last executing test programs: 9m38.340357877s ago: executing program 3 (id=1369): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800450000240000000000119078000000000000000000014e210010907802000000f2a1d2ba81810c3c2bf5"], 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x50443) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x5}}, './debug/fail_page_alloc/min-order\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000c0478007bf00"/26, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018610000060000000000000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xc3, 0x7d, &(0x7f0000000380)=""/125, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xe, 0xfffffffb, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r7, r7, r7, r7], &(0x7f0000000900)=[{0x0, 0x2, 0x9, 0xb}, {0x1, 0x2, 0x3, 0x9}]}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1a6) 9m37.151900004s ago: executing program 3 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x5}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x20000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)="84801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe4073f878", 0x20) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x841) write$UHID_INPUT(r2, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 9m32.298559257s ago: executing program 3 (id=1387): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT, @ANYBLOB="010028bd7000010000000f000000080003", @ANYRES32, @ANYBLOB="050033000200000008"], 0x44}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0xfffffffffffffffd) 9m31.163095794s ago: executing program 3 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='27', 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x201}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000200)={0xfffe, 0x15, 0x106, 0x9, 0x2, 0xf, 0x8}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8058) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000004c0)={0x0, 0x0, 0x8}) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 9m30.997117885s ago: executing program 3 (id=1393): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x115000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x80, 0x8800) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x47, &(0x7f0000000200)=0x7) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) 9m29.051056989s ago: executing program 3 (id=1398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10", 0x167}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d14a5ebb1404a548e64ff1", 0xa4}, {&(0x7f00000003c0)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597ce70b3446f7634209471d31cea11d072c66d8b136b68084d476799c8f1e9626ecbadf753cefe8a7cd84d091af9c3d75ff6faa2d3e00086ec338753111336a2cd1b9db2de3457de9f0986d9ece8b2bac9bea32eff35c845d854b6998a319dd86cdec2239d56c08ff7c7fdebfbf7", 0xcd}, {0x0}, {&(0x7f00000005c0)='\r', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="2913d2436fbca6482ecb4dfd39321e87f18b0c28a7fa410c7b6f4c362314d4273777273f2dc32094ba0e9f0051e582b7917665670b3c39d79f60b1b136660b5d682d69aaea9f623b5fcc71ae773949079a4697360e3d25b4c9a10ecbceafa28600981ceba6da61fddc494f19d41f93ca931d8c4b172bed08dff106e8cf287b66dfc1e489052843e98d1c93040f77186a6eda1bd2", 0x94}, {&(0x7f0000000780)="9282bfe8af8dd480d81de1c17120024d1df34c99cc57a79bae0e4cfb061dd9101515581c1ddbebf2de10f3b274e37dac33584704e139d8ecf7f027d396ac0c628603e0bff0fe3bafbb4217335ac438495af493434c53531e363980952e39db90890debe496ad2a6fb4f9acaeb4b8e2157b17e46c3c7a406951046b5adf7fbb4d03737034c4929148ff7e1635717af38bad6077387e03a762b3cc1ab983ad72f7311f530d586b0f32b29b7038f3129710b53f5a0e6e3320579d820e52bbe329da12ab538d73f6feb0ba7ea7f873291aa480", 0xd1}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x1cf) 9m13.869249219s ago: executing program 32 (id=1398): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x167}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="1787ef8b7a23897f0de1bd82b1009dc6841376d01fb80189ce810a4e112079ba10d349ac3a16cd140fee5b3dda921394b22af6b7eec13678fe837027fb25c614ac7ed5b898624d12c2ff844c19ab42e7ebe8c8c4d383d09fc365041fc85ef9cf76596780f2f2cfecf28156ef7e98a8e2be8d8a7bc8291334eb782d8923c7c99ac738dc9f5ca72ed68e6a808726485e7f2def663c9d9a8b90e5d14a5ebb1404a548e64ff1", 0xa4}, {&(0x7f00000003c0)="91da5abc3faa3b4f1e812a16aa3a6dba482220731927cd8138ab958c743284aec37bfe9ef561cca7c22bd7112075870452ad4f5088d40a92de82e25ff919a126f18427852d5eb07b85c48d898bd844957fff5cd6951e24bc6ae626ccfc49f597ce70b3446f7634209471d31cea11d072c66d8b136b68084d476799c8f1e9626ecbadf753cefe8a7cd84d091af9c3d75ff6faa2d3e00086ec338753111336a2cd1b9db2de3457de9f0986d9ece8b2bac9bea32eff35c845d854b6998a319dd86cdec2239d56c08ff7c7fdebfbf7", 0xcd}, {0x0}, {&(0x7f00000005c0)='\r', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="2913d2436fbca6482ecb4dfd39321e87f18b0c28a7fa410c7b6f4c362314d4273777273f2dc32094ba0e9f0051e582b7917665670b3c39d79f60b1b136660b5d682d69aaea9f623b5fcc71ae773949079a4697360e3d25b4c9a10ecbceafa28600981ceba6da61fddc494f19d41f93ca931d8c4b172bed08dff106e8cf287b66dfc1e489052843e98d1c93040f77186a6eda1bd2", 0x94}, {&(0x7f0000000780)="9282bfe8af8dd480d81de1c17120024d1df34c99cc57a79bae0e4cfb061dd9101515581c1ddbebf2de10f3b274e37dac33584704e139d8ecf7f027d396ac0c628603e0bff0fe3bafbb4217335ac438495af493434c53531e363980952e39db90890debe496ad2a6fb4f9acaeb4b8e2157b17e46c3c7a406951046b5adf7fbb4d03737034c4929148ff7e1635717af38bad6077387e03a762b3cc1ab983ad72f7311f530d586b0f32b29b7038f3129710b53f5a0e6e3320579d820e52bbe329da12ab538d73f6feb0ba7ea7f873291aa480", 0xd1}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x1cf) 2m42.051045753s ago: executing program 1 (id=2858): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f00000002c0)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ptrace(0x4208, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x2d) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r5, 0x5601, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17f) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000180)='pstore\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)="c7a751e2a0fd1c224d642dc6ea277505eabbaa8a9d8cb21b0f24572c7f738ae0517390bf3801000000aaf3da4e804feb9b321c8bb05f44e06dc2b3fc2477eeaa095400664dd23c44dc995e32e31a82a8c6a2fbb0023baf63d8f6f317214dec217a8031cccf8b94ed63dc67e6ba660af8db671be4931bc14a60eaeeba3484770cd2dcca00e9d0363e4e1e3d7e79ace24f0ca11ba2ad8d5805335e367d7b76c762056d79a92719533288ab50264e7dfa025166973c8f0fda77e8404167bdce4f5ebf9858aca2dfcf74ddab491f24b99028699b06ca6438b92ff13bc3294cc186a41d309566b015fb9afe", 0xe9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) 2m41.129880272s ago: executing program 1 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x201}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0xfffe, 0x15, 0x106, 0x9, 0x2, 0xf, 0x8}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8058) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f00000004c0)={0x0, 0x0, 0x8}) r4 = add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2m39.735442248s ago: executing program 1 (id=2864): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x80902) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000088205a3004000010203010902600003010c30000926000007010100000a24010c5cbcb9db010209040100000102000009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2m36.367979657s ago: executing program 1 (id=2874): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x201}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0xfffe, 0x15, 0x106, 0x9, 0x2, 0xf, 0x8}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8058) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0485510, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f00000004c0)={0x0, 0x0, 0x8}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2m30.424365755s ago: executing program 1 (id=2890): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121a03, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000010800450000240000000000119078000000000000000000014e210010907802000000f2a1d2ba81810c3c2bf5"], 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x50443) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x5}}, './debug/fail_page_alloc/min-order\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000c0478007bf00"/26, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018610000060000000000000001000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xc3, 0x7d, &(0x7f0000000380)=""/125, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xe, 0xfffffffb, 0x10000}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r7, r7, r7, r7], &(0x7f0000000900)=[{0x0, 0x2, 0x9, 0xb}, {0x1, 0x2, 0x3, 0x9}]}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1a6) 2m29.25469781s ago: executing program 1 (id=2891): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) socket(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 2m13.421276319s ago: executing program 33 (id=2891): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) socket(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x12, 0x22, 0xd, 0x14, 0x3, 0x800, 0x1, 0x5a, 0x1}}) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(r2, 0xab03) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) 16.600600197s ago: executing program 5 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00\x00\x00I\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000"], 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000b6"], 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x280}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x5c}}, 0x2000400c) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) 15.035005194s ago: executing program 6 (id=3194): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff0000000705010240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000100)=""/64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1d, 0x200, 0x70bd31, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, {0x306}, 0x12, {0x2, 0x4e20, @local}, 'bridge_slave_0\x00'}) read$FUSE(r8, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x1, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) 14.956125968s ago: executing program 5 (id=3195): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='/dev/zram0,0', 0xb3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 13.620185259s ago: executing program 0 (id=3197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700"], 0x2c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) lseek(r1, 0xd, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x18, 0x8, "000000000000000000000022000000000000000000000000000000009c0000000000000040000000000400000000000000000000000000000200"}) 13.195576467s ago: executing program 2 (id=3199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000020000004584000e04000000020000000000"], 0x0, 0x2a, 0x0, 0x1, 0x9, 0x10000}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001"], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) r5 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='secret\x00\xb6\\W\xf4^&8\xa6\xb6\xa7\x9fh\xe3\vxP\xb9\x03\x00\x00\x00\x00\x00\x00\x00\v\x0e\xc5\xa4@\f\x99\xc2\x98\xc0xsP\xb8V\xb3@\x0e\x1fq', &(0x7f0000000100)='AqAAAAAAAAAAAAAAABAAA/AAAAAAAAAACAAAAA==\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) close(r4) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x94, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @private=0xa018102}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4ea1, @remote}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0xf}]}, &(0x7f0000000140)=0x10) 12.862726829s ago: executing program 5 (id=3200): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) socket(0xb, 0x4, 0x1ff) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB=',\x00-'], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 12.036848632s ago: executing program 2 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0xc080}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xebd, 0x0, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x48080) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7040fadbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="3d2a000000400080"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000062d14406d0450084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000), 0x4) 11.557948292s ago: executing program 5 (id=3203): ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x80902) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000088205a3004000010203010902600003010c30000926000007010100000a24010c5cbcb9db010209040100000102000009040101"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 9.266897553s ago: executing program 6 (id=3205): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r8, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x20042000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') recvmmsg(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001300)=""/4096, 0x1000}, {0x0}], 0x2}, 0xee}], 0x1, 0x0, 0x0) 8.359473079s ago: executing program 2 (id=3206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r3, &(0x7f0000000800), 0x400) write(r3, &(0x7f0000000900), 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xb8, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 8.197049093s ago: executing program 6 (id=3207): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r5) sendto(r6, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x0, 0x3, 0x9}) sendto(r6, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7.249600532s ago: executing program 5 (id=3208): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f88}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r2) close(r2) epoll_create1(0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000200)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) 6.685446771s ago: executing program 2 (id=3209): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) mkdir(0x0, 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)={0x14, r4, 0x1, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4004040) 6.643617622s ago: executing program 6 (id=3210): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8e, &(0x7f0000000000)="10") ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b89, &(0x7f0000000040)="300000000400000003000000060000005d00000000000000adde0000c0") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x100, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) syz_emit_ethernet(0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x884) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300160022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000240)="a17aabd40500000000002690eb8538bef87e6b7e0000", 0x401, r7, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x3, r7}, 0x38) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) epoll_create1(0x0) 6.122187765s ago: executing program 0 (id=3211): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() fanotify_init(0xef0, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r5, &(0x7f0000000200)="340000003f000500010000000000000001020000000000000c0001006f76732d6470300008000200000000000800090010270000", 0x34, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x0, 0x3, 0x9}) sendto(r5, &(0x7f0000000400)="9400000042000100020000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c00007465737400003c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e0c00030008000c0004000100", 0x94, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.928256779s ago: executing program 2 (id=3212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000df7dc9ea862a36a0a41f400000000000000000000bf26feff04000000181100008b64366138ba5951331d077586868e7a37450f7d80fa9e2f63222556bcdeaf6d04b9c50000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) r7 = dup(r6) read(r7, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046}) poll(&(0x7f0000002040)=[{r6, 0xa0a1}, {r7, 0xa035}, {r2, 0x446}, {r6, 0x1}, {r0, 0x200}, {r3, 0x40}], 0x6, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, 0x0, &(0x7f0000000080)) 5.149118575s ago: executing program 0 (id=3213): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000540)="417c8939be", 0x5}], 0x2}, 0x0) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@delchain={0x0, 0x65, 0x2, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x1, 0x8}, {0x7, 0xfff3}}, [@TCA_CHAIN={0x0, 0xb, 0x1}, @TCA_CHAIN={0x0, 0xb, 0x8}, @TCA_RATE={0x0, 0x5, {0x8, 0x2}}, @TCA_RATE={0x0, 0x5, {0x6, 0x2}}, @TCA_CHAIN={0x0, 0xb, 0x552}, @filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x7}, @TCA_BPF_FD]}}, @filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_EMATCHES={0x0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x485}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x200, 0x1, 0xa281}, {0x6, 0x9, 0x4, 0x5, 0xc, 0x1, 0x1}}}, @TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0xe08, 0x3, 0x7}, {0x4, 0x101, 0x4, 0x5}}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0xff, 0x741, 0x9, 0x7, 0x8}}}, @TCF_EM_CMP={0x0, 0x3, 0x0, 0x0, {{0x10, 0x1, 0x8}, {0x40, 0x7, 0x0, 0x1, 0x5, 0x1, 0x1}}}, @TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x9}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0x0, 0x3, 0x1}}}, @TCF_EM_META={0x0, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x7}}}, @TCF_EM_CANID={0x0, 0x3, 0x0, 0x0, {{0xc25, 0x7, 0xf}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x3, 0x3, 0xfffb}, {0x8a, 0x3, 0x9, 0x8}}}, @TCF_EM_IPSET={0x0, 0x2, 0x0, 0x0, {{0xfff, 0x8, 0x2}, {0xffffffffffffffff, 0x1, 0x7}}}, @TCF_EM_META={0x0, 0x2, 0x0, 0x0, {{0x1, 0x4, 0xd}, [@TCA_EM_META_HDR={0x0, 0x1, {{0x1ff, 0x1, 0x1}, {0xf180, 0x5, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0xac35, 0xa, 0x1}, {0x6, 0xcc, 0x2}}}, @TCA_EM_META_HDR={0x0, 0x1, {{0x0, 0xa}, {0x5, 0x1, 0x2}}}]}}, @TCF_EM_NBYTE={0x0, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x4}, {0x5, 0x0, 0x2, "fe2b4dd4be6d69"}}}, @TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x19}, {0x2, 0x5, 0x2}}}]}]}, @TCA_FLOW_XOR={0x0, 0x7, 0x400}]}}]}, 0xe}, 0x1, 0x0, 0x0, 0x88c0}, 0x82) 5.018174816s ago: executing program 2 (id=3214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275", 0xa8}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9af", 0x32}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c", 0xc1}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413", 0x45}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2e7f72a", 0x52}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37f", 0x25}, {&(0x7f0000000580)="fb411a9c85180744d674c3699fcb27d2e189c6", 0x13}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b330707712f0a6727094a6c9aed535e59d97ed4b742ac7c3bd29c5a66d576c5a0bb72826a3", 0x5c}], 0x7) write(r0, &(0x7f0000001e00)="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", 0x30a) 4.91900602s ago: executing program 4 (id=3215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 4.838736602s ago: executing program 4 (id=3216): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x15) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00\x00\x00I\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000"], 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000b6"], 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, &(0x7f0000000140)={'netdevsim0\x00', @ifru_hwaddr=@remote}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6a13}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x280}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x5c}}, 0x2000400c) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) 4.346152601s ago: executing program 4 (id=3217): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5d544000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000006380)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x2000, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x130) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r8}) 3.155428074s ago: executing program 6 (id=3218): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r3 = dup2(r2, r1) ioctl$BLKRRPART(r3, 0x80044d0d, 0x0) write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz0\x00', {0x3, 0x8000, 0x3, 0xd63}, 0x1e, [0x387a, 0x400, 0xf9dc, 0xd, 0x8b48, 0x3, 0x9f, 0x6, 0xfffffff8, 0x7f, 0x9, 0x6, 0x9, 0x3, 0x10, 0x3868, 0x15, 0xfffff050, 0x5, 0x5, 0x2020, 0x43e, 0x2, 0x6, 0x7fff, 0x0, 0x6, 0x80000001, 0xa05, 0x3, 0x7fff, 0x1d, 0x9, 0x5, 0x7, 0xfffff263, 0x7, 0x5, 0x3, 0x9, 0x9, 0xb, 0x1000, 0x6, 0x2, 0x9, 0x3, 0x2, 0x2, 0x6, 0x3, 0x16b, 0x4, 0x6, 0x4000, 0xd, 0x80000001, 0x7, 0x700, 0x2, 0x7, 0xd52, 0x3, 0x3], [0x5, 0x6b, 0xdd, 0x1, 0x8802, 0x3, 0x5, 0xe3, 0x6, 0xc, 0xffff, 0xfffff001, 0x8, 0x5e07, 0x2, 0x25cb, 0x2, 0x7399484b, 0x1000, 0x8, 0x8, 0x9b0, 0x62, 0x9, 0x1000, 0xe38, 0x5, 0x7b10, 0x2, 0x8, 0x2, 0xf5, 0x0, 0x80000000, 0x5, 0x9, 0x4, 0x5, 0x5, 0x3, 0x1, 0x2, 0x991, 0x40, 0xfac, 0x701, 0x101, 0xffff0000, 0xd17, 0xfffffffe, 0x0, 0x5, 0xd, 0x2, 0xb06, 0x3, 0x8, 0x9, 0xd, 0x400, 0x8000, 0x9, 0x6, 0x800], [0x8, 0x80000000, 0x7f, 0x8, 0x100, 0x0, 0x39c, 0xfffffff9, 0x2, 0xa, 0x1db, 0x9, 0x9, 0x2, 0x22, 0x7, 0x8, 0x1, 0x3, 0x4, 0x2, 0x2, 0x8, 0x5, 0x7ff, 0xfffffffc, 0x2, 0x7, 0x2, 0x1, 0x3, 0xfffffc01, 0x4, 0x1, 0x100, 0x40, 0x3, 0x3, 0xb, 0x6, 0x0, 0x0, 0x5, 0x1000, 0x6, 0x7, 0x6, 0x7ff, 0xc3, 0x6, 0x7, 0x1, 0xfffffff9, 0x0, 0x1e10, 0x7ff, 0x3, 0x7fff, 0x8, 0x400, 0x3, 0xa6, 0x1, 0x94000000], [0x1, 0x1, 0x6, 0x20, 0x3d1035a1, 0x2, 0x1, 0xb, 0x800, 0x7, 0x3, 0xffffeb0c, 0x5, 0x6, 0x1, 0x0, 0x8000, 0x6, 0x4ef, 0x10001, 0x5, 0xfffffff8, 0x5, 0x7, 0x0, 0x548, 0x1, 0xfffff000, 0x9, 0xd, 0x8, 0x2, 0x3ff, 0x401, 0x9, 0xb287, 0x7, 0x7, 0xfffffff9, 0x0, 0x2, 0x5, 0x6, 0x2, 0x1000, 0x4, 0x2ad8, 0x8, 0x2, 0xffffffff, 0x6, 0x7, 0x1, 0x10, 0x9, 0x8, 0x40, 0xc7, 0x4, 0x4, 0x5, 0x3d3, 0x8, 0xc]}, 0x45c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r4, 0x20}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000035c0), 0x5005) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0xaf, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000c94232dafc695411145757324a8e1795eb285b0f8ef4d1fa0cfea93eb505b796a80f0900000483a248c56cacda363817ae157d17166e0bea65da9c6d3ffe52a62d0700758a00af0f7b63d4ac4027e5b0f2a7bcba849a6cf1fb039300000000008f9d0000000000000000000000000008bb0a33ef3a016702ccd7d5c542b8bd99ca08d650c56980", @ANYRES16=r10, @ANYBLOB="01000000000200f2c8dc1b000000180001801400020073797a5f74756ef90c0002800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.063252165s ago: executing program 0 (id=3219): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x10002, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff480004"], 0x9c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.059722264s ago: executing program 4 (id=3220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r3, &(0x7f0000000800), 0x400) write(r3, &(0x7f0000000900)="00000000000000000100000000000000240000000100", 0x16) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xb8, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 2.742487176s ago: executing program 0 (id=3221): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5d544000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000006380)={0x1, 0x2, 0x1000, 0x20, 0x0, 0x2000, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x130) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x0, 0x3}, 0x4}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r9}) 1.969332536s ago: executing program 4 (id=3222): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) mkdir(0x0, 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, r4, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)={0x14, r4, 0x1, 0x0, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4004040) 1.261292582s ago: executing program 5 (id=3223): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x9, 0x6, 0x7, 0x2, 0x9, "a87124593996d51154ef0f4d7124835ec18e5b", 0x8, 0x6}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) close(0x3) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff8116281f0000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x14, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xee, 0x3f, 0xb1, 0x40, 0xab4, 0x11, 0xcafb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x95, 0x10, 0x99, "", [{{0x9, 0x4, 0x4f, 0xd, 0x0, 0xf3, 0x1d, 0x63, 0x9}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 118.975978ms ago: executing program 0 (id=3224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000df7dc9ea862a36a0a41f400000000000000000000bf26feff04000000181100008b64366138ba5951331d077586868e7a37450f7d80fa9e2f63222556bcdeaf6d04b9c50000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'veth1_virt_wifi\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0xfffffffe, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) r7 = dup(r6) read(r7, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, 0x0, &(0x7f0000000080)) 37.713105ms ago: executing program 4 (id=3225): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x1, @raw_data="9b16ebd90f692b4b691728b7d4cdd15e35b1ec76ba509664e24ece8545453a3318ed4ff254f1ba134c392f62406e53859e405b7d710fc58378a838c9cb68b038f499f5aa325e69883f1440bfb3675a931d48518aff54f27eb75350e38774b33ddf8947e83b1e07a48936f073a54c4a2d7cb29fcee4fd3f933c18a5cce94e53227c1aca11d5cc76ef9d260379831cd0170dc323229f7c0be8b70ffb600bbd66bdaf8ec44b2346f2dee8cf9c87514c341a5cc63d52426c78487c27b709e0fb4e3229b164b33e3d9628"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r5, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000005200)=[{{0x0, 0xffffffffffffff9d, 0x0}, 0xc4}], 0x40000000000026e, 0x2000, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbe9}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl(r4, 0x8b1a, &(0x7f0000000040)) 0s ago: executing program 6 (id=3226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) kernel console output (not intermixed with test programs): T14607] should_failslab+0xc2/0x120 [ 636.867372][T14607] __kmalloc_noprof+0xfc/0x840 [ 636.867397][T14607] ? nft_trans_alloc+0x1d/0x2d0 [ 636.867429][T14607] nft_trans_alloc+0x1d/0x2d0 [ 636.867455][T14607] nf_tables_newrule+0x1d56/0x2be0 [ 636.867489][T14607] ? __pfx_nf_tables_newrule+0x10/0x10 [ 636.867512][T14607] ? lock_acquire+0x1d1/0x380 [ 636.867535][T14607] ? net_generic+0x25/0x2a0 [ 636.867560][T14607] ? __nla_parse+0x40/0x60 [ 636.867586][T14607] nfnetlink_rcv_batch+0x1410/0x2880 [ 636.867623][T14607] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 636.867642][T14607] ? stack_trace_save+0x8e/0xc0 [ 636.867668][T14607] ? lock_acquire+0x1d1/0x380 [ 636.867700][T14607] ? avc_has_perm_noaudit+0x56/0x470 [ 636.867744][T14607] ? avc_has_perm_noaudit+0x145/0x470 [ 636.867808][T14607] ? __nla_parse+0x40/0x60 [ 636.867834][T14607] nfnetlink_rcv+0x3bd/0x440 [ 636.867854][T14607] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 636.867883][T14607] netlink_unicast+0x585/0x850 [ 636.867917][T14607] ? __pfx_netlink_unicast+0x10/0x10 [ 636.867952][T14607] netlink_sendmsg+0x8b0/0xda0 [ 636.867983][T14607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.868012][T14607] ? selinux_socket_sendmsg+0x198/0x2f0 [ 636.868042][T14607] ____sys_sendmsg+0xa4d/0xbe0 [ 636.868063][T14607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.868091][T14607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.868128][T14607] ___sys_sendmsg+0x190/0x1e0 [ 636.868153][T14607] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.868176][T14607] ? futex_wait+0x11e/0x370 [ 636.868205][T14607] ? find_held_lock+0x2b/0x80 [ 636.868252][T14607] __sys_sendmsg+0x160/0x210 [ 636.868282][T14607] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.868327][T14607] do_syscall_64+0x123/0x790 [ 636.868354][T14607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.868377][T14607] RIP: 0033:0x7f6dcb19e159 [ 636.868395][T14607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.868414][T14607] RSP: 002b:00007f6dcc03f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.868434][T14607] RAX: ffffffffffffffda RBX: 00007f6dcb425fa0 RCX: 00007f6dcb19e159 [ 636.868449][T14607] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 636.868462][T14607] RBP: 00007f6dcb23506b R08: 0000000000000000 R09: 0000000000000000 [ 636.868475][T14607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.868489][T14607] R13: 00007f6dcb426038 R14: 00007f6dcb425fa0 R15: 00007ffd766399b8 [ 636.868519][T14607] [ 636.895503][ T31] audit: type=1400 audit(1791105021.837:1053): avc: denied { write } for pid=14578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.155985][T14205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.541886][T14205] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.580055][T12495] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.580151][T12495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.608659][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.608776][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.507244][ T31] audit: type=1400 audit(1791105023.447:1054): avc: denied { write } for pid=14617 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.582886][ T5838] usb 6-1: USB disconnect, device number 22 [ 638.658966][T13459] udevd[13459]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.771203][ T5731] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 638.926834][ T5731] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 638.927768][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.927812][ T5731] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.927849][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.352461][ T31] audit: type=1400 audit(1791105024.297:1055): avc: denied { read } for pid=14624 comm="syz.2.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 639.357667][ T31] audit: type=1400 audit(1791105024.297:1056): avc: denied { create } for pid=14624 comm="syz.2.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 639.435866][ T31] audit: type=1400 audit(1791105024.377:1057): avc: denied { write } for pid=14631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.488397][ T5991] Bluetooth: hci1: Frame reassembly failed (-84) [ 639.642350][ T31] audit: type=1400 audit(1791105024.587:1058): avc: denied { write } for pid=14649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.666601][T14205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.775750][T14622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2852'. [ 639.798718][T14205] veth0_vlan: entered promiscuous mode [ 639.815373][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2854'. [ 639.857768][T14652] hsr_slave_1 (unregistering): left promiscuous mode [ 639.910855][T14205] veth1_vlan: entered promiscuous mode [ 639.983040][T14205] veth0_macvtap: entered promiscuous mode [ 639.993095][T14205] veth1_macvtap: entered promiscuous mode [ 640.016307][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2856'. [ 640.057216][T14666] hsr_slave_1 (unregistering): left promiscuous mode [ 640.112245][ T31] audit: type=1400 audit(1791105025.057:1059): avc: denied { write } for pid=14658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.136880][T14205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.163607][T14205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.213434][ T5977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.263598][ T5991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.263666][ T5991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.287839][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.315201][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 640.343936][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 640.385488][ T31] audit: type=1400 audit(1791105025.327:1060): avc: denied { write } for pid=14674 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.426815][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.426834][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.539358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.539378][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.574614][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 640.575004][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 640.575382][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.575751][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.576128][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.576496][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.578951][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 640.579334][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.602461][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 640.625399][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 640.694409][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 640.708485][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 640.708879][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 640.709256][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 640.709649][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 640.743215][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 640.769698][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 640.770096][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 640.773348][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 640.784376][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 640.784807][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 640.795825][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 640.796208][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 640.808720][ T5731] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 640.944980][ T5731] ax88179_178a 2-1:1.0 eth5: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 56:c3:e8:b2:ce:c5 [ 640.973354][ T5731] usb 2-1: USB disconnect, device number 34 [ 641.001541][ T5731] ax88179_178a 2-1:1.0 eth5: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 641.319974][ T31] audit: type=1400 audit(1791105026.257:1061): avc: denied { ioctl } for pid=14687 comm="syz.0.2775" path="socket:[41789]" dev="sockfs" ino=41789 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 641.998880][T14065] Bluetooth: hci1: command 0x1003 tx timeout [ 642.001781][ T31] audit: type=1400 audit(1791105026.437:1062): avc: denied { mount } for pid=14692 comm="syz.1.2858" name="/" dev="pstore" ino=4056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 642.002125][ T5602] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 642.287660][ T31] audit: type=1400 audit(1791105027.227:1063): avc: denied { unmount } for pid=11184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 643.412345][ T31] audit: type=1400 audit(1791105028.357:1064): avc: denied { write } for pid=14679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.434539][T14709] FAULT_INJECTION: forcing a failure. [ 643.434539][T14709] name failslab, interval 1, probability 0, space 0, times 0 [ 643.434581][T14709] CPU: 0 UID: 0 PID: 14709 Comm: syz.1.2861 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.434609][T14709] Tainted: [L]=SOFTLOCKUP [ 643.434617][T14709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 643.434632][T14709] Call Trace: [ 643.434639][T14709] [ 643.434647][T14709] dump_stack_lvl+0x100/0x190 [ 643.434685][T14709] should_fail_ex.cold+0x5/0xa [ 643.434718][T14709] should_failslab+0xc2/0x120 [ 643.434746][T14709] __kmalloc_cache_noprof+0x91/0x6d0 [ 643.434767][T14709] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 643.434793][T14709] ? nf_tables_commit+0x743/0x9300 [ 643.434828][T14709] nf_tables_commit+0x743/0x9300 [ 643.434865][T14709] ? nf_tables_newrule+0x10ed/0x2be0 [ 643.434900][T14709] ? __pfx_nf_tables_commit+0x10/0x10 [ 643.434929][T14709] ? net_generic+0x25/0x2a0 [ 643.434955][T14709] ? __nla_parse+0x40/0x60 [ 643.434981][T14709] nfnetlink_rcv_batch+0x1a4d/0x2880 [ 643.435018][T14709] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 643.435037][T14709] ? stack_trace_save+0x8e/0xc0 [ 643.435064][T14709] ? lock_acquire+0x1d1/0x380 [ 643.435086][T14709] ? avc_has_perm_noaudit+0x56/0x470 [ 643.435129][T14709] ? avc_has_perm_noaudit+0x145/0x470 [ 643.435188][T14709] ? __nla_parse+0x40/0x60 [ 643.435212][T14709] nfnetlink_rcv+0x3bd/0x440 [ 643.435234][T14709] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 643.435263][T14709] netlink_unicast+0x585/0x850 [ 643.435294][T14709] ? __pfx_netlink_unicast+0x10/0x10 [ 643.435329][T14709] netlink_sendmsg+0x8b0/0xda0 [ 643.435361][T14709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.435390][T14709] ? selinux_socket_sendmsg+0x198/0x2f0 [ 643.435421][T14709] ____sys_sendmsg+0xa4d/0xbe0 [ 643.435443][T14709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.435472][T14709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.435500][T14709] ? plist_check_list+0x1b8/0x280 [ 643.435528][T14709] ? plist_del+0x308/0x510 [ 643.435559][T14709] ___sys_sendmsg+0x190/0x1e0 [ 643.435592][T14709] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.435618][T14709] ? futex_wake+0x220/0x5e0 [ 643.435653][T14709] ? find_held_lock+0x2b/0x80 [ 643.435704][T14709] __sys_sendmsg+0x160/0x210 [ 643.435734][T14709] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.435780][T14709] do_syscall_64+0x123/0x790 [ 643.435806][T14709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.435828][T14709] RIP: 0033:0x7f6dcb19e159 [ 643.435846][T14709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.435865][T14709] RSP: 002b:00007f6dcc03f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.435885][T14709] RAX: ffffffffffffffda RBX: 00007f6dcb425fa0 RCX: 00007f6dcb19e159 [ 643.435899][T14709] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 643.435911][T14709] RBP: 00007f6dcb23506b R08: 0000000000000000 R09: 0000000000000000 [ 643.435924][T14709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.435938][T14709] R13: 00007f6dcb426038 R14: 00007f6dcb425fa0 R15: 00007ffd766399b8 [ 643.435969][T14709] [ 643.488054][ T31] audit: type=1400 audit(1791105028.427:1065): avc: denied { read } for pid=14707 comm="syz.1.2861" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 643.489911][ T31] audit: type=1400 audit(1791105028.427:1066): avc: denied { open } for pid=14707 comm="syz.1.2861" path="net:[4026532782]" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 645.571941][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 645.588058][ T31] audit: type=1400 audit(1791105030.527:1067): avc: denied { write } for pid=14712 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.660333][ T190] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 645.807618][T14729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2868'. [ 645.809407][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'. [ 645.815974][ T190] usb 2-1: unable to get BOS descriptor or descriptor too short [ 645.816490][ T190] usb 2-1: not running at top speed; connect to a high speed hub [ 645.816517][ T190] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 645.818554][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.818577][ T190] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.818598][ T190] usb 2-1: config 1 has no interface number 0 [ 645.822494][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.822516][ T190] usb 2-1: Product: syz [ 645.822531][ T190] usb 2-1: Manufacturer: syz [ 645.822547][ T190] usb 2-1: SerialNumber: syz [ 646.014787][T14739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2871'. [ 646.040673][ T5702] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 646.143891][T14742] block2mtd: illegal erase size [ 646.195726][ T5702] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 646.199170][ T5702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.199213][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.312905][ T190] usb 2-1: USB disconnect, device number 35 [ 646.336873][T13459] udevd[13459]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.159494][ T5702] wacom 0003:056A:033B.0011: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 647.176689][ T5702] wacom 0003:056A:033B.0011: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 647.178925][ T5702] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0011/input/input30 [ 647.234836][T14753] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2869'. [ 647.325375][T14760] FAULT_INJECTION: forcing a failure. [ 647.325375][T14760] name failslab, interval 1, probability 0, space 0, times 0 [ 647.325464][T14760] CPU: 1 UID: 0 PID: 14760 Comm: syz.5.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.325493][T14760] Tainted: [L]=SOFTLOCKUP [ 647.325501][T14760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.325513][T14760] Call Trace: [ 647.325521][T14760] [ 647.325529][T14760] dump_stack_lvl+0x100/0x190 [ 647.325564][T14760] should_fail_ex.cold+0x5/0xa [ 647.325593][T14760] should_failslab+0xc2/0x120 [ 647.325621][T14760] kmem_cache_alloc_noprof+0x92/0x6a0 [ 647.325646][T14760] ? inotify_update_watch+0x39a/0xa50 [ 647.325678][T14760] inotify_update_watch+0x39a/0xa50 [ 647.325711][T14760] __x64_sys_inotify_add_watch+0x2d7/0x370 [ 647.325740][T14760] ? __pfx___x64_sys_inotify_add_watch+0x10/0x10 [ 647.325777][T14760] do_syscall_64+0x123/0x790 [ 647.325802][T14760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.325823][T14760] RIP: 0033:0x7f13bed9e159 [ 647.325840][T14760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.325858][T14760] RSP: 002b:00007f13bfcfa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 647.325879][T14760] RAX: ffffffffffffffda RBX: 00007f13bf026180 RCX: 00007f13bed9e159 [ 647.325892][T14760] RDX: 0000000000000400 RSI: 0000200000000200 RDI: 0000000000000006 [ 647.325905][T14760] RBP: 00007f13bfcfa090 R08: 0000000000000000 R09: 0000000000000000 [ 647.325918][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.325930][T14760] R13: 00007f13bf026218 R14: 00007f13bf026180 R15: 00007ffdeb0bb218 [ 647.325960][T14760] [ 647.329857][T14760] syz_tun: entered allmulticast mode [ 647.695214][ T31] audit: type=1400 audit(1791105032.637:1068): avc: denied { associate } for pid=14763 comm="syz.2.2875" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 647.895449][T14755] syz_tun: left allmulticast mode [ 648.774111][ T5702] usb 1-1: USB disconnect, device number 32 [ 648.857907][T14773] FAULT_INJECTION: forcing a failure. [ 648.857907][T14773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.857939][T14773] CPU: 0 UID: 0 PID: 14773 Comm: syz.2.2878 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.857966][T14773] Tainted: [L]=SOFTLOCKUP [ 648.857974][T14773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 648.857985][T14773] Call Trace: [ 648.857993][T14773] [ 648.858001][T14773] dump_stack_lvl+0x100/0x190 [ 648.858033][T14773] should_fail_ex.cold+0x5/0xa [ 648.858061][T14773] _copy_from_user+0x2e/0xd0 [ 648.858086][T14773] i2cdev_ioctl+0x10a/0x830 [ 648.858108][T14773] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 648.858137][T14773] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 648.858159][T14773] __x64_sys_ioctl+0x18e/0x210 [ 648.858185][T14773] do_syscall_64+0x123/0x790 [ 648.858209][T14773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.858227][T14773] RIP: 0033:0x7efc9a19e159 [ 648.858243][T14773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.858261][T14773] RSP: 002b:00007efc9b122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.858280][T14773] RAX: ffffffffffffffda RBX: 00007efc9a425fa0 RCX: 00007efc9a19e159 [ 648.858294][T14773] RDX: 0000200000000180 RSI: 0000000000000707 RDI: 0000000000000003 [ 648.858305][T14773] RBP: 00007efc9b122090 R08: 0000000000000000 R09: 0000000000000000 [ 648.858317][T14773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.858329][T14773] R13: 00007efc9a426038 R14: 00007efc9a425fa0 R15: 00007ffe5522f7c8 [ 648.858356][T14773] [ 649.043095][T14776] FAULT_INJECTION: forcing a failure. [ 649.043095][T14776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.043127][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.5.2881 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.043155][T14776] Tainted: [L]=SOFTLOCKUP [ 649.043163][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 649.043174][T14776] Call Trace: [ 649.043182][T14776] [ 649.043189][T14776] dump_stack_lvl+0x100/0x190 [ 649.043223][T14776] should_fail_ex.cold+0x5/0xa [ 649.043258][T14776] _copy_to_user+0x32/0xd0 [ 649.043284][T14776] simple_read_from_buffer+0xcb/0x170 [ 649.043314][T14776] proc_fail_nth_read+0x1af/0x230 [ 649.043343][T14776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.043371][T14776] ? rw_verify_area+0xce/0x6d0 [ 649.043391][T14776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.043417][T14776] vfs_read+0x1e4/0xb40 [ 649.043440][T14776] ? lock_acquire+0x1d1/0x380 [ 649.043462][T14776] ? __fget_files+0x34/0x3d0 [ 649.043489][T14776] ? __pfx_vfs_read+0x10/0x10 [ 649.043510][T14776] ? find_held_lock+0x2b/0x80 [ 649.043539][T14776] ? __fget_files+0x215/0x3d0 [ 649.043569][T14776] ? __fget_files+0x21f/0x3d0 [ 649.043603][T14776] ksys_read+0x12a/0x250 [ 649.043626][T14776] ? __pfx_ksys_read+0x10/0x10 [ 649.043657][T14776] do_syscall_64+0x123/0x790 [ 649.043681][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.043701][T14776] RIP: 0033:0x7f13bed5e98e [ 649.043719][T14776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 649.043736][T14776] RSP: 002b:00007f13bfd3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.043755][T14776] RAX: ffffffffffffffda RBX: 00007f13bfd3c6c0 RCX: 00007f13bed5e98e [ 649.043769][T14776] RDX: 000000000000000f RSI: 00007f13bfd3c0a0 RDI: 0000000000000006 [ 649.043781][T14776] RBP: 00007f13bfd3c090 R08: 0000000000000000 R09: 0000000000000000 [ 649.043794][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.043806][T14776] R13: 00007f13bf026038 R14: 00007f13bf025fa0 R15: 00007ffdeb0bb218 [ 649.043836][T14776] [ 649.359030][T14782] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 649.359030][T14782] [ 649.359058][T14782] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 649.359289][T14782] CIFS: Attempting to mount //127.0.0.1/share [ 649.402492][T14782] CIFS: VFS: Error connecting to socket. Aborting operation. [ 649.402730][T14782] CIFS: VFS: cifs_mount failed w/return code = -111 [ 650.035924][T14779] syzkaller1: entered promiscuous mode [ 650.035939][T14779] syzkaller1: entered allmulticast mode [ 650.606360][T14784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.707805][T14794] FAULT_INJECTION: forcing a failure. [ 652.707805][T14794] name failslab, interval 1, probability 0, space 0, times 0 [ 652.707841][T14794] CPU: 1 UID: 0 PID: 14794 Comm: syz.1.2874 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.707879][T14794] Tainted: [L]=SOFTLOCKUP [ 652.707888][T14794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 652.707901][T14794] Call Trace: [ 652.707910][T14794] [ 652.707919][T14794] dump_stack_lvl+0x100/0x190 [ 652.707956][T14794] should_fail_ex.cold+0x5/0xa [ 652.707985][T14794] should_failslab+0xc2/0x120 [ 652.708014][T14794] __kmalloc_noprof+0xfc/0x840 [ 652.708039][T14794] ? nft_trans_alloc+0x1d/0x2d0 [ 652.708071][T14794] nft_trans_alloc+0x1d/0x2d0 [ 652.708100][T14794] nf_tables_newrule+0x1d56/0x2be0 [ 652.708136][T14794] ? __pfx_nf_tables_newrule+0x10/0x10 [ 652.708159][T14794] ? lock_acquire+0x1d1/0x380 [ 652.708182][T14794] ? net_generic+0x25/0x2a0 [ 652.708209][T14794] ? __nla_parse+0x40/0x60 [ 652.708235][T14794] nfnetlink_rcv_batch+0x1410/0x2880 [ 652.708273][T14794] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 652.708300][T14794] ? lock_acquire+0x1d1/0x380 [ 652.708322][T14794] ? avc_has_perm_noaudit+0x56/0x470 [ 652.708377][T14794] ? avc_has_perm_noaudit+0x145/0x470 [ 652.708444][T14794] ? __nla_parse+0x40/0x60 [ 652.708472][T14794] nfnetlink_rcv+0x3bd/0x440 [ 652.708494][T14794] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 652.708526][T14794] netlink_unicast+0x585/0x850 [ 652.708560][T14794] ? __pfx_netlink_unicast+0x10/0x10 [ 652.708595][T14794] netlink_sendmsg+0x8b0/0xda0 [ 652.708628][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.708658][T14794] ? selinux_socket_sendmsg+0x198/0x2f0 [ 652.708688][T14794] ____sys_sendmsg+0xa4d/0xbe0 [ 652.708710][T14794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.708739][T14794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.708776][T14794] ___sys_sendmsg+0x190/0x1e0 [ 652.708802][T14794] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.708826][T14794] ? futex_wait+0x11e/0x370 [ 652.708860][T14794] ? find_held_lock+0x2b/0x80 [ 652.708916][T14794] __sys_sendmsg+0x160/0x210 [ 652.708947][T14794] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.708997][T14794] do_syscall_64+0x123/0x790 [ 652.709026][T14794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.709049][T14794] RIP: 0033:0x7f6dcb19e159 [ 652.709068][T14794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.709089][T14794] RSP: 002b:00007f6dcc03f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.709112][T14794] RAX: ffffffffffffffda RBX: 00007f6dcb425fa0 RCX: 00007f6dcb19e159 [ 652.709127][T14794] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 652.709140][T14794] RBP: 00007f6dcb23506b R08: 0000000000000000 R09: 0000000000000000 [ 652.709152][T14794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.709166][T14794] R13: 00007f6dcb426038 R14: 00007f6dcb425fa0 R15: 00007ffd766399b8 [ 652.709196][T14794] [ 652.780377][ T190] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 652.826899][ T31] audit: type=1400 audit(1791105037.767:1069): avc: denied { read write } for pid=14798 comm="syz.2.2888" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 652.827310][ T31] audit: type=1400 audit(1791105037.767:1070): avc: denied { open } for pid=14798 comm="syz.2.2888" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 652.863760][T14799] ovs-dp0: entered promiscuous mode [ 652.921959][ T7356] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 652.941409][ T190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 652.942528][ T190] usb 6-1: not running at top speed; connect to a high speed hub [ 652.942556][ T190] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 652.945228][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.945250][ T190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.945270][ T190] usb 6-1: config 1 has no interface number 0 [ 652.947475][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.947498][ T190] usb 6-1: Product: syz [ 652.947514][ T190] usb 6-1: Manufacturer: syz [ 652.947529][ T190] usb 6-1: SerialNumber: syz [ 653.066922][ T7356] usb 1-1: device descriptor read/64, error -71 [ 653.079469][T14803] FAULT_INJECTION: forcing a failure. [ 653.079469][T14803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 653.079502][T14803] CPU: 0 UID: 0 PID: 14803 Comm: syz.2.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.079531][T14803] Tainted: [L]=SOFTLOCKUP [ 653.079539][T14803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.079551][T14803] Call Trace: [ 653.079560][T14803] [ 653.079568][T14803] dump_stack_lvl+0x100/0x190 [ 653.079607][T14803] should_fail_ex.cold+0x5/0xa [ 653.079637][T14803] get_futex_key+0x1d0/0x14f0 [ 653.079667][T14803] ? __pfx_get_futex_key+0x10/0x10 [ 653.079693][T14803] ? find_held_lock+0x2b/0x80 [ 653.079722][T14803] ? futex_wake+0x4ea/0x5e0 [ 653.079749][T14803] futex_wake+0xf4/0x5e0 [ 653.079773][T14803] ? __pfx_futex_wake+0x10/0x10 [ 653.079798][T14803] ? rcu_read_lock_any_held+0x6a/0x90 [ 653.079834][T14803] do_futex+0x2b2/0x440 [ 653.079864][T14803] ? __pfx_do_futex+0x10/0x10 [ 653.079900][T14803] __x64_sys_futex+0x34f/0x4d0 [ 653.079930][T14803] ? fdget_pos+0x2c0/0x380 [ 653.079958][T14803] ? __pfx___x64_sys_futex+0x10/0x10 [ 653.079985][T14803] ? ksys_write+0x1ac/0x250 [ 653.080008][T14803] ? __pfx_ksys_write+0x10/0x10 [ 653.080039][T14803] do_syscall_64+0x123/0x790 [ 653.080065][T14803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.080086][T14803] RIP: 0033:0x7efc9a19e159 [ 653.080104][T14803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.080124][T14803] RSP: 002b:00007efc9b1220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 653.080145][T14803] RAX: ffffffffffffffda RBX: 00007efc9a425fa8 RCX: 00007efc9a19e159 [ 653.080158][T14803] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efc9a425fac [ 653.080171][T14803] RBP: 00007efc9a425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 653.080183][T14803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 653.080196][T14803] R13: 00007efc9a426038 R14: 00007ffe5522f6e0 R15: 00007ffe5522f7c8 [ 653.080224][T14803] [ 653.360891][ T7356] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 654.083794][ T7356] usb 1-1: device descriptor read/64, error -71 [ 654.106554][ T190] usb 6-1: USB disconnect, device number 23 [ 654.167364][T13459] udevd[13459]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 654.239144][ T7356] usb usb1-port1: attempt power cycle [ 654.287736][ T31] audit: type=1400 audit(1791105039.227:1071): avc: denied { append } for pid=14814 comm="syz.1.2891" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 654.328393][T14815] nbd1: detected capacity change from 0 to 18 [ 654.580374][ T7356] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 654.601071][ T7356] usb 1-1: device descriptor read/8, error -71 [ 654.672945][T14820] syz_tun: entered allmulticast mode [ 655.114522][ T5602] block nbd1: Receive control failed (result -104) [ 655.171022][ T7356] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 655.191154][ T7356] usb 1-1: device descriptor read/8, error -71 [ 655.291848][T14817] syz_tun: left allmulticast mode [ 655.301010][ T7356] usb usb1-port1: unable to enumerate USB device [ 655.451336][T14822] tipc: Started in network mode [ 655.451366][T14822] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 655.463246][T14822] tipc: Enabled bearer , priority 10 [ 656.636039][T14832] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2897'. [ 656.764059][ T7356] tipc: Node number set to 4269801488 [ 656.911433][T14842] ovs-dp0: entered promiscuous mode [ 659.051187][T14853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.051459][T14853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.240650][ T5702] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 659.250564][ T190] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 659.532733][ T5702] usb 3-1: unable to get BOS descriptor or descriptor too short [ 659.533311][ T5702] usb 3-1: not running at top speed; connect to a high speed hub [ 659.533374][ T5702] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 659.534522][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.534545][ T5702] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.534566][ T5702] usb 3-1: config 1 has no interface number 0 [ 659.537937][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.537959][ T5702] usb 3-1: Product: syz [ 659.537975][ T5702] usb 3-1: Manufacturer: syz [ 659.538030][ T5702] usb 3-1: SerialNumber: syz [ 659.539201][ T190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 659.539242][ T190] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 659.575280][ T190] usb 6-1: config 8 has an invalid interface number: 109 but max is 0 [ 659.575306][ T190] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 659.575326][ T190] usb 6-1: config 8 has no interface number 0 [ 659.575361][ T190] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 659.575387][ T190] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 659.575412][ T190] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 660.009384][ T190] usb 6-1: string descriptor 0 read error: -22 [ 660.009477][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.033498][T14852] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 660.038044][ T190] metro_usb 6-1:8.109: Metrologic USB to Serial converter detected [ 660.065466][ T190] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 660.257808][ T190] usb 6-1: USB disconnect, device number 24 [ 660.281539][ T5702] usb 3-1: USB disconnect, device number 45 [ 660.318140][ T190] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 660.318651][ T190] metro_usb 6-1:8.109: device disconnected [ 660.365908][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.453333][T14873] FAULT_INJECTION: forcing a failure. [ 661.453333][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 661.453370][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.0.2911 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.453400][T14873] Tainted: [L]=SOFTLOCKUP [ 661.453408][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 661.453421][T14873] Call Trace: [ 661.453430][T14873] [ 661.453440][T14873] dump_stack_lvl+0x100/0x190 [ 661.453476][T14873] should_fail_ex.cold+0x5/0xa [ 661.453508][T14873] should_failslab+0xc2/0x120 [ 661.453539][T14873] __kmalloc_cache_noprof+0x91/0x6d0 [ 661.453561][T14873] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 661.453587][T14873] ? nf_tables_commit+0x743/0x9300 [ 661.453622][T14873] nf_tables_commit+0x743/0x9300 [ 661.453660][T14873] ? nf_tables_newrule+0x10ed/0x2be0 [ 661.453695][T14873] ? __pfx_nf_tables_commit+0x10/0x10 [ 661.453735][T14873] ? net_generic+0x25/0x2a0 [ 661.453763][T14873] ? __nla_parse+0x40/0x60 [ 661.453792][T14873] nfnetlink_rcv_batch+0x1a4d/0x2880 [ 661.453831][T14873] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 661.453859][T14873] ? lock_acquire+0x1d1/0x380 [ 661.453884][T14873] ? avc_has_perm_noaudit+0x56/0x470 [ 661.453928][T14873] ? avc_has_perm_noaudit+0x145/0x470 [ 661.453990][T14873] ? __nla_parse+0x40/0x60 [ 661.454016][T14873] nfnetlink_rcv+0x3bd/0x440 [ 661.454037][T14873] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 661.454067][T14873] netlink_unicast+0x585/0x850 [ 661.454100][T14873] ? __pfx_netlink_unicast+0x10/0x10 [ 661.454136][T14873] netlink_sendmsg+0x8b0/0xda0 [ 661.454169][T14873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.454202][T14873] ? selinux_socket_sendmsg+0x198/0x2f0 [ 661.454234][T14873] ____sys_sendmsg+0xa4d/0xbe0 [ 661.454255][T14873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.454285][T14873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.454314][T14873] ? plist_check_list+0x1b8/0x280 [ 661.454343][T14873] ? plist_del+0x308/0x510 [ 661.454375][T14873] ___sys_sendmsg+0x190/0x1e0 [ 661.454402][T14873] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.454426][T14873] ? futex_wake+0x220/0x5e0 [ 661.454459][T14873] ? find_held_lock+0x2b/0x80 [ 661.454509][T14873] __sys_sendmsg+0x160/0x210 [ 661.454539][T14873] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.454584][T14873] do_syscall_64+0x123/0x790 [ 661.454610][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.454632][T14873] RIP: 0033:0x7f3471d9e159 [ 661.454650][T14873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.454671][T14873] RSP: 002b:00007f3472bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.454693][T14873] RAX: ffffffffffffffda RBX: 00007f3472025fa0 RCX: 00007f3471d9e159 [ 661.454714][T14873] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 661.454728][T14873] RBP: 00007f3471e3506b R08: 0000000000000000 R09: 0000000000000000 [ 661.454742][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.454755][T14873] R13: 00007f3472026038 R14: 00007f3472025fa0 R15: 00007ffeeb355a68 [ 661.454785][T14873] [ 664.644975][T14896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2916'. [ 664.645793][T14896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2916'. [ 666.181877][ T5838] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 666.331523][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 666.332315][ T5838] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.e1 [ 666.335034][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.335059][ T5838] usb 3-1: Product: syz [ 666.335075][ T5838] usb 3-1: Manufacturer: syz [ 666.335092][ T5838] usb 3-1: SerialNumber: syz [ 666.338890][ T5838] usb 3-1: config 0 descriptor?? [ 666.543148][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 666.543192][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 666.543218][T14904] netlink: 'syz.2.2920': attribute type 13 has an invalid length. [ 666.724072][T14907] 9pnet_fd: p9_fd_create_unix (14907): problem connecting socket: ./cgroup: -111 [ 666.931699][ T5838] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 667.193957][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 670.091420][ T7356] usb 3-1: USB disconnect, device number 46 [ 670.549525][ T5702] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 671.346260][T14927] syz.0.2924 (14927) used greatest stack depth: 17992 bytes left [ 671.406989][T14925] block2mtd: illegal erase size [ 671.551982][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 671.553256][ T5702] usb 6-1: not running at top speed; connect to a high speed hub [ 671.553285][ T5702] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 671.558427][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.558454][ T5702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.558484][ T5702] usb 6-1: config 1 has no interface number 0 [ 671.561694][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.561718][ T5702] usb 6-1: Product: syz [ 671.561733][ T5702] usb 6-1: Manufacturer: syz [ 671.561747][ T5702] usb 6-1: SerialNumber: syz [ 671.592689][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 671.603170][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.003991][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.005311][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.005821][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 672.262066][ T5702] usb 6-1: USB disconnect, device number 25 [ 672.296854][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.338174][T14937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2928'. [ 672.946804][T14928] lo speed is unknown, defaulting to 1000 [ 672.982896][T14948] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2930'. [ 673.155318][T14952] block2mtd: illegal erase size [ 674.134095][ T5602] Bluetooth: hci1: command tx timeout [ 674.208646][ T31] audit: type=1326 audit(1791105059.147:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.2934" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc9a19e159 code=0x0 [ 674.409007][T14928] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.410197][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.329298][T14928] bridge_slave_0: entered allmulticast mode [ 675.332441][T14928] bridge_slave_0: entered promiscuous mode [ 675.366197][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 675.397264][T14928] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.397352][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.397475][T14928] bridge_slave_1: entered allmulticast mode [ 675.431076][T14928] bridge_slave_1: entered promiscuous mode [ 676.553035][T14065] Bluetooth: hci1: command tx timeout [ 676.639912][T14928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.648364][T14928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.728788][T14928] team0: Port device team_slave_0 added [ 676.734672][T14928] team0: Port device team_slave_1 added [ 676.756063][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2927'. [ 676.793254][ T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 676.814921][T14928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.814935][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.814956][T14928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.821864][T14928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.821980][T14928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.822004][T14928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.869576][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'. [ 676.965141][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 676.967517][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 676.967548][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 676.968675][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.968697][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.968717][ T10] usb 3-1: config 1 has no interface number 0 [ 676.973684][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.973707][ T10] usb 3-1: Product: syz [ 676.973722][ T10] usb 3-1: Manufacturer: syz [ 676.973737][ T10] usb 3-1: SerialNumber: syz [ 677.105296][T14928] hsr_slave_0: entered promiscuous mode [ 677.105932][T14928] hsr_slave_1: entered promiscuous mode [ 677.106327][T14928] debugfs: 'hsr0' already exists in 'hsr' [ 677.106365][T14928] Cannot create hsr debugfs directory [ 677.447721][ T10] usb 3-1: USB disconnect, device number 47 [ 677.484567][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.802739][ T5731] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 677.845693][T14928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 677.872633][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.873350][T14928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 677.875780][T15006] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2941'. [ 677.878315][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.879571][T14928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 677.915437][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.918106][T14928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 677.945080][T14928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.962174][ T5731] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 677.963089][ T5731] usb 1-1: config index 0 descriptor too short (expected 249, got 27) [ 677.963113][ T5731] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.963132][ T5731] usb 1-1: config 0 has no interfaces? [ 677.963160][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.965652][ T5731] usb 1-1: config 0 descriptor?? [ 678.157189][T14928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.186686][T14928] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.202034][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.202126][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.210169][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.210291][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.611646][ T5602] Bluetooth: hci1: command tx timeout [ 679.199184][T14928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.346724][ T31] audit: type=1400 audit(1791105064.287:1073): avc: denied { append } for pid=15043 comm="syz.5.2947" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 679.428639][ T190] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 680.083960][ T190] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 680.085045][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.085075][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.085109][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.372559][T15055] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2948'. [ 681.278965][ T5602] Bluetooth: hci1: command tx timeout [ 681.317430][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317462][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317532][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317558][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317583][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317607][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317642][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317667][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317691][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.317714][ T190] hid-sensor-hub 0003:8086:0000.0012: unknown main item tag 0x0 [ 681.396347][ T905] usb 1-1: USB disconnect, device number 37 [ 681.452554][ T190] hid-sensor-hub 0003:8086:0000.0012: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 681.475507][T14928] veth0_vlan: entered promiscuous mode [ 681.517418][T14928] veth1_vlan: entered promiscuous mode [ 681.528712][T15062] mmap: syz.0.2950 (15062): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 681.588901][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.604501][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.620195][T14928] veth0_macvtap: entered promiscuous mode [ 681.642977][T14928] veth1_macvtap: entered promiscuous mode [ 681.659400][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 681.659449][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 681.659467][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 681.659485][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 681.659503][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 681.659521][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 681.659538][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 681.659555][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 681.659571][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 681.659587][T15066] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 681.659603][T15066] jffs2: Further such events for this erase block will not be printed [ 681.659704][T15066] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 681.661524][T15066] jffs2: notice: (15066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 681.702040][T14928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.764274][T14928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.884547][T15071] lo speed is unknown, defaulting to 1000 [ 682.575192][ T5991] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.611698][ T5991] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.611740][ T5991] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.611771][ T5991] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.634349][ T31] audit: type=1400 audit(1791105067.577:1074): avc: denied { setopt } for pid=15067 comm="syz.0.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 682.809872][ T190] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: failed to setup common attributes [ 682.809898][ T190] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: probe with driver hid_sensor_accel_3d failed with error -22 [ 682.915638][ T190] usb 3-1: USB disconnect, device number 48 [ 683.253066][ T5731] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 683.353302][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.353324][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.421690][ T5731] usb 6-1: Using ep0 maxpacket: 8 [ 683.423143][ T5731] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 683.424079][ T5731] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 683.424102][ T5731] usb 6-1: config 0 has no interface number 0 [ 683.424138][ T5731] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.424161][ T5731] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 683.424183][ T5731] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 683.424209][ T5731] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 683.424234][ T5731] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.426189][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.426212][ T5731] usb 6-1: Product: syz [ 683.426228][ T5731] usb 6-1: Manufacturer: syz [ 683.426243][ T5731] usb 6-1: SerialNumber: syz [ 683.433396][ T5731] usb 6-1: config 0 descriptor?? [ 683.535183][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.535203][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.779836][ T5731] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 683.925974][ T31] audit: type=1400 audit(1791105068.867:1075): avc: denied { watch_reads } for pid=15079 comm="syz.0.2956" path="/19" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 683.954451][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2956'. [ 684.062029][ T5731] usb 6-1: USB disconnect, device number 26 [ 684.101433][ T31] audit: type=1400 audit(1791105069.027:1076): avc: denied { lock } for pid=15087 comm="syz.2.2957" path="socket:[43854]" dev="sockfs" ino=43854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 684.351866][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 684.380390][T15097] nfs4: Unknown parameter 'add' [ 684.554016][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 684.640049][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.654898][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 684.654963][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.711643][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 684.711670][ T10] usb 1-1: Product: syz [ 684.711686][ T10] usb 1-1: Manufacturer: syz [ 684.747076][T15080] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 684.763219][ T10] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 684.768974][ T10] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 684.970226][ T2065] block nbd1: Possible stuck request ffff8880283a7000: control (read@0,4096B). Runtime 30 seconds [ 685.047227][ T5731] usb 1-1: USB disconnect, device number 38 [ 685.060234][ T5731] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 685.061866][ T5731] garmin_gps 1-1:1.0: device disconnected [ 686.136849][ T31] audit: type=1400 audit(1791105070.587:1077): avc: denied { getopt } for pid=15105 comm="syz.2.2961" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 686.137322][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.137372][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.265338][ T5991] IPVS: starting estimator thread 0... [ 686.320360][ T905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 686.351808][T15111] IPVS: using max 36 ests per chain, 86400 per kthread [ 686.474406][ T905] usb 7-1: New USB device found, idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 686.475323][ T905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.475365][ T905] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 686.476255][ T905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.476296][ T905] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 686.477145][ T905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.477184][ T905] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 686.477222][ T905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.479783][ T905] usb 7-1: config 0 descriptor?? [ 686.528727][ T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 686.701443][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 686.702460][ T10] usb 6-1: config index 0 descriptor too short (expected 249, got 27) [ 686.702487][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.702506][ T10] usb 6-1: config 0 has no interfaces? [ 686.702533][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.706102][ T905] usb 7-1: USB disconnect, device number 2 [ 686.772399][ T10] usb 6-1: config 0 descriptor?? [ 686.843066][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 688.754291][ T5838] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 688.843550][ T5703] usb 6-1: USB disconnect, device number 27 [ 688.915631][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 688.917469][ T5838] usb 3-1: not running at top speed; connect to a high speed hub [ 688.917499][ T5838] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 688.918585][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.918609][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.918631][ T5838] usb 3-1: config 1 has no interface number 0 [ 688.923565][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.923589][ T5838] usb 3-1: Product: syz [ 688.923604][ T5838] usb 3-1: Manufacturer: syz [ 688.923619][ T5838] usb 3-1: SerialNumber: syz [ 689.212997][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2967'. [ 689.423826][ T5838] usb 3-1: USB disconnect, device number 49 [ 689.586799][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.675499][T15140] hsr_slave_1 (unregistering): left promiscuous mode [ 690.327735][T15150] : renamed from bond_slave_0 (while UP) [ 691.419382][T15169] overlayfs: missing 'workdir' [ 692.104021][T15179] block2mtd: illegal erase size [ 694.637481][T15186] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2980'. [ 694.986099][T15203] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 695.052651][ T5838] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 695.082778][T15203] bond1: (slave geneve2): making interface the new active one [ 695.084980][T15203] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 695.092572][ T5977] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.092608][ T5977] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.092640][ T5977] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.092671][ T5977] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.155942][T15203] input: syz1 as /devices/virtual/input/input34 [ 695.192571][ T5838] usb 3-1: device descriptor read/64, error -71 [ 695.238023][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 695.238054][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 695.238075][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 695.238098][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 695.238120][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 695.238142][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 695.238165][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 695.238187][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 695.238208][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 695.238232][T15210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 695.238254][T15210] jffs2: Further such events for this erase block will not be printed [ 695.238405][T15210] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 695.239137][T15210] jffs2: notice: (15210) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 695.401679][T15212] lo speed is unknown, defaulting to 1000 [ 695.993038][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2984'. [ 696.042540][ T5838] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 696.176132][ T5838] usb 3-1: device descriptor read/64, error -71 [ 696.291353][ T5838] usb usb3-port1: attempt power cycle [ 696.852685][ T5838] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 697.423167][ T5838] usb 3-1: device descriptor read/8, error -71 [ 697.492365][T14676] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 697.607480][T15232] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2989'. [ 697.661347][T14676] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 697.664077][T14676] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.664129][T14676] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 697.664166][T14676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.672510][ T5838] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 697.693044][ T5838] usb 3-1: device descriptor read/8, error -71 [ 697.812996][ T5838] usb usb3-port1: unable to enumerate USB device [ 698.601789][T14676] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 698.601808][T14676] dvb_ttusb_budget: ttusb_init_controller: error [ 698.601819][T14676] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 698.916606][T14676] DVB: Unable to find symbol stv0299_attach() [ 699.161448][ T5607] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 699.291444][ T5607] usb 3-1: device descriptor read/64, error -71 [ 699.527428][T14676] DVB: Unable to find symbol tda8083_attach() [ 699.527444][T14676] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 699.532738][T14676] usb 1-1: USB disconnect, device number 39 [ 699.587124][ T5607] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 699.721516][ T5607] usb 3-1: device descriptor read/64, error -71 [ 699.840026][T15262] 9p: Bad value for 'wfdno' [ 699.850696][ T31] audit: type=1400 audit(1791105084.797:1078): avc: denied { read append } for pid=15261 comm="syz.0.3001" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 699.851078][ T31] audit: type=1400 audit(1791105084.797:1079): avc: denied { open } for pid=15261 comm="syz.0.3001" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 699.852070][ T31] audit: type=1400 audit(1791105084.797:1080): avc: denied { ioctl } for pid=15261 comm="syz.0.3001" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 699.876970][ T5607] usb usb3-port1: attempt power cycle [ 699.998876][ T31] audit: type=1400 audit(1791105084.937:1081): avc: denied { unmount } for pid=14205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 700.551429][ T5607] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 700.571973][ T5607] usb 3-1: device descriptor read/8, error -71 [ 700.811400][ T5607] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 700.831900][ T5607] usb 3-1: device descriptor read/8, error -71 [ 700.941662][ T5607] usb usb3-port1: unable to enumerate USB device [ 701.748657][T15269] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3003'. [ 701.910007][ T31] audit: type=1400 audit(1791105086.847:1082): avc: denied { connect } for pid=15278 comm="syz.6.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 702.872460][T14676] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 703.034850][T14676] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 703.039986][T14676] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 703.040160][T14676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 703.086901][T14676] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 703.086936][T14676] usb 3-1: Manufacturer: syz [ 703.184685][T14676] usb 3-1: config 0 descriptor?? [ 704.512320][T14676] rc_core: IR keymap rc-hauppauge not found [ 704.512333][T14676] Registered IR keymap rc-empty [ 704.512993][T14676] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 704.514192][T14676] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 704.558527][ T5703] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 704.712473][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 704.713753][ T5703] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 704.718956][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.719002][ T5703] usb 6-1: Product: syz [ 704.719019][ T5703] usb 6-1: Manufacturer: syz [ 704.719035][ T5703] usb 6-1: SerialNumber: syz [ 704.777844][ T5703] usb 6-1: config 0 descriptor?? [ 704.986797][ T31] audit: type=1400 audit(1791105089.927:1083): avc: denied { write } for pid=15285 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.032957][ T5703] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 705.889271][ T31] audit: type=1400 audit(1791105090.827:1084): avc: denied { append } for pid=15286 comm="syz.2.3007" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 705.986405][T15307] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 705.986598][T15307] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 706.021167][T15307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.021204][T15307] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 706.038966][T15307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.039021][T15307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 706.039870][T15307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 706.039903][T15307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 706.042923][T15307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 706.052660][T15307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 706.052740][T15307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 706.114148][T15307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 706.150191][ T31] audit: type=1400 audit(1791105091.087:1085): avc: denied { write } for pid=15306 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.862383][ T31] audit: type=1400 audit(1791105091.807:1086): avc: denied { write } for pid=15314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.399809][T14676] usb 3-1: USB disconnect, device number 58 [ 707.459884][ T5703] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 707.476093][ T5703] usb 6-1: USB disconnect, device number 28 [ 707.676216][ T31] audit: type=1400 audit(1791105092.617:1087): avc: denied { write } for pid=15334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.052414][T14065] Bluetooth: hci1: command 0x0c1a tx timeout [ 708.052455][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 708.052496][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 708.052510][T14065] Bluetooth: hci4: command 0x0406 tx timeout [ 708.052525][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 708.242047][ T905] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 708.417671][ T905] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 708.532509][ T905] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 708.532578][ T905] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 708.532608][ T905] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.532637][ T905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 708.532667][ T905] usb 7-1: config 1 has no interface number 0 [ 708.532859][ T905] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 708.533000][ T905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.312602][ T905] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 709.653418][ T905] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 709.654442][ T905] snd_usb_pod 7-1:1.1: invalid control EP [ 709.654472][ T905] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 709.690068][ T905] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 709.769675][ T905] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 709.868633][ T905] usb 7-1: USB disconnect, device number 3 [ 710.131541][ T4919] Bluetooth: hci5: command 0x0406 tx timeout [ 710.131576][ T4919] Bluetooth: hci2: command 0x0406 tx timeout [ 710.131600][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 710.138268][T14065] Bluetooth: hci4: command 0x0406 tx timeout [ 710.138299][T14065] Bluetooth: hci1: command 0x0c1a tx timeout [ 710.434887][T15358] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3020'. [ 711.734558][T15386] ovs-dp0: entered promiscuous mode [ 712.022180][T15386] 8021q: adding VLAN 0 to HW filter on device eth0 [ 712.031591][T15386] 8021q: adding VLAN 0 to HW filter on device eth1 [ 712.037491][T15386] 8021q: adding VLAN 0 to HW filter on device eth2 [ 712.042730][T15386] 8021q: adding VLAN 0 to HW filter on device eth3 [ 712.046350][T15386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 712.215776][T14065] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.215822][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 712.926594][ T31] audit: type=1400 audit(1791105097.867:1088): avc: denied { getopt } for pid=15393 comm="syz.5.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 713.046766][ T31] audit: type=1400 audit(1791105097.987:1089): avc: denied { write } for pid=15349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.357511][T15403] block2mtd: illegal erase size [ 713.496910][ T31] audit: type=1400 audit(1791105098.437:1090): avc: denied { write } for pid=15404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.106126][ T31] audit: type=1326 audit(1791105099.047:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.2.3015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc9a19e159 code=0x0 [ 714.325141][T15417] veth1_macvtap: left promiscuous mode [ 714.325168][T15417] macsec0: entered promiscuous mode [ 714.346313][T15417] veth1_macvtap: entered promiscuous mode [ 714.346489][T15417] macsec0: left promiscuous mode [ 714.472438][T15422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3026'. [ 715.747740][T13552] block nbd1: Possible stuck request ffff8880283a7000: control (read@0,4096B). Runtime 60 seconds [ 716.192378][ T10] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 716.347513][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 716.348061][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 716.348092][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 716.349083][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.349098][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.349111][ T10] usb 3-1: config 1 has no interface number 0 [ 716.384356][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.384372][ T10] usb 3-1: Product: syz [ 716.384381][ T10] usb 3-1: Manufacturer: syz [ 716.384389][ T10] usb 3-1: SerialNumber: syz [ 716.452419][ T190] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 716.476859][T15450] comedi comedi0: No hardware detected at I/O base 0x300 [ 716.629321][ T190] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 716.659607][ T190] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 716.688228][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.688254][ T190] usb 6-1: Product: syz [ 716.688270][ T190] usb 6-1: Manufacturer: syz [ 716.688285][ T190] usb 6-1: SerialNumber: syz [ 716.742910][ T190] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 716.742959][ T190] dvb-usb: bulk message failed: -22 (3/0) [ 716.777979][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.800818][ T190] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 716.806349][ T190] usb 6-1: media controller created [ 716.834919][T15458] block2mtd: illegal erase size [ 716.959304][T15442] dvb-usb: bulk message failed: -22 (2/0) [ 716.985073][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.456289][ T10] usb 3-1: USB disconnect, device number 59 [ 717.553904][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 717.559476][ T190] DVB: Unable to find symbol mt352_attach() [ 717.559490][ T190] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 717.561832][ T190] dvb-usb: bulk message failed: -22 (3/0) [ 717.606929][ T190] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 717.688492][ T190] usb 6-1: USB disconnect, device number 29 [ 717.846984][ T190] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 717.852143][T15460] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 718.023321][T15460] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 718.024308][T15460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.078106][T15460] usb 1-1: config 0 descriptor?? [ 718.618673][T15460] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 720.995407][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 720.995430][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'. [ 721.035399][ T31] audit: type=1400 audit(1791105105.977:1092): avc: denied { ioctl } for pid=15480 comm="syz.6.3045" path="socket:[44506]" dev="sockfs" ino=44506 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 721.231508][ T190] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 721.272413][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 721.383326][ T190] usb 6-1: Using ep0 maxpacket: 32 [ 721.389235][ T190] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 721.408806][ T190] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 721.425946][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 721.426017][ T10] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 721.453243][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.453268][ T190] usb 6-1: Product: syz [ 721.453283][ T190] usb 6-1: Manufacturer: syz [ 721.453320][ T190] usb 6-1: SerialNumber: syz [ 721.483304][ T190] usb 6-1: config 0 descriptor?? [ 721.493683][ T190] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 721.497330][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 721.519460][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.534516][ T190] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 721.534563][ T190] usb 6-1: media controller created [ 721.577119][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.577144][ T10] usb 7-1: Product: syz [ 721.577159][ T10] usb 7-1: Manufacturer: syz [ 721.577175][ T10] usb 7-1: SerialNumber: syz [ 721.615697][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.653401][ T190] usb 6-1: selecting invalid altsetting 7 [ 721.653461][ T190] cxusb: set interface failed [ 721.653473][ T190] dvb-usb: bulk message failed: -22 (1/0) [ 721.786053][T15460] [drm:udl_init] *ERROR* Selecting channel failed [ 721.801710][T15484] cxusb: i2c wr: len=146 is too big! [ 721.801710][T15484] [ 721.827653][ T190] DVB: Unable to find symbol lgdt330x_attach() [ 721.827666][ T190] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 721.854294][T15460] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 721.854317][T15460] [drm] Initialized udl on minor 1 [ 721.855786][T15460] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 721.856251][T15460] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 721.858904][T15460] usb 1-1: USB disconnect, device number 40 [ 721.913260][ T5838] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 722.022342][ T190] rc_core: IR keymap rc-dvico-portable not found [ 722.022361][ T190] Registered IR keymap rc-empty [ 722.023617][ T190] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 722.026142][ T190] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input36 [ 722.075149][ T190] dvb-usb: schedule remote query interval to 100 msecs. [ 722.075192][ T190] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 722.185439][T15460] dvb-usb: bulk message failed: -22 (1/0) [ 722.207044][ T190] usb 6-1: USB disconnect, device number 30 [ 722.374122][ T190] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 722.660010][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 722.660035][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 722.875670][T15494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3049'. [ 722.875694][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3049'. [ 722.906938][ T31] audit: type=1400 audit(1791105107.847:1093): avc: denied { read } for pid=15492 comm="syz.2.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 722.972742][T15501] block2mtd: illegal erase size [ 723.856056][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 723.856089][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 723.856101][ T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 723.986290][ T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 724.022550][ T10] usb 7-1: USB disconnect, device number 4 [ 726.180685][ T31] audit: type=1400 audit(1791105111.127:1094): avc: denied { read } for pid=15527 comm="syz.6.3055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 726.597203][T15532] warning: `syz.6.3055' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 726.599335][T15526] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3054'. [ 726.989911][T15538] FAULT_INJECTION: forcing a failure. [ 726.989911][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 726.989934][T15538] CPU: 0 UID: 0 PID: 15538 Comm: syz.0.3047 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.989951][T15538] Tainted: [L]=SOFTLOCKUP [ 726.989955][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 726.989963][T15538] Call Trace: [ 726.989968][T15538] [ 726.989972][T15538] dump_stack_lvl+0x100/0x190 [ 726.989994][T15538] should_fail_ex.cold+0x5/0xa [ 726.990014][T15538] should_failslab+0xc2/0x120 [ 726.990031][T15538] kmem_cache_alloc_noprof+0x92/0x6a0 [ 726.990045][T15538] ? is_bpf_text_address+0x94/0x1a0 [ 726.990062][T15538] ? alloc_empty_file+0x5b/0x1c0 [ 726.990082][T15538] alloc_empty_file+0x5b/0x1c0 [ 726.990101][T15538] path_openat+0xdb/0x2440 [ 726.990119][T15538] ? __pfx_path_openat+0x10/0x10 [ 726.990135][T15538] ? stack_trace_save+0x8e/0xc0 [ 726.990147][T15538] ? __pfx_stack_trace_save+0x10/0x10 [ 726.990161][T15538] do_file_open+0x20e/0x430 [ 726.990178][T15538] ? __pfx_do_file_open+0x10/0x10 [ 726.990193][T15538] ? __kasan_slab_alloc+0x89/0x90 [ 726.990207][T15538] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 726.990220][T15538] ? do_getname+0x35/0x390 [ 726.990252][T15538] do_open_execat+0xd1/0x360 [ 726.990274][T15538] ? __pfx_do_open_execat+0x10/0x10 [ 726.990296][T15538] ? __might_fault+0xc5/0x140 [ 726.990315][T15538] ? __might_fault+0xc5/0x140 [ 726.990340][T15538] alloc_bprm+0x2d/0x9e0 [ 726.990366][T15538] do_execveat_common.isra.0+0x19c/0x580 [ 726.990391][T15538] ? do_getname+0x191/0x390 [ 726.990413][T15538] __x64_sys_execve+0x93/0xd0 [ 726.990438][T15538] do_syscall_64+0x123/0x790 [ 726.990463][T15538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.990483][T15538] RIP: 0033:0x7f3471d9e159 [ 726.990506][T15538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.990524][T15538] RSP: 002b:00007f3472bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 726.990543][T15538] RAX: ffffffffffffffda RBX: 00007f3472025fa0 RCX: 00007f3471d9e159 [ 726.990557][T15538] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000000 [ 726.990571][T15538] RBP: 00007f3472bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 726.990583][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.990595][T15538] R13: 00007f3472026038 R14: 00007f3472025fa0 R15: 00007ffeeb355a68 [ 726.990624][T15538] [ 727.625468][ T4969] udevd[4969]: worker [13459] /devices/virtual/block/nbd1 is taking a long time [ 727.972707][T15543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 729.199437][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'. [ 730.163258][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 730.163284][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 730.179772][T15567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3064'. [ 730.179787][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3064'. [ 731.749050][ T31] audit: type=1400 audit(1791105116.687:1095): avc: denied { create } for pid=15579 comm="syz.5.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 733.095823][ T31] audit: type=1400 audit(1791105118.037:1096): avc: denied { setattr } for pid=15579 comm="syz.5.3069" name="[io_uring]" dev="anon_inodefs" ino=45620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 733.292677][T15460] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 733.425371][T15460] usb 7-1: device descriptor read/64, error -71 [ 733.701935][T15460] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 733.853114][T15460] usb 7-1: device descriptor read/64, error -71 [ 733.964289][T15460] usb usb7-port1: attempt power cycle [ 734.014258][T15595] binder: 15594:15595 unknown command 0 [ 734.014278][T15595] binder: 15594:15595 ioctl c0306201 200000000080 returned -22 [ 734.022328][ T31] audit: type=1400 audit(1791105118.967:1097): avc: denied { call } for pid=15594 comm="syz.2.3073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 734.243368][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 734.392346][T15460] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 734.912792][T15460] usb 7-1: device descriptor read/8, error -71 [ 734.978255][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3077'. [ 734.982618][ T5838] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 735.169368][T15622] FAULT_INJECTION: forcing a failure. [ 735.169368][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 735.169434][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.0.3079 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.169463][T15622] Tainted: [L]=SOFTLOCKUP [ 735.169471][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.169484][T15622] Call Trace: [ 735.169492][T15622] [ 735.169500][T15622] dump_stack_lvl+0x100/0x190 [ 735.169534][T15622] should_fail_ex.cold+0x5/0xa [ 735.169563][T15622] should_failslab+0xc2/0x120 [ 735.169591][T15622] __kmalloc_cache_noprof+0x91/0x6d0 [ 735.169612][T15622] ? preempt_schedule_thunk+0x16/0x40 [ 735.169636][T15622] ? binder_get_thread+0x201/0x850 [ 735.169667][T15622] binder_get_thread+0x201/0x850 [ 735.169697][T15622] binder_poll+0x3f/0x430 [ 735.169721][T15622] ? __pfx_binder_poll+0x10/0x10 [ 735.169746][T15622] do_select+0xd54/0x1850 [ 735.169793][T15622] ? __pfx_do_select+0x10/0x10 [ 735.169821][T15622] ? __pfx___pollwait+0x10/0x10 [ 735.169850][T15622] ? __pfx_pollwake+0x10/0x10 [ 735.169877][T15622] ? __pfx_pollwake+0x10/0x10 [ 735.169904][T15622] ? __pfx_pollwake+0x10/0x10 [ 735.169935][T15622] ? __pfx_pollwake+0x10/0x10 [ 735.169985][T15622] ? __might_fault+0xc5/0x140 [ 735.170007][T15622] ? find_held_lock+0x2b/0x80 [ 735.170035][T15622] ? __might_fault+0xc5/0x140 [ 735.170053][T15622] ? __might_fault+0xc5/0x140 [ 735.170082][T15622] ? core_sys_select+0x55b/0xbb0 [ 735.170107][T15622] core_sys_select+0x55b/0xbb0 [ 735.170138][T15622] ? __pfx_core_sys_select+0x10/0x10 [ 735.170164][T15622] ? preempt_schedule_irq+0x79/0x90 [ 735.170188][T15622] ? irqentry_exit+0x24d/0xa10 [ 735.170211][T15622] ? lockdep_hardirqs_on+0x7d/0x110 [ 735.170253][T15622] ? __pfx_set_user_sigmask+0x10/0x10 [ 735.170274][T15622] ? __mutex_unlock_slowpath+0x35d/0x930 [ 735.170300][T15622] do_pselect.constprop.0+0x238/0x270 [ 735.170328][T15622] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 735.170357][T15622] ? ksys_write+0x1ac/0x250 [ 735.170382][T15622] __x64_sys_pselect6+0x149/0x1c0 [ 735.170412][T15622] do_syscall_64+0x123/0x790 [ 735.170435][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.170454][T15622] RIP: 0033:0x7f3471d9e159 [ 735.170471][T15622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.170488][T15622] RSP: 002b:00007f3472bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 735.170507][T15622] RAX: ffffffffffffffda RBX: 00007f3472026090 RCX: 00007f3471d9e159 [ 735.170520][T15622] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 735.170532][T15622] RBP: 00007f3472bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 735.170545][T15622] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 735.170557][T15622] R13: 00007f3472026128 R14: 00007f3472026090 R15: 00007ffeeb355a68 [ 735.170585][T15622] [ 735.172923][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 735.180739][ T5838] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 735.182895][ T5838] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 735.182918][ T5838] usb 3-1: config 0 has no interface number 0 [ 735.182960][ T5838] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 735.182983][ T5838] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 735.183006][ T5838] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 735.183030][ T5838] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 735.183055][ T5838] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.201656][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.201687][ T5838] usb 3-1: Product: syz [ 735.201730][ T5838] usb 3-1: Manufacturer: syz [ 735.201772][ T5838] usb 3-1: SerialNumber: syz [ 735.246601][ T5838] usb 3-1: config 0 descriptor?? [ 735.490020][T15624] xt_hashlimit: size too large, truncated to 1048576 [ 736.012777][ T5838] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 736.887403][T15645] FAULT_INJECTION: forcing a failure. [ 736.887403][T15645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.887425][T15645] CPU: 1 UID: 0 PID: 15645 Comm: syz.0.3085 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.887442][T15645] Tainted: [L]=SOFTLOCKUP [ 736.887446][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 736.887454][T15645] Call Trace: [ 736.887458][T15645] [ 736.887463][T15645] dump_stack_lvl+0x100/0x190 [ 736.887486][T15645] should_fail_ex.cold+0x5/0xa [ 736.887504][T15645] _copy_from_user+0x2e/0xd0 [ 736.887519][T15645] copy_msghdr_from_user+0x9f/0x4c0 [ 736.887534][T15645] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 736.887551][T15645] ? __lock_acquire+0x5c0/0x1f40 [ 736.887567][T15645] ___sys_recvmsg+0xdd/0x1a0 [ 736.887581][T15645] ? __pfx____sys_recvmsg+0x10/0x10 [ 736.887594][T15645] ? lock_acquire+0x1d1/0x380 [ 736.887618][T15645] __x64_sys_recvmsg+0x19a/0x260 [ 736.887636][T15645] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 736.887661][T15645] do_syscall_64+0x123/0x790 [ 736.887675][T15645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.887688][T15645] RIP: 0033:0x7f3471d9e159 [ 736.887698][T15645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.887709][T15645] RSP: 002b:00007f3472bd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 736.887721][T15645] RAX: ffffffffffffffda RBX: 00007f3472025fa0 RCX: 00007f3471d9e159 [ 736.887734][T15645] RDX: 0000000000000121 RSI: 0000200000000480 RDI: 0000000000000003 [ 736.887741][T15645] RBP: 00007f3472bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 736.887748][T15645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.887755][T15645] R13: 00007f3472026038 R14: 00007f3472025fa0 R15: 00007ffeeb355a68 [ 736.887771][T15645] [ 737.904651][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 739.128029][ T31] audit: type=1400 audit(1791105124.067:1098): avc: denied { create } for pid=15661 comm="syz.0.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 739.202937][ T5731] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 739.334447][ T31] audit: type=1400 audit(1791105124.137:1099): avc: denied { write } for pid=15661 comm="syz.0.3089" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 739.373990][ T5731] usb 1-1: device descriptor read/64, error -71 [ 739.611432][ T5731] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 740.022489][ T5731] usb 1-1: device descriptor read/64, error -71 [ 740.133754][ T5731] usb usb1-port1: attempt power cycle [ 740.671349][ T5731] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 740.715232][ T5731] usb 1-1: device descriptor read/8, error -71 [ 740.872476][ T190] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 740.951548][ T5731] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 740.972155][ T5731] usb 1-1: device descriptor read/8, error -71 [ 741.012553][ T190] usb 6-1: device descriptor read/64, error -71 [ 741.080691][ T5731] usb usb1-port1: unable to enumerate USB device [ 741.106689][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 741.253671][ T190] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 741.402639][ T190] usb 6-1: device descriptor read/64, error -71 [ 741.525038][ T190] usb usb6-port1: attempt power cycle [ 741.953795][ T190] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 741.978222][ T190] usb 6-1: device descriptor read/8, error -71 [ 742.069390][T15686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.070047][T15686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.152040][ T31] audit: type=1400 audit(1791105127.087:1100): avc: denied { setattr } for pid=15661 comm="syz.0.3089" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 742.212020][ T190] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 742.244041][ T190] usb 6-1: device descriptor read/8, error -71 [ 742.352680][ T190] usb usb6-port1: unable to enumerate USB device [ 744.678500][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3100'. [ 745.172663][T15708] ovs-system: entered promiscuous mode [ 745.175981][T15709] ovs-system: left promiscuous mode [ 746.698062][T13552] block nbd1: Possible stuck request ffff8880283a7000: control (read@0,4096B). Runtime 90 seconds [ 747.030780][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.030836][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.921384][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1019 jiffies old. [ 749.092886][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 751.217254][T15768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3099'. [ 751.451338][ T5731] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 751.601455][ T5731] usb 6-1: Using ep0 maxpacket: 16 [ 751.602038][ T5731] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 751.605898][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 751.605961][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 751.668899][ T7356] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 751.831364][ T7356] usb 7-1: Using ep0 maxpacket: 8 [ 751.832020][ T7356] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 752.045559][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.045583][ T5731] usb 6-1: Product: syz [ 752.045598][ T5731] usb 6-1: Manufacturer: syz [ 752.045611][ T5731] usb 6-1: SerialNumber: syz [ 752.047663][ T7356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.062179][ T7356] usb 7-1: config 0 descriptor?? [ 752.077341][ T5731] usb 6-1: config 0 descriptor?? [ 752.107760][ T7356] usb 7-1: probing VID:PID(0424:012C) [ 752.108118][ T5731] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 752.108148][ T5731] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 752.142547][ T7356] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 752.142594][ T7356] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 752.142621][ T7356] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 752.142647][ T7356] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 752.142672][ T7356] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 752.216088][T15780] block2mtd: illegal erase size [ 752.439617][ T5731] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 752.439898][ T5731] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 752.455225][ T5731] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 752.455237][ T5731] em28xx 6-1:0.0: No AC97 audio processor [ 752.507190][ T5731] usb 6-1: USB disconnect, device number 35 [ 752.522220][ T5731] em28xx 6-1:0.0: Disconnecting em28xx [ 752.942543][ T7356] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 752.989431][ T5731] em28xx: Freeing device [ 753.143523][ T7356] usb 7-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 754.364130][T15792] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3120'. [ 754.442486][ T5995] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.444620][ T5977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.444698][ T5977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.444733][ T5977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.193886][ T31] audit: type=1400 audit(1791105139.707:1101): avc: denied { ioctl } for pid=15772 comm="syz.6.3116" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 755.677758][ T5731] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 755.839000][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3124'. [ 755.879334][ T5731] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 755.891393][ T5731] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 756.031705][ T31] audit: type=1400 audit(1791105140.977:1102): avc: denied { connect } for pid=15821 comm="syz.2.3127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 756.039642][ T31] audit: type=1400 audit(1791105140.977:1103): avc: denied { map } for pid=15821 comm="syz.2.3127" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 756.089273][ T31] audit: type=1400 audit(1791105141.027:1104): avc: denied { ioctl } for pid=15821 comm="syz.2.3127" path="/dev/usbmon6" dev="devtmpfs" ino=733 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 756.202292][ T905] usb 7-1: USB disconnect, device number 9 [ 756.301638][T15820] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3126'. [ 757.048342][ T905] USB vub300 remote SDIO host controller[0] now disconnected [ 757.302729][T15837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15837 comm=syz.4.3130 [ 757.307839][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3130'. [ 757.622811][ T7356] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 759.087597][ T7356] usb 1-1: device descriptor read/64, error -71 [ 759.227292][T15855] block2mtd: illegal erase size [ 759.421388][ T7356] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 759.981250][ T7356] usb 1-1: device descriptor read/64, error -71 [ 759.988212][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3138'. [ 760.006290][T15872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15872 comm=syz.4.3139 [ 760.007680][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 760.091678][ T7356] usb usb1-port1: attempt power cycle [ 762.016044][T15889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3144'. [ 762.532921][T15892] netlink: 'syz.0.3144': attribute type 2 has an invalid length. [ 762.532943][T15892] netlink: 'syz.0.3144': attribute type 7 has an invalid length. [ 762.538433][T15892] Uż: entered promiscuous mode [ 762.764402][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 763.535440][T15896] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 766.262867][T15910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.265293][T15910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.173008][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3152'. [ 767.325950][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 767.383410][T15916] hsr_slave_1 (unregistering): left promiscuous mode [ 768.194670][T15924] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3151'. [ 768.348328][T15931] block2mtd: illegal erase size [ 768.641477][ T5731] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 769.034320][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 769.043284][ T5731] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 769.048103][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.048118][ T5731] usb 1-1: Product: syz [ 769.048126][ T5731] usb 1-1: Manufacturer: syz [ 769.048135][ T5731] usb 1-1: SerialNumber: syz [ 769.104671][ T5731] usb 1-1: config 0 descriptor?? [ 769.118545][ T5731] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 769.145292][T15936] lo speed is unknown, defaulting to 1000 [ 772.149072][ T5731] usb 1-1: clie_3_5_startup: get config number failed: -110 [ 772.168649][ T5731] visor 1-1:0.0: probe with driver visor failed with error -110 [ 772.705687][T14676] usb 1-1: USB disconnect, device number 48 [ 772.806824][T15962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.807569][T15962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.973274][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3165'. [ 773.102759][T14676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.112368][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 773.252160][ T10] usb 7-1: device descriptor read/64, error -71 [ 773.501951][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 773.632018][ T10] usb 7-1: device descriptor read/64, error -71 [ 773.742719][ T10] usb usb7-port1: attempt power cycle [ 774.092076][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 774.112921][ T10] usb 7-1: device descriptor read/8, error -71 [ 774.132792][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.362360][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 774.392067][ T10] usb 7-1: device descriptor read/8, error -71 [ 774.502592][ T10] usb usb7-port1: unable to enumerate USB device [ 775.259277][T14676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.575763][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.983017][ T31] audit: type=1400 audit(1791105160.917:1105): avc: denied { mounton } for pid=15972 comm="syz.6.3166" path="/sys" dev="bpf" ino=47241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 776.379660][T15984] block2mtd: illegal erase size [ 776.379734][T15983] block2mtd: illegal erase size [ 776.583799][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.064159][T15995] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 777.652735][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.756069][T13552] block nbd1: Possible stuck request ffff8880283a7000: control (read@0,4096B). Runtime 120 seconds [ 777.998095][T16004] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 778.905456][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.934736][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.127587][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.654317][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.654440][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.654581][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.658236][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.658353][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.702434][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.702557][T16014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.872327][ T5838] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 780.041351][ T5838] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 780.045374][ T5838] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.045644][ T5838] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 780.045758][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.049217][T16020] FAULT_INJECTION: forcing a failure. [ 780.049217][T16020] name failslab, interval 1, probability 0, space 0, times 0 [ 780.049257][T16020] CPU: 0 UID: 0 PID: 16020 Comm: syz.5.3178 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.049285][T16020] Tainted: [L]=SOFTLOCKUP [ 780.049292][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 780.049305][T16020] Call Trace: [ 780.049312][T16020] [ 780.049320][T16020] dump_stack_lvl+0x100/0x190 [ 780.049355][T16020] should_fail_ex.cold+0x5/0xa [ 780.049385][T16020] should_failslab+0xc2/0x120 [ 780.049418][T16020] kmem_cache_alloc_noprof+0x92/0x6a0 [ 780.049446][T16020] ? do_getname+0x35/0x390 [ 780.049471][T16020] do_getname+0x35/0x390 [ 780.049494][T16020] do_fchownat+0xc6/0x1f0 [ 780.049522][T16020] ? __pfx_do_fchownat+0x10/0x10 [ 780.049550][T16020] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 780.049585][T16020] __x64_sys_lchown+0x7e/0xc0 [ 780.049610][T16020] ? lockdep_hardirqs_on+0x7d/0x110 [ 780.049634][T16020] do_syscall_64+0x123/0x790 [ 780.049659][T16020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.049680][T16020] RIP: 0033:0x7f13bed9e159 [ 780.049697][T16020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.049715][T16020] RSP: 002b:00007f13bfd1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 780.049736][T16020] RAX: ffffffffffffffda RBX: 00007f13bf026090 RCX: 00007f13bed9e159 [ 780.049750][T16020] RDX: ffffffffffffffff RSI: 000000000000ee00 RDI: 0000200000000000 [ 780.049763][T16020] RBP: 00007f13bfd1b090 R08: 0000000000000000 R09: 0000000000000000 [ 780.049776][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.049788][T16020] R13: 00007f13bf026128 R14: 00007f13bf026090 R15: 00007ffdeb0bb218 [ 780.049817][T16020] [ 783.308933][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 783.982361][ T190] net_ratelimit: 31 callbacks suppressed [ 783.984117][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.985752][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.079652][ T5838] dvb_ttusb_budget: ttusb_init_controller: error [ 784.079698][ T5838] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 784.455969][ T5838] DVB: Unable to find symbol stv0299_attach() [ 784.499239][T16040] block2mtd: illegal erase size [ 784.604222][T16041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 784.681891][ T5838] DVB: Unable to find symbol tda8083_attach() [ 784.681906][ T5838] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 784.684719][ T5838] usb 7-1: USB disconnect, device number 14 [ 784.715075][ T5724] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 784.881421][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 784.882104][ T5724] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 784.886427][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.221326][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.223370][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.269229][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.269350][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.467198][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.676566][ T5724] pvrusb2: Hardware description: Terratec Grabster AV400 [ 785.676667][ T5724] pvrusb2: ********** [ 785.676705][ T5724] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 785.676743][ T5724] pvrusb2: Important functionality might not be entirely working. [ 785.676781][ T5724] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 785.676817][ T5724] pvrusb2: ********** [ 785.879268][ T2354] pvrusb2: Invalid write control endpoint [ 785.975602][ T2354] pvrusb2: Invalid write control endpoint [ 785.975620][ T2354] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 785.975629][ T2354] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 785.975636][ T2354] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 785.975644][ T2354] pvrusb2: Device being rendered inoperable [ 785.978312][ T2354] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 785.978413][ T2354] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 786.076998][ T2354] pvrusb2: Attached sub-driver cx25840 [ 786.077014][ T2354] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 786.077023][ T2354] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 786.117248][ T5724] usb 6-1: USB disconnect, device number 36 [ 786.326882][T16059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.327079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.777807][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.984015][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3186'. [ 787.249811][T16070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16070 comm=syz.4.3188 [ 787.308907][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 787.322203][T16071] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 787.809771][T16076] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3187'. [ 787.974733][T16078] FAULT_INJECTION: forcing a failure. [ 787.974733][T16078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.974794][T16078] CPU: 0 UID: 0 PID: 16078 Comm: syz.2.3189 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.974823][T16078] Tainted: [L]=SOFTLOCKUP [ 787.974831][T16078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 787.974843][T16078] Call Trace: [ 787.974850][T16078] [ 787.974859][T16078] dump_stack_lvl+0x100/0x190 [ 787.974893][T16078] should_fail_ex.cold+0x5/0xa [ 787.974922][T16078] _copy_to_user+0x32/0xd0 [ 787.974950][T16078] simple_read_from_buffer+0xcb/0x170 [ 787.974980][T16078] proc_fail_nth_read+0x1af/0x230 [ 787.975009][T16078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.975039][T16078] ? rw_verify_area+0xce/0x6d0 [ 787.975059][T16078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.975086][T16078] vfs_read+0x1e4/0xb40 [ 787.975110][T16078] ? lock_acquire+0x1d1/0x380 [ 787.975132][T16078] ? __fget_files+0x34/0x3d0 [ 787.975159][T16078] ? __pfx_vfs_read+0x10/0x10 [ 787.975179][T16078] ? find_held_lock+0x2b/0x80 [ 787.975213][T16078] ? __fget_files+0x215/0x3d0 [ 787.975244][T16078] ? __fget_files+0x21f/0x3d0 [ 787.975279][T16078] ksys_read+0x12a/0x250 [ 787.975301][T16078] ? __pfx_ksys_read+0x10/0x10 [ 787.975333][T16078] do_syscall_64+0x123/0x790 [ 787.975358][T16078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.975379][T16078] RIP: 0033:0x7efc9a15e98e [ 787.975396][T16078] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 787.975415][T16078] RSP: 002b:00007efc9b0befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.975435][T16078] RAX: ffffffffffffffda RBX: 00007efc9b0bf6c0 RCX: 00007efc9a15e98e [ 787.975449][T16078] RDX: 000000000000000f RSI: 00007efc9b0bf0a0 RDI: 0000000000000008 [ 787.975461][T16078] RBP: 00007efc9b0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 787.975473][T16078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.975485][T16078] R13: 00007efc9a426308 R14: 00007efc9a426270 R15: 00007ffe5522f7c8 [ 787.975515][T16078] [ 788.415585][T16086] syzkaller0: entered promiscuous mode [ 788.415606][T16086] syzkaller0: entered allmulticast mode [ 789.748829][T14675] net_ratelimit: 26 callbacks suppressed [ 789.748850][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.748968][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.761673][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.808283][T16093] block2mtd: illegal erase size [ 790.012556][ T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 790.185347][ T10] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 790.189430][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.189754][ T10] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 790.189905][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.732503][T16109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.732744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.093881][ T31] audit: type=1400 audit(1791105176.037:1106): avc: denied { create } for pid=16107 comm="syz.5.3200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 791.096374][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.106870][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.147917][ T10] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 791.147928][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 791.147948][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 791.262871][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3200'. [ 791.264745][ T10] DVB: Unable to find symbol stv0299_attach() [ 791.364897][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.365041][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.425441][ T10] DVB: Unable to find symbol tda8083_attach() [ 791.425454][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 791.856635][T16119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.884883][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 791.944829][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.003753][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.086571][T14675] usb 7-1: USB disconnect, device number 15 [ 794.316032][ T190] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 794.327612][ T31] audit: type=1400 audit(1791105179.267:1107): avc: denied { write } for pid=16128 comm="syz.6.3205" name="subsystems" dev="configfs" ino=29819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 794.515388][ T190] usb 6-1: unable to get BOS descriptor or descriptor too short [ 794.517302][ T190] usb 6-1: not running at top speed; connect to a high speed hub [ 794.517441][ T190] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 794.565247][ T190] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.565277][ T190] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 794.565305][ T190] usb 6-1: config 1 has no interface number 0 [ 794.612135][ T190] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.612175][ T190] usb 6-1: Product: syz [ 794.612216][ T190] usb 6-1: Manufacturer: syz [ 794.612232][ T190] usb 6-1: SerialNumber: syz [ 795.148452][T14675] net_ratelimit: 14 callbacks suppressed [ 795.148471][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.148587][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.250944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.513692][ T190] usb 6-1: USB disconnect, device number 37 [ 796.569549][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.569692][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.611624][T16140] ovs-dp0: entered promiscuous mode [ 796.769989][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.773661][T12496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.773794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.810592][T13445] udevd[13445]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.877773][T16143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.974065][ T31] audit: type=1400 audit(1791105181.917:1108): avc: denied { mounton } for pid=16145 comm="syz.0.3197" path="/syzcgroup/cpu/syz0/memory.limit_in_bytes" dev="cgroup" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 797.026750][T16147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3197'. [ 797.072663][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.102148][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.721562][T16154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.621742][ T5724] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 798.708077][ T31] audit: type=1400 audit(1791105183.637:1109): avc: denied { rmdir } for pid=12991 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 798.775319][ T5724] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 798.776238][ T5724] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 798.776263][ T5724] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 798.776280][ T5724] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 798.776292][ T5724] usb 1-1: config 1 has no interface number 0 [ 798.776313][ T5724] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 798.776327][ T5724] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 798.776350][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.792100][ T5724] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 798.885025][T16173] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3216'. [ 798.912784][ T905] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 798.995805][ T5724] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 799.062150][ T905] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 799.063257][ T905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.068414][ T905] usb 6-1: config 0 descriptor?? [ 799.235945][T14675] usb 1-1: USB disconnect, device number 49 [ 799.237672][T14675] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 799.287622][ T905] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 799.521777][ T905] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 799.521803][ T905] [drm] Initialized udl on minor 1 [ 800.067359][ T905] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 800.067772][ T905] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 800.094750][ T905] usb 6-1: USB disconnect, device number 38 [ 800.097836][ T5724] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 800.098379][ T5724] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 800.098559][ T5724] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 800.208623][ T10] net_ratelimit: 21 callbacks suppressed [ 800.208642][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.208779][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.187478][ T7356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.251707][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.357677][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.357795][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.392117][ T31] audit: type=1400 audit(1791105185.667:1110): avc: denied { mounton } for pid=16183 comm="syz.4.3220" path="/534/pipefs" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 801.492700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.601763][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.956298][T16193] syzkaller1: entered promiscuous mode [ 801.956313][T16193] syzkaller1: entered allmulticast mode [ 802.065422][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.856809][T14675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.997335][ T32] INFO: task syz.1.2891:14814 blocked for more than 143 seconds. [ 803.997394][ T32] Tainted: G L syzkaller #0 [ 803.997423][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 803.997448][ T32] task:syz.1.2891 state:D stack:27128 pid:14814 tgid:14814 ppid:11184 task_flags:0x400040 flags:0x00080002 [ 803.997682][ T32] Call Trace: [ 803.997706][ T32] [ 803.997815][ T32] __schedule+0x1259/0x6920 [ 803.997992][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 803.998072][ T32] ? do_raw_spin_lock+0x128/0x260 [ 803.998155][ T32] ? __pfx___schedule+0x10/0x10 [ 803.998191][ T32] ? find_held_lock+0x2b/0x80 [ 803.998485][ T32] ? schedule+0x225/0x2c0 [ 803.998558][ T32] schedule+0xdd/0x2c0 [ 803.998595][ T32] schedule_preempt_disabled+0x13/0x30 [ 803.998633][ T32] __mutex_lock+0xccb/0x1bd0 [ 803.998673][ T32] ? bdev_release+0x15a/0x6d0 [ 803.998752][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 803.998900][ T32] ? find_held_lock+0x2b/0x80 [ 803.998988][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 803.999070][ T32] ? bdev_release+0x15a/0x6d0 [ 803.999113][ T32] bdev_release+0x15a/0x6d0 [ 803.999286][ T32] ? __pfx_blkdev_release+0x10/0x10 [ 803.999382][ T32] blkdev_release+0x15/0x20 [ 803.999526][ T32] __fput+0x3ff/0xb50 [ 803.999807][ T32] task_work_run+0x150/0x240 [ 804.000026][ T32] ? __pfx_task_work_run+0x10/0x10 [ 804.207238][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 804.207274][ T32] ? rcu_is_watching+0x13/0xc0 [ 804.207305][ T32] do_syscall_64+0x661/0x790 [ 804.207331][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.207353][ T32] RIP: 0033:0x7f6dcb19e159 [ 804.207369][ T32] RSP: 002b:00007ffd76639b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 804.207389][ T32] RAX: 0000000000000000 RBX: 00007f6dcb427da0 RCX: 00007f6dcb19e159 [ 804.207403][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 804.207415][ T32] RBP: 00007f6dcb427da0 R08: 0000000000000006 R09: 0000000000000000 [ 804.207428][ T32] R10: 00007f6dcb427cb0 R11: 0000000000000246 R12: 000000000009feea [ 804.207440][ T32] R13: 00007f6dcb42609c R14: 000000000009fc3a R15: 00007ffd76639c20 [ 804.207469][ T32] [ 804.207481][ T32] INFO: task syz.1.2891:14815 blocked for more than 143 seconds. [ 804.207497][ T32] Tainted: G L syzkaller #0 [ 804.207508][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.207516][ T32] task:syz.1.2891 state:D stack:25888 pid:14815 tgid:14814 ppid:11184 task_flags:0x400140 flags:0x00080002 [ 804.207587][ T32] Call Trace: [ 804.207593][ T32] [ 804.207604][ T32] __schedule+0x1259/0x6920 [ 804.207624][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 804.207650][ T32] ? do_raw_spin_lock+0x128/0x260 [ 804.207682][ T32] ? __pfx___schedule+0x10/0x10 [ 804.207699][ T32] ? find_held_lock+0x2b/0x80 [ 804.207727][ T32] ? schedule+0x225/0x2c0 [ 804.207751][ T32] schedule+0xdd/0x2c0 [ 804.209135][ T32] schedule_preempt_disabled+0x13/0x30 [ 804.209162][ T32] __mutex_lock+0xccb/0x1bd0 [ 804.209184][ T32] ? bdev_release+0x15a/0x6d0 [ 804.209214][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 804.209242][ T32] ? find_held_lock+0x2b/0x80 [ 804.209276][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 804.209309][ T32] ? bdev_release+0x15a/0x6d0 [ 804.209331][ T32] bdev_release+0x15a/0x6d0 [ 804.209358][ T32] ? __pfx_blkdev_release+0x10/0x10 [ 804.209384][ T32] blkdev_release+0x15/0x20 [ 804.209407][ T32] __fput+0x3ff/0xb50 [ 804.209443][ T32] task_work_run+0x150/0x240 [ 804.209487][ T32] ? __pfx_task_work_run+0x10/0x10 [ 804.209526][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 804.209551][ T32] ? rcu_is_watching+0x13/0xc0 [ 804.209581][ T32] do_syscall_64+0x661/0x790 [ 804.209605][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.209626][ T32] RIP: 0033:0x7f6dcb19e159 [ 804.209643][ T32] RSP: 002b:00007f6dcc03f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.209662][ T32] RAX: 0000000000000000 RBX: 00007f6dcb425fa0 RCX: 00007f6dcb19e159 [ 804.209676][ T32] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 804.209689][ T32] RBP: 00007f6dcb23506b R08: 0000000000000000 R09: 0000000000000000 [ 804.209702][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.209714][ T32] R13: 00007f6dcb426038 R14: 00007f6dcb425fa0 R15: 00007ffd766399b8 [ 804.209744][ T32] [ 804.209753][ T32] INFO: task syz.1.2891:14816 blocked for more than 143 seconds. [ 804.209771][ T32] Tainted: G L syzkaller #0 [ 804.209782][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.209789][ T32] task:syz.1.2891 state:D stack:28728 pid:14816 tgid:14814 ppid:11184 task_flags:0x400040 flags:0x00080002 [ 804.209854][ T32] Call Trace: [ 804.209861][ T32] [ 804.209873][ T32] __schedule+0x1259/0x6920 [ 804.209893][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 804.209922][ T32] ? do_raw_spin_lock+0x128/0x260 [ 804.209957][ T32] ? __pfx___schedule+0x10/0x10 [ 804.267174][ T32] ? find_held_lock+0x2b/0x80 [ 804.267212][ T32] ? schedule+0x225/0x2c0 [ 804.267236][ T32] schedule+0xdd/0x2c0 [ 804.267256][ T32] schedule_preempt_disabled+0x13/0x30 [ 804.267276][ T32] __mutex_lock+0xccb/0x1bd0 [ 804.267299][ T32] ? bdev_open+0x41a/0xe40 [ 804.267323][ T32] ? find_held_lock+0x2b/0x80 [ 804.267354][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 804.267397][ T32] ? bdev_open+0x41a/0xe40 [ 804.267418][ T32] bdev_open+0x41a/0xe40 [ 804.267442][ T32] ? iput+0x3a/0x40 [ 804.267465][ T32] blkdev_open+0x34e/0x4f0 [ 804.267494][ T32] do_dentry_open+0x6ab/0x14d0 [ 804.267518][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 804.267554][ T32] vfs_open+0x82/0x3f0 [ 804.267587][ T32] path_openat+0x19fa/0x2440 [ 804.267620][ T32] ? __pfx_path_openat+0x10/0x10 [ 804.267655][ T32] do_file_open+0x20e/0x430 [ 804.267685][ T32] ? __pfx_do_file_open+0x10/0x10 [ 804.267735][ T32] ? _raw_spin_unlock+0x28/0x50 [ 804.267763][ T32] ? alloc_fd+0x471/0x7a0 [ 804.271300][ T32] do_sys_openat2+0x10f/0x1e0 [ 804.271336][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 804.271367][ T32] ? do_raw_spin_lock+0x128/0x260 [ 804.271395][ T32] ? find_held_lock+0x2b/0x80 [ 804.271427][ T32] __x64_sys_openat+0x12d/0x210 [ 804.271456][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 804.271487][ T32] ? kcov_ioctl+0x17a/0x760 [ 804.271519][ T32] do_syscall_64+0x123/0x790 [ 804.271549][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.271571][ T32] RIP: 0033:0x7f6dcb15e98e [ 804.271588][ T32] RSP: 002b:00007f6dcc01db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 804.271608][ T32] RAX: ffffffffffffffda RBX: 00007f6dcc01e6c0 RCX: 00007f6dcb15e98e [ 804.271623][ T32] RDX: 0000000000000000 RSI: 00007f6dcc01dc00 RDI: ffffffffffffff9c [ 804.271637][ T32] RBP: 00007f6dcc01dc00 R08: 0000000000000000 R09: 0000000000000000 [ 804.271650][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 804.271663][ T32] R13: 00007f6dcb426128 R14: 00007f6dcb426090 R15: 00007ffd766399b8 [ 804.271695][ T32] [ 804.271899][ T32] [ 804.271899][ T32] Showing all locks held in the system: [ 804.271914][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 804.271929][ T32] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 804.271986][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 804.272000][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 804.272083][ T32] locks held by getty/5358: 2, on CPU#0: [ 804.272097][ T32] #0: ffff8880350860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 804.272145][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 804.272192][ T32] locks held by kworker/1:4/5724: 6, on CPU#1: [ 804.272206][ T32] #0: ffff888021aa6540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 804.272260][ T32] #1: ffffc900038b7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 804.272311][ T32] #2: ffff88802b9911d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 804.272353][ T32] #3: ffff88802b996568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 804.272396][ T32] #4: ffff88802b7e7c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 804.272439][ T32] #5: ffffffff902835a8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 804.272498][ T32] locks held by syz-executor/12991: 1, last CPU#1: [ 804.272513][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 804.272574][ T32] locks held by udevd/13459: 1, on CPU#1: [ 804.272588][ T32] #0: ffff888027884350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 804.272639][ T32] locks held by syz.1.2891/14814: 1, on CPU#1: [ 804.272654][ T32] #0: ffff888027884350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 804.272701][ T32] locks held by syz.1.2891/14815: 1, on CPU#1: [ 804.272716][ T32] #0: ffff888027884350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 804.272764][ T32] locks held by syz.1.2891/14816: 1, on CPU#0: [ 804.272778][ T32] #0: ffff888027884350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 804.272827][ T32] locks held by syz.4.3225/16208: 3, last CPU#0: [ 804.272842][ T32] #0: ffff888035ae8f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 804.272904][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 804.272954][ T32] #2: ffff88807c908198 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 804.286908][ T32] [ 804.286914][ T32] ============================================= [ 804.286914][ T32] [ 804.286934][ T32] NMI backtrace for cpu 1 [ 804.286949][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 804.286976][ T32] Tainted: [L]=SOFTLOCKUP [ 804.286984][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 804.286996][ T32] Call Trace: [ 804.287003][ T32] [ 804.287012][ T32] dump_stack_lvl+0x100/0x190 [ 804.287041][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 804.287072][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 804.287095][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 804.287127][ T32] sys_info+0x141/0x190 [ 804.287152][ T32] watchdog+0xcb1/0x1030 [ 804.287182][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 804.287203][ T32] ? __pfx_watchdog+0x10/0x10 [ 804.287228][ T32] ? __kthread_parkme+0x18f/0x230 [ 804.287256][ T32] ? kthread+0x13a/0x450 [ 804.287281][ T32] ? __pfx_watchdog+0x10/0x10 [ 804.287302][ T32] kthread+0x373/0x450 [ 804.287328][ T32] ? __pfx_kthread+0x10/0x10 [ 804.287357][ T32] ret_from_fork+0x730/0xd60 [ 804.287381][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 804.287405][ T32] ? __switch_to+0x800/0x10f0 [ 804.287433][ T32] ? __pfx_kthread+0x10/0x10 [ 804.287461][ T32] ret_from_fork_asm+0x1a/0x30 [ 804.287498][ T32] [ 804.287506][ T32] Sending NMI from CPU 1 to CPUs 0: [ 804.287532][ C0] NMI backtrace for cpu 0 [ 804.287586][ C0] CPU: 0 UID: 0 PID: 16208 Comm: syz.4.3225 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.287611][ C0] Tainted: [L]=SOFTLOCKUP [ 804.287618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 804.287628][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 804.287653][ C0] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 4c d6 80 12 48 8b 34 24 65 48 8b 15 30 d6 80 12 <48> 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d [ 804.287668][ C0] RSP: 0018:ffffc90003e47528 EFLAGS: 00000286 [ 804.287682][ C0] RAX: 8000000000000001 RBX: ffff888035ae8c40 RCX: 0000000000000001 [ 804.287694][ C0] RDX: ffff888027a8cb00 RSI: ffffffff8262e7a5 RDI: ffff888027a8cb00 [ 804.287705][ C0] RBP: 0000000000000075 R08: 0000000000000006 R09: 000000000005d200 [ 804.287716][ C0] R10: 0000000000065a00 R11: 0000000000000001 R12: 00007fe4c8988000 [ 804.287727][ C0] R13: 8000000065b8b027 R14: dffffc0000000000 R15: 0000000000000075 [ 804.287738][ C0] FS: 0000000000000000(0000) GS:ffff888123b4e000(0000) knlGS:0000000000000000 [ 804.287757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.287767][ C0] CR2: 00007f3471d87780 CR3: 0000000036126000 CR4: 00000000003526f0 [ 804.287778][ C0] Call Trace: [ 804.287784][ C0] [ 804.287791][ C0] __zap_vma_range+0xf55/0x48e0 [ 804.287828][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 804.287849][ C0] ? mas_next_slot+0xc05/0x13a0 [ 804.287877][ C0] unmap_vmas+0x299/0x5f0 [ 804.287899][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 804.287921][ C0] ? mas_next_slot+0xc05/0x13a0 [ 804.287948][ C0] exit_mmap+0x1ef/0xa00 [ 804.287970][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 804.287991][ C0] ? rcu_is_watching+0x13/0xc0 [ 804.288017][ C0] ? find_held_lock+0x2b/0x80 [ 804.288041][ C0] ? uprobe_clear_state+0x5f/0x250 [ 804.288067][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 804.288096][ C0] __mmput+0x12a/0x410 [ 804.288114][ C0] mmput+0x67/0x80 [ 804.288130][ C0] do_exit+0x83b/0x2a50 [ 804.288150][ C0] ? __pfx___might_resched+0x10/0x10 [ 804.288170][ C0] ? __pfx_do_exit+0x10/0x10 [ 804.288190][ C0] ? do_raw_spin_lock+0x128/0x260 [ 804.288211][ C0] ? find_held_lock+0x2b/0x80 [ 804.288233][ C0] ? get_signal+0x7e0/0x21e0 [ 804.288253][ C0] do_group_exit+0xd5/0x2a0 [ 804.288275][ C0] get_signal+0x1ec7/0x21e0 [ 804.288294][ C0] ? __sys_sendmmsg+0x371/0x440 [ 804.288320][ C0] ? __pfx_get_signal+0x10/0x10 [ 804.288343][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 804.288368][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 804.288400][ C0] exit_to_user_mode_loop+0x139/0x700 [ 804.288421][ C0] ? rcu_is_watching+0x13/0xc0 [ 804.288445][ C0] do_syscall_64+0x661/0x790 [ 804.288472][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.288490][ C0] RIP: 0033:0x7fe4c8f9e159 [ 804.288503][ C0] Code: Unable to access opcode bytes at 0x7fe4c8f9e12f. [ 804.288511][ C0] RSP: 002b:00007fe4c9d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 804.288527][ C0] RAX: 000000000000000b RBX: 00007fe4c9225fa0 RCX: 00007fe4c8f9e159 [ 804.288539][ C0] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000004 [ 804.288550][ C0] RBP: 00007fe4c903506b R08: 0000000000000000 R09: 0000000000000000 [ 804.288561][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.288571][ C0] R13: 00007fe4c9226038 R14: 00007fe4c9225fa0 R15: 00007ffca90de358 [ 804.288590][ C0] [ 804.291617][ T5724] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 804.308508][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 805.544697][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 805.555350][ T32] Tainted: [L]=SOFTLOCKUP [ 805.559655][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 805.569697][ T32] Call Trace: [ 805.572961][ T32] [ 805.575875][ T32] dump_stack_lvl+0x100/0x190 [ 805.580545][ T32] vpanic+0x553/0x970 [ 805.584513][ T32] ? __pfx_vpanic+0x10/0x10 [ 805.589009][ T32] panic+0xd1/0xe0 [ 805.592713][ T32] ? __pfx_panic+0x10/0x10 [ 805.597111][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 805.603251][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 805.609390][ T32] ? watchdog.cold+0x1ec/0x234 [ 805.614140][ T32] watchdog.cold+0x1fd/0x234 [ 805.618727][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 805.624518][ T32] ? __pfx_watchdog+0x10/0x10 [ 805.629183][ T32] ? __kthread_parkme+0x18f/0x230 [ 805.634196][ T32] ? kthread+0x13a/0x450 [ 805.638427][ T32] ? __pfx_watchdog+0x10/0x10 [ 805.643088][ T32] kthread+0x373/0x450 [ 805.647145][ T32] ? __pfx_kthread+0x10/0x10 [ 805.651723][ T32] ret_from_fork+0x730/0xd60 [ 805.656296][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 805.661398][ T32] ? __switch_to+0x800/0x10f0 [ 805.666073][ T32] ? __pfx_kthread+0x10/0x10 [ 805.670654][ T32] ret_from_fork_asm+0x1a/0x30 [ 805.675412][ T32] [ 805.678621][ T32] Kernel Offset: disabled [ 805.682919][ T32] Rebooting in 86400 seconds..