x1000, 0x1}, {0x1, 0x10, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x7fffffff, 0x1, 0x1}], '\x00', 0x1}) 0s ago: executing program 3 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x3488, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15b8, 0x3, 0x0, 0x1, [{0x2f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_DATA={0x2e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x66, 0x1, "a3d9755aa79fef431867974aba16fb48d2ab3358abc574f802c87e0727f9a52a81b687abff637b765b78c73a3b2ea49cdae0d7d89cb12edb14d723626140426bfaff5569c7060000643d9a1b06f7a26e0c04e3441bfd23bec0856e50ca9bc1d635b8"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x11, 0x1, "1ab422aba3f486d1d2f050907a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "2e5cf02288cfacc36f3c7ad8eaede13dfa3dd8df85b0460ca5e19d12e3b5f9ce133d904936d6bdc2c10cc095f3524da3a67a937e97956e190b98bafc59ad51bbf8b0e080547a33d65308586b9e"}, @NFTA_DATA_VALUE={0x4b, 0x1, "b31377df23deb40e46af7bb3c20a3f2a1be58ec272addf840629022446b96e250f05d857b475a62dbaa23f3a0496cec170f35c572a3405a65e23aca200fd07f3f2b61ecb5b4861"}, @NFTA_DATA_VALUE={0xbd, 0x1, "a0d9555979030d3ed8fe2e2db3bd4cfad42707cae275b1928e4c1d593f545c9e9b292068162dc452dde22586acd86b1686fef6abb59d3daa6f69045c68e3cbf824a1376e197712b719571785237a3888285c549097608d50ac4da31ebd05021becd0dfa96cd8493f0b30ed1772f8fa8b552af36ae359d985bf1c5c98012d7e1bd94d0eb793336d481fd89fc1db283c19353bf90ccf67570a73db7c102dab61f7056f5d32337e83bacf3ee554f1bdec35a13087fa125a500c3f"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}, {0x11a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x1164, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "176e257cd751917b586775f509bb71bd45c40072e352eb2cace4351634ce21b33e3be274d90e058b5afe29af3cdfed45d6f2d4fa461daea91b639f9c8d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff00000001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "227b565aad57918865a22dcbc7a8740cc45a862c46cbae7f78816b64c397138de2e6caa86a6c4e84512da8cc0f2cf89cabb944f6dc023c3115929b690a570eff7336fdebdea6181804445e007427ac6a5ad214074f70e4e7abd470660c9b9b0e7cc8635d7170003573dce7f89be73d792ecfbb4b1536cef3889ae0143beb7fe0c4ab3d54e2878a77a7c93271f0781f1173ee8707cfccbab7a958a1b7211787684966032a1c8d4dbdc92086e8de5cd2d19473608fe449af051087e6f1849ed202500d285dfcdc977c3e85b47e3a8b572edb281e48a4c83474d39c4a81e819674be7190694433d880da557"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x820, 0x3, 0x0, 0x1, [{0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "e7a3a21c1d2055131701f1a2d872dcd6d0c74ea1dc3c0298cfd7193e08e2946a340b80e3867280c9f89ac4c6890a37"}, @NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY_END={0x26c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x94, 0x1, "ce6604f34c0e7043712622588b42299c721691e1725c5cf07cc8418643ce4a80de0e066a4ecca01451cbbfbec8e606359cd056ef65e015947a3fdfbc96afcc23dabca738e55b5f0af826c2adf10b4dfdf92ff6b383112e361b64908147df5b18456c2156fb5081e64dc7e7ab206731c9acdb3495bb3fb1ecbce148665ed9bb8e914efd71c85c91a51e2b9a7f1f59516a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "536b5a2b9d6801d1622419b35bc60b5dce341703585c6908fd8c4bccb2b5837a602afc3c01112fe04e4734e3c1b9cfc9a11de2b048bfa2216d4a9ca67b06c1149534cf96cb4cfe39bd474333331f2166b5c228bf42a6b0acd0ef3dadc7069b3f454f5abb18b55888911e10c15199831f3423bf67222694cc6dc98b37199b11e54e77421d1d288fef84b518872d575f02fb51f4ab8c979710633b8c50512d7d6789af3f5d17cab660553ade4c0249b0bcc6c7edfc94dcea402bd8e30a8b1517dbbd9ec08d282cc92b64985209f35e6a"}, @NFTA_DATA_VALUE={0x7a, 0x1, "d54df39b3485df595a68969668e7be5ed7a06c2f1eaa5959876aaa742e076b873b1b7cbc0d877f86e1bd0000fa97935d6b80b30488a88ea8a19dcb81a595c9fb6f8c2df56cfa315356b896950b98bc34baf8cdfdf7f1336f55d2a09ab53d143df2b308522b1e04aa105bab06a3b5b18762feab0301b4"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "30f748f9b58bd6bd1820ddb0348d3c38b316893da24c98521bbf58a0550af15d658bfe3aeaed6436cd50ca"}]}, @NFTA_SET_ELEM_KEY_END={0x2a0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "1d3211e026c8c5cdc4b2d3b0c8001e3917fe45628cc27b051086c78f29a27f1b345bb6c12c009b7eee9e8dea43a2e4176205df5c12dcff7ec17b03866ef556904cbd32b36f41a43005476ca659b6139cbd167050992a0b322cc0298f9d105f09d4f1f9ec20e3c8a8eeacf0c47b2bd25d3da29f5caa92df5ff1656050f0f019c4cb3db2e1429b30316075ab5ea7356ded7d4b885f4896fb99b7b98bc93a85ee68a590214535b79d059d67681293f5460c0254"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x57, 0x1, "a0de359696b1b5ba2406dba3b9295637f7eb6e6c16ee58c31ca450207f87cfe9f644d65fbe578586a6f22b2529c0e1fbe3b2ead2ec243cc62b1e1bcd108cdafb34b41983068bb35f5ddd28ee60011a2d9ba0a0"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "02ab9e5cded4e8f698c9b448200157a81ee324aaba7744020d905e3e9d37ef07fe5f13f5ed09df9992b68f4de247ab3e0bbc5f56e1a58ffb8c25841256211c7d51f367b5b07dfdaadbc0093f465e5972aa500eef9286173e06a1b809f8ea1c754d0be7778abdc5f8ccfaf9f911be9501444deab47f72b583d7d1f5277bd434e1647623844976f20f8168ee346722a1c415db3d8200540cc4089c0dcd13010af0d8a1664acc7a33b13f606eb025bcda8972947be88a50440b527c08210bf61aff0e6a1159a47d925dc656b95cd3ee9284bf4b33d52c3ef54e508d6cd7eb8604d0e69be25ca240d0c79c54569c27c33e866a9fe0a22bc1fa"}]}]}, {0x23c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x230, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xba, 0x1, "0b1a8afd123166eb07766812cc256a0a4c02f3260c82b295fe19281a6f953d9bb013ef86bfdb167b5cff3529de74c10052894f6e1003cbfc3b5ca298493cf463f04b27af7db390444d8e5cb4afb2032b6641211b98fdfeb40eb2ea9c44445865a27cfbd53f7048c87aaedfbc9737acda5459c533a5c2961227a82270541c7d86c46b2f7b1c2faf4e84fce07827f810799cda3fcab342a594944a53d10bf1413801ec172c4d2a6f3e124b4463b15b2e7ef67114ece21f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xee, 0x1, "c8480ec80cdf79e527fa228acdd2240d8f39dd85ec1cb831e6ef6d0bbd53f6e4062420a838a14192b07fbe82ef6d1fcb9dbb4c72e84dd24eda92642d43262568f8d204830e60054043b876f910bf7afa82e28f55a97b5be8345e51a81340964ce51af48692648192fba43ca2233447f567739fa341bd23e2d2df2c4b2ed7a081673f6fd30f8490d9a3d52cacd250f58a14e92b55773a2213c5b52c040b173e5cab6dec13f7b661d6979f86abafdf69a1582d73ec9e114b479a902b05de563243e72c4813875c31dde69ca86179167b516276cda033e52cdd229383b913612c190063e563d572992d7145"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1678, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x138c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1328, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "0b56bb98d311b1676fd1c5eab00efa4816eb7de58901c3b126db96"}, @NFTA_DATA_VALUE={0x100, 0x1, "e66004b4c69adb9556f34ad2021e0676356d88f2d8b690212a2f10371d92a244303a36ffb0bb50de3d1f0b0de56c7dd50174855ef8e09845bb7e83e9ca64eacaf13bd773172cbaa8e286538592a5b1f52a1d8dd857e3df966e943ae27a8ba8504c79925b8d2fdbe4c8ae760886c146d82b5b246daac62ece2033861edff2df1c1a2e7bf6e81427e5567d2b5360c92352520f74837a30f3b54b216c929a78bab76032574c61a6cefd761388487e595777c155b940677105916f202540a1521ac2b7ad3991fd78e5b403d73c1f5b5f5fe69ad28e438d5a3ee05a1953d056f6db9d0fca4364c72b5cbffcb964a43302fc20bddf764587c94d5e08995162"}, @NFTA_DATA_VALUE={0x80, 0x1, "8178e15322d266695fc341c9750fb849d8f6c18dce3e2d40bb92e0ca2be6ef1b9482156384624638be4a15a37ebefd6120266cbb78a4d421252f2e8ea41f179325041d7acf0664871c3f363c4d389d3f1569d84470e1cd4b7f258916b411fb6b60464e50f49f1169171c71cf3523ac34aef1ad36431b7a149390fc0c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x49, 0x1, "068faaa46f495b959aaae9432a079398d01ffd83b7ad98dee6953aaa925d343347cedc070a4aa0efc54934753a660b37e1b8c7d1411fd36ee916492109b8908a663102988e"}, @NFTA_DATA_VALUE={0x4a, 0x1, "f44e7f830745791d1a027be4caa24c0512e00f3c7e2f1899639b357617ff9c8d046ebeef45b205d10798c433b75d631bbeaff023916fdc50a6f3134243151fc093b89209fc82"}, @NFTA_DATA_VALUE={0x90, 0x1, "50c73dee50274ad3d234f8b4c233489aa0e256bc5c1604095afd720cba4a618a361aa628354fc2e576e9d98b3c9ecb1032257cdcd3e234038fbe9420e1de58002dfb5026c4a60123eb788a3afe60da6a82a294de01e00c6325101789e84ef12647eb6f67fc6d3e6fd8e282b7a9b87b6471cf7260211072c1d2371f0ac7237268610e4a506d8cecffb39771ee"}]}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "53706dd2cf3b495a46dd132d93c734d3e8141b31a9a335b7f793fa02ef2c0af875d4ae5f3ad1f7713e94e47a536afc66b64d90ee"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x24000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5f5}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x170, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x90, 0x1, "e3ecfd58f1fb67e35428aefc5de14c1a467866db98a9860da8d80a4501e000e55297f66c032bd43594d4137c1fa74c99f951c61c444c9ba23c4a27b56dd9c522ee77424f7bbbfbca0e8b7c0a99597c56b2f24bc8a38241478b36b83e7eee1815f50506bc02dd02c60aef0b775285ff1b941d20b08429c011cf09ae73c513ce4d80ac16b1830c815cc673777e"}]}, @NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8f}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "1b979fe64ae7675c6d281a78e3c7ff101bb3e0aa899549260723de647b365b699693f907999225da86184d273f10ccb0ae2a3702fb8bc6"}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x92, 0x6, 0x1, 0x0, "0f0e748ed30a0ddb18d95466e202ba88b6f4a98b1a5e6bb1f2402260af95e85d795ef307cf65ed7e840cd061a5ca37c7d8b97882f745f388ff01b29a5eb2d1938d57eeb55f55320c9fe6e40323c0dd4984f95aa267c0c7a20cda9b983a6ac923f79ed20bc280f7e277e92b6e804d4255210d85a97c3929c5d3397113fa18424bf9dfbe1a1716759c6e20271d83b4"}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x98, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "b5b421081063a57fb4d51f57a5c1c5f6ed51fe6526d89795175fbebfef456060915333e9e5a7b65115a6ba0c2f7bf79996eb09e2b09db4ec5cecebb2f629888be8fd93ab6830812d0e640eab6f31"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x93e}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x108, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f7c53c3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b1ef438}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521b15f3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xcc, 0x0, 0xa, 0xc00, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "872201752e9c89d19f03115bc217f4074eb678a5ba811f99aff73e7475515b4544d1f186b2859f26869ea02bf4013342e74d7c5538d7a98ac268d681f764159aa6b3acf08b3ce5a392a5571d452f9bdac09b3461861c6779dcc5974333d4e5e0802a214cceb0b93a050412897abd43e3ee100a69bcc0faaa3ffba1148a6686ff96e1865f410b4f7fa569f3fdfe17a14498c089ca406e59134b78c6a29ed5ecb6461d7c2ab7"}]}, @NFT_MSG_DELRULE={0x150, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xec, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x38a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.4.2226'. [ 693.013530][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.020558][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.416733][ T6324] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 693.429728][ T6324] usb 6-1: config 0 has no interface number 0 [ 693.441849][ T6324] usb 6-1: too many endpoints for config 0 interface 113 altsetting 39: 241, using maximum allowed: 30 [ 693.454842][ T6324] usb 6-1: config 0 interface 113 altsetting 39 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 693.469218][ T6324] usb 6-1: config 0 interface 113 has no altsetting 0 [ 693.476147][ T6324] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 693.485642][ T6324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.498367][ T6324] usb 6-1: config 0 descriptor?? [ 693.722729][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.732666][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.740377][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.767008][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.767289][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.775994][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.803385][ T6324] usb 6-1: string descriptor 0 read error: -71 [ 693.847145][ T7406] usb 4-1: USB disconnect, device number 65 [ 693.853396][ T6324] usb_ehset_test 6-1:0.113: probe with driver usb_ehset_test failed with error -32 [ 693.888509][ T6324] usb 6-1: USB disconnect, device number 14 [ 693.896673][T14236] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2230'. [ 694.045626][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2234'. [ 694.522502][T14260] input: syz0 as /devices/virtual/input/input28 [ 695.025352][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.625125][T14281] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 695.978506][T14288] sp0: Synchronizing with TNC [ 695.993836][T14288] [U] è` [ 697.770792][ T1157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.962415][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 699.163983][T14320] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 699.208219][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 699.215177][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 699.228533][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 699.258618][ T30] audit: type=1400 audit(1767103065.344:1088): avc: denied { write } for pid=14316 comm="syz.5.2256" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 699.283071][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 699.418437][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 699.459256][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.481294][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 699.490861][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.502674][ T10] usb 4-1: Product: syz [ 699.513832][ T10] usb 4-1: Manufacturer: syz [ 699.654701][ T10] usb 4-1: SerialNumber: syz [ 699.667227][ T10] usb 4-1: config 0 descriptor?? [ 700.639754][T13473] kernel read not supported for file /adsp1 (pid: 13473 comm: kworker/0:0) [ 700.648941][ T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 700.695085][ T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 701.180381][ T3714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.320704][ T10] usb 4-1: USB disconnect, device number 66 [ 703.232146][ T646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.303939][ T7406] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 703.496160][ T7406] usb 6-1: device descriptor read/64, error -71 [ 703.722274][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 703.890746][ T7406] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 703.892821][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.908962][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 703.919433][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.930554][ T10] usb 2-1: config 0 descriptor?? [ 703.938414][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 704.065207][ T7406] usb 6-1: device descriptor read/64, error -71 [ 704.276484][ T7406] usb usb6-port1: attempt power cycle [ 704.715906][ T10] pwc: recv_control_msg error -71 req 02 val 2700 [ 704.722832][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 704.734248][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 704.752379][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 704.770376][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 704.778454][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 704.785408][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 704.792519][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 704.801616][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 704.808552][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 704.815628][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 704.824817][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 704.832024][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 704.839081][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 704.851521][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 704.860602][ T10] pwc: Registered as video103. [ 704.871028][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 704.896564][ T10] usb 2-1: USB disconnect, device number 64 [ 704.981337][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 705.338244][ T7406] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 705.367671][ T7406] usb 6-1: device descriptor read/8, error -71 [ 705.548431][ T30] audit: type=1400 audit(1767103071.237:1089): avc: denied { map } for pid=14397 comm="syz.5.2276" path="socket:[43926]" dev="sockfs" ino=43926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 705.573546][ T30] audit: type=1400 audit(1767103071.256:1090): avc: denied { read } for pid=14397 comm="syz.5.2276" path="socket:[43926]" dev="sockfs" ino=43926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 705.617011][ T30] audit: type=1400 audit(1767103071.284:1091): avc: denied { append } for pid=14397 comm="syz.5.2276" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 707.811266][ T6325] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 707.824583][ T3826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.881641][ T1157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.949692][T14426] libceph: resolve '400' (ret=-3): failed [ 708.958211][ T6325] usb 4-1: device descriptor read/64, error -71 [ 709.725509][T14429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.768681][T14429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.783060][ T6325] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 711.069256][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2290'. [ 711.087803][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 711.449496][ T6325] usb usb4-port1: attempt power cycle [ 711.823126][ T6325] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 711.873510][ T6325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.892238][ T6325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 711.909817][ T6325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 711.920108][ T6325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 711.965522][ T6325] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 711.976254][ T6325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.040285][ T6325] usb 4-1: config 0 descriptor?? [ 712.270888][ T30] audit: type=1400 audit(1767103077.523:1092): avc: denied { getopt } for pid=14448 comm="syz.3.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 712.297507][ T6325] usb 4-1: USB disconnect, device number 69 [ 712.366280][T14465] syzkaller0: entered promiscuous mode [ 712.377189][T14465] syzkaller0: entered allmulticast mode [ 712.790835][T14476] libceph: resolve '400' (ret=-3): failed [ 714.323451][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.408145][T14483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2297'. [ 714.554341][ T30] audit: type=1400 audit(1767103079.647:1093): avc: denied { read } for pid=14478 comm="syz.0.2297" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 714.601020][T14487] 9p: Bad value for 'wfdno' [ 714.686263][ T30] audit: type=1400 audit(1767103079.647:1094): avc: denied { open } for pid=14478 comm="syz.0.2297" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 714.795148][ T6325] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 714.871445][ T4122] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.969767][ T6325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.002088][ T6325] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 715.027210][ T6325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 715.054613][ T6325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 715.076566][ T6325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 715.153948][ T6325] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 715.187965][ T6325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 715.202577][ T6325] usb 4-1: Product: syz [ 715.211632][ T6325] usb 4-1: Manufacturer: syz [ 715.246922][ T6325] usb 4-1: SerialNumber: syz [ 715.270759][ T6325] usb 4-1: config 0 descriptor?? [ 715.510482][ T6325] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 715.526627][ T6325] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 715.974138][T14488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 715.989005][T14488] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 716.015949][ T6325] radio-si470x 4-1:0.0: software version 0, hardware version 37 [ 716.042414][ T6325] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 716.110290][T14488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.129300][T14488] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 716.166735][T14488] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 716.178962][T14488] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 716.208477][T14488] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 716.216784][ T6325] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 716.302475][ T6325] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 716.361788][ T6325] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 716.468593][ T6325] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 716.682530][ T6325] usb 4-1: USB disconnect, device number 70 [ 716.839987][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 716.928621][ T30] audit: type=1400 audit(1767103081.882:1095): avc: denied { bind } for pid=14505 comm="syz.1.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 717.389334][ T30] audit: type=1400 audit(1767103082.312:1096): avc: denied { append } for pid=14527 comm="syz.3.2308" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 717.442517][T14529] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 717.889649][T14554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 717.932028][T14555] futex_wake_op: syz.0.2311 tries to shift op by 32; fix this program [ 717.946361][T14555] libceph: resolve '400' (ret=-3): failed [ 718.552409][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 718.558791][ T5139] Bluetooth: hci5: command 0x0c1a tx timeout [ 719.321342][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 719.894578][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 720.074337][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 720.086532][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 720.096170][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.119656][ T10] usb 6-1: Product: syz [ 720.123859][ T10] usb 6-1: Manufacturer: syz [ 720.193203][ T10] usb 6-1: SerialNumber: syz [ 720.366742][ T6099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 720.760861][ T5829] Bluetooth: hci5: command 0x0c1a tx timeout [ 720.766914][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 721.028659][ T4019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.323798][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 721.340862][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 721.459733][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 721.470923][T14598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.505390][T14598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.507462][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 721.691026][ T10] usb 6-1: USB disconnect, device number 19 [ 721.925123][T14607] libceph: resolve '400' (ret=-3): failed [ 722.986054][ T5139] Bluetooth: hci5: command 0x0c1a tx timeout [ 724.183874][T14612] input: syz1 as /devices/virtual/input/input30 [ 724.216577][T14612] input: failed to attach handler evdev to device input30, error: -4 [ 724.324587][T14627] FAULT_INJECTION: forcing a failure. [ 724.324587][T14627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.338010][T14627] CPU: 1 UID: 0 PID: 14627 Comm: syz.1.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.338040][T14627] Tainted: [L]=SOFTLOCKUP [ 724.338045][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.338056][T14627] Call Trace: [ 724.338062][T14627] [ 724.338070][T14627] dump_stack_lvl+0x16c/0x1f0 [ 724.338100][T14627] should_fail_ex+0x512/0x640 [ 724.338130][T14627] _copy_from_user+0x2e/0xd0 [ 724.338156][T14627] memdup_user+0x6b/0xe0 [ 724.338176][T14627] strndup_user+0x78/0xe0 [ 724.338195][T14627] __do_sys_fsconfig+0x86e/0xbe0 [ 724.338219][T14627] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 724.338237][T14627] ? fput+0x70/0xf0 [ 724.338256][T14627] ? rcu_is_watching+0x12/0xc0 [ 724.338280][T14627] do_syscall_64+0xcd/0xf80 [ 724.338305][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.338322][T14627] RIP: 0033:0x7f3394f8f749 [ 724.338338][T14627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.338355][T14627] RSP: 002b:00007f3395e3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 724.338372][T14627] RAX: ffffffffffffffda RBX: 00007f33951e6180 RCX: 00007f3394f8f749 [ 724.338383][T14627] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 724.338394][T14627] RBP: 00007f3395e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 724.338404][T14627] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 724.338414][T14627] R13: 00007f33951e6218 R14: 00007f33951e6180 R15: 00007ffcc51f8b38 [ 724.338439][T14627] [ 725.083922][T14632] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2334'. [ 725.869745][T14632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.891375][T14632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.088357][ T30] audit: type=1400 audit(1767103090.450:1097): avc: denied { listen } for pid=14633 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 726.504885][ T6099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.548555][ T30] audit: type=1400 audit(1767103090.535:1098): avc: denied { module_load } for pid=14644 comm="syz.5.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 726.620874][ T30] audit: type=1400 audit(1767103090.899:1099): avc: denied { accept } for pid=14633 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 727.003815][ T5929] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 727.155861][ T30] audit: type=1400 audit(1767103091.451:1100): avc: denied { map } for pid=14664 comm="syz.0.2342" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 727.186342][T13851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.484851][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 728.291595][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.302760][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.313224][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 728.328475][ T5929] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 728.338070][ T5929] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 728.346338][ T5929] usb 4-1: Manufacturer: syz [ 728.356477][ T5929] usb 4-1: config 0 descriptor?? [ 728.593819][T14657] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 728.614265][T14657] bond2: entered promiscuous mode [ 728.619717][T14657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.670715][T14657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.710709][T14657] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 728.742294][T14657] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 728.802113][T14657] bond2: (slave vcan1): making interface the new active one [ 728.810031][T14657] vcan1: entered promiscuous mode [ 728.838479][T14657] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 729.112210][T14662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.118334][T14662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.124389][T14662] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 729.142002][T14589] Bluetooth: hci1: command 0x0406 tx timeout [ 729.148496][T14667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.175006][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 729.181525][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 729.191075][T14667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.203615][ T5929] usb 4-1: USB disconnect, device number 71 [ 729.353346][T14680] netlink: 'syz.4.2345': attribute type 27 has an invalid length. [ 729.472247][ T30] audit: type=1400 audit(1767103093.612:1101): avc: denied { accept } for pid=14679 comm="syz.4.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 730.225082][T14680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.262549][ T30] audit: type=1400 audit(1767103094.351:1102): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 730.306487][T14680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.489650][T14589] Bluetooth: hci5: command 0x0c1a tx timeout [ 731.502548][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 731.511441][T14680] geneve2: left promiscuous mode [ 731.529664][T14680] geneve2: left allmulticast mode [ 731.583684][T14682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.592034][T14682] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.600520][T14682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.644713][T14686] dvmrp0: entered allmulticast mode [ 731.701266][ T4019] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.738438][ T4019] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.841301][ T4019] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.844850][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.864420][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.883089][ T4019] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.932418][ T4019] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.955027][ T4019] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 731.972920][ T4019] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.995384][ T4019] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 732.575056][T14715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.626719][T14715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.823839][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.880018][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.783975][ T30] audit: type=1400 audit(1767103097.653:1103): avc: denied { ioctl } for pid=14733 comm="syz.0.2360" path="/461/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d1a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 734.404376][T14747] ./file0: Can't lookup blockdev [ 734.409510][ T30] audit: type=1400 audit(1767103098.233:1104): avc: denied { mount } for pid=14746 comm="syz.5.2363" name="/" dev="hugetlbfs" ino=45862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 735.676214][ T30] audit: type=1400 audit(1767103098.233:1105): avc: denied { create } for pid=14746 comm="syz.5.2363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 735.878659][ T30] audit: type=1400 audit(1767103098.233:1106): avc: denied { mounton } for pid=14746 comm="syz.5.2363" path="/97/file0/file0" dev="hugetlbfs" ino=45863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 735.973788][ T30] audit: type=1400 audit(1767103098.317:1107): avc: denied { create } for pid=14743 comm="syz.1.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 736.057375][ T30] audit: type=1400 audit(1767103098.317:1108): avc: denied { write } for pid=14743 comm="syz.1.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 736.134059][ T30] audit: type=1326 audit(1767103099.851:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3394f8f749 code=0x7ffc0000 [ 736.210395][ T30] audit: type=1326 audit(1767103099.870:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3394f8f749 code=0x7ffc0000 [ 736.229767][ T5929] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 736.277188][T14756] dlm: non-version read from control device 0 [ 736.486419][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 736.531691][ T30] audit: type=1326 audit(1767103099.889:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3394f8f749 code=0x7ffc0000 [ 736.591643][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 736.603595][ T5929] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 736.613579][ T5929] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 736.620682][ T30] audit: type=1326 audit(1767103099.889:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14755 comm="syz.1.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f3394f8f749 code=0x7ffc0000 [ 736.636054][ T5929] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 736.700613][ T5929] usb 6-1: config 128 has no interface number 0 [ 736.716565][ T5929] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 736.853705][ T5929] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 736.863905][ T5929] usb 6-1: config 128 interface 127 has no altsetting 0 [ 736.885907][ T5929] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 736.895322][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.908536][ T5929] usb 6-1: Product: syz [ 736.913921][ T5929] usb 6-1: Manufacturer: syz [ 736.919238][ T5929] usb 6-1: SerialNumber: syz [ 737.484997][ T5929] usb 6-1: USB disconnect, device number 20 [ 737.666777][T14769] xt_time: unknown flags 0xc [ 737.724407][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.739618][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.968511][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 739.505198][T14797] netlink: 'syz.1.2381': attribute type 1 has an invalid length. [ 739.573895][T14797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 739.611032][T14800] bond2: (slave veth7): Enslaving as an active interface with a down link [ 739.659458][T14797] vlan2: entered allmulticast mode [ 739.670542][T14797] bond_slave_1: entered allmulticast mode [ 739.686415][T14797] bond_slave_1: entered promiscuous mode [ 739.705669][T14797] bond_slave_1: left promiscuous mode [ 739.719788][T14797] bond2: (slave vlan2): making interface the new active one [ 739.729528][T14797] bond_slave_1: entered promiscuous mode [ 739.743914][T14797] vlan2: entered promiscuous mode [ 739.759278][T14797] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 739.896660][T14806] fuse: Unknown parameter '0x000000000000000a' [ 739.908642][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 739.908661][ T30] audit: type=1400 audit(1767103103.359:1361): avc: denied { lock } for pid=14801 comm="syz.5.2382" path="socket:[45990]" dev="sockfs" ino=45990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 740.078421][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 740.238756][ T10] usb 2-1: device descriptor read/64, error -71 [ 740.506019][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 740.645027][ T10] usb 2-1: device descriptor read/64, error -71 [ 740.774461][ T10] usb usb2-port1: attempt power cycle [ 741.021889][ T30] audit: type=1400 audit(1767103104.416:1362): avc: denied { relabelto } for pid=14814 comm="syz.0.2387" name="463" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 741.114586][ T30] audit: type=1400 audit(1767103104.416:1363): avc: denied { associate } for pid=14814 comm="syz.0.2387" name="463" dev="tmpfs" ino=2451 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 741.170393][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 742.311545][ T10] usb 2-1: device descriptor read/8, error -71 [ 742.379630][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.392463][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.405712][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.418975][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.432616][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.445579][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.458564][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.471693][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.484747][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 742.497825][T14824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=14824 comm=syz.0.2387 [ 743.113549][T14826] netlink: 'syz.3.2389': attribute type 2 has an invalid length. [ 743.124084][T14826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.259856][ T30] audit: type=1400 audit(1767103106.511:1364): avc: denied { remove_name } for pid=5812 comm="syz-executor" name="file1" dev="tmpfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 743.317598][ T30] audit: type=1400 audit(1767103106.558:1365): avc: denied { rmdir } for pid=5812 comm="syz-executor" name="463" dev="tmpfs" ino=2451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 743.649186][ T7406] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 743.839485][ T7406] usb 6-1: config 0 has no interfaces? [ 743.851735][ T7406] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 743.944913][T14842] [U] á [ 743.980484][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 744.341754][ T10] usb 2-1: config 1 has an invalid interface number: 81 but max is 0 [ 744.349937][ T10] usb 2-1: config 1 has no interface number 0 [ 744.359222][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=78.61 [ 744.369444][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.377508][ T10] usb 2-1: Product: syz [ 744.381673][ T10] usb 2-1: Manufacturer: syz [ 744.386279][ T10] usb 2-1: SerialNumber: syz [ 744.396935][ T10] ttusbir 2-1:1.81: cannot find expected altsetting [ 744.429534][ T7406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.452509][ T7406] usb 6-1: config 0 descriptor?? [ 745.079520][T14853] Invalid ELF header magic: != ELF [ 745.128588][ T30] audit: type=1400 audit(1767103108.186:1366): avc: denied { module_load } for pid=14850 comm="syz.0.2398" path="/465/bus" dev="tmpfs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 746.023192][T14865] libceph: resolve '400' (ret=-3): failed [ 746.412882][ T5928] usb 6-1: USB disconnect, device number 21 [ 746.461090][ T30] audit: type=1400 audit(1767103109.514:1367): avc: denied { map } for pid=14869 comm="syz.0.2402" path="socket:[47132]" dev="sockfs" ino=47132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 746.518215][ T30] audit: type=1400 audit(1767103109.533:1368): avc: denied { read accept } for pid=14869 comm="syz.0.2402" path="socket:[47132]" dev="sockfs" ino=47132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 746.853582][T14863] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 747.934432][T14882] selinux_netlink_send: 2 callbacks suppressed [ 747.934449][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.079989][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.173755][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.716728][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2574 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.746013][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.785782][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.812862][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.844354][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.872237][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 748.880309][ T5928] usb 2-1: USB disconnect, device number 68 [ 748.886608][T14882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=14882 comm=syz.5.2405 [ 749.009409][ T30] audit: type=1400 audit(1767103111.890:1369): avc: denied { mount } for pid=14888 comm="syz.0.2407" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 749.108593][T14889] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2407'. [ 749.168026][ T30] audit: type=1400 audit(1767103111.918:1370): avc: denied { unmount } for pid=14888 comm="syz.0.2407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 749.198992][T14889] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 749.207823][T14889] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 749.391911][ T30] audit: type=1400 audit(1767103112.255:1371): avc: denied { getopt } for pid=14888 comm="syz.0.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 749.562333][T14701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 749.646645][T14701] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 749.656919][T14701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 749.675024][T14701] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 749.700604][T14701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 749.937903][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.956638][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.277736][ T30] audit: type=1400 audit(1767103113.078:1372): avc: denied { ioctl } for pid=14905 comm="syz.3.2412" path="socket:[46816]" dev="sockfs" ino=46816 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 750.281144][T14906] vivid-002: ================= START STATUS ================= [ 750.496999][T14906] vivid-002: Radio HW Seek Mode: Bounded [ 750.507751][T14906] vivid-002: Radio Programmable HW Seek: false [ 750.546792][T14906] vivid-002: RDS Rx I/O Mode: Block I/O [ 750.564969][T14906] vivid-002: Generate RBDS Instead of RDS: false [ 750.586232][T14906] vivid-002: RDS Reception: true [ 750.669933][T14906] vivid-002: RDS Program Type: 0 inactive [ 750.693820][T14906] vivid-002: RDS PS Name: inactive [ 750.712457][T14896] chnl_net:caif_netlink_parms(): no params data found [ 750.724178][T14906] vivid-002: RDS Radio Text: inactive [ 750.792025][T14906] vivid-002: RDS Traffic Announcement: false inactive [ 750.801126][T14906] vivid-002: RDS Traffic Program: false inactive [ 750.836724][T14906] vivid-002: RDS Music: false inactive [ 750.864066][T14906] vivid-002: ================== END STATUS ================== [ 751.229713][T14535] dummy0: left allmulticast mode [ 751.239703][T14535] dummy0: left promiscuous mode [ 751.246742][T14535] bridge0: port 3(dummy0) entered disabled state [ 751.275445][ T30] audit: type=1400 audit(1767103114.013:1373): avc: denied { accept } for pid=14916 comm="syz.1.2413" path="socket:[47433]" dev="sockfs" ino=47433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 751.305562][T14535] bridge_slave_1: left allmulticast mode [ 751.311786][T14535] bridge_slave_1: left promiscuous mode [ 751.328760][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.339219][ T30] audit: type=1400 audit(1767103114.069:1374): avc: denied { name_bind } for pid=14916 comm="syz.1.2413" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 751.381116][T14535] bridge_slave_0: left allmulticast mode [ 751.396103][T14535] bridge_slave_0: left promiscuous mode [ 751.410776][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.892145][ T5139] Bluetooth: hci6: command tx timeout [ 753.953145][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2421'. [ 754.063442][T14535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.129061][ T5139] Bluetooth: hci6: command tx timeout [ 754.143888][T14535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.166691][T14535] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 754.183916][T14535] bond0 (unregistering): Released all slaves [ 754.355485][T14535] tipc: Left network mode [ 754.364666][T14896] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.440664][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.573994][T14896] bridge_slave_0: entered allmulticast mode [ 754.595680][T14896] bridge_slave_0: entered promiscuous mode [ 754.712150][T14896] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.719762][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.727501][T14896] bridge_slave_1: entered allmulticast mode [ 754.793199][T14896] bridge_slave_1: entered promiscuous mode [ 754.955087][T14535] IPVS: stopping backup sync thread 11931 ... [ 755.026733][T14896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.073024][ T30] audit: type=1400 audit(1767103117.558:1375): avc: denied { ioctl } for pid=14979 comm="syz.1.2425" path="socket:[47009]" dev="sockfs" ino=47009 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 755.212012][T14896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.340458][ T5139] Bluetooth: hci6: command tx timeout [ 757.000502][T14896] team0: Port device team_slave_0 added [ 757.116379][T14896] team0: Port device team_slave_1 added [ 757.749674][T14535] hsr_slave_0: left promiscuous mode [ 757.761767][T14535] hsr_slave_1: left promiscuous mode [ 757.774488][T14535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.789041][T14535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.168943][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 758.562558][ T5139] Bluetooth: hci6: command tx timeout [ 758.651997][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.658312][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.252402][T14535] team0 (unregistering): Port device team_slave_1 removed [ 760.417801][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 760.474335][T15011] input: syz0 as /devices/virtual/input/input32 [ 760.526567][T14535] team0 (unregistering): Port device team_slave_0 removed [ 761.138924][T15009] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.146372][T15009] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.122060][T14896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.165697][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.223925][T15023] 9pnet_fd: Insufficient options for proto=fd [ 762.230920][T14896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.244233][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.263625][T14896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.281533][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.388383][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.427743][T15024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.439748][T14896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.451218][T15024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.470599][T15028] FAULT_INJECTION: forcing a failure. [ 762.470599][T15028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.512071][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.5.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.512097][T15028] Tainted: [L]=SOFTLOCKUP [ 762.512102][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.512111][T15028] Call Trace: [ 762.512116][T15028] [ 762.512122][T15028] dump_stack_lvl+0x16c/0x1f0 [ 762.512147][T15028] should_fail_ex+0x512/0x640 [ 762.512172][T15028] _copy_from_user+0x2e/0xd0 [ 762.512195][T15028] move_addr_to_kernel+0x65/0x170 [ 762.512217][T15028] __sys_bind+0x11b/0x260 [ 762.512238][T15028] ? __pfx___sys_bind+0x10/0x10 [ 762.512255][T15028] ? __fget_files+0x20e/0x3c0 [ 762.512283][T15028] ? __pfx_ksys_write+0x10/0x10 [ 762.512307][T15028] __x64_sys_bind+0x72/0xb0 [ 762.512325][T15028] ? lockdep_hardirqs_on+0x7c/0x110 [ 762.512344][T15028] do_syscall_64+0xcd/0xf80 [ 762.512363][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.512379][T15028] RIP: 0033:0x7f572e58f749 [ 762.512392][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.512406][T15028] RSP: 002b:00007f572f351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 762.512430][T15028] RAX: ffffffffffffffda RBX: 00007f572e7e5fa0 RCX: 00007f572e58f749 [ 762.512440][T15028] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 762.512449][T15028] RBP: 00007f572f351090 R08: 0000000000000000 R09: 0000000000000000 [ 762.512458][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.512466][T15028] R13: 00007f572e7e6038 R14: 00007f572e7e5fa0 R15: 00007ffcf3c882d8 [ 762.512489][T15028] [ 762.958743][T14540] vlan2: left promiscuous mode [ 763.180105][T14896] hsr_slave_0: entered promiscuous mode [ 763.339632][T14896] hsr_slave_1: entered promiscuous mode [ 763.758757][T14535] IPVS: stop unused estimator thread 0... [ 763.954987][T15056] libceph: resolve '400' (ret=-3): failed [ 764.143057][T13473] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 764.367527][T13473] usb 2-1: Using ep0 maxpacket: 32 [ 764.377235][T13473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.398979][T13473] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024 [ 764.450860][T13473] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 764.480267][T13473] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.596866][T14896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 764.606413][T13473] usb 2-1: config 0 descriptor?? [ 764.621131][T15052] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 764.622205][T14896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 764.698183][T14896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 764.712191][T13473] hub 2-1:0.0: USB hub found [ 764.741190][T14896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.615754][T13473] hub 2-1:0.0: 1 port detected [ 765.627397][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 765.640892][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 765.646767][T14896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.677158][T15076] bridge2: entered promiscuous mode [ 765.784992][T14896] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.004666][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.011878][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.020795][ T7406] kernel write not supported for file /dsp1 (pid: 7406 comm: kworker/1:13) [ 766.076684][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.083894][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.520231][T14896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.543208][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2456'. [ 766.555233][T13473] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 766.586921][T15091] bridge_slave_0: default FDB implementation only supports local addresses [ 766.844212][T15103] Bluetooth: MGMT ver 1.23 [ 767.090240][T14896] veth0_vlan: entered promiscuous mode [ 767.102504][T14896] veth1_vlan: entered promiscuous mode [ 767.128277][T14896] veth0_macvtap: entered promiscuous mode [ 767.139579][T14896] veth1_macvtap: entered promiscuous mode [ 767.157696][T14896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.177546][T14896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.203332][T13851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.216601][T13851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.230089][T13851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.241853][T13851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.331624][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.343306][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.387421][T14547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.402697][T14547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.424189][T15110] FAULT_INJECTION: forcing a failure. [ 767.424189][T15110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.448873][ T5928] usb 2-1: USB disconnect, device number 69 [ 767.463840][T15110] CPU: 0 UID: 0 PID: 15110 Comm: syz.3.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.463872][T15110] Tainted: [L]=SOFTLOCKUP [ 767.463877][T15110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 767.463887][T15110] Call Trace: [ 767.463893][T15110] [ 767.463899][T15110] dump_stack_lvl+0x16c/0x1f0 [ 767.463927][T15110] should_fail_ex+0x512/0x640 [ 767.463957][T15110] should_fail_alloc_page+0xe7/0x130 [ 767.463981][T15110] prepare_alloc_pages+0x401/0x670 [ 767.464009][T15110] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 767.464030][T15110] ? process_measurement+0x1e6/0x22d0 [ 767.464056][T15110] ? __lock_acquire+0x436/0x2890 [ 767.464078][T15110] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 767.464096][T15110] ? __lock_acquire+0x436/0x2890 [ 767.464127][T15110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.464148][T15110] ? policy_nodemask+0xea/0x4e0 [ 767.464172][T15110] alloc_pages_mpol+0x1fb/0x550 [ 767.464195][T15110] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 767.464223][T15110] alloc_pages_noprof+0x131/0x390 [ 767.464245][T15110] __pud_alloc+0x3b/0x760 [ 767.464268][T15110] __handle_mm_fault+0x1405/0x2bb0 [ 767.464306][T15110] ? __pfx___handle_mm_fault+0x10/0x10 [ 767.464345][T15110] ? find_vma+0xbf/0x140 [ 767.464364][T15110] ? __pfx_find_vma+0x10/0x10 [ 767.464385][T15110] handle_mm_fault+0x3fe/0xad0 [ 767.464414][T15110] do_user_addr_fault+0x7a6/0x1370 [ 767.464439][T15110] ? rcu_is_watching+0x12/0xc0 [ 767.464458][T15110] exc_page_fault+0x64/0xc0 [ 767.464479][T15110] asm_exc_page_fault+0x26/0x30 [ 767.464496][T15110] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 767.464522][T15110] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 767.464538][T15110] RSP: 0018:ffffc90002eb7d78 EFLAGS: 00050246 [ 767.464552][T15110] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000040 [ 767.464562][T15110] RDX: fffff520005d6fc8 RSI: 0000200000000040 RDI: ffffc90002eb7e00 [ 767.464572][T15110] RBP: 0000000000000040 R08: 0000000000000001 R09: fffff520005d6fc7 [ 767.464582][T15110] R10: ffffc90002eb7e3f R11: ffff8880289f8b30 R12: 0000000000000000 [ 767.464592][T15110] R13: ffffc90002eb7e00 R14: ffff8880311bd500 R15: ffff888059285640 [ 767.464616][T15110] _copy_from_user+0x98/0xd0 [ 767.464642][T15110] move_addr_to_kernel+0x65/0x170 [ 767.464666][T15110] __sys_bind+0x11b/0x260 [ 767.464689][T15110] ? __pfx___sys_bind+0x10/0x10 [ 767.464710][T15110] ? __fget_files+0x20e/0x3c0 [ 767.464742][T15110] ? __pfx_ksys_write+0x10/0x10 [ 767.464769][T15110] __x64_sys_bind+0x72/0xb0 [ 767.464790][T15110] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.464809][T15110] do_syscall_64+0xcd/0xf80 [ 767.464832][T15110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.464847][T15110] RIP: 0033:0x7f78ac58f749 [ 767.464861][T15110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.464876][T15110] RSP: 002b:00007f78ad44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 767.464889][T15110] RAX: ffffffffffffffda RBX: 00007f78ac7e5fa0 RCX: 00007f78ac58f749 [ 767.464899][T15110] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 767.464909][T15110] RBP: 00007f78ad44e090 R08: 0000000000000000 R09: 0000000000000000 [ 767.464918][T15110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.464927][T15110] R13: 00007f78ac7e6038 R14: 00007f78ac7e5fa0 R15: 00007ffe75b16a38 [ 767.464951][T15110] [ 768.071743][ T30] audit: type=1400 audit(1767103129.578:1376): avc: denied { write } for pid=15111 comm="syz.3.2459" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 768.987262][ T30] audit: type=1400 audit(1767103130.551:1377): avc: denied { ioctl } for pid=15115 comm="syz.4.2408" path="socket:[48560]" dev="sockfs" ino=48560 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 769.883262][T15142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.939267][T15142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.145352][ T10] kernel write not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 770.339246][T15153] FAULT_INJECTION: forcing a failure. [ 770.339246][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.353975][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.3.2470 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.354003][T15153] Tainted: [L]=SOFTLOCKUP [ 770.354012][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.354022][T15153] Call Trace: [ 770.354027][T15153] [ 770.354033][T15153] dump_stack_lvl+0x16c/0x1f0 [ 770.354056][T15153] should_fail_ex+0x512/0x640 [ 770.354083][T15153] _copy_from_user+0x2e/0xd0 [ 770.354113][T15153] memdup_user+0x6b/0xe0 [ 770.354129][T15153] strndup_user+0x78/0xe0 [ 770.354145][T15153] __x64_sys_mount+0x136/0x310 [ 770.354163][T15153] ? __pfx___x64_sys_mount+0x10/0x10 [ 770.354184][T15153] do_syscall_64+0xcd/0xf80 [ 770.354206][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.354221][T15153] RIP: 0033:0x7f78ac58f749 [ 770.354236][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.354251][T15153] RSP: 002b:00007f78ad44e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 770.354267][T15153] RAX: ffffffffffffffda RBX: 00007f78ac7e5fa0 RCX: 00007f78ac58f749 [ 770.354277][T15153] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 770.354286][T15153] RBP: 00007f78ad44e090 R08: 0000200000000400 R09: 0000000000000000 [ 770.354296][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.354305][T15153] R13: 00007f78ac7e6038 R14: 00007f78ac7e5fa0 R15: 00007ffe75b16a38 [ 770.354328][T15153] [ 771.155995][ T5885] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 771.609485][ T7668] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 771.672579][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 771.681898][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.690288][ T5885] usb 5-1: Product: syz [ 771.695940][ T5885] usb 5-1: Manufacturer: syz [ 771.700629][ T5885] usb 5-1: SerialNumber: syz [ 771.777579][ T7668] usb 4-1: config 0 has no interfaces? [ 771.783328][ T7668] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 771.792406][ T7668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.802257][ T7668] usb 4-1: config 0 descriptor?? [ 771.992329][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 772.005248][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 772.016007][ T5885] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 772.113181][T15169] Invalid ELF header magic: != ELF [ 772.417508][ T5139] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 772.427078][ T5139] Bluetooth: hci6: Injecting HCI hardware error event [ 772.440770][T14701] Bluetooth: hci6: hardware error 0x00 [ 772.927566][ T5885] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 772.945374][ T5885] usb 5-1: USB disconnect, device number 16 [ 774.968493][T15177] Invalid ELF header magic: != ELF [ 775.045615][ T5885] usb 4-1: USB disconnect, device number 72 [ 775.165036][T14701] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 775.413664][T15188] Invalid ELF header magic: != ELF [ 775.949640][T15189] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.955762][T15189] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 776.246142][T15189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 776.252061][T15189] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 776.261311][T15189] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 776.267257][T15189] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 777.438470][ T7668] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 777.613189][ T7668] usb 5-1: Using ep0 maxpacket: 32 [ 777.794340][ T7668] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 777.832118][ T7668] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 777.856706][ T7668] usb 5-1: config 0 has no interface number 0 [ 777.875995][ T7668] usb 5-1: config 0 interface 184 has no altsetting 0 [ 778.124509][T15210] openvswitch: netlink: IP tunnel dst address not specified [ 778.137506][T15210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2486'. [ 778.201234][ T7668] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 778.211788][ T7668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.219786][ T7668] usb 5-1: Product: syz [ 778.267513][ T7668] usb 5-1: Manufacturer: syz [ 778.272145][ T7668] usb 5-1: SerialNumber: syz [ 778.300311][ T7668] usb 5-1: config 0 descriptor?? [ 778.309674][ T7668] smsc75xx v1.0.0 [ 778.526638][ T7668] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 778.617004][ T7668] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 778.642433][ T7668] usb 5-1: USB disconnect, device number 17 [ 779.249806][T15237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'. [ 779.783293][ T5885] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 780.076269][ T5885] usb 5-1: config 0 has no interfaces? [ 780.082119][ T5885] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 780.091728][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.472909][ T5885] usb 5-1: config 0 descriptor?? [ 780.957802][T15255] FAULT_INJECTION: forcing a failure. [ 780.957802][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.018943][T15255] CPU: 0 UID: 0 PID: 15255 Comm: syz.0.2499 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.018974][T15255] Tainted: [L]=SOFTLOCKUP [ 781.018979][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 781.018989][T15255] Call Trace: [ 781.018995][T15255] [ 781.019002][T15255] dump_stack_lvl+0x16c/0x1f0 [ 781.019028][T15255] should_fail_ex+0x512/0x640 [ 781.019055][T15255] _copy_from_user+0x2e/0xd0 [ 781.019079][T15255] copy_mount_options+0x76/0x190 [ 781.019108][T15255] __x64_sys_mount+0x1ab/0x310 [ 781.019126][T15255] ? __pfx___x64_sys_mount+0x10/0x10 [ 781.019151][T15255] do_syscall_64+0xcd/0xf80 [ 781.019175][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.019192][T15255] RIP: 0033:0x7fa6b198f749 [ 781.019206][T15255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.019222][T15255] RSP: 002b:00007fa6b2874038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 781.019239][T15255] RAX: ffffffffffffffda RBX: 00007fa6b1be5fa0 RCX: 00007fa6b198f749 [ 781.019250][T15255] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 781.019260][T15255] RBP: 00007fa6b2874090 R08: 0000200000000400 R09: 0000000000000000 [ 781.019270][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.019280][T15255] R13: 00007fa6b1be6038 R14: 00007fa6b1be5fa0 R15: 00007fff9a6389b8 [ 781.019303][T15255] [ 781.208410][ T7668] kernel write not supported for file /dsp1 (pid: 7668 comm: kworker/0:10) [ 781.483229][ T5885] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 782.328629][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.390281][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 782.402103][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 782.413268][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 782.424178][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 782.439516][T15269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2503'. [ 782.439686][ T5885] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 782.464925][ T7406] usb 5-1: USB disconnect, device number 18 [ 782.541440][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 782.541497][ T7668] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 782.549609][ T5885] usb 4-1: Product: syz [ 782.595538][ T5885] usb 4-1: Manufacturer: syz [ 782.600570][ T5885] usb 4-1: SerialNumber: syz [ 782.619742][ T5885] usb 4-1: config 0 descriptor?? [ 782.621754][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.635549][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.720858][ T7668] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 782.740437][ T7668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.769215][ T7668] usb 2-1: config 0 descriptor?? [ 782.785382][ T7668] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 782.836185][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2505'. [ 782.848641][ T5885] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 782.865396][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2505'. [ 782.875811][ T5885] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 783.136486][ T5885] radio-si470x 4-1:0.0: software version 0, hardware version 37 [ 783.157611][ T5885] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 783.177795][T15284] Invalid ELF header magic: != ELF [ 783.309095][ T5885] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 783.698771][ T5885] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 783.770157][ T5885] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 783.819700][ T5885] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 783.898107][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 783.931640][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2502'. [ 783.960806][ T5885] usb 4-1: USB disconnect, device number 73 [ 784.063035][T14547] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.073298][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 784.084604][T14547] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.093959][T14547] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.124483][T14547] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.128292][T15266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2502'. [ 784.269326][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2509'. [ 784.355188][ T7668] usb 2-1: USB disconnect, device number 70 [ 786.164042][T15307] FAULT_INJECTION: forcing a failure. [ 786.164042][T15307] name failslab, interval 1, probability 0, space 0, times 0 [ 786.197920][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.5.2514 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.197952][T15307] Tainted: [L]=SOFTLOCKUP [ 786.197959][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.197968][T15307] Call Trace: [ 786.197975][T15307] [ 786.197982][T15307] dump_stack_lvl+0x16c/0x1f0 [ 786.198017][T15307] should_fail_ex+0x512/0x640 [ 786.198044][T15307] ? kmem_cache_alloc_noprof+0x62/0x770 [ 786.198066][T15307] should_failslab+0xc2/0x120 [ 786.198090][T15307] kmem_cache_alloc_noprof+0x83/0x770 [ 786.198107][T15307] ? getname_flags.part.0+0x4c/0x550 [ 786.198131][T15307] ? getname_flags.part.0+0x4c/0x550 [ 786.198147][T15307] getname_flags.part.0+0x4c/0x550 [ 786.198167][T15307] getname_flags+0x93/0xf0 [ 786.198188][T15307] user_path_at+0x24/0x60 [ 786.198209][T15307] __x64_sys_mount+0x1fb/0x310 [ 786.198228][T15307] ? __pfx___x64_sys_mount+0x10/0x10 [ 786.198250][T15307] do_syscall_64+0xcd/0xf80 [ 786.198274][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.198292][T15307] RIP: 0033:0x7f572e58f749 [ 786.198307][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.198321][T15307] RSP: 002b:00007f572f351038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 786.198336][T15307] RAX: ffffffffffffffda RBX: 00007f572e7e5fa0 RCX: 00007f572e58f749 [ 786.198345][T15307] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 786.198354][T15307] RBP: 00007f572f351090 R08: 0000200000000400 R09: 0000000000000000 [ 786.198362][T15307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.198371][T15307] R13: 00007f572e7e6038 R14: 00007f572e7e5fa0 R15: 00007ffcf3c882d8 [ 786.198390][T15307] [ 786.640800][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2517'. [ 786.696624][T15314] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2517'. [ 786.717434][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2517'. [ 786.862655][ T30] audit: type=1400 audit(1767103147.229:1378): avc: denied { shutdown } for pid=15313 comm="syz.5.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 787.469875][ T5885] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 787.632205][T15330] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 787.697325][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.926975][T15337] sp0: Synchronizing with TNC [ 787.933105][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 787.994736][T15337] [U] è` [ 788.007160][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 788.084775][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 788.168802][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 788.279822][ T5885] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 788.339643][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 788.415083][ T5885] usb 4-1: Product: syz [ 788.447129][ T5885] usb 4-1: Manufacturer: syz [ 788.483860][ T5885] usb 4-1: SerialNumber: syz [ 788.579612][ T5885] usb 4-1: config 0 descriptor?? [ 788.918352][ T30] audit: type=1400 audit(1767103149.222:1379): avc: denied { append } for pid=15344 comm="syz.4.2527" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 789.439283][T15349] Invalid ELF header magic: != ELF [ 789.851791][ T5885] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 789.908729][ T5885] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 789.945380][ T5885] usb 4-1: USB disconnect, device number 74 [ 789.981648][T15353] FAULT_INJECTION: forcing a failure. [ 789.981648][T15353] name failslab, interval 1, probability 0, space 0, times 0 [ 790.016765][T15353] CPU: 1 UID: 0 PID: 15353 Comm: syz.0.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.016798][T15353] Tainted: [L]=SOFTLOCKUP [ 790.016803][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.016813][T15353] Call Trace: [ 790.016818][T15353] [ 790.016826][T15353] dump_stack_lvl+0x16c/0x1f0 [ 790.016852][T15353] should_fail_ex+0x512/0x640 [ 790.016876][T15353] ? kmem_cache_alloc_noprof+0x62/0x770 [ 790.016896][T15353] should_failslab+0xc2/0x120 [ 790.016916][T15353] kmem_cache_alloc_noprof+0x83/0x770 [ 790.016934][T15353] ? ptlock_alloc+0x1f/0x70 [ 790.016962][T15353] ? ptlock_alloc+0x1f/0x70 [ 790.016984][T15353] ptlock_alloc+0x1f/0x70 [ 790.017006][T15353] pte_alloc_one+0x84/0x3d0 [ 790.017031][T15353] __pte_alloc+0x6d/0x3f0 [ 790.017050][T15353] ? __pfx___pte_alloc+0x10/0x10 [ 790.017070][T15353] ? do_raw_spin_lock+0x12c/0x2b0 [ 790.017092][T15353] ? find_held_lock+0x2b/0x80 [ 790.017116][T15353] do_anonymous_page+0x1092/0x2190 [ 790.017140][T15353] ? do_raw_spin_unlock+0x172/0x230 [ 790.017169][T15353] ? _raw_spin_unlock+0x28/0x50 [ 790.017186][T15353] ? __pmd_alloc+0x6aa/0x9c0 [ 790.017209][T15353] __handle_mm_fault+0x1ecf/0x2bb0 [ 790.017239][T15353] ? __pfx___handle_mm_fault+0x10/0x10 [ 790.017276][T15353] ? find_vma+0xbf/0x140 [ 790.017295][T15353] ? __pfx_find_vma+0x10/0x10 [ 790.017318][T15353] handle_mm_fault+0x3fe/0xad0 [ 790.017346][T15353] do_user_addr_fault+0x7a6/0x1370 [ 790.017370][T15353] ? rcu_is_watching+0x12/0xc0 [ 790.017389][T15353] exc_page_fault+0x64/0xc0 [ 790.017409][T15353] asm_exc_page_fault+0x26/0x30 [ 790.017426][T15353] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 790.017450][T15353] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 790.017466][T15353] RSP: 0018:ffffc90005d8fd78 EFLAGS: 00050246 [ 790.017480][T15353] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000040 [ 790.017491][T15353] RDX: fffff52000bb1fc8 RSI: 0000200000000040 RDI: ffffc90005d8fe00 [ 790.017501][T15353] RBP: 0000000000000040 R08: 0000000000000001 R09: fffff52000bb1fc7 [ 790.017509][T15353] R10: ffffc90005d8fe3f R11: ffff888042c38b30 R12: 0000000000000000 [ 790.017520][T15353] R13: ffffc90005d8fe00 R14: ffff888044efee00 R15: ffff888075e58b80 [ 790.017543][T15353] _copy_from_user+0x98/0xd0 [ 790.017568][T15353] move_addr_to_kernel+0x65/0x170 [ 790.017592][T15353] __sys_bind+0x11b/0x260 [ 790.017613][T15353] ? __pfx___sys_bind+0x10/0x10 [ 790.017632][T15353] ? __fget_files+0x20e/0x3c0 [ 790.017664][T15353] ? __pfx_ksys_write+0x10/0x10 [ 790.017689][T15353] __x64_sys_bind+0x72/0xb0 [ 790.017708][T15353] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.017728][T15353] do_syscall_64+0xcd/0xf80 [ 790.017750][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.017765][T15353] RIP: 0033:0x7fa6b198f749 [ 790.017777][T15353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.017792][T15353] RSP: 002b:00007fa6b2874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 790.017806][T15353] RAX: ffffffffffffffda RBX: 00007fa6b1be5fa0 RCX: 00007fa6b198f749 [ 790.017816][T15353] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000004 [ 790.017825][T15353] RBP: 00007fa6b2874090 R08: 0000000000000000 R09: 0000000000000000 [ 790.017834][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.017842][T15353] R13: 00007fa6b1be6038 R14: 00007fa6b1be5fa0 R15: 00007fff9a6389b8 [ 790.017866][T15353] [ 790.400717][T15356] selinux_netlink_send: 3 callbacks suppressed [ 790.400734][T15356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15356 comm=syz.4.2527 [ 790.420141][T15356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15356 comm=syz.4.2527 [ 791.861734][T15364] block nbd0: NBD_DISCONNECT [ 792.173980][T14701] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 792.463702][T15370] netlink: 'syz.5.2532': attribute type 1 has an invalid length. [ 792.826749][T15370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.186568][T15382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.224774][T15382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.447471][T15374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 793.926467][T15374] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 793.960941][T15374] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 794.046396][T15375] gretap2: entered promiscuous mode [ 794.090167][T15375] bond2: (slave gretap2): making interface the new active one [ 794.101696][T15375] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 794.145799][T15376] macvlan2: entered promiscuous mode [ 794.183214][T15376] macvlan2: entered allmulticast mode [ 794.189946][T15376] bond2: entered promiscuous mode [ 794.291334][T15376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 794.376074][T15376] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 794.412877][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.701330][T15402] Invalid ELF header magic: != ELF [ 794.709296][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.724548][T15376] bond2: left promiscuous mode [ 796.292729][T13647] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 796.455909][T15418] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2545'. [ 797.483148][T13647] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.495177][T13647] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 797.506764][T13647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 797.639408][T13647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 797.658598][T13647] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 797.685871][T13647] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 797.698469][T13647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 798.075074][T13647] usb 2-1: Product: syz [ 798.080589][T13647] usb 2-1: Manufacturer: syz [ 798.085219][T13647] usb 2-1: SerialNumber: syz [ 798.099633][ T30] audit: type=1400 audit(1767103157.809:1380): avc: denied { watch } for pid=15428 comm="syz.4.2547" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 798.160126][T13647] usb 2-1: config 0 descriptor?? [ 798.391041][T13647] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 798.399408][T13647] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 798.603117][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.756616][T15441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 799.077416][ T30] audit: type=1400 audit(1767103158.463:1381): avc: denied { create } for pid=15436 comm="syz.5.2550" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 799.098186][T13647] radio-si470x 2-1:0.0: software version 0, hardware version 37 [ 799.164160][T13647] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 799.178968][ T30] audit: type=1400 audit(1767103158.473:1382): avc: denied { link } for pid=15436 comm="syz.5.2550" name="file1" dev="ramfs" ino=50137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 799.208578][T13647] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 799.216963][T13647] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 799.224477][ T30] audit: type=1400 audit(1767103158.491:1383): avc: denied { rename } for pid=15436 comm="syz.5.2550" name="file1" dev="overlay" ino=50137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 799.250443][T13647] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 799.259272][ T30] audit: type=1400 audit(1767103158.491:1384): avc: denied { unlink } for pid=15436 comm="syz.5.2550" name="file0" dev="overlay" ino=50137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 799.259320][ T30] audit: type=1400 audit(1767103158.510:1385): avc: denied { setattr } for pid=15436 comm="syz.5.2550" name="#20" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 799.259364][ T30] audit: type=1400 audit(1767103158.800:1386): avc: denied { read write } for pid=14896 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.531140][T13647] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 799.555215][T13647] usb 2-1: USB disconnect, device number 71 [ 799.700483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.800235][ T30] audit: type=1400 audit(1767103158.800:1387): avc: denied { open } for pid=14896 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 800.842334][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.850468][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.850612][ T30] audit: type=1400 audit(1767103158.800:1388): avc: denied { ioctl } for pid=14896 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 800.886560][ T30] audit: type=1400 audit(1767103158.838:1389): avc: denied { create } for pid=15440 comm="syz.0.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 801.028902][T15456] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 801.074402][T15456] bond3: entered promiscuous mode [ 801.089228][T15456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.202871][T15460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 801.223611][T15460] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 801.244989][T15460] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 801.267488][T15460] bond3: (slave vcan1): making interface the new active one [ 801.282537][T15460] vcan1: entered promiscuous mode [ 801.289084][T15460] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 801.378565][T13647] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 801.645592][T13647] usb 4-1: Using ep0 maxpacket: 32 [ 801.653258][T13647] usb 4-1: config 0 has an invalid interface number: 71 but max is 0 [ 801.661715][T13647] usb 4-1: config 0 has no interface number 0 [ 801.762175][T15482] openvswitch: netlink: IP tunnel dst address not specified [ 801.779209][T15482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2560'. [ 801.823900][T13647] usb 4-1: config 0 interface 71 has no altsetting 0 [ 801.874536][T13647] usb 4-1: New USB device found, idVendor=185b, idProduct=d001, bcdDevice=dc.ab [ 801.939742][T15484] openvswitch: netlink: IP tunnel dst address not specified [ 801.959595][T15484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2561'. [ 802.001389][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.012006][T13647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.020403][T13647] usb 4-1: Product: syz [ 802.024868][T13647] usb 4-1: Manufacturer: syz [ 802.034026][T13647] usb 4-1: SerialNumber: syz [ 802.164979][T13647] usb 4-1: config 0 descriptor?? [ 802.199735][T13647] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in warm state. [ 802.242388][T13647] dvb-usb: bulk message failed: -22 (3/0) [ 802.313250][T13647] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 802.332492][T13647] dvbdev: DVB: registering new adapter (Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)) [ 802.353169][T13647] usb 4-1: media controller created [ 802.377056][T13647] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 802.788135][T13647] dvb-usb: bulk message failed: -22 (6/0) [ 802.809220][T13647] dvb-usb: no frontend was attached by 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' [ 802.842982][T13647] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input33 [ 802.970640][T13647] dvb-usb: schedule remote query interval to 150 msecs. [ 803.121244][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.146061][T13647] dvb-usb: bulk message failed: -22 (3/0) [ 803.313302][T13473] dvb-usb: bulk message failed: -22 (1/0) [ 803.319240][T13473] dvb-usb: error while querying for an remote control event. [ 803.588893][T13647] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb) successfully initialized and connected. [ 803.675294][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 803.675327][ T30] audit: type=1400 audit(1767103163.019:1439): avc: denied { create } for pid=15493 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 803.759998][T15499] Invalid ELF header magic: != ELF [ 804.842392][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.920834][T13647] usb 4-1: USB disconnect, device number 75 [ 805.547962][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.569081][ T30] audit: type=1400 audit(1767103163.019:1440): avc: denied { bind } for pid=15493 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 805.601337][ T30] audit: type=1400 audit(1767103163.047:1441): avc: denied { write } for pid=15493 comm="syz.1.2565" path="socket:[50670]" dev="sockfs" ino=50670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 805.638461][T13647] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1 successfully deinitialized and disconnected. [ 805.685595][ T30] audit: type=1400 audit(1767103163.084:1442): avc: denied { sys_module } for pid=15493 comm="syz.1.2565" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 805.710068][T15505] pimreg: entered allmulticast mode [ 805.792165][T15506] sp0: Synchronizing with TNC [ 805.833561][T15506] [U] è` [ 805.861584][ T30] audit: type=1400 audit(1767103163.084:1443): avc: denied { module_load } for pid=15493 comm="syz.1.2565" path="/509/bus" dev="tmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 805.953127][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.236505][ T30] audit: type=1400 audit(1767103165.423:1444): avc: denied { read write } for pid=15508 comm="syz.1.2569" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 806.892179][ T30] audit: type=1400 audit(1767103165.451:1445): avc: denied { open } for pid=15508 comm="syz.1.2569" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 807.056148][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.132397][T15504] pimreg: left allmulticast mode [ 807.141149][ T30] audit: type=1400 audit(1767103165.657:1446): avc: denied { create } for pid=15508 comm="syz.1.2569" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 807.187700][ T30] audit: type=1400 audit(1767103165.666:1447): avc: denied { ioctl } for pid=15508 comm="syz.1.2569" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 807.311643][ T5823] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 807.371805][ T30] audit: type=1400 audit(1767103166.021:1448): avc: denied { create } for pid=15511 comm="syz.4.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 807.500978][T15523] netlink: 'syz.0.2573': attribute type 16 has an invalid length. [ 807.508961][T15523] netlink: 'syz.0.2573': attribute type 2 has an invalid length. [ 807.516920][T15523] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.2573'. [ 807.922398][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.931715][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 807.955669][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.018989][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.048118][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.086463][ T5823] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 808.111701][ T5823] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 808.128958][ T5823] usb 5-1: Manufacturer: syz [ 808.165033][ T5823] usb 5-1: config 0 descriptor?? [ 808.170618][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.409621][T15535] netlink: 'syz.3.2578': attribute type 1 has an invalid length. [ 808.638527][T15515] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 808.790602][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.799246][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.846955][T15535] bond3: entered promiscuous mode [ 808.866117][T15535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 809.282112][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.385430][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 809.401909][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 809.401925][ T30] audit: type=1400 audit(1767103168.379:1462): avc: denied { read } for pid=15545 comm="syz.3.2580" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 809.407128][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 809.493328][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.501928][ T5823] usb 5-1: USB disconnect, device number 19 [ 809.502087][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.536672][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.552624][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.699312][ T30] audit: type=1400 audit(1767103168.659:1463): avc: denied { read } for pid=15557 comm="syz.0.2583" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 809.725075][ T30] audit: type=1400 audit(1767103168.659:1464): avc: denied { open } for pid=15557 comm="syz.0.2583" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 809.775640][ T30] audit: type=1400 audit(1767103168.659:1465): avc: denied { ioctl } for pid=15557 comm="syz.0.2583" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 810.248352][ T30] audit: type=1400 audit(1767103169.089:1466): avc: denied { name_bind } for pid=15567 comm="syz.5.2587" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 810.401967][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.600851][ T30] audit: type=1400 audit(1767103169.089:1467): avc: denied { node_bind } for pid=15567 comm="syz.5.2587" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 810.764793][ T5885] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 811.256488][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 811.256596][ T30] audit: type=1400 audit(1767103170.100:1468): avc: denied { append } for pid=15580 comm="syz.5.2590" name="vcsa3" dev="devtmpfs" ino=3100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 811.538800][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.551139][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.595011][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024 [ 811.633243][ T5885] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 811.645022][ T30] audit: type=1400 audit(1767103170.483:1469): avc: denied { create } for pid=15583 comm="syz.4.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 811.686290][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.700742][ T5885] usb 4-1: config 0 descriptor?? [ 811.728622][T15575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 811.738454][ T5885] hub 4-1:0.0: USB hub found [ 811.866852][ T30] audit: type=1400 audit(1767103170.680:1470): avc: denied { create } for pid=15595 comm="syz.0.2595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 812.015926][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.039860][ T6324] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 812.060207][ T30] audit: type=1400 audit(1767103170.764:1471): avc: denied { ioctl } for pid=15595 comm="syz.0.2595" path="socket:[50968]" dev="sockfs" ino=50968 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 812.307895][ T5885] hub 4-1:0.0: 1 port detected [ 812.385717][ T6324] usb 5-1: Using ep0 maxpacket: 16 [ 812.410468][ T6324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.434030][ T6324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.554404][ T6324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 812.631958][ T6324] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 812.656915][ T6324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.880905][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.918735][ T6324] usb 5-1: config 0 descriptor?? [ 813.330762][T15593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.442130][T15593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.495993][T13647] usb 4-1: USB disconnect, device number 76 [ 813.518080][ T5885] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 813.998759][T15617] sp0: Synchronizing with TNC [ 814.003753][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.248248][T15619] [U] è` [ 814.993651][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 814.993668][ T30] audit: type=1400 audit(1767103173.570:1478): avc: denied { setopt } for pid=15622 comm="syz.0.2602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 815.323014][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.664985][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.687808][ T6324] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 815.744342][ T6324] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 815.899624][ T6324] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 815.918470][T15624] random: crng reseeded on system resumption [ 815.936194][ T30] audit: type=1400 audit(1767103174.477:1479): avc: denied { read write } for pid=15592 comm="syz.4.2594" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 816.184178][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.268997][ T30] audit: type=1400 audit(1767103174.477:1480): avc: denied { ioctl open } for pid=15592 comm="syz.4.2594" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 816.293760][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.328162][T15624] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2594'. [ 816.337576][ T30] audit: type=1400 audit(1767103174.693:1481): avc: denied { ioctl } for pid=15592 comm="syz.4.2594" path="socket:[51459]" dev="sockfs" ino=51459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 816.456258][T15624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.469732][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.859743][T15646] openvswitch: netlink: IP tunnel dst address not specified [ 816.868698][T15624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.878106][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.967747][T15646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2607'. [ 816.989906][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.119571][ T30] audit: type=1400 audit(1767103175.600:1482): avc: denied { create } for pid=15641 comm="syz.3.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 817.357183][ T5885] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 817.903579][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.913906][ T5885] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 817.929961][ T5885] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 817.941593][ T5885] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 817.960217][ T6324] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 818.110948][ T6324] usb 5-1: device descriptor read/64, error -32 [ 818.175725][ T30] audit: type=1400 audit(1767103176.591:1483): avc: denied { bind } for pid=15655 comm="syz.5.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 818.200665][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.445913][T15662] sp0: Synchronizing with TNC [ 818.476505][T15662] [U] è` [ 818.943446][T13647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.028909][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.156206][ T7406] usb 5-1: USB disconnect, device number 20 [ 819.188696][ T30] audit: type=1400 audit(1767103177.527:1484): avc: denied { ioctl } for pid=15664 comm="syz.5.2614" path="socket:[52251]" dev="sockfs" ino=52251 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 819.215034][ T30] audit: type=1400 audit(1767103177.527:1485): avc: denied { bind } for pid=15664 comm="syz.5.2614" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 819.242703][ T30] audit: type=1400 audit(1767103177.527:1486): avc: denied { name_bind } for pid=15664 comm="syz.5.2614" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 819.264956][ T30] audit: type=1400 audit(1767103177.527:1487): avc: denied { node_bind } for pid=15664 comm="syz.5.2614" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 819.432021][T15675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.451492][T15675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.044208][ T7406] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 820.140543][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.259401][ T7406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.275903][ T7406] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 820.288011][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 820.301063][ T5885] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 820.321299][ T7406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 820.374279][T15687] Invalid ELF header magic: != ELF [ 820.437713][ T7406] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 820.493324][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 820.543562][ T5885] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 820.595024][ T7406] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 820.636813][ T5885] usb 2-1: config 1 has no interface number 1 [ 820.678713][ T7406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 820.713549][ T5885] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 820.763838][ T7406] usb 5-1: Product: syz [ 820.788021][ T7406] usb 5-1: Manufacturer: syz [ 820.815237][ T5885] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 820.830578][ T7406] usb 5-1: SerialNumber: syz [ 820.919065][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.931319][ T7406] usb 5-1: config 0 descriptor?? [ 820.992891][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.054580][ T5885] usb 2-1: Product: syz [ 821.084353][ T5885] usb 2-1: Manufacturer: syz [ 821.107112][ T5885] usb 2-1: SerialNumber: syz [ 821.185923][ T7406] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 821.210673][ T7406] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 821.237654][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 821.237669][ T30] audit: type=1400 audit(1767103179.454:1490): avc: denied { execute } for pid=15689 comm="syz.5.2622" name="file1" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 821.606318][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.641351][ T7406] radio-si470x 5-1:0.0: software version 0, hardware version 37 [ 821.679651][ T7406] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 821.703197][ T30] audit: type=1400 audit(1767103179.454:1491): avc: denied { execute_no_trans } for pid=15689 comm="syz.5.2622" path="/157/file1" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 821.730478][ T30] audit: type=1400 audit(1767103179.454:1492): avc: denied { ioctl } for pid=15692 comm="syz.0.2623" path="socket:[51544]" dev="sockfs" ino=51544 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 821.831890][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.845275][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.856379][ T7406] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 821.864987][ T7406] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 821.872626][T15704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 821.880754][ T7406] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 821.896180][ T7406] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 821.929049][ T5885] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 821.945596][ T7406] usb 5-1: USB disconnect, device number 21 [ 822.193263][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.733771][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.995322][ T30] audit: type=1400 audit(1767103181.091:1493): avc: denied { ioctl } for pid=15683 comm="syz.1.2620" path="socket:[51572]" dev="sockfs" ino=51572 ioctlcmd=0xaf14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 823.213638][ T5885] usb 2-1: current rate 11207426 is different from the runtime rate 9338507 [ 823.818063][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.905263][ T5885] usb 2-1: USB disconnect, device number 72 [ 823.936049][ T30] audit: type=1400 audit(1767103181.979:1494): avc: denied { read write } for pid=15720 comm="syz.0.2629" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 824.068521][ T30] audit: type=1400 audit(1767103182.101:1495): avc: denied { read write } for pid=15723 comm="syz.5.2631" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 824.120776][ T30] audit: type=1400 audit(1767103182.120:1496): avc: denied { open } for pid=15723 comm="syz.5.2631" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 824.145248][ T30] audit: type=1400 audit(1767103182.129:1497): avc: denied { ioctl } for pid=15723 comm="syz.5.2631" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 824.241804][T15727] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2629'. [ 824.389764][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 824.407912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.641136][ T5885] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 824.855712][ T5885] usb 6-1: Invalid ep0 maxpacket: 32 [ 824.918444][T15738] Invalid ELF header magic: != ELF [ 824.930182][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.004825][ T5885] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 825.047834][ T5823] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 825.483057][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.491724][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 825.518809][ T5885] usb 6-1: Invalid ep0 maxpacket: 32 [ 825.685950][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.714864][ T5885] usb usb6-port1: attempt power cycle [ 825.779663][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59312, setting to 1024 [ 825.820634][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 825.845325][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.909003][ T5823] usb 2-1: config 0 descriptor?? [ 825.930649][T15732] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 825.956737][ T5823] hub 2-1:0.0: USB hub found [ 826.052642][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.138041][ T5885] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 826.171985][ T5885] usb 6-1: Invalid ep0 maxpacket: 32 [ 826.192639][ T5823] hub 2-1:0.0: 1 port detected [ 826.218573][T15745] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 826.291312][ T30] audit: type=1400 audit(1767103184.177:1498): avc: denied { read write } for pid=15744 comm="syz.0.2637" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 826.320809][ T5885] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 826.330265][ T30] audit: type=1400 audit(1767103184.177:1499): avc: denied { open } for pid=15744 comm="syz.0.2637" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 826.383477][ T5885] usb 6-1: Invalid ep0 maxpacket: 32 [ 826.384570][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.565514][ T5885] usb usb6-port1: unable to enumerate USB device [ 826.912586][ T5823] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 826.925996][ T5823] usb 2-1: USB disconnect, device number 73 [ 826.932349][T14535] usb 2-1: Failed to suspend device, error -71 [ 827.443079][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.493755][ T30] audit: type=1400 audit(1767103185.300:1500): avc: denied { create } for pid=15757 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 827.848318][ T30] audit: type=1400 audit(1767103185.590:1501): avc: denied { ioctl } for pid=15755 comm="syz.0.2640" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52417 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 827.959580][T15769] openvswitch: netlink: IP tunnel dst address not specified [ 828.035577][T15769] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2642'. [ 828.522399][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.693245][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.946800][T15772] veth0_vlan: entered allmulticast mode [ 828.958040][T15774] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2643'. [ 828.988295][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'. [ 829.254018][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 829.634005][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.931663][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 830.353897][ T30] audit: type=1400 audit(1767103187.985:1502): avc: denied { write } for pid=15795 comm="syz.0.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 830.411201][ T30] audit: type=1400 audit(1767103187.985:1503): avc: denied { listen } for pid=15795 comm="syz.0.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 830.472913][ T30] audit: type=1400 audit(1767103188.003:1504): avc: denied { accept } for pid=15795 comm="syz.0.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 830.739928][ T30] audit: type=1400 audit(1767103188.340:1505): avc: denied { create } for pid=15806 comm="syz.1.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.767266][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.384130][T13473] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 831.424013][ T6325] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 831.432400][ T30] audit: type=1400 audit(1767103188.471:1506): avc: denied { bind } for pid=15806 comm="syz.1.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 831.483970][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.501331][ T30] audit: type=1400 audit(1767103188.471:1507): avc: denied { connect } for pid=15806 comm="syz.1.2653" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.522520][ T30] audit: type=1400 audit(1767103188.480:1508): avc: denied { write } for pid=15806 comm="syz.1.2653" laddr=::ac14:14aa lport=7 faddr=fc00::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.569686][T15812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.581660][T15812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.608460][T15812] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 831.632736][T13473] usb 4-1: Using ep0 maxpacket: 16 [ 831.639338][T13473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.654233][T13473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.659015][T15812] bond2: entered promiscuous mode [ 831.665264][T13473] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.669451][ T6325] usb 5-1: Using ep0 maxpacket: 16 [ 831.683537][T13473] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 831.698298][T13473] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 831.698773][T15812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.706526][T13473] usb 4-1: Manufacturer: syz [ 831.742768][T13473] usb 4-1: config 0 descriptor?? [ 831.751840][ T6325] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 831.767794][ T6325] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 831.777160][ T6325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.785271][ T6325] usb 5-1: Product: syz [ 831.816754][ T6325] usb 5-1: Manufacturer: syz [ 831.821452][ T6325] usb 5-1: SerialNumber: syz [ 831.861414][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.869699][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.918018][T15814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.929640][T15814] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 831.939858][T15814] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 832.003112][T15814] bond2: (slave vcan1): making interface the new active one [ 832.004892][T15801] netlink: 'syz.3.2652': attribute type 1 has an invalid length. [ 832.018570][T15814] vcan1: entered promiscuous mode [ 832.039529][T15814] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 832.209936][ T6325] usb 5-1: config 0 descriptor?? [ 832.233882][ T6325] appledisplay 5-1:0.0: Could not find int-in endpoint [ 832.258453][ T6325] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 832.295306][T15801] bond4: entered promiscuous mode [ 832.306772][T15801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 832.571925][T13473] usbhid 4-1:0.0: can't add hid device: -71 [ 832.578174][T13473] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 832.606074][T13473] usb 4-1: USB disconnect, device number 77 [ 832.723390][ T6397] usb 5-1: USB disconnect, device number 22 [ 832.857874][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2656'. [ 832.969330][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.226074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.717456][ T7406] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 833.880326][ T7406] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 833.891052][ T7406] usb 5-1: config 7 has no interface number 0 [ 833.924447][ T7406] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 833.933731][ T7406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.941975][ T7406] usb 5-1: Product: syz [ 833.947035][ T7406] usb 5-1: Manufacturer: syz [ 833.951756][ T7406] usb 5-1: SerialNumber: syz [ 834.178196][ T6325] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 834.465274][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.516018][ T6325] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 834.580963][ T6325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.680564][ T6325] usb 6-1: Product: syz [ 834.707737][ T6325] usb 6-1: Manufacturer: syz [ 834.748735][ T6325] usb 6-1: SerialNumber: syz [ 834.930468][ T7406] as10x_usb: device has been detected [ 834.946235][ T7406] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 834.956027][ T30] audit: type=1400 audit(1767103192.278:1509): avc: denied { setopt } for pid=15847 comm="syz.3.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 835.008561][ T7406] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 835.050990][ T30] audit: type=1400 audit(1767103192.372:1510): avc: denied { firmware_load } for pid=7406 comm="kworker/1:13" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 835.108119][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.122982][T15855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15855 comm=syz.1.2669 [ 835.136138][T15855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=15855 comm=syz.1.2669 [ 835.157862][ T30] audit: type=1400 audit(1767103192.474:1511): avc: denied { write } for pid=15839 comm="syz.5.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 835.217435][ T30] audit: type=1400 audit(1767103192.474:1512): avc: denied { nlmsg_write } for pid=15839 comm="syz.5.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 835.249567][ T30] audit: type=1400 audit(1767103192.474:1513): avc: denied { module_request } for pid=15839 comm="syz.5.2663" kmod="xfrm-offload-2-51" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 835.293189][ T7406] as10x_usb: error during firmware upload part1 [ 835.305377][ T7406] Registered device Elgato EyeTV DTT Deluxe [ 835.311033][ T5823] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 835.340251][ T7406] usb 5-1: USB disconnect, device number 23 [ 835.378246][ T7406] Unregistered device Elgato EyeTV DTT Deluxe [ 835.384415][ T7406] as10x_usb: device has been disconnected [ 835.397136][ T6325] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 835.409382][ T6325] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 835.444988][ T6325] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 835.457620][ T6325] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 835.509897][ T6325] usb 6-1: USB disconnect, device number 26 [ 835.525766][ T5823] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 835.537193][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.552551][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.572508][ T5823] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 835.770804][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.779424][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.792660][ T6325] usb 4-1: USB disconnect, device number 78 [ 835.806983][ T30] audit: type=1400 audit(1767103193.082:1514): avc: denied { read write } for pid=15863 comm="syz.0.2672" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 835.833314][ T30] audit: type=1400 audit(1767103193.082:1515): avc: denied { open } for pid=15863 comm="syz.0.2672" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 835.857865][ T30] audit: type=1400 audit(1767103193.111:1516): avc: denied { ioctl } for pid=15863 comm="syz.0.2672" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 835.866755][ T5823] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 835.924146][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.933028][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.970241][ T30] audit: type=1400 audit(1767103193.232:1517): avc: denied { open } for pid=15868 comm="syz.5.2674" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 835.994824][ T30] audit: type=1400 audit(1767103193.251:1518): avc: denied { ioctl } for pid=15868 comm="syz.5.2674" path="/dev/ptyqe" dev="devtmpfs" ino=133 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 836.071796][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 836.288430][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.407024][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.437151][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.458516][ T5823] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 836.477059][ T5823] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 836.494223][ T5823] usb 2-1: Manufacturer: syz [ 836.509084][ T5823] usb 2-1: config 0 descriptor?? [ 836.661044][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.760591][T15862] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 836.802467][T15862] bond4: entered promiscuous mode [ 836.818989][T15862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.208497][T15886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.224488][T15886] bond4: (slave vcan2): The slave device specified does not support setting the MAC address [ 837.236872][T15886] bond4: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 838.120128][ T6325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.198880][T15886] bond4: (slave vcan2): making interface the new active one [ 838.206324][T15886] vcan2: entered promiscuous mode [ 838.220638][T15886] bond4: (slave vcan2): Enslaving as an active interface with an up link [ 838.452324][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.704162][ T5823] usbhid 2-1:0.0: can't add hid device: -71 [ 838.705603][T15894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15894 comm=syz.3.2680 [ 838.727610][T15894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=15894 comm=syz.3.2680 [ 838.729163][ T5823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 838.814404][ T5823] usb 2-1: USB disconnect, device number 74 [ 838.991679][T15901] Invalid ELF header magic: != ELF [ 839.860490][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.010980][T15902] futex_wake_op: syz.3.2682 tries to shift op by 144; fix this program [ 840.607991][T15911] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2685'. [ 840.968104][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 840.968119][ T30] audit: type=1400 audit(1767103197.909:1521): avc: denied { read } for pid=15914 comm="syz.3.2687" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 841.010001][ T6324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.036376][ T30] audit: type=1400 audit(1767103197.909:1522): avc: denied { open } for pid=15914 comm="syz.3.2687" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 841.211580][ T6397] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 841.410812][T13647] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 841.419785][ T6397] usb 6-1: device descriptor read/64, error -71 [ 841.436614][T13473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.541802][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2690'. [ 841.878985][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.095239][ T6397] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 842.107983][T13647] usb 4-1: config 0 has no interfaces? [ 842.113776][T13647] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 842.120631][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.124018][T13647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.141202][T13647] usb 4-1: config 0 descriptor?? [ 842.712191][T15929] netlink: 'syz.1.2692': attribute type 2 has an invalid length. [ 842.740415][ T6397] usb 6-1: device descriptor read/64, error -71 [ 842.805417][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.882030][ T6397] usb usb6-port1: attempt power cycle [ 843.586987][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.650006][ T6397] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 843.694060][ T6397] usb 6-1: device descriptor read/8, error -71 [ 843.955421][ T6397] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 844.375922][ T6397] usb 6-1: device not accepting address 30, error -71 [ 844.450101][ T6397] usb usb6-port1: unable to enumerate USB device [ 844.549198][ T30] audit: type=1400 audit(1767103201.258:1523): avc: denied { ioctl } for pid=15949 comm="syz.1.2698" path="socket:[52066]" dev="sockfs" ino=52066 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 844.584709][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 844.593855][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2698'. [ 844.611937][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 844.621201][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2698'. [ 844.688552][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.768808][T15953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 845.176937][ T6397] usb 4-1: USB disconnect, device number 79 [ 900.961638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.610811][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 957.617760][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15936/1:b..l P5813/1:b..l P1011/1:b..l [ 957.628404][ C1] rcu: (detected by 1, t=10502 jiffies, g=67777, q=541 ncpus=2) [ 957.636092][ C1] task:kworker/u8:6 state:R running task stack:23320 pid:1011 tgid:1011 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 957.650412][ C1] Workqueue: iou_exit io_ring_exit_work [ 957.655948][ C1] Call Trace: [ 957.659204][ C1] [ 957.662108][ C1] ? __schedule+0x10b9/0x6150 [ 957.666762][ C1] __schedule+0x1139/0x6150 [ 957.671238][ C1] ? trace_sched_exit_tp+0xd1/0x110 [ 957.676413][ C1] ? __schedule+0x10b9/0x6150 [ 957.681084][ C1] ? __pfx___schedule+0x10/0x10 [ 957.685914][ C1] ? mark_held_locks+0x49/0x80 [ 957.690657][ C1] preempt_schedule_irq+0x51/0x90 [ 957.695657][ C1] irqentry_exit+0x1d8/0x8c0 [ 957.700232][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.706180][ C1] RIP: 0010:__orc_find+0x70/0xf0 [ 957.711089][ C1] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 957.730666][ C1] RSP: 0018:ffffc90003edf4c8 EFLAGS: 00000a06 [ 957.736717][ C1] RAX: ffffffff911ff35a RBX: ffffffff909ce410 RCX: dffffc0000000000 [ 957.744660][ C1] RDX: 1ffffffff2139c82 RSI: 0000000000000000 RDI: ffffffff909ce400 [ 957.752600][ C1] RBP: ffffffff909ce400 R08: ffffffff911ff396 R09: 000000000933d5d2 [ 957.760543][ C1] R10: 0000000000000002 R11: 000000000000637a R12: ffffffff909ce424 [ 957.768488][ C1] R13: ffffffff81637ab2 R14: ffffffff909ce400 R15: ffffffff909ce400 [ 957.776432][ C1] ? arch_stack_walk+0x72/0x100 [ 957.781265][ C1] ? arch_stack_walk+0x72/0x100 [ 957.786088][ C1] unwind_next_frame+0x2ec/0x20b0 [ 957.791086][ C1] ? arch_stack_walk+0x73/0x100 [ 957.795909][ C1] __unwind_start+0x45f/0x7f0 [ 957.800559][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 957.806777][ C1] arch_stack_walk+0x73/0x100 [ 957.811427][ C1] ? arch_stack_walk+0x73/0x100 [ 957.816261][ C1] stack_trace_save+0x8e/0xc0 [ 957.820907][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 957.826247][ C1] ? __lock_acquire+0x436/0x2890 [ 957.831164][ C1] ? kasan_save_stack+0x33/0x60 [ 957.835985][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 957.841337][ C1] kasan_save_stack+0x33/0x60 [ 957.846015][ C1] kasan_save_track+0x14/0x30 [ 957.850671][ C1] __kasan_kmalloc+0xaa/0xb0 [ 957.855239][ C1] kmem_cache_free+0x147/0x770 [ 957.859973][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 957.865326][ C1] ? __io_req_caches_free+0x19e/0x5c0 [ 957.870670][ C1] __io_req_caches_free+0x19e/0x5c0 [ 957.875857][ C1] io_ring_exit_work+0x33c/0x1130 [ 957.880868][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 957.886300][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 957.891470][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 957.897252][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 957.902859][ C1] ? rcu_is_watching+0x12/0xc0 [ 957.907601][ C1] process_one_work+0x9ba/0x1b20 [ 957.912513][ C1] ? __pfx_process_one_work+0x10/0x10 [ 957.917858][ C1] ? assign_work+0x1a0/0x250 [ 957.922420][ C1] worker_thread+0x6c8/0xf10 [ 957.927081][ C1] ? __kthread_parkme+0x19e/0x250 [ 957.932085][ C1] ? __pfx_worker_thread+0x10/0x10 [ 957.937168][ C1] kthread+0x3c5/0x780 [ 957.941213][ C1] ? __pfx_kthread+0x10/0x10 [ 957.945778][ C1] ? rcu_is_watching+0x12/0xc0 [ 957.950517][ C1] ? __pfx_kthread+0x10/0x10 [ 957.955096][ C1] ret_from_fork+0x983/0xb10 [ 957.959672][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 957.964856][ C1] ? __switch_to+0x7af/0x10d0 [ 957.969512][ C1] ? __pfx_kthread+0x10/0x10 [ 957.974172][ C1] ret_from_fork_asm+0x1a/0x30 [ 957.978924][ C1] [ 957.981931][ C1] task:syz-executor state:R running task stack:23656 pid:5813 tgid:5813 ppid:5810 task_flags:0x400140 flags:0x00080000 [ 957.995457][ C1] Call Trace: [ 957.998716][ C1] [ 958.001721][ C1] ? __schedule+0x10b9/0x6150 [ 958.006471][ C1] __schedule+0x1139/0x6150 [ 958.010965][ C1] ? __pfx___schedule+0x10/0x10 [ 958.016162][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 958.021542][ C1] preempt_schedule_common+0x44/0xc0 [ 958.026807][ C1] preempt_schedule_thunk+0x16/0x30 [ 958.031976][ C1] _raw_spin_unlock+0x3e/0x50 [ 958.036627][ C1] copy_page_range+0x22d0/0x6780 [ 958.041565][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 958.046843][ C1] ? __pfx___might_resched+0x10/0x10 [ 958.052180][ C1] ? __pfx_mas_store+0x10/0x10 [ 958.057009][ C1] ? dup_mmap+0xba4/0x20e0 [ 958.061485][ C1] ? down_write+0x14d/0x200 [ 958.065961][ C1] ? up_write+0x282/0x4e0 [ 958.070263][ C1] dup_mmap+0xbea/0x20e0 [ 958.074482][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 958.079149][ C1] copy_process+0x3b9f/0x7430 [ 958.083814][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 958.088916][ C1] ? __pfx_copy_process+0x10/0x10 [ 958.093927][ C1] ? debug_object_activate+0x2ec/0x4c0 [ 958.099378][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 958.106559][ C1] kernel_clone+0xfc/0x910 [ 958.110962][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 958.115959][ C1] ? find_held_lock+0x2b/0x80 [ 958.120613][ C1] ? clockevents_program_event+0x151/0x370 [ 958.126392][ C1] __do_sys_clone+0xce/0x120 [ 958.130951][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 958.136127][ C1] do_syscall_64+0xcd/0xf80 [ 958.140602][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.146902][ C1] RIP: 0033:0x7f78ac585e93 [ 958.151302][ C1] RSP: 002b:00007ffe75b16cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 958.159712][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78ac585e93 [ 958.167659][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 958.175607][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 958.183545][ C1] R10: 000055558cc057d0 R11: 0000000000000246 R12: 0000000000000000 [ 958.191497][ C1] R13: 000055558cc18590 R14: 00000000000c9bcf R15: 00007ffe75b16e50 [ 958.199472][ C1] [ 958.202464][ C1] task:syz.0.2695 state:R running task stack:25768 pid:15936 tgid:15933 ppid:5812 task_flags:0x40044c flags:0x00080001 [ 958.215917][ C1] Call Trace: [ 958.219169][ C1] [ 958.222083][ C1] ? __schedule+0x10b9/0x6150 [ 958.226735][ C1] __schedule+0x1139/0x6150 [ 958.231223][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 958.236581][ C1] ? __pfx___schedule+0x10/0x10 [ 958.241413][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 958.247380][ C1] preempt_schedule_irq+0x51/0x90 [ 958.252376][ C1] irqentry_exit+0x1d8/0x8c0 [ 958.256948][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 958.262897][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 958.268070][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 ba ee 0e 0f 82 74 02 00 00 8b 35 ba ea ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 958.287644][ C1] RSP: 0018:ffffc900044cf398 EFLAGS: 00000206 [ 958.293677][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 0000000068c1bacb [ 958.301617][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7e35 RDI: ffffffff8bf2b400 [ 958.309560][ C1] RBP: 0000000000000002 R08: 00000000ffffffff R09: 00000000ffffffff [ 958.317504][ C1] R10: 0000000000000002 R11: ffff8880548eaff0 R12: 0000000000000000 [ 958.325444][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.333393][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 958.338567][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 958.344701][ C1] unwind_next_frame+0xd1/0x20b0 [ 958.349611][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 958.354780][ C1] ? __dentry_kill+0x1d0/0x600 [ 958.359521][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 958.365661][ C1] arch_stack_walk+0x94/0x100 [ 958.370312][ C1] ? __dentry_kill+0x1d0/0x600 [ 958.375048][ C1] stack_trace_save+0x8e/0xc0 [ 958.379691][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 958.385035][ C1] ? __lock_acquire+0x436/0x2890 [ 958.389953][ C1] kasan_save_stack+0x33/0x60 [ 958.394600][ C1] ? kasan_save_stack+0x33/0x60 [ 958.399418][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 958.404782][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 958.410827][ C1] ? destroy_inode+0x12c/0x1b0 [ 958.415561][ C1] ? evict+0x599/0xad0 [ 958.419623][ C1] ? iput.part.0+0x621/0x1190 [ 958.424271][ C1] ? iput+0x35/0x40 [ 958.428053][ C1] ? dentry_unlink_inode+0x29c/0x480 [ 958.433317][ C1] ? __dentry_kill+0x1d0/0x600 [ 958.438066][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 958.443247][ C1] ? __pfx_i_callback+0x10/0x10 [ 958.448068][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 958.453937][ C1] ? __pfx_shmem_destroy_inode+0x10/0x10 [ 958.459547][ C1] ? __pfx_shmem_free_in_core_inode+0x10/0x10 [ 958.465593][ C1] ? __pfx_shmem_destroy_inode+0x10/0x10 [ 958.471203][ C1] destroy_inode+0x12c/0x1b0 [ 958.475771][ C1] evict+0x599/0xad0 [ 958.479634][ C1] ? find_held_lock+0x2b/0x80 [ 958.484291][ C1] ? __pfx_evict+0x10/0x10 [ 958.488683][ C1] ? iput.part.0+0x619/0x1190 [ 958.493335][ C1] iput.part.0+0x621/0x1190 [ 958.497822][ C1] iput+0x35/0x40 [ 958.501423][ C1] dentry_unlink_inode+0x29c/0x480 [ 958.506515][ C1] __dentry_kill+0x1d0/0x600 [ 958.511074][ C1] finish_dput+0x76/0x480 [ 958.515371][ C1] dput.part.0+0x451/0x570 [ 958.519760][ C1] dput+0x1f/0x30 [ 958.523371][ C1] __fput+0x51c/0xb70 [ 958.527347][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 958.532519][ C1] task_work_run+0x150/0x240 [ 958.537081][ C1] ? __pfx_task_work_run+0x10/0x10 [ 958.542163][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 958.547337][ C1] do_exit+0x87f/0x2bd0 [ 958.551461][ C1] ? __pfx___might_resched+0x10/0x10 [ 958.556726][ C1] ? __pfx_do_exit+0x10/0x10 [ 958.561285][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 958.566279][ C1] ? find_held_lock+0x2b/0x80 [ 958.570931][ C1] do_group_exit+0xd3/0x2a0 [ 958.575403][ C1] get_signal+0x2671/0x26d0 [ 958.579888][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 958.584794][ C1] ? __pfx_get_signal+0x10/0x10 [ 958.589627][ C1] ? do_futex+0x122/0x350 [ 958.593953][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 958.599496][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.605638][ C1] ? __x64_sys_recvmmsg+0x1d9/0x280 [ 958.610810][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 958.616080][ C1] do_syscall_64+0x4ee/0xf80 [ 958.620645][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.626514][ C1] RIP: 0033:0x7fa6b198f749 [ 958.630915][ C1] RSP: 002b:00007fa6b2853038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 958.639304][ C1] RAX: 0000000000010106 RBX: 00007fa6b1be6090 RCX: 00007fa6b198f749 [ 958.647255][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 958.655194][ C1] RBP: 00007fa6b1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 958.663153][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 958.671095][ C1] R13: 00007fa6b1be6128 R14: 00007fa6b1be6090 R15: 00007fff9a6389b8 [ 958.679043][ C1] [ 958.682037][ C1] rcu: rcu_preempt kthread starved for 10602 jiffies! g67777 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 958.693196][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 958.703132][ C1] rcu: RCU grace-period kthread stack dump: [ 958.708985][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 958.722424][ C1] Call Trace: [ 958.725680][ C1] [ 958.728585][ C1] ? __schedule+0x10b9/0x6150 [ 958.733234][ C1] __schedule+0x1139/0x6150 [ 958.737719][ C1] ? __lock_acquire+0x436/0x2890 [ 958.742631][ C1] ? __mod_timer+0x8f2/0xd30 [ 958.747199][ C1] ? __pfx___schedule+0x10/0x10 [ 958.752019][ C1] ? find_held_lock+0x2b/0x80 [ 958.756670][ C1] ? schedule+0x2d7/0x3a0 [ 958.760976][ C1] schedule+0xe7/0x3a0 [ 958.765020][ C1] schedule_timeout+0x123/0x290 [ 958.769843][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 958.775182][ C1] ? __pfx_process_timeout+0x10/0x10 [ 958.780439][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 958.786223][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 958.791842][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 958.796584][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 958.801839][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.807017][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 958.811924][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 958.816751][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 958.822527][ C1] rcu_gp_kthread+0x26d/0x380 [ 958.827182][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 958.832357][ C1] ? rcu_is_watching+0x12/0xc0 [ 958.837095][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.842276][ C1] ? __kthread_parkme+0x19e/0x250 [ 958.847272][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 958.852448][ C1] kthread+0x3c5/0x780 [ 958.856489][ C1] ? __pfx_kthread+0x10/0x10 [ 958.861049][ C1] ? rcu_is_watching+0x12/0xc0 [ 958.865783][ C1] ? __pfx_kthread+0x10/0x10 [ 958.870352][ C1] ret_from_fork+0x983/0xb10 [ 958.874913][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 958.879998][ C1] ? __switch_to+0x7af/0x10d0 [ 958.884656][ C1] ? __pfx_kthread+0x10/0x10 [ 958.889229][ C1] ret_from_fork_asm+0x1a/0x30 [ 958.894067][ C1] [ 958.897086][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 958.903386][ C1] Sending NMI from CPU 1 to CPUs 0: [ 958.908587][ C0] NMI backtrace for cpu 0 [ 958.908602][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.908619][ C0] Tainted: [L]=SOFTLOCKUP [ 958.908623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.908631][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 958.908650][ C0] Code: d6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 958.908662][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 958.908674][ C0] RAX: 0000000003d1a6c7 RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 958.908682][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdec9 RDI: ffffffff8bf2b400 [ 958.908690][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 958.908698][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 958.908706][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b5d0 R15: 0000000000000000 [ 958.908714][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 958.908727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 958.908735][ C0] CR2: 0000001b2d720ff8 CR3: 000000001f3ef000 CR4: 00000000003526f0 [ 958.908743][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 958.908750][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 958.908758][ C0] Call Trace: [ 958.908764][ C0] [ 958.908769][ C0] default_idle+0x13/0x20 [ 958.908785][ C0] default_idle_call+0x6c/0xb0 [ 958.908802][ C0] do_idle+0x38d/0x510 [ 958.908822][ C0] ? __pfx_do_idle+0x10/0x10 [ 958.908841][ C0] cpu_startup_entry+0x4f/0x60 [ 958.908859][ C0] rest_init+0x16b/0x2b0 [ 958.908875][ C0] ? acpi_subsystem_init+0x133/0x180 [ 958.908887][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 958.908900][ C0] start_kernel+0x3ef/0x4d0 [ 958.908923][ C0] x86_64_start_reservations+0x18/0x30 [ 958.908942][ C0] x86_64_start_kernel+0x130/0x190 [ 958.908959][ C0] common_startup_64+0x13e/0x148 [ 958.908979][ C0]