last executing test programs: 8m25.42722934s ago: executing program 2 (id=1004): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffcc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = accept4(r0, 0x0, 0x0, 0x80800) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES16=r6, @ANYRES64=0x0, @ANYRES8, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20020000) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x2, 0xc283, 0x1, 0x808, 0x80]}, &(0x7f0000000300)=0x54) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8m23.323381653s ago: executing program 2 (id=1008): memfd_create(&(0x7f00000001c0)=':\x00', 0x6) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r4, 0x0, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) fsmount(r6, 0x0, 0x5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 8m22.284677223s ago: executing program 2 (id=1012): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) close(r0) 8m19.913992151s ago: executing program 2 (id=1016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m16.129727555s ago: executing program 2 (id=1025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) socket(0x1e, 0x1, 0x0) r5 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m12.606306483s ago: executing program 2 (id=1028): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104000000200000010500000001000004040000001300000001000000000000001700000002"], 0x0, 0x8e}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00010002"], 0xa) 7m57.334160732s ago: executing program 32 (id=1028): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104000000200000010500000001000004040000001300000001000000000000001700000002"], 0x0, 0x8e}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00010002"], 0xa) 18.430812909s ago: executing program 4 (id=1853): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/42, 0x2a) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/75, 0x4b) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x8) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000040)='0\x00', 0x2) 17.31592864s ago: executing program 5 (id=1856): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r5, 0x100, 0x1) getdents64(r5, 0x0, 0x4f) 14.992444189s ago: executing program 5 (id=1858): socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r5, 0x100, 0x1) getdents64(r5, 0x0, 0x4f) 14.931058182s ago: executing program 0 (id=1860): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001180)={0x0, @sliced={0xa, [0x9, 0x0, 0x2, 0x1, 0x868, 0xfff8, 0x4, 0x9, 0x4, 0x9c61, 0x2, 0x4, 0x1e49, 0xfff, 0x7, 0x1, 0x1, 0x4, 0x8fdd, 0xb9, 0xc, 0x339, 0x5, 0x9, 0x100, 0x1, 0x6, 0x6, 0x4, 0xfff, 0x1, 0x1ecf, 0xa, 0x3, 0x4, 0x7, 0x9, 0x200, 0x4, 0x0, 0x6, 0x5, 0x1, 0x1, 0x146c, 0x101, 0x5, 0x6], 0x2}}) syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x80700) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280), 0x501040, 0x0) setns(r1, 0x20000) r2 = syz_open_dev$radio(&(0x7f0000001380), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000001540)={0xb, @win={{0x1f4a, 0x1, 0x1, 0x5}, 0x6, 0x400, &(0x7f0000001440)={{0x6c, 0x3, 0x2ed, 0x7}, &(0x7f0000001400)={{0x9, 0x8, 0x9, 0x2}, &(0x7f00000013c0)={{0x2, 0x4, 0x4, 0xffffffff}}}}, 0x9, &(0x7f0000001480)="bfa421b5de0edec5f89b16eb45b2ad71d5876845cecf4d5ed725be17e15980bb4ab2a24c740cd7ac9cef919bb0ad61e7ee4bc51e773dcced4e68bcff1581e4ecdcf29dcbec3a14d09d5158e2a869c93826dc577150f7b1e9065f75c5f80e118caab7b781a3985f4b98cb57dc08b3ef2126d3b319a3caa69430a406d0260fca034e1480", 0x14}}) r3 = socket$phonet(0x23, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/ipt_hashlimit/lo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000018c0)={0x2020}, 0x2020) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000000)=0x2) pwrite64(r0, &(0x7f0000000180)="bfbcffcf9b723443945108e09ea4a002f633967e502ba2fb85728e0b05da5497c90e8c9d7556982d4fee1d5c94ddd8d7c57ee68146ba771becc7e9699f1503c634baeec5fed836268633506b005e750cd3e153f08f4faee5bfa28ae74a74dbb3b3d76d3af2900e31e60ec83dd90ddea74be8777f8639564ce8a42f8f51f344e00c984f45a26c7437563d4e515695", 0x8e, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b912f1205f0500a81d72010203060902120001000400000904"], 0x0) dup(r6) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0xf0bd25, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x41287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}]}, 0x38}}, 0x20000080) r8 = syz_open_dev$vcsa(&(0x7f00000012c0), 0xe, 0x200000) sendmsg$netlink(r8, 0x0, 0xc99bc6e74900e292) r9 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r9, 0x5a7ca000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000001340)) 13.590079011s ago: executing program 5 (id=1862): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) (async) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x20004004) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x200000005, 0x58243) (async) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) close(r1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x772}}, './file0\x00'}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x1) 10.157919932s ago: executing program 1 (id=1866): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 10.099784905s ago: executing program 4 (id=1867): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 8.89769772s ago: executing program 4 (id=1868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) clock_nanosleep(0x4, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0418032804"], 0x7) 8.729902744s ago: executing program 5 (id=1870): syz_clone(0x0, &(0x7f0000000080)="c5053cb9ce0a5b4ff0e07688025b85ee0c840b6153f8e4b613a278fe5c3251203b0903c38baf23a6e4f75c1d0875a0a8b41407ed6db9362c204e369d617e35032db01cdadce31b1404eb799fc886f205f76421d2e9eed58f100376a4e4c5e7740ec8b89002ebbb179d217e607a688ab136c3646c6cf145183229a02826051645e202524bc2830a34a5ca6723654ac8a7bcfba12b595a2269367d3b7f8dece68b1cb44f436bf8f6052ebd8468a6dc2e08c4feeb1771a3020dcf0fc1aff9b96ff228f8538f97642945f028754e06d38fce4d1bfdacfecee6c877597f3eaec0b4cba3a658007f3c6477ca133620faecdc7980b33f7bfb", 0xf5, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="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") timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x34, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) unshare(0x62040200) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x3554000) fadvise64(r3, 0x3, 0x4000000004, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_usb_connect$uac3(0x3, 0x85, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400c200b10400001020301090273000301810017080b0202012530070904000000010130000a24010e0f005e00000005240c07000904010000010230000904010101fb1372f83434211169eb2b0e91c00d7bdf013000090501094157511300040106000a2525ff000000090800090402000001023000090402010101023080090589206f4a0e7d820900040800020a252505"], 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfffffffe, 0x2, 0x4, 0x800000c0}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0xc, 0x110, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2c3c, &(0x7f0000000440)={0x0, 0x289d, 0x8000, 0x1, 0x10e}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r7, r8, &(0x7f0000000580)=@IORING_OP_NOP={0x0, 0x18, 0x0, r0, 0x9, 0x3, 0x4, 0x14, 0x0, {0x81}}) 8.530319518s ago: executing program 3 (id=1871): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 8.253791536s ago: executing program 3 (id=1872): syz_open_dev$loop(&(0x7f0000000440), 0x800000007, 0x2140) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000010000000008000001000000010000000000000001000000000000000100"/72) ioctl(r1, 0x40140921, &(0x7f0000000420)="0000000001000000000000000000000006000000") socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008000000fe00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000d532000000001000000079f50d41da05a9f9e93aacc9cb1fcecf0c804f91fe6d0e0feac0f1494f993cbaf707eb950a8153e9160cafd8b032cb8f87f2f510c09de5473bed463e8861dc7d0e6df76e28b24a144861aa8abb15392b6c2a2e9513d7af8b94b7e9835edc06ba1ec7f8ab401d3027996053d6367864c2564029a0cb0881b7c5522ecf58c8accc02fbe234c7dfaea84d54505efdf90f5dd6baa5d80d528445fbeabd24e23e"], 0x50) getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$packet(0x11, 0x3, 0x300) 7.308208918s ago: executing program 0 (id=1873): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffffffffffffcc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = accept4(r0, 0x0, 0x0, 0x80800) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x4000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYRES64=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20020000) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x2, 0xc283, 0x1, 0x808, 0x80]}, &(0x7f0000000300)=0x54) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.049137418s ago: executing program 3 (id=1874): socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084ffffffff0000007f00000100000000"], 0x18, 0x40}, 0x20048844) 6.974788662s ago: executing program 1 (id=1875): syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) ioctl$TIOCSETD(r4, 0x5423, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x9000700, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) socket(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000008c0)={0xfe, 0x7c, 0x6, &(0x7f0000000400)={0x22, "50131013c04946f94c3b1658b2297d824653449affaee441d08e2d8d1766ad09a3"}}) 6.641718914s ago: executing program 3 (id=1876): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 5.419893202s ago: executing program 3 (id=1877): syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x203) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 5.405891706s ago: executing program 0 (id=1878): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/42, 0x2a) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/75, 0x4b) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x8) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000040)='0\x00', 0x2) 5.028943785s ago: executing program 5 (id=1879): memfd_create(&(0x7f00000001c0)=':\x00', 0x6) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r4, 0x0, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) 4.322360517s ago: executing program 4 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xf8) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x2, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000045, [0x2, 0x89ff]}}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) r6 = socket(0x10, 0x2, 0x10001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 4.011157921s ago: executing program 0 (id=1881): memfd_create(&(0x7f00000001c0)=':\x00', 0x6) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r2, 0x0, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) 3.032301329s ago: executing program 4 (id=1882): setns(0xffffffffffffffff, 0x20000) r0 = getpid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sched_setaffinity(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x0) write(r2, &(0x7f00000001c0)='\x00~', 0x2) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@mangle={'mangle\x00', 0x2, 0x6, 0x8b0, 0x5b0, 0x3a8, 0x2b8, 0x0, 0x3a8, 0x7e0, 0x7e0, 0x7e0, 0x7e0, 0x7e0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x910) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r3, &(0x7f0000000300)="dfde68029463b4784f5530d0374a36055b9f46948b35ddac769aa1114dd6f8cb397504d173f011eac4b0eb4cc8abcd65f6c2e1a7d6cd0ddcc0d2feadcca1421c693dde07ca952be9ed2155765e9a0fdc9a064924a3f699ab3996bab95c012ae276b1cf58e20f2561a6ed5d02a80cbe9b25cad7e907119a2d82b8389b69fc24462c571ec2ef5e5b7d6e80a4dedfba375f93a202fe1b03acb47db8bc84202123cfb68fb8a419bb647e9fb2df006adae6cb9f0491e2e326abe651a4df5550ad6883fa84cc6ab096ae19026943d24b62ddde30473fc6a7fd9c", 0xd7, 0x40000, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@union={0xd, 0x3, 0x0, 0x5, 0x0, 0x4, [{0xb, 0x1, 0x3ff}, {0x3, 0x5, 0x23}, {0xf, 0x5, 0x1}]}, @float={0xf, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/139, 0x57, 0x8b, 0x0, 0x5, 0x10000, @value=r4}, 0x28) close_range(r5, r1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f0000000240)="2a301ff1c7e601b91cbc2ef245d66289424673309be189ba4cc9fc4984c83633a4b7e6cfcc5c17326acd149e9382a5bd692b68c33d9ccb7b5a093e4423a524215dd1c7026d813f80f9af4f0b", 0x4c) 2.72772316s ago: executing program 1 (id=1883): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0xffffffff, 0x6, 0x2, 0x1001, 0xffffffffffffffff, 0xd2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) 2.366613991s ago: executing program 0 (id=1884): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2.020829578s ago: executing program 5 (id=1885): r0 = syz_io_uring_setup(0x18d7, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x2, 0xfffffffd, 0x17b}, &(0x7f0000000080), &(0x7f0000ffe000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000042c0)=[{&(0x7f0000002000)=""/161, 0xa1}, {&(0x7f00000020c0)=""/118, 0x76}, {&(0x7f0000004180)=""/215, 0xd7}, {&(0x7f0000004280)=""/50, 0x32}], 0x4) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000300)={{@align=0x1, {0x10, 0x9, 0x401, 0x10}}, {{[0x80000000, 0xb2, 0x10, 0x2]}, 0x0, 0x1, 0x6d96cca, 0x0, &(0x7f0000000280)=[{{@align=0x1ff, {0xb61, 0x2, 0x9f3, 0x6}}, 0xe, 0x0, 'raw\x00'}, {{@align=0x3, {0x3, 0x6, 0x3, 0x6}}, 0x9, 0x0, 'security\x00'}]}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x1c1c, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}, {0x1c04, 0x1, [@m_ipt={0x2d4, 0x6, 0x0, 0x0, {{0x8}, {0x288, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7d, 0x6, {0xa0, 'filter\x00', 0xac, 0x8, "4309dfae867ca1d65487183bd345c844b360031d3def63f991bfaea95d8b2f76bc167f7f41834726db17b6564b814f00e233fb2adb2a3ad1b646cf10940007a12cfc8f70d2316a2e0283184d98ac8ab5fca5e4"}}, @TCA_IPT_TARG={0xb5, 0x6, {0x9, 'nat\x00', 0xc2, 0xfff, "a473e8de372b7800274e6030b6db83581c5c39a15ee3d7581d2292125b871a0368349edbe9e82014580c66cf0c8fa537e85ae7fc79844a748facb7a0fe5fde9cac12ca6b6d3f99d1ba34631f42817aae2ab1c4736b77d711ec5b6acbf0b70559ac8995b46e69554258c70e5f1b9a76f54571c0298f9ce0034e654f30d8074febb87a9f7175defb4db6c508"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x117, 0x6, {0xc99, 'filter\x00', 0x4, 0x200, "e852063a4d107e34e38de3b7037ba59672b3c9039af2e9415d4c26f1258f99e5288964a2a3d6f8c56a5f2cdc24432194935cd511d462da7fd874cc3be968eab071636f0fb06d218d0ab94eb2a9cb996f9619f12671aa0cbd72e5b90b1111a6dbf0aaf486a8d5241f488e0b2d2d784428e6613ea38c921e1066c0e253ec5b12d4bad8cca32dd1ca1d3b4b203e4b4355d38c142918a8a31024ae6679bb8ef472ab0ecb1b73154f38c3d1cc02e831714eaa1fb16530664128baf9a38d5ca624f45a4457297062c8152e82552b6d6b19de806c34992e90c5f00a7a872cbc7cf2120e674d91c01649e197c9351ada7c"}}]}, {0x28, 0x6, "2da2167b85bbeed624a644bd7b6f05fabce1644d125fd46e6d97083c28bb286df784beea"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_ipt={0x110, 0x17, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xb9, 0x6, "35ec3ce0aca6f1c3963cd62cc0748a9b9effaaae56e8e557f1243fa9c66366c718b81fcef62e7899551e51d498db4641839548aa09817e9fa44d16f903e592f2bbb643d2dbc5a79ecb31ab71642fb0d9404f94e1bc7a397f33ce75c696e38bae71ff305b2a51e6cea74b22fc2afcd976e2fac596206a9377ca3dd7ba75e7c6c68e3626752ea9cf0c6f40fba50b35adf1eb686b40b385a791b3d1b637caeaee10302eecb4a3d816e6fa3f2da28eddae3fd8bdd2e639"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x164, 0x1b, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x73, 0x6, {0x5, 'mangle\x00', 0x8, 0x5, "d781c1946074cb9b66fe89a8e3463f44cfd2656a1048949a8f02408ced51aedfbf943e0a2cf9b9b9cba4181d929e4f3003699132663e280676ab5b8ee78def0c1d04dfc4faa7f049b1"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x89, 0x6, "787a42fb1ec51252dfdb877836780983d3ea33f7f414a071695e484b3a25b937ce52aa4a833c1bdb628621efa354ba00e23441491ce55ba704cc720d1ddf633a128af218b60dd2db8bb0da574795352589300bcd4979ae0f6eaff7ba4a1a59b63d3e1bd343c0cf0430ebab5c1c4a998fc180b8f37887e2281da99291e1eb12afb94262bb31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ipt={0x12a8, 0xd, 0x0, 0x0, {{0x8}, {0x1190, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x0, 'raw\x00', 0x8, 0x0, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x5f, 0x6, {0x40, 'security\x00', 0x5, 0x2, "6e65ed9bdb4d6e630a181abd02e97a525eb32e68584e6397b8a336a6be69801c56457d1d1e12bff2f407137e6407b9eca9e516e0fc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x7b, 0x6, {0x7, 'filter\x00', 0x0, 0xb, "878f9603f1d55d897604e2c3b69eb3c402948cada3cd4fb20ea91bef3b44d13a692e47ab2d6ee3817dade8a9a2a34722c1d6c28c1cfb539532e14febe365d3eecbf16914993f398e60035143b130560024"}}]}, {0xf4, 0x6, "0c4ced332e0ced34f71fa16d5e5841a8ad35576fbd867ec5c22a75d091ba7d0396ce06bcfa29ff05c833bcdff4f3715bab133d0d502afbca017ae8848e73115409eed5cf549c4ed0346fc2535c26a6a2ac975c2bebfc394cdad33ed00665441978b1798866156a294df98f41ed314715d3225c503619880e13dabe02fafe80cd06c1a1ea2c746c504154685cbcedd9b28a01f96fb0d676fd9e3f30cb43d467c28bcc44746aa5686c19cca3b6b2a84680784b8421b9e26f9c8455139771b706d0f7f6a284f2c6f5656bbdda3becfce0d40b379bc225c9f06eff62594058d594cbc40c6b781523d25c48ea172a4d97c9df"}, {0xc, 0x7, {0x8c6a4abcac2747c3}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x1ac, 0x6, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x973}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x7e, 0x6, {0x6e, 'filter\x00', 0x6, 0x60e, "e9a64a21719aa8d3c68adb04ce902e6f280323468695c6a1f780307ac65046d173ca74376236fbbf0a90d50301f9cfa88523c38725d84ac502b809313e771a52d2f021af8a647d674a1760616c7e3b90e8f64668"}}]}, {0xeb, 0x6, "89e764da1507de0fcb005b56b6466e5f563f87d8c0a6269f0f4a7085af1a7a0dca3439d93917ac530ba4a7064fac675cfeee554f5f888287a002cf362c02556c137576d7e742cec791f7eaf6f82b8d02febdf6cf81bfd91eb85f40350302fa3ed5dbf82c1d58738bb391c86e154787093229c0521378dc917b4b0e44a0f4414c4d89d9cc7609533b1cfaf2b21caa0a4268ade8735136d8f368863b59ce84397491026fa95c989825d8660ab0b4db2507733a1f2ee9b46b568de9afcba623d3c51bf9ddc639080bb092be51c4ffb693b661b32db2c95709072b8891c7e135a8b5e22d0b4deca6d7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x120, 0x11, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xef, 0x6, {0x6, 'mangle\x00', 0x5, 0x7, "824db24aa113eb70f9a387a31507d45947fffa00927dcc884abee1cf5dddfa18220ae3d0c0d2bcb26663dd9947fa626c48eb32f8553aa0bf8a7aa109db1b876e6e2dd907ec47bca729fb9f07a5581c442f5ce99f55f99b0de74c137875d6f32905c61b3efaeff86a0f2d44eac53e39aeda46ae4c4d06291ded12b8f1b8b0d0451592e653ba3d700655997edd8384f1e5d57faeeb42fa2c2137f327cca5ec3f2967a128a0e4e9636b604aec0ba82d1dfe9393c61d0b4fbd61b09497ec6e388fa9cfdbdbe37c"}}]}, {0x5, 0x6, 'i'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x144, 0x13, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0xe0, 0x0, "93ad6ba4b8df"}}]}, {0xa6, 0x6, "808cea4dcb104895e3cff1d9ee623bba46e8823409309920cc04ac465e20ef0df6c694a9fd636d0672074b05df1c9c20880fac4543f94d5b3f668d0970c22c34741a2fc50ba071f464bcdedc15870b542e745515904fca6cba86918a172f35ce0b7d70a83806687400bbe25dc2915253ea633b89a5ee7c5490b913622790f2a30dac20428a31421ba5bad6e053ed83b97b72ac86e7bb97a1c75e0f2b9dd34900f7cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1c1c}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f047f00162069568975045100e7bb479df6c558a14580c325201ef5e0004e37e2a32e82fae1c0bfefc17b62f1468662"], 0x7) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000004500)={0x7, 0x3, 0x4, 0xd9, &(0x7f0000004300)=""/217, 0x8e, &(0x7f0000004400)=""/142, 0xa, &(0x7f00000044c0)=""/10}) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000004540)) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TIOCNOTTY(r1, 0x5422) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) close_range(r5, r3, 0x2) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10100) 1.945967276s ago: executing program 4 (id=1886): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {0x0, 0x9}, {0x89eaaa5bece9ed4e, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xaf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x3, 0x20018a5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000003}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x20006, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0xa000, 0xe44, r5, r6, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,cachd=readahead,directio,version=9p2000.L,seclabel,uid>', @ANYRESDEC, @ANYBLOB=',measure,uid>', @ANYRESDEC=r5, @ANYBLOB=',\x00']) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlockall(0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./dir0\x00', 0x1ed) mount(&(0x7f0000000b00)=@filename='ubi0:testvol\x00', &(0x7f0000000a00)='./dir0\x00', &(0x7f0000000c00)='ubifs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000680)='GPL\x00'}, 0x94) 1.800489871s ago: executing program 1 (id=1887): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r4, 0x100, 0x1) getdents64(r4, 0x0, 0x4f) 1.267989702s ago: executing program 1 (id=1888): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x141101, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @remote, 0xffff}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 211.230609ms ago: executing program 1 (id=1889): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e7400"], 0x0, 0x8e}, 0x28) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00010002"], 0xa) 138.189383ms ago: executing program 3 (id=1890): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000001300)=""/4118, 0x1016, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="0500000000"], 0x50) io_uring_enter(r4, 0x474cc, 0x81007723, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="13000000", @ANYRES16=r6, @ANYBLOB="0500000000000000000022000000"], 0x14}}, 0x4000000) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xa37a, 0x800) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r8, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 0s ago: executing program 0 (id=1891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getitimer(0x1, &(0x7f0000000040)) r3 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pnp/devices/00:02/driver\x00', 0x0, 0x0) write(r1, &(0x7f0000000100)="52000000230001010002060000000000000000000000000000000000000000003f0000000000000000", 0x29) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) memfd_secret(0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) kernel console output (not intermixed with test programs): : 0 UID: 0 PID: 11110 Comm: syz.4.1352 Not tainted syzkaller #0 PREEMPT(full) [ 808.029437][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 808.029461][T11110] Call Trace: [ 808.029469][T11110] [ 808.029480][T11110] dump_stack_lvl+0x100/0x190 [ 808.029523][T11110] should_fail_ex.cold+0x5/0xa [ 808.029557][T11110] should_failslab+0xc2/0x120 [ 808.029589][T11110] kmem_cache_alloc_noprof+0x92/0x6a0 [ 808.029616][T11110] ? __pfx_map_id_range_down+0x10/0x10 [ 808.029646][T11110] ? security_inode_alloc+0x3b/0x2c0 [ 808.029680][T11110] security_inode_alloc+0x3b/0x2c0 [ 808.029709][T11110] inode_init_always_gfp+0xc6f/0xfb0 [ 808.029747][T11110] alloc_inode+0x8e/0x250 [ 808.029773][T11110] new_inode+0x22/0x1c0 [ 808.029801][T11110] devpts_pty_new+0xca/0x770 [ 808.029835][T11110] ? __pfx_devpts_pty_new+0x10/0x10 [ 808.029865][T11110] ? ptmx_open+0x1ad/0x360 [ 808.029900][T11110] ptmx_open+0x1d9/0x360 [ 808.029925][T11110] ? __pfx_ptmx_open+0x10/0x10 [ 808.029948][T11110] chrdev_open+0x234/0x6a0 [ 808.029981][T11110] ? __pfx_chrdev_open+0x10/0x10 [ 808.030014][T11110] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 808.030044][T11110] do_dentry_open+0x6ab/0x14d0 [ 808.030072][T11110] ? __pfx_chrdev_open+0x10/0x10 [ 808.030110][T11110] vfs_open+0x82/0x3f0 [ 808.030146][T11110] path_openat+0x19fa/0x2440 [ 808.030184][T11110] ? __pfx_path_openat+0x10/0x10 [ 808.030225][T11110] do_file_open+0x20e/0x430 [ 808.030259][T11110] ? __pfx_do_file_open+0x10/0x10 [ 808.030314][T11110] ? _raw_spin_unlock+0x28/0x50 [ 808.030348][T11110] ? alloc_fd+0x471/0x7a0 [ 808.030390][T11110] do_sys_openat2+0x10f/0x1e0 [ 808.030424][T11110] ? __pfx_do_sys_openat2+0x10/0x10 [ 808.030469][T11110] ? __fget_files+0x215/0x3d0 [ 808.030511][T11110] __x64_sys_openat+0x12d/0x210 [ 808.030549][T11110] ? __pfx___x64_sys_openat+0x10/0x10 [ 808.030597][T11110] do_syscall_64+0x123/0x790 [ 808.030626][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.030650][T11110] RIP: 0033:0x7f047c19e199 [ 808.030670][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.030691][T11110] RSP: 002b:00007f047d00f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 808.030714][T11110] RAX: ffffffffffffffda RBX: 00007f047c425fa0 RCX: 00007f047c19e199 [ 808.030730][T11110] RDX: 0000000000000800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 808.030746][T11110] RBP: 00007f047c2358e0 R08: 0000000000000000 R09: 0000000000000000 [ 808.030761][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.030776][T11110] R13: 00007f047c426038 R14: 00007f047c425fa0 R15: 00007ffdef664008 [ 808.030809][T11110] [ 808.528987][T11125] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 808.528987][T11125] [ 808.529012][T11125] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 808.529151][T11125] CIFS: Attempting to mount //172.20.20.170/share [ 809.605279][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.605333][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.579297][T11122] nbd3: detected capacity change from 0 to 63 [ 810.607501][T11125] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 810.607583][T11125] CIFS: VFS: cifs_mount failed w/return code = -103 [ 810.628220][T11122] block nbd3: NBD_DISCONNECT [ 810.631624][ T5708] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 811.001087][ T5708] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 811.047036][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.047067][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 811.047081][ T5708] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 811.047096][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.047120][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.113963][T11122] block nbd3: Disconnected due to user request. [ 811.121867][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 811.122002][ T4932] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.122073][ T4932] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 811.122098][ T4932] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.122115][ T4932] Buffer I/O error on dev nbd3, logical block 2, async page read [ 811.122130][ T4932] Buffer I/O error on dev nbd3, logical block 3, async page read [ 811.149917][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.149952][ T4932] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.149969][ T4932] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.149984][ T4932] Buffer I/O error on dev nbd3, logical block 2, async page read [ 811.149999][ T4932] Buffer I/O error on dev nbd3, logical block 3, async page read [ 811.150135][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.150159][ T4932] Buffer I/O error on dev nbd3, logical block 0, async page read [ 811.150174][ T4932] Buffer I/O error on dev nbd3, logical block 1, async page read [ 811.150301][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.150439][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.153196][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.153365][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.164876][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 811.165016][T11124] ldm_validate_partition_table(): Disk read failed. [ 811.165097][ T4932] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 811.277661][T11124] Dev nbd3: unable to read RDB block 0 [ 811.366818][ T31] audit: type=1400 audit(1791287450.998:499): avc: denied { write } for pid=11117 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 811.367452][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 811.369237][T11124] nbd3: unable to read partition table [ 811.384181][T11122] block nbd3: shutting down sockets [ 811.414935][ T31] audit: type=1400 audit(1791287451.068:500): avc: denied { connect } for pid=11117 comm="syz.3.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 812.880890][T11124] ldm_validate_partition_table(): Disk read failed. [ 812.881384][T11124] Dev nbd3: unable to read RDB block 0 [ 812.883193][T11124] nbd3: unable to read partition table [ 812.992115][ T5708] usb 5-1: USB disconnect, device number 28 [ 814.176189][T11155] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 814.750251][ T31] audit: type=1400 audit(1791287454.398:501): avc: denied { read } for pid=11162 comm="syz.3.1367" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 814.900810][ T31] audit: type=1400 audit(1791287454.558:502): avc: denied { map } for pid=11162 comm="syz.3.1367" path="socket:[32135]" dev="sockfs" ino=32135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 814.901078][ T31] audit: type=1400 audit(1791287454.558:503): avc: denied { accept } for pid=11162 comm="syz.3.1367" path="socket:[32135]" dev="sockfs" ino=32135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 816.974896][ T31] audit: type=1400 audit(1791287456.638:504): avc: denied { ioctl } for pid=11178 comm="syz.5.1359" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 819.582160][T11192] loop0: detected capacity change from 0 to 4096 [ 819.638140][T11192] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 819.666614][T11192] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 2.0. Aborting. [ 819.666645][T11192] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 819.666688][T11192] loop0: [ 819.872474][T11195] syzkaller0: entered promiscuous mode [ 819.872501][T11195] syzkaller0: entered allmulticast mode [ 820.598825][ T9020] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 820.753603][T11207] FAULT_INJECTION: forcing a failure. [ 820.753603][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.753637][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.0.1379 Not tainted syzkaller #0 PREEMPT(full) [ 820.753663][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 820.753676][T11207] Call Trace: [ 820.753684][T11207] [ 820.753693][T11207] dump_stack_lvl+0x100/0x190 [ 820.753730][T11207] should_fail_ex.cold+0x5/0xa [ 820.753761][T11207] _copy_from_user+0x2e/0xd0 [ 820.753786][T11207] copy_msghdr_from_user+0x9f/0x4c0 [ 820.753811][T11207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 820.753838][T11207] ? lock_acquire+0x1d1/0x380 [ 820.753869][T11207] ? get_pid_task+0x2a/0x250 [ 820.753898][T11207] ___sys_sendmsg+0x106/0x1e0 [ 820.753924][T11207] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.753949][T11207] ? get_pid_task+0x106/0x250 [ 820.753991][T11207] ? find_held_lock+0x2b/0x80 [ 820.754041][T11207] __sys_sendmsg+0x160/0x210 [ 820.754073][T11207] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.754120][T11207] do_syscall_64+0x123/0x790 [ 820.754148][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.754171][T11207] RIP: 0033:0x7feabab9e199 [ 820.754190][T11207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.754211][T11207] RSP: 002b:00007feabba3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.754233][T11207] RAX: ffffffffffffffda RBX: 00007feabae25fa0 RCX: 00007feabab9e199 [ 820.754248][T11207] RDX: 0000000004000084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 820.754262][T11207] RBP: 00007feabba3f090 R08: 0000000000000000 R09: 0000000000000000 [ 820.754275][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.754287][T11207] R13: 00007feabae26038 R14: 00007feabae25fa0 R15: 00007ffc84ca6298 [ 820.754317][T11207] [ 820.769932][ T9020] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 820.800166][ T9020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.800185][ T9020] usb 5-1: Product: syz [ 820.800194][ T9020] usb 5-1: Manufacturer: syz [ 820.800203][ T9020] usb 5-1: SerialNumber: syz [ 820.817423][ T9020] usb 5-1: config 0 descriptor?? [ 820.835043][ T9020] hub 5-1:0.0: bad descriptor, ignoring hub [ 820.835071][ T9020] hub 5-1:0.0: probe with driver hub failed with error -5 [ 821.047628][ T9020] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 821.050305][ T9020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 821.051003][ T9020] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 821.051053][ T9020] usb 5-1: media controller created [ 821.099154][ T9020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.160168][ T9020] DVB: Unable to find symbol dib7000p_attach() [ 821.160186][ T9020] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 821.245520][ T9020] rc_core: IR keymap rc-dib0700-rc5 not found [ 821.245541][ T9020] Registered IR keymap rc-empty [ 821.245776][ T9020] dvb-usb: could not initialize remote control. [ 821.245784][ T9020] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 821.302888][ T9020] usb 5-1: USB disconnect, device number 29 [ 821.439929][ T9020] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 823.764495][T11232] ip_tables: iptables: counters copy to user failed while replacing table [ 823.856721][ T31] audit: type=1400 audit(1791287463.518:505): avc: denied { setopt } for pid=11234 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 823.859844][T11237] FAULT_INJECTION: forcing a failure. [ 823.859844][T11237] name failslab, interval 1, probability 0, space 0, times 0 [ 823.859946][T11237] CPU: 0 UID: 0 PID: 11237 Comm: syz.3.1376 Not tainted syzkaller #0 PREEMPT(full) [ 823.859974][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 823.859989][T11237] Call Trace: [ 823.859997][T11237] [ 823.860007][T11237] dump_stack_lvl+0x100/0x190 [ 823.860048][T11237] should_fail_ex.cold+0x5/0xa [ 823.860083][T11237] should_failslab+0xc2/0x120 [ 823.860116][T11237] kmem_cache_alloc_noprof+0x92/0x6a0 [ 823.860145][T11237] ? do_getname+0x35/0x390 [ 823.860169][T11237] do_getname+0x35/0x390 [ 823.860192][T11237] do_sys_openat2+0xc7/0x1e0 [ 823.860223][T11237] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.860258][T11237] ? __fget_files+0x215/0x3d0 [ 823.860290][T11237] __x64_sys_openat+0x12d/0x210 [ 823.860319][T11237] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.860360][T11237] do_syscall_64+0x123/0x790 [ 823.860387][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.860411][T11237] RIP: 0033:0x7f9594f9e199 [ 823.860430][T11237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.860452][T11237] RSP: 002b:00007f9595e5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.860475][T11237] RAX: ffffffffffffffda RBX: 00007f9595225fa0 RCX: 00007f9594f9e199 [ 823.860490][T11237] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 823.860504][T11237] RBP: 00007f95950358e0 R08: 0000000000000000 R09: 0000000000000000 [ 823.860517][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.860529][T11237] R13: 00007f9595226038 R14: 00007f9595225fa0 R15: 00007ffe238a8b38 [ 823.860556][T11237] [ 824.038347][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 824.267868][T11243] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 824.267868][T11243] [ 824.267893][T11243] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 824.268045][T11243] CIFS: Attempting to mount //172.20.20.170/share [ 824.987556][T11243] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 824.987630][T11243] CIFS: VFS: cifs_mount failed w/return code = -103 [ 825.004701][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 825.017443][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 825.038472][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.038500][ T10] usb 5-1: Product: syz [ 825.038517][ T10] usb 5-1: Manufacturer: syz [ 825.038533][ T10] usb 5-1: SerialNumber: syz [ 825.058197][ T10] usb 5-1: config 0 descriptor?? [ 825.309987][ T10] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 825.322268][ T10] usb 5-1: USB disconnect, device number 30 [ 826.331951][ T9020] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 827.369713][ T9020] usb 6-1: unable to get BOS descriptor or descriptor too short [ 827.369763][ T9020] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 827.370685][ T9020] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.370723][ T9020] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 827.370745][ T9020] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 827.373981][ T9020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 827.374000][ T9020] usb 6-1: Product: syz [ 827.374009][ T9020] usb 6-1: Manufacturer: syz [ 827.374018][ T9020] usb 6-1: SerialNumber: syz [ 827.584727][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 827.957629][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 828.065367][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.065403][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.065428][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.065470][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.073135][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.108309][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.360559][ T25] usb 4-1: config 0 descriptor?? [ 828.788642][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.789025][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.820860][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 828.820960][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 828.828866][ T25] usb 4-1: USB disconnect, device number 43 [ 828.997698][ T31] audit: type=1400 audit(1791287468.658:506): avc: denied { create } for pid=11267 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.037185][ T31] audit: type=1400 audit(1791287468.698:507): avc: denied { bind } for pid=11267 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.088081][ T31] audit: type=1400 audit(1791287468.748:508): avc: denied { listen } for pid=11267 comm="syz.1.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.126260][ T9020] usb 6-1: USB disconnect, device number 4 [ 829.260879][T11272] udevd[11272]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 829.328223][ T31] audit: type=1400 audit(1791287468.988:509): avc: denied { kexec_image_load } for pid=11274 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 831.644651][ T9020] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 831.645204][T11289] syzkaller0: entered promiscuous mode [ 831.645225][T11289] syzkaller0: entered allmulticast mode [ 831.805310][ T9020] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 831.806562][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.806598][ T9020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.806634][ T9020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.856396][ T9020] usb 4-1: config 0 descriptor?? [ 831.902285][ T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 832.059874][ T25] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 832.064066][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.064097][ T25] usb 5-1: Product: syz [ 832.064114][ T25] usb 5-1: Manufacturer: syz [ 832.064131][ T25] usb 5-1: SerialNumber: syz [ 832.101409][ T25] usb 5-1: config 0 descriptor?? [ 832.111101][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 832.111120][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 832.314000][ T25] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 832.344028][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.348151][ T25] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 832.348202][ T25] usb 5-1: media controller created [ 832.396391][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.489672][ T31] audit: type=1400 audit(1791287472.148:510): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 832.519113][ T9020] usbhid 4-1:0.0: can't add hid device: -71 [ 832.519205][ T9020] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 832.556579][ T9020] usb 4-1: USB disconnect, device number 44 [ 832.728409][ T25] DVB: Unable to find symbol dib7000p_attach() [ 832.728425][ T25] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 832.874734][ T31] audit: type=1400 audit(1791287472.488:511): avc: denied { name_bind } for pid=11294 comm="syz.1.1402" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 833.304608][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 833.304626][ T25] Registered IR keymap rc-empty [ 833.304860][ T25] dvb-usb: could not initialize remote control. [ 833.304870][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 833.311113][ T25] usb 5-1: USB disconnect, device number 31 [ 833.554445][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 833.976852][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 838.252200][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 838.255515][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 838.255722][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 838.255893][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 838.303205][T11336] 9pnet_virtio: no channels available for device syz [ 839.171594][ T7027] Bluetooth: hci3: Frame reassembly failed (-84) [ 840.994906][ T5708] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 841.125891][ T5601] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 841.133668][ T52] Bluetooth: hci3: command 0x1003 tx timeout [ 841.148793][ T5708] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 841.157744][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 841.157816][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.157955][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.362374][ T5708] usb 1-1: config 0 descriptor?? [ 841.625342][T11360] ip_tables: iptables: counters copy to user failed while replacing table [ 841.847973][ T5708] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 841.848014][ T5708] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 841.848041][ T5708] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 841.848068][ T5708] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 841.848093][ T5708] elan 0003:04F3:0755.0006: unknown main item tag 0x0 [ 841.848828][ T5708] elan 0003:04F3:0755.0006: failed to start in urb: -90 [ 841.897035][ T5708] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 841.897058][ T190] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 842.032377][ T5708] usb 1-1: USB disconnect, device number 33 [ 842.624610][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 842.627533][ T190] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 842.663554][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.663585][ T190] usb 5-1: Product: syz [ 842.663601][ T190] usb 5-1: Manufacturer: syz [ 842.663617][ T190] usb 5-1: SerialNumber: syz [ 842.675809][ T190] usb 5-1: config 0 descriptor?? [ 842.745027][T11371] syzkaller0: entered promiscuous mode [ 842.745065][T11371] syzkaller0: entered allmulticast mode [ 842.908077][ T190] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 842.920874][ T190] usb 5-1: USB disconnect, device number 32 [ 843.155108][ T5715] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 843.976974][ T5715] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 844.088770][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.088884][ T5715] usb 4-1: Product: syz [ 844.088929][ T5715] usb 4-1: Manufacturer: syz [ 844.088973][ T5715] usb 4-1: SerialNumber: syz [ 844.139497][ T5715] usb 4-1: config 0 descriptor?? [ 844.172964][ T5715] hub 4-1:0.0: bad descriptor, ignoring hub [ 844.172992][ T5715] hub 4-1:0.0: probe with driver hub failed with error -5 [ 844.720341][ T5715] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 845.626184][ T5715] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 845.626569][ T5715] dib0700: firmware download failed at 7 with -22 [ 846.307840][ T5715] usb 4-1: USB disconnect, device number 45 [ 847.027255][T11402] syzkaller0: entered promiscuous mode [ 847.027282][T11402] syzkaller0: entered allmulticast mode [ 847.385708][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 848.313055][ T25] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 848.317298][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.317327][ T25] usb 1-1: Product: syz [ 848.317343][ T25] usb 1-1: Manufacturer: syz [ 848.317359][ T25] usb 1-1: SerialNumber: syz [ 848.320263][ T25] usb 1-1: config 0 descriptor?? [ 848.326057][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 848.326083][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 849.787173][ T25] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 849.814267][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 849.825322][ T25] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 849.825376][ T25] usb 1-1: media controller created [ 850.023880][T11402] dib0700: tx buffer length is larger than 4. Not supported. [ 850.207275][T11429] xt_hashlimit: size too large, truncated to 1048576 [ 851.903655][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.948840][ T25] DVB: Unable to find symbol dib7000p_attach() [ 851.948858][ T25] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 852.120824][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 852.120845][ T25] Registered IR keymap rc-empty [ 852.121070][ T25] dvb-usb: could not initialize remote control. [ 852.121080][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 852.124304][ T25] usb 1-1: USB disconnect, device number 34 [ 852.152444][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 852.942598][T11451] syzkaller0: entered promiscuous mode [ 852.942622][T11451] syzkaller0: entered allmulticast mode [ 853.048192][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 853.048246][T11459] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1441'. [ 853.048295][T11459] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1441'. [ 853.049772][T11459] kAFS: bad VL server IP address [ 853.386951][ T5740] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 853.838087][ T5740] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 853.889262][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.889291][ T5740] usb 1-1: Product: syz [ 853.889308][ T5740] usb 1-1: Manufacturer: syz [ 853.889324][ T5740] usb 1-1: SerialNumber: syz [ 853.894121][ T5740] usb 1-1: config 0 descriptor?? [ 853.926187][ T5740] hub 1-1:0.0: bad descriptor, ignoring hub [ 853.926217][ T5740] hub 1-1:0.0: probe with driver hub failed with error -5 [ 853.974393][T11477] ip_tables: iptables: counters copy to user failed while replacing table [ 855.429726][T11484] syzkaller0: entered promiscuous mode [ 855.429750][T11484] syzkaller0: entered allmulticast mode [ 855.430820][ T5740] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 855.432021][ T5740] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 855.432060][ T5740] dib0700: firmware download failed at 7 with -22 [ 855.473254][ T5740] usb 1-1: USB disconnect, device number 35 [ 855.485046][ T9020] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 855.511771][T11486] binder: 11485:11486 ioctl 4018620d 0 returned -22 [ 856.684622][ T9020] usb 5-1: Using ep0 maxpacket: 32 [ 856.685430][ T9020] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 856.711166][ T9020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.711199][ T9020] usb 5-1: Product: syz [ 856.711215][ T9020] usb 5-1: Manufacturer: syz [ 856.711232][ T9020] usb 5-1: SerialNumber: syz [ 856.739824][ T190] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 856.741150][ T9020] usb 5-1: config 0 descriptor?? [ 858.102675][ T190] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 858.130213][ T9020] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 858.154159][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.154189][ T190] usb 2-1: Product: syz [ 858.154205][ T190] usb 2-1: Manufacturer: syz [ 858.154222][ T190] usb 2-1: SerialNumber: syz [ 858.182683][ T9020] usb 5-1: USB disconnect, device number 33 [ 858.194363][ T190] usb 2-1: config 0 descriptor?? [ 858.214572][ T190] hub 2-1:0.0: bad descriptor, ignoring hub [ 858.214602][ T190] hub 2-1:0.0: probe with driver hub failed with error -5 [ 858.467511][ T190] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 858.470542][ T190] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 858.470583][ T190] dib0700: firmware download failed at 7 with -22 [ 858.526723][ T190] usb 2-1: USB disconnect, device number 16 [ 861.193360][T11512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 862.390051][T11519] binder: 11517:11519 ioctl c0306201 0 returned -14 [ 862.953636][T11525] syzkaller0: entered promiscuous mode [ 862.953661][T11525] syzkaller0: entered allmulticast mode [ 864.147117][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 864.150464][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 864.150685][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 864.151125][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 864.152059][T11532] 9pnet_virtio: no channels available for device syz [ 864.174843][ T5727] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 864.344037][ T5727] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 864.348178][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.348209][ T5727] usb 4-1: Product: syz [ 864.348225][ T5727] usb 4-1: Manufacturer: syz [ 864.348256][ T5727] usb 4-1: SerialNumber: syz [ 864.365887][ T5727] usb 4-1: config 0 descriptor?? [ 864.367704][ T5727] hub 4-1:0.0: bad descriptor, ignoring hub [ 864.367730][ T5727] hub 4-1:0.0: probe with driver hub failed with error -5 [ 864.485867][T11537] syzkaller0: entered promiscuous mode [ 864.485917][T11537] syzkaller0: entered allmulticast mode [ 864.612693][ T5727] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 864.621496][ T5727] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 864.621540][ T5727] dib0700: firmware download failed at 7 with -22 [ 864.664324][ T5727] usb 4-1: USB disconnect, device number 46 [ 864.736619][ T9020] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 864.907862][ T9020] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 864.910729][ T9020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.910756][ T9020] usb 6-1: Product: syz [ 864.910773][ T9020] usb 6-1: Manufacturer: syz [ 864.910789][ T9020] usb 6-1: SerialNumber: syz [ 864.920977][ T9020] usb 6-1: config 0 descriptor?? [ 864.928767][ T9020] hub 6-1:0.0: bad descriptor, ignoring hub [ 864.928794][ T9020] hub 6-1:0.0: probe with driver hub failed with error -5 [ 865.046404][T11543] ip_tables: iptables: counters copy to user failed while replacing table [ 865.128051][ T9020] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 865.142967][ T9020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 865.143613][ T9020] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 865.143643][ T9020] usb 6-1: media controller created [ 865.191092][ T9020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.328899][T11537] dib0700: tx buffer length is larger than 4. Not supported. [ 865.361051][ T5727] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 865.361349][ T9020] DVB: Unable to find symbol dib7000p_attach() [ 865.361362][ T9020] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 865.932074][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 865.940644][ T5727] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 865.944681][ T9020] rc_core: IR keymap rc-dib0700-rc5 not found [ 865.944698][ T9020] Registered IR keymap rc-empty [ 865.944959][ T9020] dvb-usb: could not initialize remote control. [ 865.944968][ T9020] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 865.961615][ T9020] usb 6-1: USB disconnect, device number 5 [ 865.963240][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.963267][ T5727] usb 2-1: Product: syz [ 865.963283][ T5727] usb 2-1: Manufacturer: syz [ 865.963299][ T5727] usb 2-1: SerialNumber: syz [ 865.985889][ T5727] usb 2-1: config 0 descriptor?? [ 866.709500][ T5727] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 866.855844][ T9020] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 866.861060][ T5727] usb 2-1: USB disconnect, device number 17 [ 867.378359][ T1344] Bluetooth: hci3: Frame reassembly failed (-84) [ 867.378904][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 867.378937][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 867.378999][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 867.534675][T11569] binder: 11568:11569 ioctl c0306201 0 returned -14 [ 867.592691][T11571] xt_hashlimit: size too large, truncated to 1048576 [ 867.706911][T11572] netlink: 'syz.4.1473': attribute type 2 has an invalid length. [ 867.762968][T11574] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 868.792465][ T5740] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 869.154729][ T5740] usb 4-1: Using ep0 maxpacket: 8 [ 869.158157][ T5740] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 869.183252][ T5740] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 869.183684][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 869.183845][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.184009][ T5740] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.197020][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.322809][T11588] syzkaller0: entered promiscuous mode [ 869.322833][T11588] syzkaller0: entered allmulticast mode [ 869.372381][ T9622] Bluetooth: hci3: command 0x1003 tx timeout [ 869.375913][ T5601] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 869.509717][ T5740] usb 4-1: GET_CAPABILITIES returned 0 [ 869.509746][ T5740] usbtmc 4-1:16.0: can't read capabilities [ 869.948955][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.949039][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.310774][ T5701] usb 4-1: USB disconnect, device number 47 [ 871.114722][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1480'. [ 872.313315][T11606] syzkaller0: entered promiscuous mode [ 872.313332][T11606] syzkaller0: entered allmulticast mode [ 872.336246][T11608] binder: 11607:11608 ioctl c0306201 0 returned -14 [ 872.359311][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 872.359341][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 872.359403][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 872.474216][T11613] ip_tables: iptables: counters copy to user failed while replacing table [ 872.574661][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 872.612983][T11618] lo: entered allmulticast mode [ 872.725567][ T5701] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 872.726279][ T25] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 872.731710][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.731739][ T25] usb 1-1: Product: syz [ 872.731757][ T25] usb 1-1: Manufacturer: syz [ 872.731774][ T25] usb 1-1: SerialNumber: syz [ 872.760610][ T25] usb 1-1: config 0 descriptor?? [ 872.781108][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 872.781126][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 872.854658][ T943] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 872.874621][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 872.875372][ T5701] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 872.922032][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.922052][ T5701] usb 4-1: Product: syz [ 872.922062][ T5701] usb 4-1: Manufacturer: syz [ 872.922070][ T5701] usb 4-1: SerialNumber: syz [ 872.931385][T11621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 872.962052][ T5701] usb 4-1: config 0 descriptor?? [ 872.982128][ T25] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 872.994417][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 872.996799][ T25] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 872.996848][ T25] usb 1-1: media controller created [ 873.009723][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 873.049638][ T943] usb 5-1: not running at top speed; connect to a high speed hub [ 873.049662][ T943] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 873.058231][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.058263][ T943] usb 5-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 873.058287][ T943] usb 5-1: Manufacturer: ࡡ [ 873.058323][ T943] usb 5-1: SerialNumber: Ѓ [ 873.106016][ T25] DVB: Unable to find symbol dib7000p_attach() [ 873.106029][ T25] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 873.183607][ T5701] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration [ 873.195116][T11606] dib0700: tx buffer length is larger than 4. Not supported. [ 873.208190][ T25] rc_core: IR keymap rc-dib0700-rc5 not found [ 873.208227][ T25] Registered IR keymap rc-empty [ 873.208480][ T25] dvb-usb: could not initialize remote control. [ 873.208601][ T5701] usb 4-1: USB disconnect, device number 48 [ 873.210838][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 873.264457][ T25] usb 1-1: USB disconnect, device number 36 [ 873.390836][ T25] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 873.472530][ T943] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 873.473447][T11617] lo: left allmulticast mode [ 873.568362][ T943] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 873.594877][ T943] usb 5-1: USB disconnect, device number 34 [ 873.760795][T11624] udevd[11624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.579868][ T31] audit: type=1400 audit(1791287514.238:512): avc: denied { ioctl } for pid=11631 comm="syz.0.1490" path="socket:[33650]" dev="sockfs" ino=33650 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 874.593562][T11634] : renamed from bond0 (while UP) [ 875.801586][ T31] audit: type=1400 audit(1791287515.458:513): avc: denied { create } for pid=11631 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 876.435016][ T1344] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.597528][ T1344] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.545302][ T1344] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.545345][ T1344] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.467628][T11658] ip_tables: iptables: counters copy to user failed while replacing table [ 879.617062][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 879.617093][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 879.617160][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1500'. [ 880.321579][ T5701] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 880.475598][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 880.479042][ T5701] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 880.583278][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.583318][ T5701] usb 2-1: Product: syz [ 880.583334][ T5701] usb 2-1: Manufacturer: syz [ 880.583350][ T5701] usb 2-1: SerialNumber: syz [ 880.595640][ T5701] usb 2-1: config 0 descriptor?? [ 883.645554][ T5701] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 883.664039][ T5701] usb 2-1: USB disconnect, device number 18 [ 883.672941][T11661] udevd[11661]: setting mode of /dev/bus/usb/002/018 to 020664 failed: No such file or directory [ 883.673057][T11661] udevd[11661]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory [ 883.751664][ T31] audit: type=1400 audit(1791287523.408:514): avc: denied { name_connect } for pid=11673 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 884.020837][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 885.005991][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 888.001749][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1505'. [ 891.642882][T11728] ip_tables: iptables: counters copy to user failed while replacing table [ 891.934684][ T5727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 892.094589][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 892.095386][ T5727] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 892.104118][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.104145][ T5727] usb 2-1: Product: syz [ 892.104183][ T5727] usb 2-1: Manufacturer: syz [ 892.104200][ T5727] usb 2-1: SerialNumber: syz [ 892.135838][ T5727] usb 2-1: config 0 descriptor?? [ 892.846089][T11740] overlayfs: failed to resolve './bus': -2 [ 894.397749][ T5727] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 894.421009][ T5727] usb 2-1: USB disconnect, device number 19 [ 897.644607][ T5727] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 897.816555][ T5727] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 897.817643][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 897.817677][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.817712][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.822378][ T5727] usb 2-1: config 0 descriptor?? [ 897.928454][T11589] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 898.010845][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 898.703358][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1520'. [ 898.868178][ T5727] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 898.868218][ T5727] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 898.868245][ T5727] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 898.868271][ T5727] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 898.868305][ T5727] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 898.869033][ T5727] elan 0003:04F3:0755.0007: failed to start in urb: -90 [ 898.874255][ T5727] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 898.879213][ T5727] usb 2-1: USB disconnect, device number 20 [ 899.899135][T11779] fido_id[11779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 900.723131][T11794] overlayfs: failed to resolve './bus': -2 [ 906.874064][T11831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 907.569336][T11838] FAULT_INJECTION: forcing a failure. [ 907.569336][T11838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.569369][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.5.1540 Not tainted syzkaller #0 PREEMPT(full) [ 907.569393][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 907.569407][T11838] Call Trace: [ 907.569415][T11838] [ 907.569423][T11838] dump_stack_lvl+0x100/0x190 [ 907.569461][T11838] should_fail_ex.cold+0x5/0xa [ 907.569494][T11838] _copy_from_user+0x2e/0xd0 [ 907.569523][T11838] do_ip_vs_set_ctl+0x53c/0xc90 [ 907.569555][T11838] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 907.569580][T11838] ? rcu_is_watching+0x13/0xc0 [ 907.569618][T11838] ? find_held_lock+0x2b/0x80 [ 907.569650][T11838] ? nf_sockopt_find.isra.0+0x222/0x290 [ 907.569682][T11838] ? nf_sockopt_find.isra.0+0x222/0x290 [ 907.569727][T11838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 907.569769][T11838] ? nf_setsockopt+0x8d/0xf0 [ 907.569797][T11838] nf_setsockopt+0x8d/0xf0 [ 907.569832][T11838] ip_setsockopt+0xcb/0xf0 [ 907.569861][T11838] sctp_setsockopt+0x161/0xb370 [ 907.569908][T11838] ? __pfx_sctp_setsockopt+0x10/0x10 [ 907.569938][T11838] ? __fget_files+0x215/0x3d0 [ 907.569972][T11838] ? selinux_socket_setsockopt+0x6a/0x80 [ 907.569997][T11838] ? sock_common_setsockopt+0x2e/0xf0 [ 907.570020][T11838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 907.570046][T11838] do_sock_setsockopt+0xf3/0x1d0 [ 907.570072][T11838] __sys_setsockopt+0x195/0x220 [ 907.570109][T11838] __x64_sys_setsockopt+0xbd/0x160 [ 907.570138][T11838] ? do_syscall_64+0xae/0x790 [ 907.570162][T11838] ? lockdep_hardirqs_on+0x7d/0x110 [ 907.570187][T11838] do_syscall_64+0x123/0x790 [ 907.570214][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.570237][T11838] RIP: 0033:0x7f468859e199 [ 907.570256][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.570277][T11838] RSP: 002b:00007f46893f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 907.570298][T11838] RAX: ffffffffffffffda RBX: 00007f4688825fa0 RCX: 00007f468859e199 [ 907.570313][T11838] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000003 [ 907.570326][T11838] RBP: 00007f46893f5090 R08: 0000000000000044 R09: 0000000000000000 [ 907.570342][T11838] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 907.570354][T11838] R13: 00007f4688826038 R14: 00007f4688825fa0 R15: 00007ffe4742eff8 [ 907.570383][T11838] [ 913.220951][T11865] CIFS: Attempting to mount //127.0.0.1/share [ 913.323562][T11875] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 913.323562][T11875] [ 913.323587][T11875] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 914.329111][T11870] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 914.364883][T11865] CIFS: VFS: \\127.0.0.1 Invalid 0x0 dialect returned: not requested [ 914.368928][T11865] CIFS: VFS: cifs_mount failed w/return code = -5 [ 914.369094][T11875] CIFS: Attempting to mount //172.20.20.170/share [ 914.547082][T11875] CIFS: VFS: Error connecting to socket. Aborting operation. [ 914.547112][T11875] CIFS: VFS: cifs_mount failed w/return code = -4 [ 915.213316][T11883] overlayfs: failed to resolve './bus': -2 [ 915.764641][ T25] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 916.875275][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.876215][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.876262][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.876287][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 916.877187][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 916.877203][ T25] usb 5-1: SerialNumber: syz [ 916.891694][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 916.891723][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 916.907586][ T25] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 916.907610][ T25] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 916.907646][ T25] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 917.233927][T11894] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1551'. [ 919.501086][ T5708] usb 5-1: USB disconnect, device number 35 [ 919.617710][T11901] syzkaller0: entered promiscuous mode [ 919.617734][T11901] syzkaller0: entered allmulticast mode [ 919.947583][ T5727] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 920.443459][ T5727] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 920.456892][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.456922][ T5727] usb 5-1: Product: syz [ 920.456937][ T5727] usb 5-1: Manufacturer: syz [ 920.456946][ T5727] usb 5-1: SerialNumber: syz [ 920.458512][ T5727] usb 5-1: config 0 descriptor?? [ 920.463493][ T5727] hub 5-1:0.0: bad descriptor, ignoring hub [ 920.463511][ T5727] hub 5-1:0.0: probe with driver hub failed with error -5 [ 920.744298][ T5727] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 920.764132][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 920.767058][ T5727] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 920.767106][ T5727] usb 5-1: media controller created [ 920.829566][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.140035][ T5727] DVB: Unable to find symbol dib7000p_attach() [ 921.140048][ T5727] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 921.325098][ T5727] rc_core: IR keymap rc-dib0700-rc5 not found [ 921.325129][ T5727] Registered IR keymap rc-empty [ 921.326142][ T5727] dvb-usb: could not initialize remote control. [ 921.326154][ T5727] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 921.536228][ T5727] usb 5-1: USB disconnect, device number 36 [ 922.160289][ T5727] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 924.838902][T11930] xt_hashlimit: size too large, truncated to 1048576 [ 926.780924][T11929] loop0: detected capacity change from 0 to 4096 [ 927.345544][T11936] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 927.347039][T11936] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 3689623684042142765 bytes. [ 927.347071][T11936] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 927.347085][T11936] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 927.347143][T11936] loop0: [ 927.540340][T11928] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 927.540340][T11928] [ 927.540366][T11928] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 927.540455][T11928] CIFS: Attempting to mount //172.20.20.170/share [ 927.780107][T11928] CIFS: VFS: cifs_mount failed w/return code = -112 [ 930.252937][ T50] Bluetooth: hci3: Frame reassembly failed (-84) [ 931.368213][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.368270][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.844745][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'. [ 932.181321][T11589] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 932.215568][ T52] Bluetooth: hci3: command 0x1003 tx timeout [ 934.327560][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1580'. [ 937.592830][T12009] sctp: [Deprecated]: syz.3.1584 (pid 12009) Use of int in max_burst socket option deprecated. [ 937.592830][T12009] Use struct sctp_assoc_value instead [ 937.604919][T12009] netlink: 'syz.3.1584': attribute type 31 has an invalid length. [ 939.204840][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 939.206205][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 939.207970][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 939.209971][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 939.220018][T12027] 9pnet_virtio: no channels available for device syz [ 940.742714][T12032] xt_hashlimit: size too large, truncated to 1048576 [ 942.057496][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 942.064395][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 942.065568][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 942.065750][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 942.104310][T12040] 9pnet_virtio: no channels available for device syz [ 943.287460][T12050] xt_hashlimit: size too large, truncated to 1048576 [ 943.349455][T12052] xt_hashlimit: size too large, truncated to 1048576 [ 943.427795][T12052] netlink: 'syz.5.1594': attribute type 2 has an invalid length. [ 944.205717][ T5708] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 944.387547][ T5708] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 944.388582][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.388629][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.531794][ T5708] usb 1-1: selecting invalid altsetting 1 [ 944.532487][ T5708] dvb_ttusb_budget: ttusb_init_controller: error [ 944.532513][ T5708] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 945.385764][ T5708] DVB: Unable to find symbol stv0299_attach() [ 946.150902][ T5708] DVB: Unable to find symbol tda8083_attach() [ 946.150913][ T5708] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 946.156801][ T5708] usb 1-1: USB disconnect, device number 37 [ 946.177159][T12085] xt_hashlimit: size too large, truncated to 1048576 [ 948.531225][T12098] xt_hashlimit: size too large, truncated to 1048576 [ 950.331435][T12105] lo: entered allmulticast mode [ 950.699611][ T5727] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 952.327159][ T5727] usb 1-1: not running at top speed; connect to a high speed hub [ 952.327183][ T5727] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 952.523454][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.523482][ T5727] usb 1-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 952.523504][ T5727] usb 1-1: Manufacturer: ࡡ [ 952.523513][ T5727] usb 1-1: SerialNumber: Ѓ [ 952.982503][ T6232] Bluetooth: hci3: Frame reassembly failed (-84) [ 953.430249][ T5727] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 953.431520][T12104] lo: left allmulticast mode [ 953.531332][ T5727] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 953.557513][ T5727] usb 1-1: USB disconnect, device number 38 [ 953.611511][T12070] udevd[12070]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.945366][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 954.482656][T12134] xt_hashlimit: size too large, truncated to 1048576 [ 954.542388][T12135] xt_hashlimit: size too large, truncated to 1048576 [ 954.603873][T12135] netlink: 'syz.3.1611': attribute type 2 has an invalid length. [ 954.931122][T12144] syzkaller0: entered promiscuous mode [ 954.931146][T12144] syzkaller0: entered allmulticast mode [ 955.019169][T11589] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 955.029296][ T9622] Bluetooth: hci3: command 0x1003 tx timeout [ 955.469264][ T31] audit: type=1400 audit(1791287595.128:515): avc: denied { ioctl } for pid=12146 comm="syz.0.1614" path="socket:[36574]" dev="sockfs" ino=36574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 955.471221][T12147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.504752][ T5701] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 955.728659][ T5701] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 955.733568][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.733598][ T5701] usb 2-1: Product: syz [ 955.733614][ T5701] usb 2-1: Manufacturer: syz [ 955.733630][ T5701] usb 2-1: SerialNumber: syz [ 955.736171][ T5701] usb 2-1: config 0 descriptor?? [ 955.739590][ T5701] hub 2-1:0.0: bad descriptor, ignoring hub [ 955.739617][ T5701] hub 2-1:0.0: probe with driver hub failed with error -5 [ 958.479794][T12164] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 958.479794][T12164] [ 958.479819][T12164] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 958.479928][T12164] CIFS: Attempting to mount //172.20.20.170/share [ 958.755116][ T5701] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 958.785112][T12164] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 958.818933][ T5701] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 958.818982][ T5701] dib0700: firmware download failed at 7 with -22 [ 958.857281][ T5701] usb 2-1: USB disconnect, device number 21 [ 958.919189][T12164] CIFS: VFS: cifs_mount failed w/return code = -103 [ 959.105279][ T31] audit: type=1400 audit(1791287598.768:516): avc: denied { create } for pid=12168 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 959.106444][ T31] audit: type=1400 audit(1791287598.768:517): avc: denied { bind } for pid=12168 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 959.144735][ T31] audit: type=1400 audit(1791287598.798:518): avc: denied { listen } for pid=12168 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 959.144793][ T31] audit: type=1400 audit(1791287598.798:519): avc: denied { accept } for pid=12168 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 962.064797][T12188] xt_hashlimit: size too large, truncated to 1048576 [ 962.165068][T12193] xt_hashlimit: size too large, truncated to 1048576 [ 962.280835][T12196] netlink: 'syz.5.1626': attribute type 2 has an invalid length. [ 962.644883][ T5701] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 962.795766][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 962.819723][ T5701] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 962.836947][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.837060][ T5701] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.837088][ T5701] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.837108][ T5701] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 962.837133][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 962.837160][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.000643][ T5701] usb 5-1: config 0 descriptor?? [ 963.359291][ T31] audit: type=1400 audit(1791287603.018:520): avc: denied { write } for pid=12183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 963.491858][T12215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12215 comm=syz.1.1629 [ 963.514023][T12215] 9pnet_virtio: no channels available for device syz [ 963.805834][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.866670][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.598815][ T5701] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 964.719690][ T5701] usb 5-1: USB disconnect, device number 37 [ 964.833118][T12218] fido_id[12218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 964.865289][ T31] audit: type=1400 audit(1791287604.528:521): avc: denied { write } for pid=12219 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.006618][T12225] binder: 12222:12225 ioctl c0306201 200000000180 returned -14 [ 966.373697][T12242] syzkaller0: entered promiscuous mode [ 966.373712][T12242] syzkaller0: entered allmulticast mode [ 966.637878][ T5701] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 967.120470][ T5701] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 967.135448][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.135477][ T5701] usb 6-1: Product: syz [ 967.135493][ T5701] usb 6-1: Manufacturer: syz [ 967.135509][ T5701] usb 6-1: SerialNumber: syz [ 967.143443][ T5701] usb 6-1: config 0 descriptor?? [ 967.150321][ T5701] hub 6-1:0.0: bad descriptor, ignoring hub [ 967.150348][ T5701] hub 6-1:0.0: probe with driver hub failed with error -5 [ 967.285336][ T25] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 967.353134][ T31] audit: type=1400 audit(1791287607.008:522): avc: denied { write } for pid=12236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.375214][ T5701] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 967.391884][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 967.393882][ T5701] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 967.393931][ T5701] usb 6-1: media controller created [ 967.437642][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 967.438461][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.438489][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.438502][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 967.439290][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 967.439304][ T25] usb 2-1: SerialNumber: syz [ 967.441951][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.448959][ T25] hub 2-1:1.0: bad descriptor, ignoring hub [ 967.448985][ T25] hub 2-1:1.0: probe with driver hub failed with error -5 [ 967.449470][ T25] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 967.449485][ T25] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 967.456766][ T25] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 967.576877][T12242] dib0700: tx buffer length is larger than 4. Not supported. [ 967.651395][ T5701] DVB: Unable to find symbol dib7000p_attach() [ 967.651413][ T5701] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 967.728920][ T31] audit: type=1400 audit(1791287607.368:523): avc: denied { write } for pid=12258 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.821670][T12263] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1636'. [ 970.118936][ T5701] rc_core: IR keymap rc-dib0700-rc5 not found [ 970.118957][ T5701] Registered IR keymap rc-empty [ 970.119675][ T5701] dvb-usb: could not initialize remote control. [ 970.119688][ T5701] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 970.131208][ T5701] usb 6-1: USB disconnect, device number 6 [ 970.155963][ T5701] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 970.217573][T12270] xt_hashlimit: size too large, truncated to 1048576 [ 970.414998][ T5701] usb 2-1: USB disconnect, device number 22 [ 970.527938][T12281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12281 comm=syz.1.1640 [ 970.552028][T12281] 9pnet_virtio: no channels available for device syz [ 970.961927][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 973.654725][ T9020] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 973.845662][ T9020] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 973.846572][ T9020] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.848727][ T9020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.848751][ T9020] usb 2-1: Product: syz [ 973.848768][ T9020] usb 2-1: Manufacturer: syz [ 973.848783][ T9020] usb 2-1: SerialNumber: syz [ 973.911686][ T9020] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 974.066281][ T31] audit: type=1400 audit(1791287613.718:524): avc: denied { write } for pid=12277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 974.459622][ T9020] dvb_usb_ec168 2-1:1.1: probe with driver dvb_usb_ec168 failed with error -71 [ 974.482566][ T9020] usb 2-1: USB disconnect, device number 23 [ 974.591667][ T31] audit: type=1400 audit(1791287614.248:525): avc: denied { write } for pid=12314 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 975.415709][T12325] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 975.415709][T12325] [ 975.415734][T12325] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 975.415822][T12325] CIFS: Attempting to mount //172.20.20.170/share [ 976.176074][T12325] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 976.176183][T12325] CIFS: VFS: cifs_mount failed w/return code = -103 [ 976.609173][T12330] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 976.609173][T12330] [ 976.609199][T12330] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 976.609338][T12330] CIFS: Attempting to mount //172.20.20.170/share [ 977.025827][T12330] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 977.054676][T12330] CIFS: VFS: cifs_mount failed w/return code = -103 [ 977.285600][T12336] binder: 12335:12336 ioctl c0306201 200000000180 returned -14 [ 977.307421][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 977.629588][T12346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12346 comm=syz.1.1656 [ 977.647661][T12346] 9pnet_virtio: no channels available for device syz [ 981.740061][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 982.785433][T12388] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 982.785433][T12388] [ 982.785458][T12388] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 982.785547][T12388] CIFS: Attempting to mount //172.20.20.170/share [ 983.587332][T12388] CIFS: VFS: \\172.20.20.170 Error -104 sending data on socket to server [ 983.587399][T12388] CIFS: VFS: cifs_mount failed w/return code = -103 [ 984.313508][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 984.871930][ T5931] Bluetooth: hci3: Frame reassembly failed (-84) [ 985.023669][T12409] 9pnet_virtio: no channels available for device syz [ 986.564992][T11589] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 986.573736][ T9622] Bluetooth: hci3: command 0x1003 tx timeout [ 988.754470][ T31] audit: type=1400 audit(1791287628.408:526): avc: denied { write } for pid=12392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.502726][ T31] audit: type=1400 audit(1791287630.158:527): avc: denied { write } for pid=12439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.696001][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 991.708724][T12454] ip_tables: iptables: counters copy to user failed while replacing table [ 992.034683][ T5708] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 992.196253][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 992.196938][ T5708] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 992.743082][ T9622] Bluetooth: hci1: command 0x0406 tx timeout [ 992.816158][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.816215][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.866053][ T31] audit: type=1400 audit(1791287632.458:528): avc: denied { getopt } for pid=12465 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.866085][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.866109][ T5708] usb 2-1: Product: syz [ 992.869071][ T5708] usb 2-1: Manufacturer: syz [ 992.869093][ T5708] usb 2-1: SerialNumber: syz [ 993.428642][ T5708] usb 2-1: config 0 descriptor?? [ 994.076354][ T5708] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 994.083536][ T5708] usb 2-1: USB disconnect, device number 24 [ 994.293916][ T31] audit: type=1400 audit(1791287633.948:529): avc: denied { write } for pid=12450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.319581][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 994.768269][T12485] xt_hashlimit: size too large, truncated to 1048576 [ 994.786234][ T31] audit: type=1400 audit(1791287634.448:530): avc: denied { write } for pid=12481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.816905][ T9622] Bluetooth: hci1: command 0x0406 tx timeout [ 994.869731][T12487] xt_hashlimit: size too large, truncated to 1048576 [ 995.118818][T12487] netlink: 'syz.3.1687': attribute type 2 has an invalid length. [ 995.398141][T12492] 9pnet_virtio: no channels available for device syz [ 996.914095][T12495] xt_hashlimit: size too large, truncated to 1048576 [ 1001.922561][ T31] audit: type=1400 audit(1791287641.578:531): avc: denied { wake_alarm } for pid=12523 comm="syz.1.1697" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1002.552948][ T31] audit: type=1400 audit(1791287642.208:532): avc: denied { validate_trans } for pid=12523 comm="syz.1.1697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1004.374953][T12534] xt_hashlimit: size too large, truncated to 1048576 [ 1006.359938][T12542] xt_hashlimit: size too large, truncated to 1048576 [ 1007.630971][T12556] ip_tables: iptables: counters copy to user failed while replacing table [ 1007.772438][T12566] 9pnet_virtio: no channels available for device syz [ 1008.666587][ T5708] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1009.564573][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 1009.566146][ T5708] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1009.768531][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.768560][ T5708] usb 5-1: Product: syz [ 1009.768575][ T5708] usb 5-1: Manufacturer: syz [ 1009.768592][ T5708] usb 5-1: SerialNumber: syz [ 1009.773268][ T5708] usb 5-1: config 0 descriptor?? [ 1010.074618][ T5715] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1010.101448][ T5708] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 1010.699956][T12582] overlayfs: missing 'lowerdir' [ 1011.208661][ T5708] usb 5-1: USB disconnect, device number 38 [ 1011.795595][T12585] overlayfs: missing 'lowerdir' [ 1012.280855][ T5715] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1012.282153][ T5715] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1012.282183][ T5715] usb 1-1: config 1 has no interface number 0 [ 1012.351394][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.351423][ T5715] usb 1-1: Product: syz [ 1012.351438][ T5715] usb 1-1: Manufacturer: syz [ 1012.351455][ T5715] usb 1-1: SerialNumber: syz [ 1012.400616][ T5715] usb 1-1: 3:1 : does not exist [ 1012.400641][ T5715] usb 1-1: 3:2 : does not exist [ 1013.010716][ T5715] usb 1-1: USB disconnect, device number 39 [ 1013.099305][T12573] udevd[12573]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.332977][T12589] overlayfs: failed to resolve './bus': -2 [ 1013.666027][T12597] lo: entered allmulticast mode [ 1014.934578][ T5708] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1015.141862][ T5708] usb 5-1: not running at top speed; connect to a high speed hub [ 1015.141930][ T5708] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1015.157703][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.157734][ T5708] usb 5-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1015.157757][ T5708] usb 5-1: Manufacturer: ࡡ [ 1015.157773][ T5708] usb 5-1: SerialNumber: Ѓ [ 1016.123379][T12596] lo: left allmulticast mode [ 1016.145514][ T5708] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1016.255480][ T5708] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1016.292845][ T5708] usb 5-1: USB disconnect, device number 39 [ 1016.468942][T12573] udevd[12573]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.797935][ T5701] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1017.725230][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.726201][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.726248][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.726272][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1017.727173][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1017.727199][ T5701] usb 4-1: SerialNumber: syz [ 1017.792500][ T5701] hub 4-1:1.0: bad descriptor, ignoring hub [ 1017.792528][ T5701] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1017.798684][ T5701] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1017.798706][ T5701] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1017.798730][ T5701] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1017.871515][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 1018.017544][T12622] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1018.017544][T12622] [ 1018.017607][T12622] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1018.018086][T12622] CIFS: Attempting to mount //172.20.20.170/share [ 1018.341075][T12609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1713'. [ 1018.794021][T12622] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1019.317554][ T190] usb 4-1: USB disconnect, device number 49 [ 1020.089915][T12630] overlayfs: missing 'lowerdir' [ 1020.667435][T12629] Driver unsupported XDP return value 0 on prog (id 108) dev N/A, expect packet loss! [ 1021.399122][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 1021.416841][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 1021.419009][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 1021.420934][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 1021.474942][T12639] 9pnet_virtio: no channels available for device syz [ 1022.256894][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 1022.256924][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 1022.256993][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 1022.529649][T12650] ipvlan2: entered promiscuous mode [ 1022.529838][T12650] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1022.529861][T12650] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1022.530030][T12650] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1023.193020][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 1023.526259][T12667] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1023.526259][T12667] [ 1023.526327][T12667] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1023.526788][T12667] CIFS: Attempting to mount //172.20.20.170/share [ 1024.506095][T12667] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1024.607329][ T31] audit: type=1400 audit(1791287664.268:533): avc: denied { read } for pid=12670 comm="syz.4.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1025.320295][T12684] netlink: 'syz.1.1737': attribute type 39 has an invalid length. [ 1025.882401][T12686] overlayfs: missing 'lowerdir' [ 1026.318217][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1736'. [ 1026.735141][T12695] lo: entered allmulticast mode [ 1026.793811][T12696] openvswitch: netlink: Flow key attr not present in new flow. [ 1027.145435][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1027.342764][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 1027.342798][ T25] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1027.370726][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.370755][ T25] usb 6-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1027.370780][ T25] usb 6-1: Manufacturer: ࡡ [ 1027.370795][ T25] usb 6-1: SerialNumber: Ѓ [ 1027.721317][T12707] syzkaller0: entered promiscuous mode [ 1027.721341][T12707] syzkaller0: entered allmulticast mode [ 1027.767538][ T25] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1027.785444][T12694] lo: left allmulticast mode [ 1027.833346][T11589] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1027.844312][ T25] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1027.881905][ T25] usb 6-1: USB disconnect, device number 7 [ 1027.941633][T12710] udevd[12710]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.974878][ T5708] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1028.125243][ T5708] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1028.128233][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.128263][ T5708] usb 2-1: Product: syz [ 1028.128279][ T5708] usb 2-1: Manufacturer: syz [ 1028.128298][ T5708] usb 2-1: SerialNumber: syz [ 1028.133257][ T5708] usb 2-1: config 0 descriptor?? [ 1028.172709][ T5708] hub 2-1:0.0: bad descriptor, ignoring hub [ 1028.172736][ T5708] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1028.644004][T12723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1028.997235][T12725] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.243327][ T5708] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1029.299142][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1029.300405][ T5708] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1029.300462][ T5708] usb 2-1: media controller created [ 1029.344636][ T943] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1029.351814][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1029.459235][T12707] dib0700: tx buffer length is larger than 4. Not supported. [ 1029.495240][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 1029.498081][ T943] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1029.548012][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.548042][ T943] usb 1-1: Product: syz [ 1029.548059][ T943] usb 1-1: Manufacturer: syz [ 1029.548075][ T943] usb 1-1: SerialNumber: syz [ 1029.550870][ T943] usb 1-1: config 0 descriptor?? [ 1029.703991][ T5708] DVB: Unable to find symbol dib7000p_attach() [ 1029.704033][ T5708] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1030.794760][ T943] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 1030.830927][ T943] usb 1-1: USB disconnect, device number 40 [ 1030.875551][ T5708] rc_core: IR keymap rc-dib0700-rc5 not found [ 1030.875570][ T5708] Registered IR keymap rc-empty [ 1030.875805][ T5708] dvb-usb: could not initialize remote control. [ 1030.875814][ T5708] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1030.904790][ T5708] usb 2-1: USB disconnect, device number 25 [ 1030.936502][T12744] ip6t_rt: address list match requested but addrnr is 0 [ 1030.992267][ T5708] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1031.185984][T12752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1752'. [ 1031.267814][T12754] lo: entered allmulticast mode [ 1031.507060][ T5727] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1032.815622][ T5727] usb 2-1: not running at top speed; connect to a high speed hub [ 1032.815659][ T5727] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1032.875402][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.875432][ T5727] usb 2-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1032.875455][ T5727] usb 2-1: Manufacturer: ࡡ [ 1032.875471][ T5727] usb 2-1: SerialNumber: Ѓ [ 1033.260896][ T5727] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1033.358748][ T5727] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1033.378892][ T5727] usb 2-1: USB disconnect, device number 26 [ 1033.414291][T12710] udevd[12710]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.478108][ T31] audit: type=1400 audit(1791287673.138:534): avc: denied { write } for pid=12774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.596924][ T31] audit: type=1400 audit(1791287673.258:535): avc: denied { write } for pid=12787 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.684669][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1034.836730][ T25] usb 4-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 1034.838337][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.840618][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.840649][ T25] usb 4-1: Product: syz [ 1034.840666][ T25] usb 4-1: Manufacturer: syz [ 1034.840683][ T25] usb 4-1: SerialNumber: syz [ 1034.906498][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 1034.916288][T12808] 9pnet_virtio: no channels available for device syz [ 1035.046724][ T25] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1035.406730][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1764'. [ 1036.079246][ T31] audit: type=1400 audit(1791287675.738:536): avc: denied { mount } for pid=12799 comm="syz.0.1762" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1036.141486][ T25] dvb_usb_ec168 4-1:1.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1036.161194][ T25] usb 4-1: USB disconnect, device number 50 [ 1036.204723][T12710] udevd[12710]: setting mode of /dev/bus/usb/004/050 to 020664 failed: No such file or directory [ 1036.204834][T12710] udevd[12710]: setting owner of /dev/bus/usb/004/050 to uid=0, gid=0 failed: No such file or directory [ 1036.277989][T12821] ip_tables: iptables: counters copy to user failed while replacing table [ 1037.187363][ T31] audit: type=1400 audit(1791287676.848:537): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1037.214849][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1037.303701][ T31] audit: type=1400 audit(1791287676.958:538): avc: denied { write } for pid=12796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.364884][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1037.366973][ T25] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1037.395329][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.395357][ T25] usb 6-1: Product: syz [ 1037.395372][ T25] usb 6-1: Manufacturer: syz [ 1037.395388][ T25] usb 6-1: SerialNumber: syz [ 1037.398005][ T25] usb 6-1: config 0 descriptor?? [ 1037.462082][ T31] audit: type=1400 audit(1791287677.118:539): avc: denied { ioctl } for pid=12834 comm="syz.0.1768" path="/dev/uinput" dev="devtmpfs" ino=914 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1037.526294][ T31] audit: type=1400 audit(1791287677.178:540): avc: denied { write } for pid=12836 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.595159][T12843] FAULT_INJECTION: forcing a failure. [ 1037.595159][T12843] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.595192][T12843] CPU: 1 UID: 0 PID: 12843 Comm: syz.4.1761 Not tainted syzkaller #0 PREEMPT(full) [ 1037.595220][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1037.595234][T12843] Call Trace: [ 1037.595242][T12843] [ 1037.595249][T12843] dump_stack_lvl+0x100/0x190 [ 1037.595294][T12843] should_fail_ex.cold+0x5/0xa [ 1037.595326][T12843] should_failslab+0xc2/0x120 [ 1037.595358][T12843] __kmalloc_noprof+0xfc/0x840 [ 1037.595383][T12843] ? rcu_is_watching+0x13/0xc0 [ 1037.595414][T12843] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1037.595453][T12843] tomoyo_realpath_from_path+0xb6/0x690 [ 1037.595496][T12843] tomoyo_path_number_perm+0x23c/0x580 [ 1037.595522][T12843] ? tomoyo_path_number_perm+0x22e/0x580 [ 1037.595550][T12843] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1037.595588][T12843] ? __lock_acquire+0x5c0/0x1f40 [ 1037.595629][T12843] ? __fget_files+0x34/0x3d0 [ 1037.595659][T12843] ? find_held_lock+0x2b/0x80 [ 1037.595690][T12843] ? hook_file_ioctl_common+0x140/0x440 [ 1037.595731][T12843] ? __fget_files+0x21f/0x3d0 [ 1037.595764][T12843] security_file_ioctl+0xd3/0x230 [ 1037.595791][T12843] __x64_sys_ioctl+0xb7/0x210 [ 1037.595817][T12843] do_syscall_64+0x123/0x790 [ 1037.595843][T12843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.595865][T12843] RIP: 0033:0x7f047c19e199 [ 1037.595883][T12843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.595903][T12843] RSP: 002b:00007f047cfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.595925][T12843] RAX: ffffffffffffffda RBX: 00007f047c426090 RCX: 00007f047c19e199 [ 1037.595940][T12843] RDX: 00002000000000c0 RSI: 00000000800448d2 RDI: 0000000000000005 [ 1037.595954][T12843] RBP: 00007f047cfee090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.595967][T12843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.595980][T12843] R13: 00007f047c426128 R14: 00007f047c426090 R15: 00007ffdef664008 [ 1037.596012][T12843] [ 1037.596042][T12843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1037.839181][ T5708] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1037.847967][ T25] mdc800 6-1:0.0: probe fails -> wrong Number of Configuration [ 1037.851362][ T25] usb 6-1: USB disconnect, device number 8 [ 1038.000179][ T5708] usb 4-1: not running at top speed; connect to a high speed hub [ 1038.000214][ T5708] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1038.003533][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.003565][ T5708] usb 4-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1038.003590][ T5708] usb 4-1: Manufacturer: ࡡ [ 1038.003606][ T5708] usb 4-1: SerialNumber: Ѓ [ 1038.080889][T12855] FAULT_INJECTION: forcing a failure. [ 1038.080889][T12855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.080924][T12855] CPU: 0 UID: 0 PID: 12855 Comm: syz.1.1767 Not tainted syzkaller #0 PREEMPT(full) [ 1038.080948][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1038.080961][T12855] Call Trace: [ 1038.080968][T12855] [ 1038.080976][T12855] dump_stack_lvl+0x100/0x190 [ 1038.081011][T12855] should_fail_ex.cold+0x5/0xa [ 1038.081042][T12855] _copy_from_user+0x2e/0xd0 [ 1038.081070][T12855] copy_msghdr_from_user+0x9f/0x4c0 [ 1038.081098][T12855] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1038.081131][T12855] ? lock_acquire+0x1d1/0x380 [ 1038.081155][T12855] ? get_pid_task+0x2a/0x250 [ 1038.081188][T12855] ___sys_sendmsg+0x106/0x1e0 [ 1038.081215][T12855] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.081240][T12855] ? get_pid_task+0x106/0x250 [ 1038.081282][T12855] ? find_held_lock+0x2b/0x80 [ 1038.081333][T12855] __sys_sendmsg+0x160/0x210 [ 1038.081365][T12855] ? __pfx___sys_sendmsg+0x10/0x10 [ 1038.081414][T12855] do_syscall_64+0x123/0x790 [ 1038.081446][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.081469][T12855] RIP: 0033:0x7f00e7b9e199 [ 1038.081487][T12855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.081508][T12855] RSP: 002b:00007f00e89ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.081529][T12855] RAX: ffffffffffffffda RBX: 00007f00e7e25fa0 RCX: 00007f00e7b9e199 [ 1038.081544][T12855] RDX: 0000000004040010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1038.081558][T12855] RBP: 00007f00e89ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.081572][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.081585][T12855] R13: 00007f00e7e26038 R14: 00007f00e7e25fa0 R15: 00007ffce5632b68 [ 1038.081616][T12855] [ 1038.288368][ T31] audit: type=1400 audit(1791287677.948:541): avc: denied { write } for pid=12846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.311519][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1038.311543][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1038.311606][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 1039.708218][ T5708] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1039.805487][ T5708] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1039.827178][ T5708] usb 4-1: USB disconnect, device number 51 [ 1039.909090][ T31] audit: type=1400 audit(1791287679.528:542): avc: denied { write } for pid=12869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.048525][T12698] udevd[12698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.054762][ T190] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1040.633203][ T5715] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1040.758638][ T190] usb 2-1: not running at top speed; connect to a high speed hub [ 1040.758669][ T190] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1040.761481][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.761510][ T190] usb 2-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1040.761534][ T190] usb 2-1: Manufacturer: ࡡ [ 1040.761550][ T190] usb 2-1: SerialNumber: Ѓ [ 1040.820447][ T5715] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1040.834874][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.834935][ T5715] usb 1-1: Product: syz [ 1040.834952][ T5715] usb 1-1: Manufacturer: syz [ 1040.834968][ T5715] usb 1-1: SerialNumber: syz [ 1041.942803][ T190] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1042.010211][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 1042.128182][T12891] xt_hashlimit: size too large, truncated to 1048576 [ 1042.216918][ T190] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1042.272857][ T190] usb 2-1: USB disconnect, device number 27 [ 1042.334351][T12698] udevd[12698]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.466244][ T5715] usb 1-1: USB disconnect, device number 41 [ 1042.606997][T12710] udevd[12710]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.679554][T12904] overlayfs: missing 'workdir' [ 1042.732727][ T31] audit: type=1400 audit(1791287682.388:543): avc: denied { write } for pid=12879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.854383][ T31] audit: type=1400 audit(1791287682.508:544): avc: denied { write } for pid=12907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1044.257495][T12916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'. [ 1046.806860][T12924] ip_tables: iptables: counters copy to user failed while replacing table [ 1046.825817][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 1046.825843][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 1046.825914][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 1047.094601][ T943] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1047.244739][ T943] usb 5-1: Using ep0 maxpacket: 32 [ 1047.246689][ T943] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1047.279191][ T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.279221][ T943] usb 5-1: Product: syz [ 1047.279238][ T943] usb 5-1: Manufacturer: syz [ 1047.279254][ T943] usb 5-1: SerialNumber: syz [ 1047.283638][ T943] usb 5-1: config 0 descriptor?? [ 1047.293143][T12935] Device name not specified. [ 1047.293143][T12935] [ 1047.319282][T12937] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 1047.341650][T12935] jffs2: notice: (12935) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1047.404791][ T31] audit: type=1400 audit(1791287687.058:545): avc: denied { setattr } for pid=12933 comm="syz.5.1778" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1047.548520][ T943] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 1047.575952][ T943] usb 5-1: USB disconnect, device number 40 [ 1048.387031][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 1048.389520][T12951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1789'. [ 1048.593510][ T31] audit: type=1400 audit(1791287688.248:546): avc: denied { write } for pid=12953 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=x25_socket permissive=1 [ 1049.035612][ T31] audit: type=1400 audit(1791287688.698:547): avc: denied { write } for pid=12958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.135248][ T31] audit: type=1400 audit(1791287689.798:548): avc: denied { create } for pid=12976 comm="syz.5.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1050.141336][ T31] audit: type=1400 audit(1791287689.798:549): avc: denied { ioctl } for pid=12976 comm="syz.5.1794" path="socket:[40237]" dev="sockfs" ino=40237 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1050.217691][ T31] audit: type=1400 audit(1791287689.878:550): avc: denied { write } for pid=12977 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.257893][ T31] audit: type=1400 audit(1791287689.918:551): avc: denied { setopt } for pid=12981 comm="syz.3.1790" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1050.493446][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 1050.504652][ T190] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1050.509612][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 1050.510069][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'. [ 1050.645169][T11589] Bluetooth: hci0: command 0x0406 tx timeout [ 1050.676403][ T190] usb 4-1: not running at top speed; connect to a high speed hub [ 1050.676545][ T190] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1050.795040][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.795076][ T190] usb 4-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1050.795108][ T190] usb 4-1: Manufacturer: ࡡ [ 1050.795151][ T190] usb 4-1: SerialNumber: Ѓ [ 1051.371707][ T31] audit: type=1400 audit(1791287691.028:552): avc: denied { read } for pid=5263 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1051.394182][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 1051.394205][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 1051.394265][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1797'. [ 1051.438767][ T190] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1051.533779][ T190] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1051.556681][ T190] usb 4-1: USB disconnect, device number 52 [ 1051.596624][T12929] udevd[12929]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.958723][T13005] overlayfs: missing 'lowerdir' [ 1052.725569][ T9622] Bluetooth: hci0: command 0x0406 tx timeout [ 1052.908161][T13015] ip_tables: iptables: counters copy to user failed while replacing table [ 1053.334628][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1053.512344][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1053.802013][ T25] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1053.823115][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.823145][ T25] usb 1-1: Product: syz [ 1053.823162][ T25] usb 1-1: Manufacturer: syz [ 1053.823178][ T25] usb 1-1: SerialNumber: syz [ 1054.108530][ T25] usb 1-1: config 0 descriptor?? [ 1054.123991][ T31] audit: type=1400 audit(1791287693.778:553): avc: denied { write } for pid=13002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.245989][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.246043][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.506513][ T9622] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.550092][ T31] audit: type=1400 audit(1791287695.208:554): avc: denied { write } for pid=13034 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.562138][ T25] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 1055.570527][ T25] usb 1-1: USB disconnect, device number 42 [ 1057.524747][T11589] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.530585][ T31] audit: type=1400 audit(1791287697.188:555): avc: denied { write } for pid=13044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.647330][ T25] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1057.757246][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 1057.800452][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 1057.800475][ T25] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1057.808282][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.808300][ T25] usb 1-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃ婀栿♑髆忥嚷뿕鎛戣筏 [ 1057.808313][ T25] usb 1-1: Manufacturer: ࡡ [ 1057.808322][ T25] usb 1-1: SerialNumber: Ѓ [ 1057.900352][ T31] audit: type=1400 audit(1791287697.558:556): avc: denied { write } for pid=13064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.113192][ T25] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1058.201427][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1058.227812][ T25] usb 1-1: USB disconnect, device number 43 [ 1058.300634][T12999] udevd[12999]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.446838][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 1058.446858][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 1058.446900][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 1058.970286][T13081] FAULT_INJECTION: forcing a failure. [ 1058.970286][T13081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.970321][T13081] CPU: 0 UID: 0 PID: 13081 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) [ 1058.970346][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1058.970360][T13081] Call Trace: [ 1058.970367][T13081] [ 1058.970375][T13081] dump_stack_lvl+0x100/0x190 [ 1058.970409][T13081] should_fail_ex.cold+0x5/0xa [ 1058.970439][T13081] _copy_from_user+0x2e/0xd0 [ 1058.970467][T13081] copy_msghdr_from_user+0x9f/0x4c0 [ 1058.970495][T13081] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1058.970529][T13081] ? lock_acquire+0x1d1/0x380 [ 1058.970554][T13081] ? get_pid_task+0x2a/0x250 [ 1058.970586][T13081] ___sys_sendmsg+0x106/0x1e0 [ 1058.970614][T13081] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.970639][T13081] ? get_pid_task+0x106/0x250 [ 1058.970680][T13081] ? find_held_lock+0x2b/0x80 [ 1058.970731][T13081] __sys_sendmsg+0x160/0x210 [ 1058.970763][T13081] ? __pfx___sys_sendmsg+0x10/0x10 [ 1058.970807][T13081] do_syscall_64+0x123/0x790 [ 1058.970833][T13081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.970852][T13081] RIP: 0033:0x7feabab9e199 [ 1058.970868][T13081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.970889][T13081] RSP: 002b:00007feabba3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.970910][T13081] RAX: ffffffffffffffda RBX: 00007feabae25fa0 RCX: 00007feabab9e199 [ 1058.970925][T13081] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1058.970946][T13081] RBP: 00007feabba3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.970960][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.970973][T13081] R13: 00007feabae26038 R14: 00007feabae25fa0 R15: 00007ffc84ca6298 [ 1058.971003][T13081] [ 1061.293739][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 1061.335194][T13105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.993038][ T31] audit: type=1400 audit(1791287701.648:557): avc: denied { write } for pid=13073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.996884][T13109] ip_tables: iptables: counters copy to user failed while replacing table [ 1062.199983][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 1062.200007][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 1062.200084][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 1062.231113][ T31] audit: type=1400 audit(1791287701.888:558): avc: denied { write } for pid=13119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.263627][ T31] audit: type=1400 audit(1791287702.658:559): avc: denied { connect } for pid=13122 comm="syz.5.1819" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1063.263686][ T31] audit: type=1400 audit(1791287702.668:560): avc: denied { write } for pid=13122 comm="syz.5.1819" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1063.265336][ T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1063.454596][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1063.455115][ T25] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1063.504330][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.504359][ T25] usb 4-1: Product: syz [ 1063.504375][ T25] usb 4-1: Manufacturer: syz [ 1063.504391][ T25] usb 4-1: SerialNumber: syz [ 1063.532927][ T25] usb 4-1: config 0 descriptor?? [ 1064.230409][ T25] mdc800 4-1:0.0: probe fails -> wrong Number of Configuration [ 1064.775639][ T25] usb 4-1: USB disconnect, device number 53 [ 1068.120933][T13155] overlayfs: missing 'lowerdir' [ 1068.886863][T13164] FAULT_INJECTION: forcing a failure. [ 1068.886863][T13164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.886888][T13164] CPU: 1 UID: 0 PID: 13164 Comm: syz.5.1838 Not tainted syzkaller #0 PREEMPT(full) [ 1068.886902][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1068.886910][T13164] Call Trace: [ 1068.886914][T13164] [ 1068.886919][T13164] dump_stack_lvl+0x100/0x190 [ 1068.886941][T13164] should_fail_ex.cold+0x5/0xa [ 1068.886959][T13164] _copy_from_user+0x2e/0xd0 [ 1068.886975][T13164] copy_msghdr_from_user+0x9f/0x4c0 [ 1068.886993][T13164] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1068.887010][T13164] ? lock_acquire+0x1d1/0x380 [ 1068.887024][T13164] ? get_pid_task+0x2a/0x250 [ 1068.887041][T13164] ___sys_sendmsg+0x106/0x1e0 [ 1068.887055][T13164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.887068][T13164] ? get_pid_task+0x106/0x250 [ 1068.887089][T13164] ? find_held_lock+0x2b/0x80 [ 1068.887115][T13164] __sys_sendmsg+0x160/0x210 [ 1068.887133][T13164] ? __pfx___sys_sendmsg+0x10/0x10 [ 1068.887157][T13164] do_syscall_64+0x123/0x790 [ 1068.887172][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.887184][T13164] RIP: 0033:0x7f468859e199 [ 1068.887194][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.887205][T13164] RSP: 002b:00007f46893f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.887217][T13164] RAX: ffffffffffffffda RBX: 00007f4688825fa0 RCX: 00007f468859e199 [ 1068.887225][T13164] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1068.887232][T13164] RBP: 00007f46893f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.887239][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.887245][T13164] R13: 00007f4688826038 R14: 00007f4688825fa0 R15: 00007ffe4742eff8 [ 1068.887261][T13164] [ 1069.484870][T12739] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1069.636568][T12739] usb 6-1: Using ep0 maxpacket: 8 [ 1069.639616][T12739] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1069.639668][T12739] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.02 [ 1069.640576][T12739] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.640601][T12739] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.643381][T12739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.643416][T12739] usb 6-1: Product: syz [ 1069.643434][T12739] usb 6-1: Manufacturer: syz [ 1069.643450][T12739] usb 6-1: SerialNumber: syz [ 1069.897068][ T31] audit: type=1400 audit(1791287709.558:561): avc: denied { write } for pid=13167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.042249][T12739] usb 6-1: 0:1 : does not exist [ 1070.042276][T12739] usb 6-1: 0:2 : does not exist [ 1070.074240][T12739] usb 6-1: 6:0: failed to get current value for ch 1 (-22) [ 1070.106855][T12739] usb 6-1: 6:0: failed to get current value for ch 0 (-22) [ 1070.181260][T12739] usb 6-1: USB disconnect, device number 9 [ 1070.773108][T13189] overlayfs: missing 'workdir' [ 1071.232034][ T9622] Bluetooth: hci4: ISO packet for unknown connection handle 201 [ 1071.348848][T13163] udevd[13163]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.392506][ T31] audit: type=1400 audit(1791287711.048:562): avc: denied { write } for pid=13192 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.297142][ T9622] Bluetooth: hci4: command 0x0406 tx timeout [ 1073.262310][T13214] ip_tables: iptables: counters copy to user failed while replacing table [ 1073.544837][T12739] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1073.627683][ T31] audit: type=1400 audit(1791287713.288:563): avc: denied { write } for pid=13197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.694689][T12739] usb 1-1: Using ep0 maxpacket: 32 [ 1073.695512][T12739] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1073.729268][T12739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.729298][T12739] usb 1-1: Product: syz [ 1073.729314][T12739] usb 1-1: Manufacturer: syz [ 1073.729330][T12739] usb 1-1: SerialNumber: syz [ 1073.736201][T12739] usb 1-1: config 0 descriptor?? [ 1073.801443][ T31] audit: type=1400 audit(1791287713.458:564): avc: denied { write } for pid=13223 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1074.067187][T12739] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 1074.182486][T12739] usb 1-1: USB disconnect, device number 44 [ 1074.575818][T13230] xt_hashlimit: size too large, truncated to 1048576 [ 1074.639225][T13232] xt_hashlimit: size too large, truncated to 1048576 [ 1074.722317][T13233] netlink: 'syz.1.1848': attribute type 2 has an invalid length. [ 1075.520939][T13242] 9pnet_virtio: no channels available for device syz [ 1076.993929][T13248] overlayfs: missing 'workdir' [ 1078.069895][T13253] CIFS: Attempting to mount //127.0.0.1/share [ 1078.130874][T13255] CIFS: VFS: Invalid response size 0 for command 0 [ 1078.131409][T13255] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1078.138834][T13253] CIFS: VFS: cifs_mount failed w/return code = -5 [ 1078.827797][T13265] netlink: 'syz.1.1854': attribute type 3 has an invalid length. [ 1080.348031][ T31] audit: type=1400 audit(1791287719.828:565): avc: denied { append } for pid=13271 comm="syz.1.1857" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1080.907073][ T31] audit: type=1400 audit(1791287720.568:566): avc: denied { create } for pid=13263 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1081.094286][T13277] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1081.094286][T13277] [ 1081.094318][T13277] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1081.095148][T13277] CIFS: Attempting to mount //127.0.0.1/share [ 1082.337688][T13277] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1083.365780][ T5708] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1084.004903][ T5727] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1084.173287][ T5727] usb 4-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 1084.194581][ T5708] usb 6-1: device descriptor read/64, error -71 [ 1084.290687][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.351923][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.351991][ T5727] usb 4-1: Product: syz [ 1084.352034][ T5727] usb 4-1: Manufacturer: syz [ 1084.352076][ T5727] usb 4-1: SerialNumber: syz [ 1084.508617][ T5727] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1084.534642][ T5708] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1085.719475][ T5727] dvb_usb_ec168 4-1:1.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1085.777924][ T5708] usb 6-1: device descriptor read/64, error -71 [ 1085.877145][ T25] usb 4-1: USB disconnect, device number 54 [ 1085.886033][ T5708] usb usb6-port1: attempt power cycle [ 1087.095136][ T5708] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1087.131518][T13318] ip_tables: iptables: counters copy to user failed while replacing table [ 1087.139464][ T5708] usb 6-1: device descriptor read/8, error -71 [ 1087.435618][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1087.594958][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1087.595563][T13325] tipc: Enabling of bearer rejected, failed to enable media [ 1087.600269][ T25] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 1087.644905][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.644933][ T25] usb 1-1: Product: syz [ 1087.644949][ T25] usb 1-1: Manufacturer: syz [ 1087.644964][ T25] usb 1-1: SerialNumber: syz [ 1087.665382][ T25] usb 1-1: config 0 descriptor?? [ 1087.667176][ T31] audit: type=1400 audit(1791287727.328:567): avc: denied { read write } for pid=13321 comm="syz.5.1870" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1087.678031][ T31] audit: type=1400 audit(1791287727.328:568): avc: denied { open } for pid=13321 comm="syz.5.1870" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1087.914587][ T25] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 1087.934811][ T25] usb 1-1: USB disconnect, device number 45 [ 1087.938476][T13334] syz.3.1872 uses obsolete (PF_INET,SOCK_PACKET) [ 1088.093033][ T5708] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1088.139460][ T5708] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1088.146448][ T5708] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1088.146475][ T5708] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1088.146526][ T5708] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.198839][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.198870][ T5708] usb 6-1: Product: syz [ 1088.198886][ T5708] usb 6-1: Manufacturer: syz [ 1088.198902][ T5708] usb 6-1: SerialNumber: syz [ 1088.468895][T13331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.652418][T13339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1868'. [ 1088.696031][ T5708] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1088.701599][T13339] unsupported nlmsg_type 40 [ 1088.714411][ T9622] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 1088.991073][ T5708] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1089.014244][ T5708] usb 6-1: USB disconnect, device number 13 [ 1089.084304][T13299] udevd[13299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.354621][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1090.551443][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 1090.552701][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.560093][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.560123][ T10] usb 2-1: Product: syz [ 1090.560139][ T10] usb 2-1: Manufacturer: syz [ 1090.560155][ T10] usb 2-1: SerialNumber: syz [ 1090.654374][ T10] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1091.788700][ T10] dvb_usb_ec168 2-1:1.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1091.966461][ T10] usb 2-1: USB disconnect, device number 28 [ 1092.011823][T13362] jffs2: notice: (13362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1092.514648][ T31] audit: type=1400 audit(1791287732.098:569): avc: denied { write } for pid=13360 comm="syz.4.1880" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.514776][ T31] audit: type=1400 audit(1791287732.098:570): avc: denied { add_name } for pid=13360 comm="syz.4.1880" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.514952][ T31] audit: type=1400 audit(1791287732.098:571): avc: denied { create } for pid=13360 comm="syz.4.1880" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1092.861978][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 1093.105556][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 1093.353069][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1093.367615][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1093.370450][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1093.374122][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1093.402546][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 1094.062845][T13386] ip_tables: iptables: counters copy to user failed while replacing table [ 1094.105012][T13390] ======================================================= [ 1094.105012][T13390] WARNING: The mand mount option has been deprecated and [ 1094.105012][T13390] and is ignored by this kernel. Remove the mand [ 1094.105012][T13390] option from the mount to silence this warning. [ 1094.105012][T13390] ======================================================= [ 1094.167114][T13390] hpfs: hpfs_map_sector(): read error [ 1094.278036][T13390] 9pnet_fd: p9_fd_create_tcp (13390): problem connecting socket to 127.0.0.1 [ 1094.321449][ T9622] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 1094.424603][ T31] audit: type=1400 audit(1791287734.058:572): avc: denied { bind } for pid=13385 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1094.509255][T13396] CIFS: Attempting to mount //127.0.0.1/share [ 1094.670905][T13401] UBIFS error (pid: 13401): cannot open "ubi0:testvol", error -19 [ 1095.710238][T13396] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1095.876905][ T31] audit: type=1400 audit(1791287735.538:573): avc: denied { bind } for pid=13408 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1095.877518][ T31] audit: type=1400 audit(1791287735.538:574): avc: denied { listen } for pid=13408 comm="syz.3.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1096.007373][T13409] [ 1096.009742][T13409] ====================================================== [ 1096.016763][T13409] WARNING: possible circular locking dependency detected [ 1096.023809][T13409] syzkaller #0 Not tainted [ 1096.028208][T13409] ------------------------------------------------------ [ 1096.035217][T13409] syz.3.1890/13409 is trying to acquire lock: [ 1096.041265][T13409] ffff88802435fae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 1096.052729][T13409] [ 1096.052729][T13409] but task is already holding lock: [ 1096.060081][T13409] ffff888039701b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1096.069074][T13409] [ 1096.069074][T13409] which lock already depends on the new lock. [ 1096.069074][T13409] [ 1096.079465][T13409] [ 1096.079465][T13409] the existing dependency chain (in reverse order) is: [ 1096.088466][T13409] [ 1096.088466][T13409] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1096.096209][T13409] lock_acquire+0x1d1/0x380 [ 1096.101236][T13409] lock_sock_nested+0x41/0xf0 [ 1096.106430][T13409] smc_listen_out+0xf2/0x4b0 [ 1096.111537][T13409] smc_listen_work+0x4c2/0x50e0 [ 1096.116902][T13409] process_one_work+0xac7/0x1b10 [ 1096.122363][T13409] worker_thread+0x5ef/0xe50 [ 1096.127462][T13409] kthread+0x373/0x450 [ 1096.132047][T13409] ret_from_fork+0x730/0xd60 [ 1096.137151][T13409] ret_from_fork_asm+0x1a/0x30 [ 1096.142426][T13409] [ 1096.142426][T13409] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1096.152580][T13409] check_prev_add+0xeb/0xe60 [ 1096.157699][T13409] __lock_acquire+0x1528/0x1f40 [ 1096.163061][T13409] lock_acquire+0x1d1/0x380 [ 1096.168076][T13409] __flush_work+0x4de/0xcb0 [ 1096.173091][T13409] cancel_work_sync+0xd1/0xf0 [ 1096.178287][T13409] smc_clcsock_release+0x5f/0xe0 [ 1096.183739][T13409] __smc_release+0x5c2/0x880 [ 1096.188842][T13409] smc_close_non_accepted+0xda/0x200 [ 1096.194637][T13409] smc_close_active+0x4ff/0x1060 [ 1096.200086][T13409] __smc_release+0x634/0x880 [ 1096.205200][T13409] smc_release+0x1fc/0x620 [ 1096.210135][T13409] __sock_release+0xb3/0x260 [ 1096.215244][T13409] sock_close+0x1c/0x30 [ 1096.219913][T13409] __fput+0x3ff/0xb50 [ 1096.224407][T13409] task_work_run+0x150/0x240 [ 1096.229516][T13409] exit_to_user_mode_loop+0x1d8/0x700 [ 1096.235402][T13409] do_syscall_64+0x661/0x790 [ 1096.240502][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.246905][T13409] [ 1096.246905][T13409] other info that might help us debug this: [ 1096.246905][T13409] [ 1096.257111][T13409] Possible unsafe locking scenario: [ 1096.257111][T13409] [ 1096.264546][T13409] CPU0 CPU1 [ 1096.269890][T13409] ---- ---- [ 1096.275238][T13409] lock(sk_lock-AF_SMC/1); [ 1096.279733][T13409] lock((work_completion)(&new_smc->smc_listen_work)); [ 1096.289176][T13409] lock(sk_lock-AF_SMC/1); [ 1096.296195][T13409] lock((work_completion)(&new_smc->smc_listen_work)); [ 1096.303120][T13409] [ 1096.303120][T13409] *** DEADLOCK *** [ 1096.303120][T13409] [ 1096.311258][T13409] locks held by syz.3.1890/13409: 3, last CPU#0: [ 1096.317570][T13409] #0: ffff888058d7d2c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1096.328105][T13409] #1: ffff888039701b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1096.337512][T13409] #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 1096.346643][T13409] [ 1096.346643][T13409] stack backtrace: [ 1096.352514][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.3.1890 Not tainted syzkaller #0 PREEMPT(full) [ 1096.361867][T13409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1096.371909][T13409] Call Trace: [ 1096.375173][T13409] [ 1096.378095][T13409] dump_stack_lvl+0x100/0x190 [ 1096.382773][T13409] print_circular_bug.cold+0x178/0x1be [ 1096.388231][T13409] check_noncircular+0x146/0x160 [ 1096.393163][T13409] check_prev_add+0xeb/0xe60 [ 1096.397748][T13409] __lock_acquire+0x1528/0x1f40 [ 1096.402619][T13409] lock_acquire+0x1d1/0x380 [ 1096.407116][T13409] ? __flush_work+0x4ca/0xcb0 [ 1096.411783][T13409] ? preempt_schedule_thunk+0x16/0x40 [ 1096.417148][T13409] ? __flush_work+0x4ca/0xcb0 [ 1096.421813][T13409] __flush_work+0x4de/0xcb0 [ 1096.426303][T13409] ? __flush_work+0x4ca/0xcb0 [ 1096.430967][T13409] ? __pfx___flush_work+0x10/0x10 [ 1096.435979][T13409] ? __lock_acquire+0x5c0/0x1f40 [ 1096.440907][T13409] ? __pfx_wq_barrier_func+0x10/0x10 [ 1096.446189][T13409] ? __pfx___might_resched+0x10/0x10 [ 1096.451462][T13409] ? __smc_release+0x5ba/0x880 [ 1096.456223][T13409] cancel_work_sync+0xd1/0xf0 [ 1096.460895][T13409] smc_clcsock_release+0x5f/0xe0 [ 1096.465820][T13409] __smc_release+0x5c2/0x880 [ 1096.470411][T13409] ? __pfx_sock_def_readable+0x10/0x10 [ 1096.475862][T13409] smc_close_non_accepted+0xda/0x200 [ 1096.481136][T13409] smc_close_active+0x4ff/0x1060 [ 1096.486065][T13409] __smc_release+0x634/0x880 [ 1096.490660][T13409] smc_release+0x1fc/0x620 [ 1096.495073][T13409] __sock_release+0xb3/0x260 [ 1096.499664][T13409] ? __pfx_sock_close+0x10/0x10 [ 1096.504511][T13409] sock_close+0x1c/0x30 [ 1096.508662][T13409] __fput+0x3ff/0xb50 [ 1096.512642][T13409] ? _raw_spin_unlock_irq+0x23/0x50 [ 1096.517838][T13409] task_work_run+0x150/0x240 [ 1096.522431][T13409] ? __pfx_task_work_run+0x10/0x10 [ 1096.527541][T13409] exit_to_user_mode_loop+0x1d8/0x700 [ 1096.532912][T13409] ? rcu_is_watching+0x13/0xc0 [ 1096.537671][T13409] do_syscall_64+0x661/0x790 [ 1096.542253][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.548134][T13409] RIP: 0033:0x7f9594f9e199 [ 1096.552537][T13409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.572135][T13409] RSP: 002b:00007f9595e5b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1096.580540][T13409] RAX: 0000000000000000 RBX: 00007f9595225fa0 RCX: 00007f9594f9e199 [ 1096.588501][T13409] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1096.596459][T13409] RBP: 00007f95950358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.604417][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.612380][T13409] R13: 00007f9595226038 R14: 00007f9595225fa0 R15: 00007ffe238a8b38 [ 1096.620349][T13409] [ 1098.324526][ T9622] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1098.324560][ T9622] Bluetooth: hci5: Injecting HCI hardware error event [ 1098.324819][ T9622] Bluetooth: hci5: hardware error 0x00 [ 1100.404537][ T9622] Bluetooth: hci5: Opcode 0x0c03 failed: -110