last executing test programs: 18m37.369955249s ago: executing program 32 (id=38): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x20a) 18m36.287720346s ago: executing program 33 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 17m6.23805643s ago: executing program 34 (id=336): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x9, 0x1, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xfff2}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x80, 0x0]}}]}]}, 0x54}}, 0x4000044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x4c, r10, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000140), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 16m41.774336687s ago: executing program 35 (id=392): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0xc4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15m15.270879s ago: executing program 36 (id=1211): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f0000000402"], 0x58) r1 = inotify_init1(0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a69702c706f72742c6e6574"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/171, 0xab}, {0x0}], 0x2}, 0x3ff}], 0x1, 0x40000000, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0x7c81, 0x0) inotify_add_watch(r1, &(0x7f0000001100)='.\x00', 0x48f) 12m59.586961985s ago: executing program 8 (id=2842): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 12m59.436344221s ago: executing program 8 (id=2844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000000000/0x400000)=nil) getcwd(&(0x7f0000000000)=""/25, 0x19) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_io_uring_setup(0x88d, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14000010}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x80, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x842b}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000240)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000000040)={0x5000, 0x6000, 0x4, 0xb, 0x7}) 12m57.150903246s ago: executing program 8 (id=2845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, r2, 0x2f, 0x20, 0x4}, 0x20) 12m54.685968672s ago: executing program 8 (id=2850): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r1) 12m53.373157553s ago: executing program 8 (id=2857): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[0x0]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 12m51.980947311s ago: executing program 8 (id=2859): getresuid(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000004}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='reclaim_retry_zone\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000004c0)={@any, 0x3, 0x7f, 0x141, 0x7ff, 0x240, "a4d6bb81623f16ec3c96127a1acd4084bd981397eca3385dcd6402cb52d6d55195d7b516802711b7996eda1b3abf6867efc9b2da69dfcc2b620ed38c5fec7c30e7e6e54bee4e66e7beeae37e6519ef6c21d2c7fbfebcaa5a9113b3aac521e24eb9bf481726735b5c2a39c31ca030677d71449342866e8c3834152d1d21bd983a"}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 12m49.32544935s ago: executing program 2 (id=2866): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094001}], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x3) 12m49.166123708s ago: executing program 2 (id=2867): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/../file0\x00', r2, &(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 12m48.812987423s ago: executing program 2 (id=2869): r0 = syz_io_uring_setup(0x10b5, &(0x7f0000000200)={0x0, 0x4d9, 0x800, 0x4, 0xb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m48.485837518s ago: executing program 2 (id=2871): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000400)}, 0x20) 12m48.344919311s ago: executing program 2 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f00000009c0), &(0x7f0000000b40)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) socket(0x11, 0x2, 0x0) 12m48.042859383s ago: executing program 2 (id=2874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') unshare(0x6a040000) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12m36.712801126s ago: executing program 37 (id=2859): getresuid(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000004}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='reclaim_retry_zone\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000004c0)={@any, 0x3, 0x7f, 0x141, 0x7ff, 0x240, "a4d6bb81623f16ec3c96127a1acd4084bd981397eca3385dcd6402cb52d6d55195d7b516802711b7996eda1b3abf6867efc9b2da69dfcc2b620ed38c5fec7c30e7e6e54bee4e66e7beeae37e6519ef6c21d2c7fbfebcaa5a9113b3aac521e24eb9bf481726735b5c2a39c31ca030677d71449342866e8c3834152d1d21bd983a"}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 12m32.804628308s ago: executing program 38 (id=2874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') unshare(0x6a040000) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11m41.129314564s ago: executing program 9 (id=3038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11m41.053905053s ago: executing program 9 (id=3039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0x49, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r3}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000) 11m39.472259337s ago: executing program 9 (id=3042): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) 11m39.362893239s ago: executing program 9 (id=3043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000700000095000000000000004e834df9fbd866915e2164f2eea66e59ec7fc887fbc770bea163677ef612f67696e0fc3da4782ce005e7255d6d21d92fceff51e067cfbb0000f3d09014a523a2"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0xa) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) 11m38.161207898s ago: executing program 9 (id=3046): r0 = syz_io_uring_setup(0x45b4, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x200000, 0x46}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2914, 0x58f2, 0x0, 0x0, 0x0) 11m38.060014469s ago: executing program 9 (id=3048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) unshare(0x6a040000) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x45, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11m22.903303706s ago: executing program 39 (id=3048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) unshare(0x6a040000) r1 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x45, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m40.676002025s ago: executing program 1 (id=3407): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) 9m39.410371372s ago: executing program 1 (id=3414): open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket(0x1f, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 9m39.081490826s ago: executing program 1 (id=3420): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000001180)=[0xfffffb35, 0x9], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002680)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="632b184e16ad9611a45342b50e373582e6b47dd1c0858b6f716468b9f51ef21ba10795722fa10c9cf9220584696f1ffebe43eb1a9ad00bb24e532c63b8019c82526cb2774c4994e4dc49f3479eb1e87992ca8fceea2313fbe12744f68e8666933a65b14ceeda2f5173721e70fc807407abe716af0dff8700e6661f04371e87359e055b7bf3cffdcdf92b5e5e1865b0756cdf5889141e7fe8e8641c72132c60eeb26a5bfd5fd082591453f825f6547108d6b03ba91709c02dea902797ed5ccee17140d02b9b1b6956a37ee6c18e1605def7bf46f1adffb297e1d33f8d1d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000001200)={0x0, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000025c0)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f0000001300)=""/243, 0xf3, 0x0, &(0x7f00000014c0)=""/101, 0x65}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000011c0)=ANY=[], 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e", 0xa2}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b8", 0x84}, {&(0x7f0000000300)="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", 0xcb3}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 9m38.90648424s ago: executing program 1 (id=3422): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4050) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 9m37.851820343s ago: executing program 1 (id=3433): openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x1, 0x1b, "4834299abf3932c75b3890e78002ab82f4f419"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) write(r1, &(0x7f0000001040)="224df6e3aa1367ce197ae58cbef1e37891a6d533aebbaba3bd3d95760fb9bef8fee32642e76ad270231234d07aa3e0713c6f3887174e17fe9a5dae6d3e8a6be74aa7e7deb1c76d580c5e4efbc0747e19f04bbbb9935cd4026882c6c0b694f35d9e9594d4419f6c972376c9ec5e019d6fa926ac014fb9200d2d4feffcba54ec050808be88810c14929e944c53405af51ebb453df30e7ed48acca7aa16114b56e6db89171c6d41999c419dc921b5657c171074e9afae6987affbf9c69ba449c975129ede0503a238a05703d5f98bd6a8b727f439fb8dd9b93ae7e5981bbd07c244045c96b22b4908a1b1786338735ebb159f515faa795dd1ae30c06877561d84f11b3d9c1ff722f485c1d8763d5feba32c8be92dc22a939705413b7b2fb3f27722f08f7ed98fa56205a3d0f6fc1b1d83453354e09df6168b219b9c02b8f783dc4e62bdd99439cadcdbfb27d54f8d26834950669ca6e8e268fb8e8131532ef1390f8aea48ca28195a9866f09a58b1d3f427e18ee0c87a3414a4e4106a8b54062566e9f52566c6e1ad872b504d16817779f5c37c9db330c3048590cdb3a107e389fb331d5c76751fe489be07a20ace9b930c6493ab58da5fac811290b3d15aa0d16539ea0582cc80b3590f895544603ac465f4176b", 0x1d3) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 9m36.016299499s ago: executing program 1 (id=3442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume_offset', 0x8501, 0x16) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = syz_open_dev$loop(&(0x7f0000000340), 0x4, 0x80400) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000780)={'\x00', 0xfffd, 0xfe1d, 0x1000, 0xffffffff947d5046, 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18) r10 = gettid() tkill(r8, 0x12) tkill(r8, 0x1) tkill(r10, 0x14) 9m20.935690413s ago: executing program 40 (id=3442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/resume_offset', 0x8501, 0x16) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r5 = syz_open_dev$loop(&(0x7f0000000340), 0x4, 0x80400) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000780)={'\x00', 0xfffd, 0xfe1d, 0x1000, 0xffffffff947d5046, 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18) r10 = gettid() tkill(r8, 0x12) tkill(r8, 0x1) tkill(r10, 0x14) 8m27.778552089s ago: executing program 5 (id=3956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 8m27.227124417s ago: executing program 5 (id=3961): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x2a1}], 0x1}}], 0x2, 0x0) 8m26.952671059s ago: executing program 5 (id=3963): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m26.603697385s ago: executing program 5 (id=3966): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) 8m25.33370033s ago: executing program 5 (id=3971): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 8m23.597417236s ago: executing program 5 (id=3982): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000600) 8m8.53885599s ago: executing program 41 (id=3982): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x64000600) 1m30.84714172s ago: executing program 3 (id=5128): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)={0x1c, r2, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x24000895) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m28.458898303s ago: executing program 3 (id=5134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042) 1m28.257591485s ago: executing program 3 (id=5136): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000018560084aef281e516bd832492d38358109a79000400000000000000000000080004960100fcffffff9500000000000000000042e4b29e15bd6686152f45f4de4324f0c867ac0ce59322adc36760146a15b652ba02db86faf386737e4da3cfe00fd5dea12e4a11fb804b7f18a43e89dcf80e05c5ca689d82b6ecfe554c3fe1aeab419611628bd623804e3e8933c5461d4e4484f67ddeab479c36a6d90c8b9f63132033651a40e7d0defc31b46c3b48adae421765d8b47b7379bf953c63"], 0x0, 0x8, 0x50, &(0x7f0000000400)=""/80, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x1, 0x6, 0xc}, {0x4, 0x5, 0x4, 0x6}, {0x2, 0x5, 0x810, 0x3}, {0x0, 0x2, 0x10, 0x5}, {0x5, 0x1, 0xf, 0x1}], 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) 1m26.777391513s ago: executing program 3 (id=5137): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x1fce, &(0x7f0000000240)={0x0, 0x2326, 0x2, 0x2, 0x14e, 0x0, r2}) io_uring_enter(r3, 0x139c, 0x6481, 0x0, &(0x7f0000000180)={[0x4]}, 0x8) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = socket(0x3e5d78e09dacfce8, 0x2, 0x5) recvmmsg$unix(r4, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="084c0100010000005db116e02a9f9e647ae55d56bf71548c26a206"], 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) 1m26.185787637s ago: executing program 3 (id=5138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 1m19.165507322s ago: executing program 3 (id=5158): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000018560084aef281e516bd832492d38358109a79000400000000000000000000080004960100fcffffff9500000000000000000042e4b29e15bd6686152f45f4de4324f0c867ac0ce59322adc36760146a15b652ba02db86faf386737e4da3cfe00fd5dea12e4a11fb804b7f18a43e89dcf80e05c5ca689d82b6ecfe554c3fe1aeab419611628bd623804e3e8933c5461d4e4484f67ddeab479c36a6d90c8b9f63132033651a40e7d0defc31b46c3b48adae421765d8b47b7379bf953c63"], 0x0, 0x8, 0x50, &(0x7f0000000400)=""/80, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x1, 0x6, 0xc}, {0x4, 0x5, 0x4, 0x6}, {0x2, 0x5, 0x810, 0x3}, {0x0, 0x2, 0x10, 0x5}, {0x5, 0x1, 0xf, 0x1}], 0x10, 0xc}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$netlink(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000000000000000002c000000000011907800000018e000000100004e2000189078040000000000000000000000000000bd530016b073ab931a4d3935b319686ecf66262d60538d2ef50b2cf98c9a69f10ee51c8cd0c8e1721c219a93014f71db6c957f5ab129a269381cfcf36bccd23d41031ff2ad70643d7cac179cd6a05294dd3f58795e884bdc63f3b7ec27bba854bae8dc566bed1467d34c92820512b1524e69bcefa4aec4fd9ed9f6a52afd95649ea23bc0f0dbe8e244d5b876bccc18be"], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) 1m19.165126825s ago: executing program 42 (id=5158): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000018560084aef281e516bd832492d38358109a79000400000000000000000000080004960100fcffffff9500000000000000000042e4b29e15bd6686152f45f4de4324f0c867ac0ce59322adc36760146a15b652ba02db86faf386737e4da3cfe00fd5dea12e4a11fb804b7f18a43e89dcf80e05c5ca689d82b6ecfe554c3fe1aeab419611628bd623804e3e8933c5461d4e4484f67ddeab479c36a6d90c8b9f63132033651a40e7d0defc31b46c3b48adae421765d8b47b7379bf953c63"], 0x0, 0x8, 0x50, &(0x7f0000000400)=""/80, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[{0x4, 0x1, 0x6, 0xc}, {0x4, 0x5, 0x4, 0x6}, {0x2, 0x5, 0x810, 0x3}, {0x0, 0x2, 0x10, 0x5}, {0x5, 0x1, 0xf, 0x1}], 0x10, 0xc}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$netlink(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000000000000000002c000000000011907800000018e000000100004e2000189078040000000000000000000000000000bd530016b073ab931a4d3935b319686ecf66262d60538d2ef50b2cf98c9a69f10ee51c8cd0c8e1721c219a93014f71db6c957f5ab129a269381cfcf36bccd23d41031ff2ad70643d7cac179cd6a05294dd3f58795e884bdc63f3b7ec27bba854bae8dc566bed1467d34c92820512b1524e69bcefa4aec4fd9ed9f6a52afd95649ea23bc0f0dbe8e244d5b876bccc18be"], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) 40.103358342s ago: executing program 4 (id=5257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) 38.961907344s ago: executing program 4 (id=5259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 35.780392896s ago: executing program 4 (id=5266): syz_usb_connect(0x2, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1ca2520991124004b830102030109025000010000000a09045cf30575f76a0009050a034000ee020909050f10ff03fe060609050603000010030611231a1303de5c6bd8963b917439b9366b09050ee3a9f9c5f1f3c47b1e7d3800ff03f9190e090507004000440209"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, 0x0, 0x801, 0x48e, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) 30.506002364s ago: executing program 4 (id=5277): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000000)={{0x0, 0x3, 0x81, 0x3, 'syz0\x00', 0x5}, 0x3, 0x20, 0x8, 0x0, 0x2, 0x8, 'syz1\x00', &(0x7f0000000440)=[':#,\x00', ',[\a\x00\x00\x00\x00\x00\x00\x00&]]\x00'], 0x12}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 29.285682337s ago: executing program 4 (id=5279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 28.903751982s ago: executing program 4 (id=5282): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 11.964917977s ago: executing program 43 (id=5282): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18c49}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 11.940270244s ago: executing program 0 (id=5326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.044911273s ago: executing program 6 (id=5329): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) signalfd4(r1, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) socket$kcm(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 9.965084277s ago: executing program 0 (id=5331): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8.373897594s ago: executing program 6 (id=5334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 6.544971387s ago: executing program 0 (id=5336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.475904482s ago: executing program 6 (id=5337): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 5.48768322s ago: executing program 0 (id=5338): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) close(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) 5.400970191s ago: executing program 7 (id=5339): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(r1, 0x24020000) 5.324966639s ago: executing program 6 (id=5340): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/181, 0xb5}], 0x3, 0x3, 0x42d) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 4.071186604s ago: executing program 7 (id=5341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(0xffffffffffffffff) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.059050107s ago: executing program 0 (id=5342): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) signalfd4(r1, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) socket$kcm(0x10, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 3.010967836s ago: executing program 6 (id=5343): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70fd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lsetxattr$security_evm(&(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0), 0x0, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.844758839s ago: executing program 7 (id=5344): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 1.596444436s ago: executing program 6 (id=5345): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/158, 0x9e}], 0x1}, 0xff}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.585541592s ago: executing program 7 (id=5346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) setfsgid(0xee00) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) fchdir(r6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd27c9770fed6526230000080102dc0200000008000100000000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.315796888s ago: executing program 0 (id=5347): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast1}], 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}) r4 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 70.491672ms ago: executing program 7 (id=5348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) 0s ago: executing program 7 (id=5349): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 26 audit(1760705953.192:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.094328][ T37] audit: type=1326 audit(1760705953.192:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.094371][ T37] audit: type=1326 audit(1760705953.192:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.125782][ T37] audit: type=1326 audit(1760705953.222:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.125837][ T37] audit: type=1326 audit(1760705953.222:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.127408][ T37] audit: type=1326 audit(1760705953.222:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.127461][ T37] audit: type=1326 audit(1760705953.222:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.127514][ T37] audit: type=1326 audit(1760705953.222:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17933 comm="syz.0.4196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 819.365079][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.508173][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.540369][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.722287][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.753375][ T5826] Bluetooth: hci6: command tx timeout [ 820.565520][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.738995][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.190200][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.496667][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.576655][T17817] chnl_net:caif_netlink_parms(): no params data found [ 821.646654][T17876] chnl_net:caif_netlink_parms(): no params data found [ 821.755286][ C1] vkms_vblank_simulate: vblank timer overrun [ 821.780225][ T5826] Bluetooth: hci6: command tx timeout [ 822.340210][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.540902][T17976] 9pnet_virtio: no channels available for device [ 822.543033][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.042071][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.686727][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.000454][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.036143][ T5826] Bluetooth: hci6: command tx timeout [ 824.355226][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.655317][T17984] lo speed is unknown, defaulting to 1000 [ 824.926445][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.986469][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.025469][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.132647][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.639981][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.068384][T18011] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 826.230809][T17984] lo speed is unknown, defaulting to 1000 [ 826.370398][T17984] lo speed is unknown, defaulting to 1000 [ 826.387391][T17984] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 826.444101][T17984] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 826.657127][T12863] bridge_slave_1: left allmulticast mode [ 826.657154][T12863] bridge_slave_1: left promiscuous mode [ 826.657389][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.731436][T12863] bridge_slave_0: left allmulticast mode [ 826.731456][T12863] bridge_slave_0: left promiscuous mode [ 826.731657][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.939704][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.174049][T12863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.280283][T12863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.493878][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.507021][T12863] bond0 (unregistering): Released all slaves [ 827.549934][T17984] lo speed is unknown, defaulting to 1000 [ 828.275999][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.556264][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.621605][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.756645][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.826817][T17984] lo speed is unknown, defaulting to 1000 [ 828.875666][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.957092][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.101779][T17984] lo speed is unknown, defaulting to 1000 [ 829.108097][T17817] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.108305][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.108554][T17817] bridge_slave_0: entered allmulticast mode [ 829.112047][T17817] bridge_slave_0: entered promiscuous mode [ 829.119582][T17984] lo speed is unknown, defaulting to 1000 [ 829.233361][T17817] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.233517][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.233730][T17817] bridge_slave_1: entered allmulticast mode [ 829.249810][T17817] bridge_slave_1: entered promiscuous mode [ 829.252824][T17984] lo speed is unknown, defaulting to 1000 [ 829.256782][T17876] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.256913][T17876] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.257148][T17876] bridge_slave_0: entered allmulticast mode [ 829.260151][T17876] bridge_slave_0: entered promiscuous mode [ 829.276448][T17984] lo speed is unknown, defaulting to 1000 [ 829.391142][T17876] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.391246][T17876] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.391388][T17876] bridge_slave_1: entered allmulticast mode [ 829.392963][T17876] bridge_slave_1: entered promiscuous mode [ 829.399509][T17984] lo speed is unknown, defaulting to 1000 [ 829.507594][T18050] netlink: 'syz.7.4226': attribute type 1 has an invalid length. [ 829.507659][T18050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 829.522280][T18050] netlink: 'syz.7.4226': attribute type 1 has an invalid length. [ 829.522335][T18050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 829.769124][T17817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.077509][T12863] hsr_slave_0: left promiscuous mode [ 830.197180][T12863] hsr_slave_1: left promiscuous mode [ 830.198266][T12863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.269177][T12863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.307591][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.390234][T12863] team0 (unregistering): Port device team_slave_1 removed [ 831.444482][ C1] vkms_vblank_simulate: vblank timer overrun [ 831.585731][T12863] team0 (unregistering): Port device team_slave_0 removed [ 832.464394][T17817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.544814][T18060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 832.641341][T17876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.684692][T18071] loop7: detected capacity change from 0 to 16384 [ 832.790160][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.855271][ C1] vkms_vblank_simulate: vblank timer overrun [ 832.865705][T18072] loop7: detected capacity change from 16384 to 0 [ 832.866120][ C0] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 832.942123][T17876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.037920][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.460931][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.509908][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.530775][T17817] team0: Port device team_slave_0 added [ 833.572762][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.679849][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.703247][T17817] team0: Port device team_slave_1 added [ 833.839519][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.873768][ C1] vkms_vblank_simulate: vblank timer overrun [ 833.905381][T17876] team0: Port device team_slave_0 added [ 834.074121][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.037633][T17876] team0: Port device team_slave_1 added [ 835.153178][ C1] vkms_vblank_simulate: vblank timer overrun [ 835.973150][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.002874][T17817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.002892][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.002918][T17817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.041946][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.266095][T17817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.266113][T17817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.266138][T17817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.268160][T17876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.268173][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.268192][T17876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.297267][T17876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.297283][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.297309][T17876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.534503][T18119] netlink: 'syz.0.4251': attribute type 1 has an invalid length. [ 836.642607][T18122] loop7: detected capacity change from 0 to 16384 [ 836.755757][T18119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 836.786825][T17817] hsr_slave_0: entered promiscuous mode [ 836.789076][T17817] hsr_slave_1: entered promiscuous mode [ 836.790919][T17817] debugfs: 'hsr0' already exists in 'hsr' [ 836.790945][T17817] Cannot create hsr debugfs directory [ 836.828980][T18120] bond1: (slave ip6erspan0): making interface the new active one [ 836.851128][T18120] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 836.919704][T18124] loop7: detected capacity change from 16384 to 0 [ 836.920153][ C1] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 837.081325][T17876] hsr_slave_0: entered promiscuous mode [ 837.084530][T17876] hsr_slave_1: entered promiscuous mode [ 837.085826][T17876] debugfs: 'hsr0' already exists in 'hsr' [ 837.085849][T17876] Cannot create hsr debugfs directory [ 837.590801][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.649899][ C1] vkms_vblank_simulate: vblank timer overrun [ 839.819014][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.014149][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.127674][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.974095][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.899946][T18182] 9pnet_virtio: no channels available for device [ 845.087961][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 845.087996][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 845.088058][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088083][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088114][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088139][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088161][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088182][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088203][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.088223][ T5989] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 845.101382][ T5989] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 845.628195][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.807381][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.988846][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.423512][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.550996][T12863] bridge_slave_1: left allmulticast mode [ 847.551027][T12863] bridge_slave_1: left promiscuous mode [ 847.551322][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.660581][T12863] bridge_slave_0: left allmulticast mode [ 847.660609][T12863] bridge_slave_0: left promiscuous mode [ 847.660874][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.132980][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.264537][T12863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.631439][T12863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.431436][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.522679][T12863] bond0 (unregistering): Released all slaves [ 849.789790][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.917893][T13067] lo speed is unknown, defaulting to 1000 [ 850.452662][T18259] 9pnet_virtio: no channels available for device [ 850.453547][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.820216][T18260] siw: device registration error -23 [ 851.035450][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.050502][T12863] hsr_slave_0: left promiscuous mode [ 851.117856][T12863] hsr_slave_1: left promiscuous mode [ 851.121286][T12863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.300028][T12863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.405718][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.638917][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.910653][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.157931][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.369464][ C0] vkms_vblank_simulate: vblank timer overrun [ 852.914053][ C0] vkms_vblank_simulate: vblank timer overrun [ 853.899964][T12863] team0 (unregistering): Port device team_slave_1 removed [ 854.029971][T12863] team0 (unregistering): Port device team_slave_0 removed [ 858.111024][T18288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4301'. [ 861.065838][T18330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.083064][T18330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.105308][T18330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.123604][T18330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.124739][T18330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 861.262571][T17876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 861.319440][T17876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 861.386448][T17876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 861.592353][T18348] loop7: detected capacity change from 0 to 16384 [ 861.974763][T18350] loop7: detected capacity change from 16384 to 0 [ 861.976981][ C0] I/O error, dev loop7, sector 3408 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 862.209129][T17876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.298601][T18351] syzkaller0: entered promiscuous mode [ 862.298633][T18351] syzkaller0: entered allmulticast mode [ 862.538079][T18329] lo speed is unknown, defaulting to 1000 [ 863.004886][ T71] bridge_slave_1: left allmulticast mode [ 863.004915][ T71] bridge_slave_1: left promiscuous mode [ 863.005167][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.092089][ T71] bridge_slave_0: left allmulticast mode [ 863.092116][ T71] bridge_slave_0: left promiscuous mode [ 863.092371][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.219561][ T5826] Bluetooth: hci0: command tx timeout [ 863.863722][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.990176][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.071659][ T71] bond0 (unregistering): Released all slaves [ 864.294388][T18406] siw: device registration error -23 [ 864.630508][T18415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4323'. [ 864.670704][ T71] hsr_slave_0: left promiscuous mode [ 864.709419][ T71] hsr_slave_1: left promiscuous mode [ 864.710565][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.750430][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.890208][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4323'. [ 865.394224][ T5826] Bluetooth: hci0: command tx timeout [ 867.220320][ T71] team0 (unregistering): Port device team_slave_1 removed [ 867.578567][ T5826] Bluetooth: hci0: command tx timeout [ 867.650238][ T71] team0 (unregistering): Port device team_slave_0 removed [ 870.514006][ T5826] Bluetooth: hci0: command tx timeout [ 871.496587][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 871.496625][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4335'. [ 873.576041][T18329] chnl_net:caif_netlink_parms(): no params data found [ 874.925112][T18330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 874.937606][T18330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 874.939041][T18330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 874.940686][T18330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 874.942058][T18330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.205564][T18329] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.205704][T18329] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.205922][T18329] bridge_slave_0: entered allmulticast mode [ 875.208947][T18329] bridge_slave_0: entered promiscuous mode [ 875.387877][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.581552][T18329] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.581689][T18329] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.581916][T18329] bridge_slave_1: entered allmulticast mode [ 875.586991][T18329] bridge_slave_1: entered promiscuous mode [ 875.589091][T18540] syzkaller0: entered promiscuous mode [ 875.589114][T18540] syzkaller0: entered allmulticast mode [ 876.394632][T18329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.446780][T18329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.447150][T18530] lo speed is unknown, defaulting to 1000 [ 876.981842][T18330] Bluetooth: hci3: command tx timeout [ 877.489218][T18329] team0: Port device team_slave_0 added [ 877.522487][T18329] team0: Port device team_slave_1 added [ 878.973183][T18607] 9pnet: Could not find request transport: fd0x0000000000000006 [ 879.059366][T18330] Bluetooth: hci3: command tx timeout [ 879.230934][T18329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.230960][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.230987][T18329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.663195][T18329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.663212][T18329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.663238][T18329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.761108][T18619] lo speed is unknown, defaulting to 1000 [ 880.067174][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 880.067191][ T37] audit: type=1800 audit(1760706014.162:853): pid=18649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4366" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 880.218628][ T37] audit: type=1326 audit(1760706014.312:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.221401][ T37] audit: type=1326 audit(1760706014.312:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.222329][ T37] audit: type=1326 audit(1760706014.322:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.223459][ T37] audit: type=1326 audit(1760706014.322:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.223780][ T37] audit: type=1326 audit(1760706014.322:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.224299][ T37] audit: type=1326 audit(1760706014.322:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.224657][ T37] audit: type=1326 audit(1760706014.322:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.224970][ T37] audit: type=1326 audit(1760706014.322:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.225490][ T37] audit: type=1326 audit(1760706014.322:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18650 comm="syz.7.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 880.897030][T18329] hsr_slave_0: entered promiscuous mode [ 880.898748][T18329] hsr_slave_1: entered promiscuous mode [ 881.139407][T18330] Bluetooth: hci3: command tx timeout [ 883.219426][T18330] Bluetooth: hci3: command tx timeout [ 883.263785][T18687] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4372'. [ 883.384671][T18692] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4373'. [ 883.511610][T18697] fuse: Invalid rootmode [ 884.192086][T18530] chnl_net:caif_netlink_parms(): no params data found [ 884.971181][ T71] bridge_slave_1: left allmulticast mode [ 884.971209][ T71] bridge_slave_1: left promiscuous mode [ 884.971453][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.156931][T18734] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4380'. [ 885.206308][ T71] bridge_slave_0: left allmulticast mode [ 885.206345][ T71] bridge_slave_0: left promiscuous mode [ 885.206619][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.710420][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.821304][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.041122][ T71] bond0 (unregistering): Released all slaves [ 888.272761][T18530] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.272892][T18530] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.273146][T18530] bridge_slave_0: entered allmulticast mode [ 888.279580][T18530] bridge_slave_0: entered promiscuous mode [ 888.326059][T18530] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.326312][T18530] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.326559][T18530] bridge_slave_1: entered allmulticast mode [ 888.335845][T18530] bridge_slave_1: entered promiscuous mode [ 888.350724][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4393'. [ 888.350747][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4393'. [ 888.546911][ T37] kauditd_printk_skb: 339 callbacks suppressed [ 888.546930][ T37] audit: type=1800 audit(1760706022.642:1202): pid=18802 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4395" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 888.657743][T18809] overlayfs: failed to resolve './file0': -2 [ 888.729590][ T71] hsr_slave_0: left promiscuous mode [ 888.771514][ T71] hsr_slave_1: left promiscuous mode [ 888.772488][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.830223][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.451615][T18843] netlink: 'syz.4.4402': attribute type 1 has an invalid length. [ 890.860094][ T71] team0 (unregistering): Port device team_slave_1 removed [ 890.980198][ T71] team0 (unregistering): Port device team_slave_0 removed [ 891.934382][T18530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.573427][T18530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.159748][T18329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 893.207309][T18530] team0: Port device team_slave_0 added [ 893.217911][T18530] team0: Port device team_slave_1 added [ 893.449210][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4406'. [ 893.554738][T18329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 895.293051][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4408'. [ 895.319320][T18329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 895.376212][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4409'. [ 895.376236][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4409'. [ 895.415202][T18530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.415219][T18530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.415245][T18530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.421523][T18329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 895.541820][T18530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.541837][T18530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.541863][T18530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.675009][ T37] audit: type=1326 audit(1760706029.772:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.676368][ T37] audit: type=1326 audit(1760706029.772:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.677374][ T37] audit: type=1326 audit(1760706029.772:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.678425][ T37] audit: type=1326 audit(1760706029.772:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.678747][ T37] audit: type=1326 audit(1760706029.772:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.787964][ T37] audit: type=1326 audit(1760706029.772:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.819026][ T37] audit: type=1326 audit(1760706029.912:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.819083][ T37] audit: type=1326 audit(1760706029.912:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.819130][ T37] audit: type=1326 audit(1760706029.912:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 895.853084][ T37] audit: type=1326 audit(1760706029.952:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18918 comm="syz.7.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 896.138817][T18530] hsr_slave_0: entered promiscuous mode [ 896.150566][T18530] hsr_slave_1: entered promiscuous mode [ 896.156380][T18530] debugfs: 'hsr0' already exists in 'hsr' [ 896.156408][T18530] Cannot create hsr debugfs directory [ 896.202075][T18928] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4414'. [ 896.874534][T18938] lo speed is unknown, defaulting to 1000 [ 897.311199][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4418'. [ 897.879698][T18949] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 897.879761][T18949] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 897.879790][T18949] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 897.889138][T18949] syz.4.4418 (18949) used greatest stack depth: 15224 bytes left [ 898.507168][T18960] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4423'. [ 903.864558][T18329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.908741][T18329] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.938403][ T1522] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.938685][ T1522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.943292][ T1522] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.943434][ T1522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.721167][T19005] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4433'. [ 906.137451][T18530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 906.201365][T18530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 906.225999][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4438'. [ 906.238659][T18530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 906.371264][T18530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 906.387779][T19026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'. [ 906.643722][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.727629][T18329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.502738][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.543208][T19035] bridge0: entered promiscuous mode [ 907.543654][T19035] macsec1: entered promiscuous mode [ 907.545692][T19035] bridge0: port 3(macsec1) entered blocking state [ 907.545829][T19035] bridge0: port 3(macsec1) entered disabled state [ 907.546019][T19035] macsec1: entered allmulticast mode [ 907.546033][T19035] bridge0: entered allmulticast mode [ 907.608271][T19035] macsec1: left allmulticast mode [ 907.608293][T19035] bridge0: left allmulticast mode [ 907.650683][T19035] bridge0: left promiscuous mode [ 907.851335][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.427128][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.740773][ C1] vkms_vblank_simulate: vblank timer overrun [ 908.744611][T19044] tty tty34: ldisc open failed (-12), clearing slot 33 [ 908.902313][ C1] vkms_vblank_simulate: vblank timer overrun [ 909.161919][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 909.161938][ T37] audit: type=1800 audit(1760706043.262:1214): pid=19051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.4448" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 909.216060][T18329] veth0_vlan: entered promiscuous mode [ 909.282642][T18329] veth1_vlan: entered promiscuous mode [ 909.343063][T18530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.747448][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.990173][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.392513][T18530] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.398813][T18329] veth0_macvtap: entered promiscuous mode [ 912.435003][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.435247][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.436616][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.481565][T18329] veth1_macvtap: entered promiscuous mode [ 912.515694][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.516963][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.586688][T18329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.629982][T18329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.687178][ T1295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.705522][ T1295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.725624][ T1295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.734633][ C1] vkms_vblank_simulate: vblank timer overrun [ 912.785947][ T1295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.999115][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4459'. [ 915.372559][ T37] audit: type=1800 audit(1760706049.472:1215): pid=19084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.4459" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 915.372906][T19084] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 915.372964][T19084] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 915.372983][T19084] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 915.654412][ T1295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.654432][ T1295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.866231][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.866250][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.884983][ T37] audit: type=1800 audit(1760706049.962:1216): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4462" name="file1" dev="overlay" ino=2 res=0 errno=0 [ 916.034629][T18530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.686178][T19117] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.4469'. [ 916.776603][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.858253][T18530] veth0_vlan: entered promiscuous mode [ 917.712827][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.847508][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.142993][T18530] veth1_vlan: entered promiscuous mode [ 918.213368][T18530] veth0_macvtap: entered promiscuous mode [ 918.226366][T18530] veth1_macvtap: entered promiscuous mode [ 918.261968][T18530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.284398][T18530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.312227][ T1169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.314400][ T1169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.314444][ T1169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.314480][ T1169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.393701][T19129] loop7: detected capacity change from 0 to 16384 [ 918.444042][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.738854][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.791857][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.206536][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.231107][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.568095][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.605696][ C0] I/O error, dev loop7, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 919.659760][T19134] loop7: detected capacity change from 16384 to 0 [ 919.738019][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.760348][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.811562][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.964934][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.269595][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.324646][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.363999][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.268527][T19161] loop7: detected capacity change from 0 to 16384 [ 922.355730][ T1522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.355751][ T1522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.463170][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.463192][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.740893][T19162] loop7: detected capacity change from 16384 to 0 [ 922.827392][T19171] netlink: 'syz.0.4484': attribute type 1 has an invalid length. [ 922.827462][T19171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 922.828191][T19171] netlink: 'syz.0.4484': attribute type 1 has an invalid length. [ 922.828245][T19171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.395032][T19177] 9pnet_virtio: no channels available for device [ 924.265801][T19176] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4486'. [ 926.081408][T19184] syz.6.4489: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 926.081917][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.6.4489 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 926.081941][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 926.081961][T19184] Call Trace: [ 926.081973][T19184] [ 926.081982][T19184] dump_stack_lvl+0x189/0x250 [ 926.082022][T19184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.082047][T19184] ? __pfx__printk+0x10/0x10 [ 926.082072][T19184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 926.082101][T19184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 926.082131][T19184] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 926.082162][T19184] warn_alloc+0x22e/0x3b0 [ 926.082194][T19184] ? __pfx_warn_alloc+0x10/0x10 [ 926.082228][T19184] ? __get_vm_area_node+0x2bc/0x350 [ 926.082248][T19184] ? nf_tables_newset+0x1330/0x2540 [ 926.082275][T19184] __vmalloc_node_range_noprof+0x690/0x12d0 [ 926.082351][T19184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 926.082378][T19184] ? rcu_is_watching+0x15/0xb0 [ 926.082406][T19184] __kvmalloc_node_noprof+0x4a3/0x920 [ 926.082429][T19184] ? nf_tables_newset+0x1330/0x2540 [ 926.082447][T19184] ? nf_tables_newset+0x1330/0x2540 [ 926.082469][T19184] ? nft_set_lookup+0x128/0x150 [ 926.082491][T19184] ? nft_hash_privsize+0xef/0xf0 [ 926.082524][T19184] nf_tables_newset+0x1330/0x2540 [ 926.082560][T19184] ? __pfx_nf_tables_newset+0x10/0x10 [ 926.082608][T19184] ? __nla_parse+0x40/0x60 [ 926.082641][T19184] nfnetlink_rcv+0x11e0/0x2590 [ 926.082707][T19184] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 926.082751][T19184] ? ref_tracker_free+0x61e/0x7c0 [ 926.082812][T19184] ? __netlink_deliver_tap+0x807/0x850 [ 926.082839][T19184] ? netlink_deliver_tap+0x2e/0x1b0 [ 926.082886][T19184] netlink_unicast+0x846/0xa10 [ 926.082921][T19184] ? __pfx_netlink_unicast+0x10/0x10 [ 926.082949][T19184] ? netlink_sendmsg+0x642/0xb30 [ 926.082973][T19184] ? skb_put+0x11b/0x210 [ 926.083004][T19184] netlink_sendmsg+0x805/0xb30 [ 926.083040][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.083077][T19184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 926.083098][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 926.083126][T19184] __sock_sendmsg+0x21c/0x270 [ 926.083154][T19184] ____sys_sendmsg+0x508/0x820 [ 926.083180][T19184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 926.083211][T19184] ? import_iovec+0x74/0xa0 [ 926.083236][T19184] ___sys_sendmsg+0x21f/0x2a0 [ 926.083258][T19184] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.083328][T19184] ? __fget_files+0x2a/0x420 [ 926.083348][T19184] ? __fget_files+0x3a6/0x420 [ 926.083380][T19184] __x64_sys_sendmsg+0x1a1/0x260 [ 926.083404][T19184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.083445][T19184] ? do_syscall_64+0xbe/0xfa0 [ 926.083479][T19184] do_syscall_64+0xfa/0xfa0 [ 926.083505][T19184] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.083532][T19184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.083553][T19184] ? clear_bhb_loop+0x60/0xb0 [ 926.083577][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.083596][T19184] RIP: 0033:0x7fabecebefc9 [ 926.083623][T19184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.083642][T19184] RSP: 002b:00007fabeb11e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.083663][T19184] RAX: ffffffffffffffda RBX: 00007fabed115fa0 RCX: 00007fabecebefc9 [ 926.083679][T19184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 926.083692][T19184] RBP: 00007fabecf41f91 R08: 0000000000000000 R09: 0000000000000000 [ 926.083706][T19184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.083719][T19184] R13: 00007fabed116038 R14: 00007fabed115fa0 R15: 00007ffe137cdad8 [ 926.083756][T19184] [ 926.083771][T19184] Mem-Info: [ 926.083779][T19184] active_anon:2469 inactive_anon:10790 isolated_anon:0 [ 926.083779][T19184] active_file:6160 inactive_file:37380 isolated_file:0 [ 926.083779][T19184] unevictable:768 dirty:215 writeback:0 [ 926.083779][T19184] slab_reclaimable:12709 slab_unreclaimable:104869 [ 926.083779][T19184] mapped:29322 shmem:3571 pagetables:1551 [ 926.083779][T19184] sec_pagetables:0 bounce:0 [ 926.083779][T19184] kernel_misc_reclaimable:0 [ 926.083779][T19184] free:1167202 free_pcp:7039 free_cma:0 [ 926.083837][T19184] Node 0 active_anon:9876kB inactive_anon:43160kB active_file:24440kB inactive_file:149520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117288kB dirty:856kB writeback:0kB shmem:12748kB kernel_stack:12852kB pagetables:6064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 926.083882][T19184] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 926.083924][T19184] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.083981][T19184] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 926.084014][T19184] Node 0 DMA32 free:753880kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9876kB inactive_anon:43160kB active_file:24440kB inactive_file:149520kB unevictable:1536kB writepending:856kB zspages:0kB present:3129332kB managed:2574584kB mlocked:0kB bounce:0kB free_pcp:28156kB local_pcp:8732kB free_cma:0kB [ 926.084068][T19184] lowmem_reserve[]: 0 0 1 1 1 [ 926.084100][T19184] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.084156][T19184] lowmem_reserve[]: 0 0 0 0 0 [ 926.084188][T19184] Node 1 Normal free:3899568kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 926.084248][T19184] lowmem_reserve[]: 0 0 0 0 0 [ 926.084287][T19184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 926.089549][T19184] Node 0 DMA32: 647*4kB (UME) 665*8kB (UM) 525*16kB (UME) 540*32kB (UM) 374*64kB (UME) 156*128kB (U) 64*256kB (UM) 35*512kB (UM) 9*1024kB (UM) 3*2048kB (UME) 153*4096kB (UM) = 753844kB [ 926.089708][T19184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 926.089806][T19184] Node 1 Normal: 228*4kB (UME) 46*8kB (UME) 37*16kB (UME) 221*32kB (UME) 93*64kB (UME) 31*128kB (UME) 13*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3899568kB [ 926.089965][T19184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 926.089982][T19184] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 926.089999][T19184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 926.090014][T19184] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 926.090030][T19184] 46882 total pagecache pages [ 926.090042][T19184] 0 pages in swap cache [ 926.090050][T19184] Free swap = 124996kB [ 926.090057][T19184] Total swap = 124996kB [ 926.090065][T19184] 2097051 pages RAM [ 926.090073][T19184] 0 pages HighMem/MovableOnly [ 926.090081][T19184] 421443 pages reserved [ 926.090088][T19184] 0 pages cma reserved [ 928.847373][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4494'. [ 933.436455][T19220] lo speed is unknown, defaulting to 1000 [ 935.760708][ T37] audit: type=1326 audit(1760706069.852:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 935.795286][ T37] audit: type=1326 audit(1760706069.892:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 935.795343][ T37] audit: type=1326 audit(1760706069.892:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 935.795634][ T37] audit: type=1326 audit(1760706069.892:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 935.799145][ T37] audit: type=1326 audit(1760706069.892:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 935.998561][ T37] audit: type=1326 audit(1760706070.062:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 936.067488][ T37] audit: type=1326 audit(1760706070.152:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 936.071629][ T37] audit: type=1326 audit(1760706070.162:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 936.071688][ T37] audit: type=1326 audit(1760706070.172:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 936.071731][ T37] audit: type=1326 audit(1760706070.172:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19235 comm="syz.7.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 936.448103][T19245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4508'. [ 936.869306][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.563663][T19284] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 941.563730][T19284] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 944.149430][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 944.316678][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 944.316710][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 944.316734][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 944.359368][ T31] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 944.359396][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.359414][ T31] usb 5-1: Product: syz [ 944.359427][ T31] usb 5-1: Manufacturer: syz [ 944.359440][ T31] usb 5-1: SerialNumber: syz [ 944.393351][ T31] usb 5-1: config 0 descriptor?? [ 944.624333][T19301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 944.624456][T19301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 944.626913][ T31] usb 5-1: ucan: probing device on interface #0 [ 945.229547][ T31] usb 5-1: ucan: failed to retrieve device info [ 945.229569][ T31] usb 5-1: ucan: probe failed; try to update the device firmware [ 945.364911][ T31] usb 5-1: USB disconnect, device number 5 [ 948.576170][T19327] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4535'. [ 948.778298][ T37] kauditd_printk_skb: 269 callbacks suppressed [ 948.778318][ T37] audit: type=1326 audit(1760706082.872:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.778368][ T37] audit: type=1326 audit(1760706082.872:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.779121][ T37] audit: type=1326 audit(1760706082.872:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.782506][ T37] audit: type=1326 audit(1760706082.882:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.783652][ T37] audit: type=1326 audit(1760706082.882:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.783965][ T37] audit: type=1326 audit(1760706082.882:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.784492][ T37] audit: type=1326 audit(1760706082.882:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.784828][ T37] audit: type=1326 audit(1760706082.882:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.785153][ T37] audit: type=1326 audit(1760706082.882:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 948.785685][ T37] audit: type=1326 audit(1760706082.882:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19332 comm="syz.7.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 949.996096][T19352] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4547'. [ 951.150181][T19360] bridge0: entered promiscuous mode [ 951.150296][T19360] macsec1: entered promiscuous mode [ 951.152269][T19360] bridge0: port 2(macsec1) entered blocking state [ 951.152409][T19360] bridge0: port 2(macsec1) entered disabled state [ 951.152609][T19360] macsec1: entered allmulticast mode [ 951.152623][T19360] bridge0: entered allmulticast mode [ 952.032566][T19360] macsec1: left allmulticast mode [ 952.032591][T19360] bridge0: left allmulticast mode [ 952.100504][T19360] bridge0: left promiscuous mode [ 952.754361][T19374] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 952.754414][T19374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 952.754449][T19374] IPv6: NLM_F_CREATE should be set when creating new route [ 952.754479][T19374] IPv6: NLM_F_CREATE should be set when creating new route [ 952.755378][T19374] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 952.755427][T19374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 953.488903][T18330] Bluetooth: hci2: unexpected event for opcode 0x202d [ 955.930478][T19402] loop7: detected capacity change from 0 to 16384 [ 956.090064][T19406] 9pnet_virtio: no channels available for device [ 956.430703][T19405] loop7: detected capacity change from 16384 to 0 [ 956.433782][ C1] I/O error, dev loop7, sector 1800 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 957.369674][T19416] bridge0: entered promiscuous mode [ 957.369790][T19416] macsec1: entered promiscuous mode [ 957.371827][T19416] bridge0: port 3(macsec1) entered blocking state [ 957.371984][T19416] bridge0: port 3(macsec1) entered disabled state [ 957.372179][T19416] macsec1: entered allmulticast mode [ 957.372192][T19416] bridge0: entered allmulticast mode [ 958.258007][T19416] macsec1: left allmulticast mode [ 958.258030][T19416] bridge0: left allmulticast mode [ 958.360376][T19416] bridge0: left promiscuous mode [ 958.790962][T19423] netlink: 'syz.6.4567': attribute type 1 has an invalid length. [ 958.790996][T19423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 958.791018][T19423] IPv6: NLM_F_CREATE should be set when creating new route [ 958.791035][T19423] IPv6: NLM_F_CREATE should be set when creating new route [ 958.791761][T19423] netlink: 'syz.6.4567': attribute type 1 has an invalid length. [ 958.791803][T19423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 959.541097][T19425] lo speed is unknown, defaulting to 1000 [ 961.741063][T13031] IPVS: starting estimator thread 0... [ 961.830727][T19441] IPVS: using max 9 ests per chain, 21600 per kthread [ 962.136975][ T5873] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 962.292027][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 962.292062][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.292103][ T5873] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 962.292125][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.471733][ T5873] usb 1-1: config 0 descriptor?? [ 962.472886][T19440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 963.435440][T19461] bridge0: entered promiscuous mode [ 963.435545][T19461] macsec1: entered promiscuous mode [ 963.437447][T19461] bridge0: port 2(macsec1) entered blocking state [ 963.437574][T19461] bridge0: port 2(macsec1) entered disabled state [ 963.437761][T19461] macsec1: entered allmulticast mode [ 963.437774][T19461] bridge0: entered allmulticast mode [ 963.527573][T19461] macsec1: left allmulticast mode [ 963.527594][T19461] bridge0: left allmulticast mode [ 963.561775][T19461] bridge0: left promiscuous mode [ 963.735613][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 963.735744][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 963.749008][ T5873] usb 1-1: USB disconnect, device number 2 [ 963.826504][T19470] 9pnet_virtio: no channels available for device [ 964.363904][T19476] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 964.363958][T19476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.363999][T19476] IPv6: NLM_F_CREATE should be set when creating new route [ 964.364030][T19476] IPv6: NLM_F_CREATE should be set when creating new route [ 964.364952][T19476] netlink: 'syz.3.4582': attribute type 1 has an invalid length. [ 964.365001][T19476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 966.740289][T19494] lo speed is unknown, defaulting to 1000 [ 967.305343][T19506] loop7: detected capacity change from 0 to 16384 [ 969.787016][T19507] loop7: detected capacity change from 16384 to 0 [ 970.236860][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 970.330193][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 970.482659][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.482691][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.482713][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 970.482754][ T31] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 970.482775][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.498987][ T31] usb 1-1: config 0 descriptor?? [ 970.937404][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 970.937484][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 970.945124][ T31] usb 1-1: USB disconnect, device number 3 [ 971.015681][T19549] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 971.015890][T19549] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 971.134018][ T37] kauditd_printk_skb: 276 callbacks suppressed [ 971.134036][ T37] audit: type=1326 audit(1760706105.232:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.134458][ T37] audit: type=1326 audit(1760706105.232:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.135725][ T37] audit: type=1326 audit(1760706105.232:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.137054][ T37] audit: type=1326 audit(1760706105.232:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.137511][ T37] audit: type=1326 audit(1760706105.232:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.137907][ T37] audit: type=1326 audit(1760706105.232:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.138566][ T37] audit: type=1326 audit(1760706105.232:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.138936][ T37] audit: type=1326 audit(1760706105.232:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.209399][ T37] audit: type=1326 audit(1760706105.232:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 971.529720][ T37] audit: type=1326 audit(1760706105.632:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19552 comm="syz.3.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d53f65e67 code=0x7ffc0000 [ 971.595593][T19560] bridge0: entered promiscuous mode [ 971.595710][T19560] macsec1: entered promiscuous mode [ 971.597652][T19560] bridge0: port 2(macsec1) entered blocking state [ 971.597765][T19560] bridge0: port 2(macsec1) entered disabled state [ 971.597916][T19560] macsec1: entered allmulticast mode [ 971.597929][T19560] bridge0: entered allmulticast mode [ 971.657312][T19560] macsec1: left allmulticast mode [ 971.657334][T19560] bridge0: left allmulticast mode [ 971.703662][T19560] bridge0: left promiscuous mode [ 972.097078][T19574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4619'. [ 973.133603][T19586] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 973.133661][T19586] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 974.072332][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 974.730641][T19601] loop7: detected capacity change from 0 to 16384 [ 976.279783][T19605] loop7: detected capacity change from 16384 to 0 [ 976.280452][ C0] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 976.299336][ T37] kauditd_printk_skb: 327 callbacks suppressed [ 976.299356][ T37] audit: type=1326 audit(1760706110.392:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce895e67 code=0x7ffc0000 [ 976.299420][ T37] audit: type=1326 audit(1760706110.392:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dce83b099 code=0x7ffc0000 [ 976.299469][ T37] audit: type=1326 audit(1760706110.392:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 976.429740][ T37] audit: type=1326 audit(1760706110.512:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce895e67 code=0x7ffc0000 [ 976.430500][ T37] audit: type=1326 audit(1760706110.532:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dce83b099 code=0x7ffc0000 [ 976.430553][ T37] audit: type=1326 audit(1760706110.532:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce895e67 code=0x7ffc0000 [ 976.430600][ T37] audit: type=1326 audit(1760706110.532:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dce83b099 code=0x7ffc0000 [ 976.430839][ T37] audit: type=1326 audit(1760706110.532:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 976.432878][ T37] audit: type=1326 audit(1760706110.532:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce895e67 code=0x7ffc0000 [ 976.432931][ T37] audit: type=1326 audit(1760706110.532:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.0.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dce83b099 code=0x7ffc0000 [ 978.505379][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 979.780711][ T5961] IPVS: starting estimator thread 0... [ 979.879521][T19657] IPVS: using max 11 ests per chain, 26400 per kthread [ 980.013548][T19659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4648'. [ 980.197127][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4648'. [ 981.318332][ T37] kauditd_printk_skb: 132 callbacks suppressed [ 981.318352][ T37] audit: type=1326 audit(1760706115.412:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 981.318404][ T37] audit: type=1326 audit(1760706115.412:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 981.318445][ T37] audit: type=1326 audit(1760706115.412:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 981.382939][ T37] audit: type=1326 audit(1760706115.482:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 981.382995][ T37] audit: type=1326 audit(1760706115.482:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 981.383040][ T37] audit: type=1326 audit(1760706115.482:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 981.389430][ T37] audit: type=1326 audit(1760706115.482:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 981.389497][ T37] audit: type=1326 audit(1760706115.482:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 981.389565][ T37] audit: type=1326 audit(1760706115.482:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 981.600233][ T37] audit: type=1326 audit(1760706115.702:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19664 comm="syz.7.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 982.454062][T19680] loop7: detected capacity change from 0 to 16384 [ 982.860454][T19681] loop7: detected capacity change from 16384 to 0 [ 982.869369][ C0] I/O error, dev loop7, sector 1280 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 984.284344][T19696] loop7: detected capacity change from 0 to 16384 [ 985.261099][T19698] loop7: detected capacity change from 16384 to 0 [ 985.720985][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 987.029061][ T37] kauditd_printk_skb: 255 callbacks suppressed [ 987.029078][ T37] audit: type=1800 audit(1760706121.122:2526): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4669" name="file1" dev="overlay" ino=10 res=0 errno=0 [ 987.722880][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4670'. [ 988.849366][T18330] Bluetooth: hci2: unexpected event for opcode 0x202d [ 989.202177][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4676'. [ 990.301181][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4677'. [ 991.310521][T19762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4678'. [ 992.428004][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 995.041188][T19790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4686'. [ 998.274478][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.058958][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4699'. [ 1001.227263][T18330] Bluetooth: hci3: command 0x0406 tx timeout [ 1001.644701][ T37] audit: type=1326 audit(1760706135.742:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.645179][ T37] audit: type=1326 audit(1760706135.742:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.651310][ T37] audit: type=1326 audit(1760706135.752:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.652437][ T37] audit: type=1326 audit(1760706135.752:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.652788][ T37] audit: type=1326 audit(1760706135.752:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.653423][ T37] audit: type=1326 audit(1760706135.752:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.653747][ T37] audit: type=1326 audit(1760706135.752:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.654066][ T37] audit: type=1326 audit(1760706135.752:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.654772][ T37] audit: type=1326 audit(1760706135.752:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1001.655257][ T37] audit: type=1326 audit(1760706135.752:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19896 comm="syz.0.4708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1006.385145][T19949] tty tty28: ldisc open failed (-12), clearing slot 27 [ 1007.811912][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4728'. [ 1008.687288][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4732'. [ 1008.781381][T19981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4735'. [ 1008.814435][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1009.203763][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.203794][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.203824][ T31] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1009.203839][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.209186][ T31] usb 7-1: config 0 descriptor?? [ 1009.418522][T19991] 9pnet_virtio: no channels available for device [ 1011.244066][T19999] tty tty26: ldisc open failed (-12), clearing slot 25 [ 1011.259860][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1011.259995][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1011.264383][ T31] usb 7-1: USB disconnect, device number 7 [ 1011.414850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.785906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.914537][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4745'. [ 1012.752270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.799359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.924096][ T37] kauditd_printk_skb: 326 callbacks suppressed [ 1012.924115][ T37] audit: type=1326 audit(1760706147.022:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.924251][ T37] audit: type=1326 audit(1760706147.022:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.927220][ T37] audit: type=1326 audit(1760706147.022:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.940940][ T37] audit: type=1326 audit(1760706147.032:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.941806][ T37] audit: type=1326 audit(1760706147.042:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.941856][ T37] audit: type=1326 audit(1760706147.042:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.949372][ T37] audit: type=1326 audit(1760706147.042:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.950763][ T37] audit: type=1326 audit(1760706147.042:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.950813][ T37] audit: type=1326 audit(1760706147.052:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1012.950856][ T37] audit: type=1326 audit(1760706147.052:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20024 comm="syz.6.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fabecebefc9 code=0x7ffc0000 [ 1014.136893][T20036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1014.227207][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.385200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.205844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.331575][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4761'. [ 1016.067511][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.155654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.645859][T20076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4768'. [ 1016.985639][ T5826] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1017.934817][ T37] kauditd_printk_skb: 373 callbacks suppressed [ 1017.934834][ T37] audit: type=1326 audit(1760706152.032:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 1017.934880][ T37] audit: type=1326 audit(1760706152.032:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 1017.934921][ T37] audit: type=1326 audit(1760706152.032:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1017.945830][ T37] audit: type=1326 audit(1760706152.042:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 1017.945886][ T37] audit: type=1326 audit(1760706152.042:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 1017.945948][ T37] audit: type=1326 audit(1760706152.042:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1017.963596][ T37] audit: type=1326 audit(1760706152.062:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 1017.963653][ T37] audit: type=1326 audit(1760706152.062:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c2da1b099 code=0x7ffc0000 [ 1017.964115][ T37] audit: type=1326 audit(1760706152.062:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1017.970853][ T37] audit: type=1326 audit(1760706152.072:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20091 comm="syz.7.4775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c2da75e67 code=0x7ffc0000 [ 1018.827577][T20100] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4777'. [ 1019.293030][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4779'. [ 1019.348082][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1020.001081][T20122] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1020.260577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.296197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.801805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1020.956541][ T5961] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1021.237072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1021.589386][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 1021.606994][ T5961] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1021.607023][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.607041][ T5961] usb 5-1: Product: syz [ 1021.607053][ T5961] usb 5-1: Manufacturer: syz [ 1021.607065][ T5961] usb 5-1: SerialNumber: syz [ 1022.251127][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.328222][ T5961] usb 5-1: config 0 descriptor?? [ 1022.413514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1022.702166][ T5961] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1022.924057][ T5826] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1023.092253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.413008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.647531][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.783287][ T5961] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1023.821436][ T5961] usb 5-1: USB disconnect, device number 6 [ 1023.841246][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1024.037859][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.734413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.343030][ T5873] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1028.529868][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1028.529901][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.529944][ T5873] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1028.529966][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.600691][ T5873] usb 7-1: config 0 descriptor?? [ 1028.601685][T20215] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1029.279696][ T5873] usbhid 7-1:0.0: can't add hid device: -71 [ 1029.279781][ T5873] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1029.282353][ T5873] usb 7-1: USB disconnect, device number 8 [ 1032.739758][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1036.378428][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4819'. [ 1038.032330][T20278] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4833'. [ 1038.514406][ T37] kauditd_printk_skb: 59 callbacks suppressed [ 1038.514424][ T37] audit: type=1326 audit(1760706172.612:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20287 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1038.529978][ T37] audit: type=1326 audit(1760706172.622:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20287 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1038.532382][ T37] audit: type=1326 audit(1760706172.632:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20287 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1038.537039][ T37] audit: type=1326 audit(1760706172.632:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20287 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2da7efc9 code=0x7ffc0000 [ 1042.525050][T20329] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4851'. [ 1043.819439][ T5873] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1043.890019][ T5989] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1043.982239][ T5873] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.982259][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1043.982273][ T5873] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1043.982296][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1043.982307][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.994191][T20343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.053219][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.053239][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.053250][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.053273][ T5989] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1044.053284][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.095525][ T5989] usb 1-1: config 0 descriptor?? [ 1044.568355][ T5989] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input19 [ 1044.637867][ T5989] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input20 [ 1044.673021][ T5989] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input21 [ 1044.697503][ T5989] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0016/input/input22 [ 1044.708772][ T5989] hid-udraw 0003:20D6:CB17.0016: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 1044.748330][ T5826] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1044.776059][ T44] usb 1-1: USB disconnect, device number 4 [ 1045.044771][ T5873] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1045.063016][ T5873] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input18 [ 1045.592892][ T5873] usb 4-1: USB disconnect, device number 14 [ 1045.592982][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1045.817250][T20376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1046.015892][T20378] 9pnet_virtio: no channels available for device [ 1046.385763][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1047.023762][T20397] loop7: detected capacity change from 0 to 16384 [ 1047.379979][T20400] loop7: detected capacity change from 16384 to 0 [ 1047.383284][ C0] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 1048.845713][T20410] syz.6.4881 (20410) used greatest stack depth: 14840 bytes left [ 1049.185638][T20415] 9pnet_virtio: no channels available for device [ 1049.459944][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1049.671074][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4888'. [ 1051.023804][T20452] 9pnet_virtio: no channels available for device [ 1052.158926][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1054.317014][T20480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1054.453783][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1059.109356][ T5961] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1059.261616][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.261637][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.261659][ T5961] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1059.261671][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.273090][ T5961] usb 7-1: config 0 descriptor?? [ 1059.368770][T20506] loop7: detected capacity change from 0 to 16384 [ 1059.624203][ T5961] usbhid 7-1:0.0: can't add hid device: -71 [ 1059.624325][ T5961] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1059.628507][ T5961] usb 7-1: USB disconnect, device number 9 [ 1059.727691][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.749848][T20507] loop7: detected capacity change from 16384 to 0 [ 1059.785897][ C0] I/O error, dev loop7, sector 1408 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1060.049023][T20514] netlink: 'syz.7.4915': attribute type 1 has an invalid length. [ 1060.394335][T20514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1061.436049][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1061.455614][T20529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1069.250604][T20562] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1070.370720][ T37] audit: type=1800 audit(1760706203.392:3319): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.4930" name="file1" dev="overlay" ino=2774 res=0 errno=0 [ 1071.188332][T20582] overlayfs: missing 'lowerdir' [ 1072.396412][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1074.416281][ T31] IPVS: starting estimator thread 0... [ 1074.504204][T20613] IPVS: using max 13 ests per chain, 31200 per kthread [ 1076.238400][T20634] overlayfs: missing 'lowerdir' [ 1077.261863][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4957'. [ 1078.131222][ T5826] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1085.992496][T20724] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4985'. [ 1086.398704][T20728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4986'. [ 1092.644299][T20764] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4996'. [ 1093.146801][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'. [ 1099.480587][ T5873] IPVS: starting estimator thread 0... [ 1099.569445][T20823] IPVS: using max 8 ests per chain, 19200 per kthread [ 1099.772076][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1105.057947][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1105.234471][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1105.630953][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1106.501554][T20873] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1106.501590][T20873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1106.501601][T20873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1107.858262][T20882] 9pnet_virtio: no channels available for device [ 1112.580722][T20928] lo speed is unknown, defaulting to 1000 [ 1113.188549][ T37] audit: type=1326 audit(1760706247.282:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.188617][ T37] audit: type=1326 audit(1760706247.282:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.188663][ T37] audit: type=1326 audit(1760706247.282:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.188707][ T37] audit: type=1326 audit(1760706247.282:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.188751][ T37] audit: type=1326 audit(1760706247.282:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.212889][ T37] audit: type=1326 audit(1760706247.312:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.212943][ T37] audit: type=1326 audit(1760706247.312:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.212987][ T37] audit: type=1326 audit(1760706247.312:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.213030][ T37] audit: type=1326 audit(1760706247.312:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.215018][ T37] audit: type=1326 audit(1760706247.312:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20936 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3d53f6efc9 code=0x7ffc0000 [ 1113.753472][T20942] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5041'. [ 1117.779479][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1117.932543][ T9] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 1117.932571][ T9] usb 4-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1117.932590][ T9] usb 4-1: config 0 has no interface number 0 [ 1117.932639][ T9] usb 4-1: config 0 interface 92 altsetting 243 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1117.932666][ T9] usb 4-1: config 0 interface 92 altsetting 243 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1117.932687][ T9] usb 4-1: config 0 interface 92 altsetting 243 endpoint 0xE has invalid maxpacket 63913, setting to 64 [ 1117.932712][ T9] usb 4-1: config 0 interface 92 altsetting 243 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1117.932738][ T9] usb 4-1: config 0 interface 92 has no altsetting 0 [ 1117.938880][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=83.4b [ 1117.938909][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.938928][ T9] usb 4-1: Product: syz [ 1117.938942][ T9] usb 4-1: Manufacturer: syz [ 1117.938956][ T9] usb 4-1: SerialNumber: syz [ 1117.950647][ T9] usb 4-1: config 0 descriptor?? [ 1117.954369][T20969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1117.966070][ T9] sierra 4-1:0.92: Sierra USB modem converter detected [ 1118.719335][T20981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.961122][T20984] overlayfs: failed to resolve './file1': -2 [ 1120.257189][T20987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5053'. [ 1120.693563][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5053'. [ 1120.724528][ T9] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1120.777017][ T9] usb 4-1: USB disconnect, device number 15 [ 1120.905202][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1120.920683][ T9] sierra 4-1:0.92: device disconnected [ 1121.162925][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.403999][T21006] lo speed is unknown, defaulting to 1000 [ 1124.270485][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'. [ 1124.415767][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5061'. [ 1124.906072][T21031] overlayfs: failed to resolve './file0': -2 [ 1130.142287][T21066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5073'. [ 1130.182566][T21067] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5072'. [ 1130.435778][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5073'. [ 1130.474792][T21078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5072'. [ 1131.066978][T21085] overlayfs: failed to resolve './file0': -2 [ 1131.147798][T21089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5078'. [ 1133.245745][T21114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1134.316283][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1135.239723][ T44] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1135.707301][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.707335][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.707356][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.707399][ T44] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1135.707421][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.868856][ T44] usb 7-1: config 0 descriptor?? [ 1136.092316][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1136.228374][T21142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1136.299812][ T44] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0017/input/input23 [ 1136.319355][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1136.367758][ T44] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0017/input/input24 [ 1136.391893][ T44] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0017/input/input25 [ 1136.406170][ T5961] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1136.436111][ T44] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:20D6:CB17.0017/input/input26 [ 1136.466276][ T44] hid-udraw 0003:20D6:CB17.0017: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.6-1/input0 [ 1136.479396][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1136.497446][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1136.497478][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.497498][ T31] usb 5-1: Product: syz [ 1136.497512][ T31] usb 5-1: Manufacturer: syz [ 1136.497533][ T31] usb 5-1: SerialNumber: syz [ 1136.556089][ T5989] usb 7-1: USB disconnect, device number 10 [ 1136.568753][ T31] usb 5-1: config 0 descriptor?? [ 1136.706473][T21153] 9pnet_virtio: no channels available for device [ 1136.900391][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 1137.271908][ T5961] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1137.271938][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.271958][ T5961] usb 1-1: Product: syz [ 1137.271972][ T5961] usb 1-1: Manufacturer: syz [ 1137.271986][ T5961] usb 1-1: SerialNumber: syz [ 1137.386031][ T5961] usb 1-1: config 0 descriptor?? [ 1137.408949][ T31] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1137.760733][ T5961] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1138.801440][T21160] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5101'. [ 1138.978157][ T31] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1139.002705][ T31] usb 5-1: USB disconnect, device number 7 [ 1139.131319][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1140.036680][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1140.104576][ T5961] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1140.113429][ T5961] usb 1-1: USB disconnect, device number 5 [ 1142.882636][T21200] 9pnet_virtio: no channels available for device [ 1146.673088][T21218] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5118'. [ 1146.830840][ T5961] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1146.989764][ T5961] usb 4-1: Using ep0 maxpacket: 8 [ 1146.993318][ T5961] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1146.993340][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.993350][ T5961] usb 4-1: Product: syz [ 1146.993357][ T5961] usb 4-1: Manufacturer: syz [ 1146.993365][ T5961] usb 4-1: SerialNumber: syz [ 1147.045980][ T5961] usb 4-1: config 0 descriptor?? [ 1148.038084][ T5961] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1148.553393][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1148.553627][ T5961] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1148.562311][ T5961] usb 4-1: USB disconnect, device number 16 [ 1149.726235][T21243] 9pnet_virtio: no channels available for device [ 1150.406224][T21241] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5123'. [ 1150.779430][ T5989] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1150.932490][ T5989] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1150.932519][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.938023][ T5989] usb 4-1: config 0 descriptor?? [ 1151.857481][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5128'. [ 1151.857504][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5128'. [ 1151.857530][T21246] netlink: 'syz.3.5128': attribute type 12 has an invalid length. [ 1152.209821][ T5989] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1152.219070][ T5989] [drm:udl_init] *ERROR* Selecting channel failed [ 1152.286807][ T5989] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1152.286823][ T5989] [drm] Initialized udl on minor 2 [ 1152.311733][ T5989] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1152.314717][ T5989] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1152.348692][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1152.382470][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1152.383409][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1152.386198][ T5989] usb 4-1: USB disconnect, device number 17 [ 1155.818442][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1155.944812][T21293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1157.144459][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1157.280041][T21305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1158.196306][T21313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5145'. [ 1158.763107][ T37] kauditd_printk_skb: 660 callbacks suppressed [ 1158.763124][ T37] audit: type=1326 audit(1760706292.862:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.767052][ T37] audit: type=1326 audit(1760706292.862:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.825597][ T37] audit: type=1326 audit(1760706292.862:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.825655][ T37] audit: type=1326 audit(1760706292.922:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.827194][ T37] audit: type=1326 audit(1760706292.922:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.827705][ T37] audit: type=1326 audit(1760706292.922:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.918447][ T37] audit: type=1326 audit(1760706292.922:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.918504][ T37] audit: type=1326 audit(1760706293.012:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.918551][ T37] audit: type=1326 audit(1760706293.012:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dce89efc9 code=0x7ffc0000 [ 1158.928776][ T37] audit: type=1326 audit(1760706293.022:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21322 comm="syz.0.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dce895e67 code=0x7ffc0000 [ 1159.339382][ T5961] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1159.492030][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.492062][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.492084][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.492125][ T5961] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1159.492146][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.553186][ T5961] usb 5-1: config 0 descriptor?? [ 1160.212255][ T5961] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0018/input/input27 [ 1160.279123][ T5961] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0018/input/input28 [ 1160.306935][ T5961] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0018/input/input29 [ 1160.329015][ T5961] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0018/input/input30 [ 1160.714078][ T5961] hid-udraw 0003:20D6:CB17.0018: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 1160.719002][ T5961] usb 5-1: USB disconnect, device number 8 [ 1164.213737][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5165'. [ 1164.956751][T18330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1164.987544][T12863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.015456][T18330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.034255][T18330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.037941][T18330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.038891][T18330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1165.631930][T21385] 9pnet_virtio: no channels available for device [ 1166.682891][T12863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.989550][T21377] lo speed is unknown, defaulting to 1000 [ 1167.143978][T18330] Bluetooth: hci0: command tx timeout [ 1167.632912][T12863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.920678][T21395] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5171'. [ 1168.093122][T12863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.239652][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5171'. [ 1169.229538][T18330] Bluetooth: hci0: command tx timeout [ 1169.320236][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5180'. [ 1170.376632][T21377] chnl_net:caif_netlink_parms(): no params data found [ 1170.455114][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5181'. [ 1171.208773][T21441] Bluetooth: MGMT ver 1.23 [ 1171.266933][T12863] bridge_slave_1: left allmulticast mode [ 1171.266960][T12863] bridge_slave_1: left promiscuous mode [ 1171.267183][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.299478][T18330] Bluetooth: hci0: command tx timeout [ 1171.351047][T12863] bridge_slave_0: left allmulticast mode [ 1171.351083][T12863] bridge_slave_0: left promiscuous mode [ 1171.351333][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.985825][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1173.145510][ T9] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 1173.145538][ T9] usb 5-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1173.145555][ T9] usb 5-1: config 0 has no interface number 0 [ 1173.145605][ T9] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1173.145633][ T9] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1173.145653][ T9] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0xE has invalid maxpacket 63913, setting to 64 [ 1173.145678][ T9] usb 5-1: config 0 interface 92 altsetting 243 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1173.145704][ T9] usb 5-1: config 0 interface 92 has no altsetting 0 [ 1173.250522][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=83.4b [ 1173.250557][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.250570][ T9] usb 5-1: Product: syz [ 1173.250582][ T9] usb 5-1: Manufacturer: syz [ 1173.250596][ T9] usb 5-1: SerialNumber: syz [ 1173.254036][ T9] usb 5-1: config 0 descriptor?? [ 1173.255084][T21456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1173.257072][ T9] sierra 5-1:0.92: Sierra USB modem converter detected [ 1173.379463][T18330] Bluetooth: hci0: command tx timeout [ 1174.137274][T21470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.267407][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5191'. [ 1175.295986][T21472] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5191'. [ 1175.296258][T21472] nbd: must specify at least one socket [ 1176.026787][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1176.047909][ T9] usb 5-1: USB disconnect, device number 9 [ 1176.107431][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1176.107988][ T9] sierra 5-1:0.92: device disconnected [ 1176.508446][ T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1176.796404][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.796437][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.796477][ T31] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1176.796498][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.854375][ T31] usb 7-1: config 0 descriptor?? [ 1177.127170][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1177.258699][T21492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1177.662771][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1177.662907][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1177.667122][ T31] usb 7-1: USB disconnect, device number 11 [ 1179.219764][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1179.404102][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.404136][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.404156][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1179.404195][ T31] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1179.404216][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.415353][ T31] usb 5-1: config 0 descriptor?? [ 1179.796997][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1179.822026][T21511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1179.822131][T21511] nbd: must specify at least one socket [ 1180.337471][ T31] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0019/input/input31 [ 1180.431746][ T31] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0019/input/input32 [ 1180.473722][ T31] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0019/input/input33 [ 1180.504952][ T31] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.0019/input/input34 [ 1180.542298][ T31] hid-udraw 0003:20D6:CB17.0019: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 1180.569639][ T31] usb 5-1: USB disconnect, device number 10 [ 1182.293948][T21535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1183.280045][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.224286][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5211'. [ 1184.959497][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5215'. [ 1185.008153][T21553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5215'. [ 1185.772042][T12863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.890030][T12863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.934624][T12863] bond0 (unregistering): Released all slaves [ 1186.385551][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1186.393516][T21564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5217'. [ 1188.900574][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1188.903746][T21597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1188.998560][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5226'. [ 1191.856221][T21630] 9pnet_virtio: no channels available for device [ 1192.339491][T21377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.339636][T21377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.339890][T21377] bridge_slave_0: entered allmulticast mode [ 1192.349403][T21377] bridge_slave_0: entered promiscuous mode [ 1192.353718][T21377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.353861][T21377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.354085][T21377] bridge_slave_1: entered allmulticast mode [ 1192.357100][T21377] bridge_slave_1: entered promiscuous mode [ 1194.352305][T12863] hsr_slave_0: left promiscuous mode [ 1194.644463][T12863] hsr_slave_1: left promiscuous mode [ 1194.646302][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.646328][T12863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.815629][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.815648][T12863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.691351][T18330] Bluetooth: hci4: unexpected event for opcode 0x202d [ 1195.697971][T12863] veth1_macvtap: left promiscuous mode [ 1195.698085][T12863] veth0_macvtap: left promiscuous mode [ 1195.698353][T12863] veth1_vlan: left promiscuous mode [ 1195.698540][T12863] veth0_vlan: left promiscuous mode [ 1203.062470][T21733] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5258'. [ 1206.769689][ T5989] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1207.906842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1207.944870][ T5989] usb 5-1: config 0 has an invalid interface number: 92 but max is 0 [ 1207.944897][ T5989] usb 5-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1207.944916][ T5989] usb 5-1: config 0 has no interface number 0 [ 1207.944966][ T5989] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1207.944992][ T5989] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1207.945014][ T5989] usb 5-1: config 0 interface 92 altsetting 243 endpoint 0xE has invalid maxpacket 63913, setting to 64 [ 1207.945040][ T5989] usb 5-1: config 0 interface 92 altsetting 243 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1207.945066][ T5989] usb 5-1: config 0 interface 92 has no altsetting 0 [ 1208.041615][ T5989] usb 5-1: New USB device found, idVendor=1199, idProduct=0024, bcdDevice=83.4b [ 1208.041644][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.041663][ T5989] usb 5-1: Product: syz [ 1208.041677][ T5989] usb 5-1: Manufacturer: syz [ 1208.041690][ T5989] usb 5-1: SerialNumber: syz [ 1208.091764][ T5989] usb 5-1: config 0 descriptor?? [ 1208.096566][T21757] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1208.117096][ T5989] sierra 5-1:0.92: Sierra USB modem converter detected [ 1208.147878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.504702][ T993] hid_parser_main: 4 callbacks suppressed [ 1208.504727][ T993] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.527770][ T993] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1208.688693][ C1] vkms_vblank_simulate: vblank timer overrun [ 1208.880177][T21788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.398342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.632674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1209.759979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.752001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.753105][ T5989] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1210.786026][ T5989] usb 5-1: USB disconnect, device number 11 [ 1210.922954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1210.943953][ T5989] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1210.949448][ T5989] sierra 5-1:0.92: device disconnected [ 1211.183299][ C1] vkms_vblank_simulate: vblank timer overrun [ 1211.380266][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1211.406543][T21798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5277'. [ 1212.029303][ C1] vkms_vblank_simulate: vblank timer overrun [ 1212.550116][T12863] team0 (unregistering): Port device team_slave_1 removed [ 1212.593682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1213.589348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.217397][T12863] team0 (unregistering): Port device team_slave_0 removed [ 1214.341081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.012532][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.092832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.086842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.458018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.514366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.645240][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5290'. [ 1216.791277][T21841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5290'. [ 1216.813572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.855645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.914157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1216.933828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.330381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.413579][ C1] vkms_vblank_simulate: vblank timer overrun [ 1217.602192][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.750764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.840144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.058229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.134719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.200012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.644731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.821291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1219.993129][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.064295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.350130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.092080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.478186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.734577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1221.909870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.124234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.326146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.514979][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.676890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1222.754442][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.076492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.377229][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.439060][T21917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1223.465092][T21917] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1223.465199][T21917] nbd: must specify at least one socket [ 1223.469847][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.614199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.713542][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.826666][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1224.847800][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1224.862637][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1224.864387][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1224.867828][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1225.153759][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5315'. [ 1227.013241][T21941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5321'. [ 1227.054822][ T5826] Bluetooth: hci5: command tx timeout [ 1229.373827][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5323'. [ 1229.377410][T21959] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5323'. [ 1229.377435][T21959] nbd: must specify at least one socket [ 1229.449400][ T5826] Bluetooth: hci5: command tx timeout [ 1231.173325][T18330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1231.176510][T18330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1231.181829][T18330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1231.183616][T18330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1231.184469][T18330] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1231.498794][T18330] Bluetooth: hci5: command tx timeout [ 1232.731439][T21987] bridge0: entered promiscuous mode [ 1232.731556][T21987] macsec1: entered promiscuous mode [ 1232.733517][T21987] bridge0: port 3(macsec1) entered blocking state [ 1232.733652][T21987] bridge0: port 3(macsec1) entered disabled state [ 1232.733850][T21987] macsec1: entered allmulticast mode [ 1232.733864][T21987] bridge0: entered allmulticast mode [ 1232.912370][T21987] macsec1: left allmulticast mode [ 1232.912393][T21987] bridge0: left allmulticast mode [ 1232.940404][T21987] bridge0: left promiscuous mode [ 1233.037906][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5333'. [ 1233.540108][T18330] Bluetooth: hci5: command tx timeout [ 1233.869310][T18330] Bluetooth: hci6: command tx timeout [ 1235.134326][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1235.156568][T22006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1235.156663][T22006] nbd: must specify at least one socket [ 1235.845152][T21975] lo speed is unknown, defaulting to 1000 [ 1235.904685][T21925] lo speed is unknown, defaulting to 1000 [ 1235.940394][T18330] Bluetooth: hci6: command tx timeout [ 1237.719583][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5341'. [ 1237.842405][T22024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5341'. [ 1238.319142][T18330] Bluetooth: hci6: command tx timeout [ 1240.238234][ T23] ================================================================== [ 1240.238251][ T23] BUG: KASAN: vmalloc-out-of-bounds in run_irq_workd+0x116/0x190 [ 1240.238279][ T23] Read of size 8 at addr ffffc90006351090 by task irq_work/0/23 [ 1240.238293][ T23] [ 1240.238305][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1240.238326][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1240.238339][ T23] Call Trace: [ 1240.238346][ T23] [ 1240.238353][ T23] dump_stack_lvl+0x189/0x250 [ 1240.238374][ T23] ? run_irq_workd+0x116/0x190 [ 1240.238393][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.238412][ T23] ? __pfx__printk+0x10/0x10 [ 1240.238435][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1240.238454][ T23] ? __virt_addr_valid+0xdc/0x5c0 [ 1240.238476][ T23] print_report+0xca/0x240 [ 1240.238498][ T23] ? run_irq_workd+0x116/0x190 [ 1240.238513][ T23] kasan_report+0x118/0x150 [ 1240.238534][ T23] ? run_irq_workd+0x116/0x190 [ 1240.238557][ T23] run_irq_workd+0x116/0x190 [ 1240.238575][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1240.238594][ T23] ? schedule+0x91/0x360 [ 1240.238619][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1240.238637][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1240.238653][ T23] smpboot_thread_fn+0x542/0xa60 [ 1240.238671][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1240.238692][ T23] kthread+0x711/0x8a0 [ 1240.238714][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1240.238731][ T23] ? __pfx_kthread+0x10/0x10 [ 1240.238749][ T23] ? rt_spin_unlock+0x150/0x200 [ 1240.238773][ T23] ? rt_spin_unlock+0x161/0x200 [ 1240.238793][ T23] ? __pfx_kthread+0x10/0x10 [ 1240.238814][ T23] ret_from_fork+0x4bc/0x870 [ 1240.238842][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1240.238870][ T23] ? __switch_to_asm+0x39/0x70 [ 1240.238892][ T23] ? __switch_to_asm+0x33/0x70 [ 1240.238913][ T23] ? __pfx_kthread+0x10/0x10 [ 1240.238933][ T23] ret_from_fork_asm+0x1a/0x30 [ 1240.238965][ T23] [ 1240.238971][ T23] [ 1240.238975][ T23] The buggy address belongs to a vmalloc virtual mapping [ 1240.238993][ T23] Memory state around the buggy address: [ 1240.239004][ T23] ffffc90006350f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1240.239017][ T23] ffffc90006351000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1240.239028][ T23] >ffffc90006351080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1240.239048][ T23] ^ [ 1240.239057][ T23] ffffc90006351100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1240.239069][ T23] ffffc90006351180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1240.239077][ T23] ================================================================== [ 1240.358736][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5346'. [ 1240.381827][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5346'. [ 1240.381923][T22045] nbd: must specify at least one socket [ 1241.810832][ T23] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1241.810847][ T23] CPU: 0 UID: 0 PID: 23 Comm: irq_work/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1241.810860][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1241.810867][ T23] Call Trace: [ 1241.810872][ T23] [ 1241.810876][ T23] dump_stack_lvl+0x99/0x250 [ 1241.810894][ T23] ? __asan_memcpy+0x40/0x70 [ 1241.810909][ T23] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1241.810921][ T23] ? __pfx__printk+0x10/0x10 [ 1241.810937][ T23] vpanic+0x237/0x6d0 [ 1241.810947][ T23] ? __pfx_vpanic+0x10/0x10 [ 1241.810955][ T23] ? preempt_schedule+0xae/0xc0 [ 1241.810970][ T23] ? __pfx_preempt_schedule+0x10/0x10 [ 1241.810986][ T23] panic+0xb9/0xc0 [ 1241.810994][ T23] ? __pfx_panic+0x10/0x10 [ 1241.811007][ T23] ? run_irq_workd+0x116/0x190 [ 1241.811019][ T23] check_panic_on_warn+0x89/0xb0 [ 1241.811034][ T23] ? run_irq_workd+0x116/0x190 [ 1241.811044][ T23] end_report+0x78/0x160 [ 1241.811054][ T23] kasan_report+0x129/0x150 [ 1241.811065][ T23] ? run_irq_workd+0x116/0x190 [ 1241.811077][ T23] run_irq_workd+0x116/0x190 [ 1241.811087][ T23] ? __pfx_run_irq_workd+0x10/0x10 [ 1241.811097][ T23] ? schedule+0x91/0x360 [ 1241.811111][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1241.811121][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1241.811130][ T23] smpboot_thread_fn+0x542/0xa60 [ 1241.811139][ T23] ? smpboot_thread_fn+0x4d/0xa60 [ 1241.811150][ T23] kthread+0x711/0x8a0 [ 1241.811163][ T23] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1241.811172][ T23] ? __pfx_kthread+0x10/0x10 [ 1241.811182][ T23] ? rt_spin_unlock+0x150/0x200 [ 1241.811196][ T23] ? rt_spin_unlock+0x161/0x200 [ 1241.811208][ T23] ? __pfx_kthread+0x10/0x10 [ 1241.811219][ T23] ret_from_fork+0x4bc/0x870 [ 1241.811235][ T23] ? __pfx_ret_from_fork+0x10/0x10 [ 1241.811251][ T23] ? __switch_to_asm+0x39/0x70 [ 1241.811263][ T23] ? __switch_to_asm+0x33/0x70 [ 1241.811276][ T23] ? __pfx_kthread+0x10/0x10 [ 1241.811287][ T23] ret_from_fork_asm+0x1a/0x30 [ 1241.811304][ T23] [ 1241.811634][ T23] Kernel Offset: disabled