last executing test programs: 3m1.761415939s ago: executing program 0 (id=2890): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x33, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getpgrp(r3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000000701030000000100000000070000040c00064000000000000000070900010073797a310000000008000540000000005c785eb09e0100000000000000b2a2f6c4e2c4a3aa4c51859832acc438381d"], 0x34}}, 0x4000000) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c9821492c000000183d6a083b738478236137d1435ea64c05125e3f4444f50c7f68949e9829c0dde7e1fa21db6911cca62155487948664e1263238eb6281314849c20d513fded040b6d68988fa3", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0400a6800800a500010000000400a680"], 0x2c}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, 0x0, 0x0) 3m0.341016565s ago: executing program 0 (id=2894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r1 = io_uring_setup(0x2aa4, &(0x7f0000000180)={0x0, 0xef33, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0x2, 0x8, 0x2, 0x2, 0x8, 0x0, [{0x4, 0x1, 0x6, '\x00', 0x8}, {0x2d62, 0x2, 0xffffffffffffff19, '\x00', 0x108}, {0x1, 0x3, 0x1000, '\x00', 0x2d05}, {0x1, 0x7, 0x3, '\x00', 0x2802}, {0x4, 0x2, 0x2, '\x00', 0x2200}, {0x9, 0x7, 0xc0000000000, '\x00', 0x3}, {0x10000, 0x7, 0x5, '\x00', 0xe80}, {0x40, 0x8, 0x5, '\x00', 0x1000}]}) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="021009090a0000002abd7000fbdbdf250800186970bfc40004000300000000000800000006003200030800000000000000000000000000000000000000000000000000007fdb6d5d438ffbca0000000000000000"], 0x50}}, 0x40010) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20100) r4 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x4}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, &(0x7f00000000c0)) 2m59.893119645s ago: executing program 0 (id=2895): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r6 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r6}) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 2m57.255046262s ago: executing program 0 (id=2900): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000040)) 2m56.671117496s ago: executing program 0 (id=2904): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={0x0}}, 0x40) mount$fuseblk(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x2040000, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m55.434301706s ago: executing program 0 (id=2905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000a00)=r0}, 0x20) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xb9, 0x2, 0xa, @mcast1, @mcast1, 0x8, 0x8, 0xff, 0x1}}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x80800, &(0x7f00000007c0)={@_ha_fsid={[0x800, 0x8]}, {0x3, 0x7, 0x7, 0x10}}, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0x100}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x10000a) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49cd3b5778efb988}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x35, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x7, 0x6, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x4, 0x0, 0x1, 0x8, 0x4, 0x80, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x52f3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xe4, &(0x7f00000005c0)=""/228, 0x41100, 0x4, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xf, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r8, r9, r11], &(0x7f00000009c0)=[{0x5, 0x4, 0x9, 0xa}, {0x5, 0x2, 0x6, 0xa}, {0x3, 0x1, 0xc, 0x4}], 0x10, 0x3}, 0x94) 2m38.937159263s ago: executing program 32 (id=2905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @sk_reuseport}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000a00)=r0}, 0x20) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xb9, 0x2, 0xa, @mcast1, @mcast1, 0x8, 0x8, 0xff, 0x1}}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r0, &(0x7f0000000780)='\x00', 0x80800, &(0x7f00000007c0)={@_ha_fsid={[0x800, 0x8]}, {0x3, 0x7, 0x7, 0x10}}, 0x8, &(0x7f0000000800), &(0x7f0000000840)=0x100}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x10000a) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49cd3b5778efb988}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x35, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x7, 0x6, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x4, 0x0, 0x1, 0x8, 0x4, 0x80, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x52f3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xe4, &(0x7f00000005c0)=""/228, 0x41100, 0x4, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xf, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r8, r9, r11], &(0x7f00000009c0)=[{0x5, 0x4, 0x9, 0xa}, {0x5, 0x2, 0x6, 0xa}, {0x3, 0x1, 0xc, 0x4}], 0x10, 0x3}, 0x94) 2m26.190029472s ago: executing program 4 (id=2981): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0xe, &(0x7f0000000080)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, 0x0, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000140)={0x100, r5}, 0x0) connect$ax25(r3, &(0x7f0000000180)={{0x3, @bcast, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast]}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000240)) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) 2m24.675332174s ago: executing program 4 (id=2984): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) socket$kcm(0x2b, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x270, 0x1a0, 0x1a0, 0x1a0, 0xd0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private0, @remote, [0xff000000], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r5 = accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0xc080) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 2m22.447614721s ago: executing program 4 (id=2989): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040)=0xc, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, 0x0, 0x4008800) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 2m21.755530771s ago: executing program 4 (id=2990): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 2m21.655319551s ago: executing program 4 (id=2992): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xcd83, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208000, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x40000010, 0x0, 0x1}]}) 2m20.407792156s ago: executing program 4 (id=2995): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_usb_connect(0x0, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904de1606e6f652200905800000024007041431d5c5e34fc1b552e46061e34511dde950a14109050c0000040e090709050810d7030304610905800240000705068308a5d61d53"], &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x8000200b}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) 2m19.226015889s ago: executing program 33 (id=2995): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_usb_connect(0x0, 0x466, &(0x7f0000000680)=ANY=[@ANYBLOB="120101028ddfb240490b4f06fdd4010203010902540402fa0680070904de1606e6f652200905800000024007041431d5c5e34fc1b552e46061e34511dde950a14109050c0000040e090709050810d7030304610905800240000705068308a5d61d53"], &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x8000200b}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x101) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) 10.018658284s ago: executing program 1 (id=3464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) 9.783249636s ago: executing program 1 (id=3466): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000080)=0xc6915b04) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r3, &(0x7f0000000040)="240000001a005f0214f9f507000909000a00000000000000000000000800020000000000", 0x24) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r2, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r2, 0x2, 0x0, &(0x7f00000001c0)=[{0x400000, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r2, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r2, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8010, r3, 0xdefe000) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r2}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r2, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r2, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) fcntl$dupfd(r3, 0x0, r0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_read(r5, 0x4, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000000)="f6") ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) 8.54907939s ago: executing program 5 (id=3469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x30, r4, 0x409, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfd}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b705000000000065b59b290000000000d4d9000010000000950000000000000062153c69d836eecc0741aa"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd9d, &(0x7f0000000300)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f00000000c0)="0f225c66b876000f00d8c4c179174cfa3566b870000f00d8c7442400eb000000c7442402ee000000ff2c2448b8f1d00000000000000f23d00f21f835300000000f23f8640f01c9c44159fc4904f2d3253327000066420f388062dc", 0x5b}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.335779674s ago: executing program 5 (id=3471): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x33, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() getpgrp(r3) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000000701030000000100000000070000040c00064000000000000000070900010073797a310000000008000540000000005c785eb09e0100000000000000b2a2f6c4e2c4a3aa4c51859832acc438381d"], 0x34}}, 0x4000000) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c9821492c000000183d6a083b738478236137d1435ea64c05125e3f4444f50c7f68949e9829c0dde7e1fa21db6911cca62155487948664e1263238eb6281314849c20d513fded040b6d68988fa3", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0400a6800800a500010000000400a680"], 0x2c}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, 0x0, 0x0) 7.600943895s ago: executing program 1 (id=3472): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) 7.323855654s ago: executing program 5 (id=3473): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7f, 0x0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd7000fadbdf25037c10000400c280100001800c00108008000b00040000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0xffffff88, 0x10, 0x0, 0x0, r1}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="001503000000eb9942"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="208e3a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="40f7ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x6ebb, 0x0, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index, 0x2, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 6.691647654s ago: executing program 6 (id=3474): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) 5.304056331s ago: executing program 2 (id=3478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x3a) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000002980)={0x4, 0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000018c0)=""/4096, 0x1000}], &(0x7f0000002940)=[0x6, 0x1ff]}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.357208307s ago: executing program 2 (id=3479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40080) 4.285457788s ago: executing program 6 (id=3480): chdir(&(0x7f0000000000)='./cgroup\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r1, 0x0, &(0x7f00002d5000/0x3000)=nil, 0x3000, 0x57}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f00000002c0)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000240)={0x18, r1, 0xd, 0x280000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001000)=""/23, 0x17}], 0x1) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r5, 0x80000001, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') fchdir(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88101, 0x0) exit(0xffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x137800, 0x0) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001540)={0x84, &(0x7f0000000100)=ANY=[@ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.274310704s ago: executing program 1 (id=3481): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x1000000000007}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000200"/20, @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000024a77620f57792becf804c38ec9bf075feee7d99df40d754a90b8bab8d91ef4003e094d063175ce24a0e39a4d3fa", @ANYRES16=r4, @ANYBLOB="070000000000000000000500000018000180140002006873723000"/38], 0x2c}}, 0x4c0c4) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf5dc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x820}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x1, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x180}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4840) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, 0x0, 0x0, 0x0, 0x1000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) bind$packet(r8, &(0x7f0000001100)={0x11, 0x3, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = dup2(r8, r8) sendmmsg$unix(r11, &(0x7f0000008380), 0x400000000000174, 0x4008890) 4.151384545s ago: executing program 2 (id=3483): socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r2 = syz_open_pts(r1, 0x141601) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$null(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$sock_int(r4, 0x1, 0x6, 0x0, &(0x7f00000002c0)) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000138002b89aa4b2da957002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf86000073bc3791e21161818e5c7ff60000000007080000f8ffffffbfa400000000000007040000f0ffffffed9bef44c08c1589c655290f6510704e324f77bc3efac265ba4936ddb954b07ecdb299dbd5928b8e181269910b3d9690628e2bfc4ddf00f8ed3ad0d2ca643ecdbe4e29d98815b73f5c9fd35f8f8d0b57a8cbbfc1dde2ed6a1d609b929855f02a98838a4c0e6f8716fd", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) 4.083615167s ago: executing program 5 (id=3484): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a87400007100120d2cbd7040fcdbdf2507000000a7d00e19416a2d31ea592e96044aa3e6249821151647f4303d23a4184accad63230d6511e9aa0d82af65463354cfb54db3f40054f16326fdf67cd0ad854cd2ab981ef8ecffdf0d0461a50dabc22880ea6adf9ae229cc12e1c28b61086af0c9a7940162de4431e496a748ec6a226bb198eeae902ca37393ada58317e59e86f884937c8cf9dcb655ab7692ad45a117ac100a4a64e28e8516d0bb33888ed17da4291be1cc5c96d4b2d5b2510d8da0321469fa14f05580415c1f64cddcd56538b9890ba22fe04a35ef9706e263a4d079", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x1, &(0x7f0000000300)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x100001f}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = io_uring_setup(0x51f5, &(0x7f0000000140)={0x0, 0xb6c6, 0x4000, 0x3, 0x57, 0x0, r5}) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket(0x1a, 0x3, 0x800) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_usb_control_io$hid(r10, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000001c0)=[r8, r2, r0, r2, r0, r1, r2, r6, r5, r9], 0xa) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.471681124s ago: executing program 1 (id=3486): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x4008031, r0, 0xfeb2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) 2.407972905s ago: executing program 2 (id=3487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) 2.156389343s ago: executing program 2 (id=3489): io_setup(0x7, &(0x7f0000000340)=0x0) io_pgetevents(r0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) readahead(0xffffffffffffffff, 0x3, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x204000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500"], 0x78) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000002c0)=0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b0001000010000904550701034902000905820300"], 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) fchdir(r6) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.023821009s ago: executing program 3 (id=3490): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 1.977530514s ago: executing program 3 (id=3491): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) 1.83191642s ago: executing program 3 (id=3492): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x6, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91f6dc"}, {0x6, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.695505967s ago: executing program 3 (id=3493): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x23, 0x5, 0x52, 0x8001, 0x7, 0x9, 0x9, 0xfffffe0000000001, 0x2, 0x5}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x1, 0x980900}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x1, 0x980b00}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x61) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f20e035000010000f22e02e640fc7370f452366ba6100edea0000010024010f01df0f20d835080000000f22d8b9800000c00f3235002000000f300f001a9a680000005c00", 0x45}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.066492406s ago: executing program 5 (id=3494): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) 979.924991ms ago: executing program 6 (id=3495): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x6, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91f6dc"}, {0x6, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) (fail_nth: 8) 547.492728ms ago: executing program 6 (id=3496): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000094001a80400002"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 545.969371ms ago: executing program 3 (id=3497): fanotify_init(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote, 0xfffffffe}}, {{0xa, 0xfffc, 0x0, @private2}}]}, 0x190) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c40)=""/102376, 0x18fe8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 315.922988ms ago: executing program 3 (id=3498): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x300, {0xffffffff, 0x5, 0xfffffffd, 0x10870}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9c15bac6f5c7bfe0, 0x6}, {0x4, 0xfffe}, {0x7, 0xfff1}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0xdcc1629e84dd29d1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xa}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x4880) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x104) sendmsg$nl_route_sched(r10, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0x5, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x2}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000870}, 0x84084) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000002700)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8, 0x401, 0x7, {{0x9, 0x4, 0x3, 0x1e, 0x24, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x4d, [@local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000002680)={0x9, r10, 0x2}) fsconfig$FSCONFIG_SET_FD(r17, 0x5, &(0x7f00000026c0)='\x9f-\x00', 0x0, r8) sendmsg$nl_route_sched(r1, &(0x7f0000002640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1005}, 0xc, &(0x7f0000002600)={&(0x7f0000002740)=@delchain={0x1e40, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x8}, {0xffff, 0x4}, {0xc, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x61}, @filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x800, 0x40, 0x2, 0x5}, {0x9, 0x2, 0x89, 0xfffffffb}]}}, @TCA_BPF_CLASSID={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d58, 0x2, [@TCA_CGROUP_ACT={0x1780, 0x1, [@m_ct={0x13c, 0xb, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "805b56183a7ffadafd0de5251ab0b85e"}, @TCA_CT_ZONE={0x6, 0x4, 0x440a}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_MARK={0x8, 0x5, 0x700}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}]}, {0xca, 0x6, "c0f972f0eee9dcdd8024399f35fa2feba090853b348806653e8f92c7b3432e809dc2963db8aa1d8317fe1f76450f8c3beb68539a06ef52c1e7e098cecbf1f4f0fd7ead1c9e1165365d8036ce60e5c85e49ac10fa5fc452d12e2c468dd2b6cf91791518f416db321bff64ea53fb87f96daf49f1e7c10859d23e7312e09c049f836e807c48bc44cf0336e702e8caea02c95129e64c932185dcb28ee2d0f81b3b593467d7c9aad7275663a354a88c88f88feea13ebc3ece2b6c6e89b58a9d5f3adb519f5649b4e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0xa8, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}]}, {0x62, 0x6, "339673fb3353ce19a38b99be26d93ea556236cb8ef2b9e7c381196e02af2e31a027011356dc547626210062d6d5c17c3f4cf1510394735fe8e53aac845e0a1ab9368ac6a7d44c373dc9e1acd2c4a55f6f1a6a40d9b1d5e4b893401b51895"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x100, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x4, 0x0, 0x61, 0x6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0xe3e, 0x3, 0x1000, 0x40}}, @TCA_DEF_DATA={0x10, 0x3, '/dev/video#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x90f, 0xfffffff1, 0x3, 0x800, 0x8}}]}, {0x72, 0x6, "0bd3dfac38a206a84c4fee10f6c3a95d838ab1112e693052c1a778ec146d35f9c02a1f3277b19cf0e59750408deede0eca4084eb29c7b46daf4276f4dc52e983812f06dabafe9a702a79f2edc42a5185997bc7edd21f269b5413a43b36cf8b8771e8d0a41d7abda3c83fab53677f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x164, 0xf, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x1, 0x4, 0xa7c, 0x400}, 0x3, r15}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x0, 0x0, 0x3, 0x9}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x7, 0x0, 0x7, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x428d, 0x5, 0x2, 0x6}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x80000000, 0x0, 0x7, 0x200}, 0x7, r15}}]}, {0x98, 0x6, "e1be364b4001b4749824c9f635924ae0abcbc309121feb2b3efc8b7a2ca1d8aef3b05a6f9ad6be98aaa00d9e8e7124886ef28a7916c0ea278ffb7052d7fae0f1608365b4a462444a55eb9522fb3bd407d8c0bd67dacf608ba2d2c7535e25743b3918f19bf0ddb874289c3e37b21661c75a04bd488d0fd1396e676127cd0020c424b326b3a2f1ae44b87250444c35b596007466a3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x12c, 0x5, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x3, 0x0, 0xfffffff8, 0x80}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0xa9, 0x6, "e86c8ba1eb23d5851d4413513ec2ff0914fbaa1b57de9f806a3551797a76c63bbfced30f8c63edb8fb08f6063a0f1608f7175746b5edf948f56b26cc06859f2495f8dbc16672c4fcef60f6604dcb239ec3ca88b6dd9008ffbd23411d694ef5252e0f711cc27b60afb5032e61f17b820027d54ffbcc0460cde165b9b9958543b7c023da4eae3cddc05169bd4f717c8320048dc24c1a9f93d50f2703e18dc7f374701b9f41ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x1038, 0x15, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd80be}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x1d0, 0x1c, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x1, 0x89}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7fff, 0x0, 0x7, 0xff}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x4, 0x7, 0xb, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x8, 0x7, 0x4, 0x5}, 0x3, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x3, 0x5, 0x10000000, 0x592b}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x2, 0x1, 0x1843, 0x7}, 0x3, r15}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb2c, 0x1, 0x3, 0x3, 0x4}, 0x4, r16}}]}, {0xc1, 0x6, "fb9041bdb6017c37316fffdb709c0e53bf26add0e99a868761161530f4d98472554ceecd9770d03aa2ecc6ce9b820c882b8def92f0c5862491c9f4bb53b5c21469e28d3521f5b709d13b5529437b56ef784c5c596fa2702bcd73855a776dbaa29a6eb8120f30f301c28c52151c2f90a7b81d4e6d79122704206854666f3734cf7c8952804fb971cf030b54538f3b7f8c7d3943e435cb14d9c8dea05445eb4ea738484ec25a6a67f2bb0b3cb0fbc4455080bf42af8562632ab6188b7bef"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x58, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x800, 0x1, 0x4, {0x3, 0x1, 0x2, 0x0, 0x8000, 0x1}, {0x5, 0x1, 0x9, 0xfff9, 0xef, 0x80000000}, 0x7, 0x2, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0xb, 0x0, 0x81}, "f1566f6d3d1fd1b0c17756177b7d1b27795805216c9aea676c6d5bc84d668a90caac009b217e5abf87"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x2c0, 0x1, [@m_connmark={0x1f8, 0x0, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x3, 0x1, 0x2}, 0x3e0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x4, 0x0, 0x400, 0x1}, 0xf536}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x28e, 0x8, 0x8, 0x7, 0xe}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000000, 0xd, 0x3}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x734edb57, 0x0, 0x7, 0x80, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0xffffffffffffffff, 0xe, 0xd}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x0, 0x40, 0x96b5}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x80000000, 0x5, 0x1ff, 0x8}, 0x7}}]}, {0xe8, 0x6, "66895a5e674580180e7538d75eef4dca48aacb197af885b087ffc539e1b1e40493ff5c60e038e15c5e029aee6f7a62a3f2ae95893001785f9caf4566b587a53c5bbccbb5d5f3dd854765b2a79e58e8ed2ea632f88bf1805f3a40b6e6c026cfc9001c547f0347f46d6cd9b8f11e1df85371ec671ce320eddca5e56f84c4030930f11e59f6ebad3719658ef29d19a6327fb330f0a29f6259a8ddbc241f3fc3478948a1ef85200311d4a0edfc1834086d65522350352c5e63d1f92809e76d70992f13b02e81530fe37ce6ec4f99b275dc848e244fc8ebd4069f9b50bc43779bca8ce6dfc0c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xc4, 0x14, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x6fff, 0x4, 0xd, 0x401, 0x7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x5, 0xffffffffffffffff, 0x6, 0x9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x80000001, 0x1, 0x3, 0x8}}]}, {0x3d, 0x6, "015b7bf096c8f973f4ab3f0a9d95f2966496c8e4bead59567d22dd7872e44188645e7e16f17e71664afb44a3d0e6caec1bb9cb684e27215ffd"}, {0xc, 0x7, {0x81a6d3cd386d9ca5, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x26c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ffc}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x192}, {{0x4, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0xe5}, {{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x100, 0x3, 0x2900}, {0x6, 0xe30c, 0x0, 0x5d396746}}}]}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0xfff, 0x4, 0x400}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='\x00\x00\x00', @TCF_META_TYPE_VAR="1d14535a", @TCF_META_TYPE_VAR="e812e8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ab"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="88fc3f91e483c699bc0a", @TCF_META_TYPE_VAR="4798", @TCF_META_TYPE_VAR="e1b844d1f1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_META={0x38, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR=')', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="8c83b872fbccb6e870", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x8000}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR='eH', @TCF_META_TYPE_VAR="08883bfc33", @TCF_META_TYPE_VAR="1c7550", @TCF_META_TYPE_VAR="a07e4a7c7d4c1e", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x0, 0x2}, {0x8000, 0x70}}}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x285, 0x1, 0x2}, {0x8, 0xfffeffff, 0x5, 0x5, 0x0, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0xc8, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x3}, "300455625fba77b6f7ba4e0cf808715fd09c5f4a4ab976dc825f444a5cd6e55e57e0a42346f28d0f57e3cdfd1015f0a0c0be3585796fdfde5ef9219326515f70daa99bba5e6050606c3de32d0bf9ba34adf01d3bd3905284bfaf5dc3d38d58f8357b65500440e4e5eb8e29828bccfa1fb16fb0de09eeb2517b680371656d0a529a10acb3601a2052bbd7aed0ae25c8e33fb9a58760b77ac4bcfc1fc81461386c304f9b3b8482c898f8372deab8462b42ee967d7be5820f2b0db893"}}, @TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x6, 0x2}, {0x5, 0x2}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="e84c46d32c7d", @TCF_META_TYPE_VAR="dd2749c11c", @TCF_META_TYPE_VAR="6ce20a95", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x848, 0x858, 0x81, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0xe}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xf312}, @TCA_RATE={0x6, 0x5, {0xc0, 0x7}}]}, 0x1e40}, 0x1, 0x0, 0x0, 0x8840}, 0x20000011) 311.322328ms ago: executing program 6 (id=3499): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x3, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) listen(0xffffffffffffffff, 0x9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 252.384887ms ago: executing program 5 (id=3500): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}, 0x1, 0x0, 0x0, 0x8844}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc3", 0xad}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0", 0xc7}, {&(0x7f0000000780)}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a39", 0x81}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332a07764f9853429c4", 0xf8}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35", 0xd5}], 0x9, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 128.357509ms ago: executing program 6 (id=3501): write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f", 0x7) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}, 0x1, 0x0, 0x0, 0x8844}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc3", 0xad}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b", 0x6f}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f772561d470e507a5028ffe0b52422", 0xca}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848e", 0x39}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a99019c662a3067ab866343906828fc89ff22fa46ada5e8f982d95f8864918a64e524c6ade8a8cc941b477597003541256b96d62452cee334ec633c5c85bf32cc6a39", 0x81}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332a07764f985", 0xf5}, {&(0x7f0000000c40)="8c87ae7dc3a1e41d808b729a7f992fcd10bf446bba2823fa0867f4ebbc9858852027a4c0a9681773961d1e44be4f2b9181e639856ced68ac4a29c8dd327abb9200876aae3fc55bcc6ff8f9a32a00b60448f8b57890578daddcddcad87ee7da5dd0df0f7fe978b92dfd2d2dbea58a81a037131eb4e1d00f7f29636d7dac7bc12420fb69d5e42df30502a17b31b431ddab03dde401f0885b6a53679a53a202cf3caf0c10cdbd6477ff6eec4bd31367da38ad81f4425da68f6f42e5b7a97838921eff094558413b041a69b0b1fff19132c1616d214f35", 0xd5}], 0x9, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 126.988617ms ago: executing program 2 (id=3502): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) 0s ago: executing program 1 (id=3503): fsopen(&(0x7f0000000580)='qnx4\x00', 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000001c0)=0x400800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x12402, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) fcntl$setstatus(r7, 0x4, 0x102800) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) kernel console output (not intermixed with test programs): iled: -22 [ 1086.078595][T17821] chnl_net:caif_netlink_parms(): no params data found [ 1086.141287][T17821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.148648][T17821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.156577][T17821] bridge_slave_0: entered allmulticast mode [ 1086.164021][T17821] bridge_slave_0: entered promiscuous mode [ 1086.173192][T17821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.180339][T17821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.187588][T17821] bridge_slave_1: entered allmulticast mode [ 1086.195040][T17821] bridge_slave_1: entered promiscuous mode [ 1086.219950][T17821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.231400][T17821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.258259][T17821] team0: Port device team_slave_0 added [ 1086.265816][T17821] team0: Port device team_slave_1 added [ 1086.289019][T17821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.295955][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.321978][T17821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.333649][T17821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.340573][T17821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.366838][T17821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.404076][T17821] hsr_slave_0: entered promiscuous mode [ 1086.410379][T17821] hsr_slave_1: entered promiscuous mode [ 1086.416361][T17821] debugfs: 'hsr0' already exists in 'hsr' [ 1086.422228][T17821] Cannot create hsr debugfs directory [ 1086.463267][T17433] f81534a_ctrl 5-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1086.490066][T17433] usb 5-1: USB disconnect, device number 53 [ 1086.665997][T17821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.677009][T17821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.931121][T17837] gre1: entered promiscuous mode [ 1087.307786][T17821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.318186][T17821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.397377][T17821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.407707][T17821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.480319][T17821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.490715][T17821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.689913][T17821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1087.701034][T17821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1087.735987][T17821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1087.887034][T17821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.903283][T14729] Bluetooth: hci5: command tx timeout [ 1088.476095][T17821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.540364][T17821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.570126][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.577260][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.670090][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.677225][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.711656][ T29] audit: type=1400 audit(1772820574.857:808): avc: denied { write } for pid=17858 comm="syz.4.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1088.744668][T10668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1088.754943][T10668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1088.765231][T10668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1088.773159][T10668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1088.780870][T10668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.830669][T17821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1088.862083][T17821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.923595][T17861] vxcan1 speed is unknown, defaulting to 1000 [ 1089.970885][ T29] audit: type=1400 audit(1772820576.035:809): avc: denied { connect } for pid=17870 comm="syz.2.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1090.050201][T17821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.127726][T14729] Bluetooth: hci5: command tx timeout [ 1090.192253][T17821] veth0_vlan: entered promiscuous mode [ 1090.238354][T17821] veth1_vlan: entered promiscuous mode [ 1090.321174][T17871] Set syz1 is full, maxelem 6117 reached [ 1090.373975][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1090.439527][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 1090.658920][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.682086][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.762407][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.835697][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.983372][T14729] Bluetooth: hci1: command tx timeout [ 1091.335828][T17821] veth0_macvtap: entered promiscuous mode [ 1091.353491][T17821] veth1_macvtap: entered promiscuous mode [ 1092.278496][T17861] chnl_net:caif_netlink_parms(): no params data found [ 1092.353220][T14729] Bluetooth: hci5: command tx timeout [ 1092.361739][T17821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.426759][T17821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.506997][T17861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.530191][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.547601][T17861] bridge_slave_0: entered allmulticast mode [ 1092.556690][T17861] bridge_slave_0: entered promiscuous mode [ 1092.571333][T17903] vivid-002: ================= START STATUS ================= [ 1092.579266][T17903] vivid-002: Radio HW Seek Mode: Bounded [ 1092.585094][T17903] vivid-002: Radio Programmable HW Seek: false [ 1092.586740][T17861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.607334][T17861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.623099][T17903] vivid-002: RDS Rx I/O Mode: Block I/O [ 1092.625266][T17861] bridge_slave_1: entered allmulticast mode [ 1092.635676][T17903] vivid-002: Generate RBDS Instead of RDS: false [ 1092.639295][T17861] bridge_slave_1: entered promiscuous mode [ 1092.662054][T11339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.775599][T17903] vivid-002: RDS Reception: true [ 1092.841550][T17903] vivid-002: RDS Program Type: 0 inactive [ 1092.911647][T17903] vivid-002: RDS PS Name: inactive [ 1092.981698][T17903] vivid-002: RDS Radio Text: inactive [ 1093.063451][T17903] vivid-002: RDS Traffic Announcement: false inactive [ 1093.120555][T17903] vivid-002: RDS Traffic Program: false inactive [ 1093.142582][T17903] vivid-002: RDS Music: false inactive [ 1093.164019][T17903] vivid-002: ================== END STATUS ================== [ 1093.216532][T14729] Bluetooth: hci1: command tx timeout [ 1094.552822][T11339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.585007][T14729] Bluetooth: hci5: command tx timeout [ 1094.754280][T11339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.806018][T11339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.836010][T17861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.880844][T17861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.902162][T11339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.912395][T11339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.959792][ T5856] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1094.969222][T17861] team0: Port device team_slave_0 added [ 1094.976064][T11339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.984379][T11339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.997860][T17861] team0: Port device team_slave_1 added [ 1095.114385][T17861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.122033][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.153123][T17861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.167185][T17861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.174659][T17861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.200603][ T5856] usb 3-1: Using ep0 maxpacket: 16 [ 1095.206021][T17861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.221067][ T5856] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.236909][ T5856] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.253316][ T5856] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.271951][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.290539][ T5856] usb 3-1: Product: syz [ 1095.294719][ T5856] usb 3-1: Manufacturer: syz [ 1095.299327][ T5856] usb 3-1: SerialNumber: syz [ 1095.306531][T17861] hsr_slave_0: entered promiscuous mode [ 1095.312662][T17861] hsr_slave_1: entered promiscuous mode [ 1095.321212][T17861] debugfs: 'hsr0' already exists in 'hsr' [ 1095.329260][T17861] Cannot create hsr debugfs directory [ 1095.431066][T14729] Bluetooth: hci1: command tx timeout [ 1095.540378][ T5856] usb 3-1: 0:2 : does not exist [ 1095.554674][ T5856] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1095.565048][T17861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1095.587423][T17861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1095.615255][T17861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1095.623420][ T5856] usb 3-1: USB disconnect, device number 71 [ 1095.641667][T17861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1095.670362][ T8572] udevd[8572]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.330132][T13866] block nbd0: Possible stuck request ffff888027d30000: control (read@0,1024B). Runtime 960 seconds [ 1096.340327][T17861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.356607][T13866] block nbd0: Possible stuck request ffff888027d30200: control (read@1024,1024B). Runtime 960 seconds [ 1096.413049][T13866] block nbd0: Possible stuck request ffff888027d30400: control (read@2048,1024B). Runtime 960 seconds [ 1096.424053][T13866] block nbd0: Possible stuck request ffff888027d30600: control (read@3072,1024B). Runtime 960 seconds [ 1096.490302][T17861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.562956][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.570111][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.677867][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.684957][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.167430][ T29] audit: type=1400 audit(1772820582.761:810): avc: denied { create } for pid=17947 comm="syz.4.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1097.289361][T17954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1097.654578][T14729] Bluetooth: hci1: command tx timeout [ 1097.684079][T17861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.924552][T17861] veth0_vlan: entered promiscuous mode [ 1098.964561][T17861] veth1_vlan: entered promiscuous mode [ 1099.008108][T17861] veth0_macvtap: entered promiscuous mode [ 1099.061872][T17861] veth1_macvtap: entered promiscuous mode [ 1099.144217][T17978] block device autoloading is deprecated and will be removed. [ 1099.168836][T17861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.198899][T17861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.271763][T11339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.324498][T11339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.382589][T11339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.449421][T11339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.918688][T17127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.949033][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.951440][T17127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.055128][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.786313][ T29] audit: type=1400 audit(1772820587.092:811): avc: denied { setopt } for pid=18003 comm="syz.4.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1104.945349][ T5142] block nbd2: Possible stuck request ffff888027e40000: control (read@0,1024B). Runtime 930 seconds [ 1104.963128][ T5142] block nbd2: Possible stuck request ffff888027e40200: control (read@1024,1024B). Runtime 930 seconds [ 1104.975716][ T5142] block nbd2: Possible stuck request ffff888027e40400: control (read@2048,1024B). Runtime 930 seconds [ 1104.987377][ T5142] block nbd2: Possible stuck request ffff888027e40600: control (read@3072,1024B). Runtime 930 seconds [ 1105.778092][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1105.938670][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1106.046524][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.137244][T18042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 1106.632091][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.703789][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.733696][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.745151][ T9] usb 3-1: Product: syz [ 1106.752667][ T9] usb 3-1: Manufacturer: syz [ 1106.757383][ T9] usb 3-1: SerialNumber: syz [ 1107.228459][ T9] usb 3-1: can't set config #1, error -71 [ 1107.372002][ T9] usb 3-1: USB disconnect, device number 72 [ 1108.312970][T18064] vxcan1 speed is unknown, defaulting to 1000 [ 1108.325522][T18066] netlink: 'syz.2.3000': attribute type 4 has an invalid length. [ 1108.343347][T10668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1108.352371][T10668] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1108.360094][T10668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1108.369565][T10668] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1108.377160][T10668] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.873865][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1109.068934][T18068] vxcan1 speed is unknown, defaulting to 1000 [ 1109.851508][T18089] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1110.431041][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.464356][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.493895][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.578004][T14729] Bluetooth: hci3: command tx timeout [ 1110.616228][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.628769][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'. [ 1110.639040][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.668400][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.676248][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.695637][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1110.719841][T18094] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 1111.270868][T18068] chnl_net:caif_netlink_parms(): no params data found [ 1111.524064][T18068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.564796][ T29] audit: type=1400 audit(1772820596.240:812): avc: denied { watch_mount } for pid=18136 comm="syz.3.3023" path="/15" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1111.606408][T18068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.613619][T18068] bridge_slave_0: entered allmulticast mode [ 1111.637737][T18068] bridge_slave_0: entered promiscuous mode [ 1111.645739][T18068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.655047][T18068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.673527][T18068] bridge_slave_1: entered allmulticast mode [ 1111.693701][T18068] bridge_slave_1: entered promiscuous mode [ 1111.750960][T18068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.787112][T18068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.870453][T18068] team0: Port device team_slave_0 added [ 1111.882775][T18068] team0: Port device team_slave_1 added [ 1111.935083][T18068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.951178][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.979520][T18068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.995854][T18068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.002925][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.203957][T18068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.334317][T18068] hsr_slave_0: entered promiscuous mode [ 1112.360535][T18068] hsr_slave_1: entered promiscuous mode [ 1112.369080][T18068] debugfs: 'hsr0' already exists in 'hsr' [ 1112.402697][T18068] Cannot create hsr debugfs directory [ 1112.449167][T10668] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1112.801613][T10668] Bluetooth: hci3: command tx timeout [ 1112.894277][T18068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1112.960800][T18068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1112.999786][T18068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1113.029157][T18068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1113.286594][T18068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.444066][T18068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.470248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.477405][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.787907][T18068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1113.798325][T18068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.815542][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.822636][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.923029][ T29] audit: type=1400 audit(1772820598.382:813): avc: denied { name_connect } for pid=18199 comm="syz.2.3050" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1114.162774][T13866] block nbd1: Possible stuck request ffff888027e20c00: control (read@0,1024B). Runtime 30 seconds [ 1114.174073][T13866] block nbd1: Possible stuck request ffff888027e20e00: control (read@1024,1024B). Runtime 30 seconds [ 1114.185059][T13866] block nbd1: Possible stuck request ffff888027e21000: control (read@2048,1024B). Runtime 30 seconds [ 1114.196430][T13866] block nbd1: Possible stuck request ffff888027e21200: control (read@3072,1024B). Runtime 30 seconds [ 1114.424281][ T29] audit: type=1326 audit(1772820598.906:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1114.442715][T18068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.512783][ T29] audit: type=1326 audit(1772820598.943:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1114.550303][T18227] fuse: Bad value for 'fd' [ 1114.709083][ T29] audit: type=1326 audit(1772820598.962:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1114.772839][ T29] audit: type=1326 audit(1772820598.962:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1114.796670][ T29] audit: type=1326 audit(1772820598.962:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18223 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1114.838826][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1114.918491][ T29] audit: type=1400 audit(1772820599.215:819): avc: denied { map } for pid=18228 comm="syz.5.3060" path="socket:[65480]" dev="sockfs" ino=65480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1114.947659][T18245] bond1: entered promiscuous mode [ 1114.953067][T18245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.015314][T10668] Bluetooth: hci3: command tx timeout [ 1115.061725][T18248] bridge1: entered promiscuous mode [ 1115.067563][T18248] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1115.235518][T18068] veth0_vlan: entered promiscuous mode [ 1115.259173][T18068] veth1_vlan: entered promiscuous mode [ 1115.313625][T18068] veth0_macvtap: entered promiscuous mode [ 1115.344752][T18068] veth1_macvtap: entered promiscuous mode [ 1115.427013][T18068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.450059][T18068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.033982][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.062289][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.092756][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.169249][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.519620][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.528729][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.741665][ T8052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.767519][ T8052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.240041][T10668] Bluetooth: hci3: command tx timeout [ 1118.305239][T14729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1118.314821][T14729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1118.322759][T14729] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1118.331239][T14729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1118.338910][T14729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1118.406134][T18305] vxcan1 speed is unknown, defaulting to 1000 [ 1118.810972][ T29] audit: type=1400 audit(1772820602.947:820): avc: denied { create } for pid=18309 comm="syz.3.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1119.660203][T18305] chnl_net:caif_netlink_parms(): no params data found [ 1120.307683][T18305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.335125][T18305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.355520][T18305] bridge_slave_0: entered allmulticast mode [ 1120.377823][T18305] bridge_slave_0: entered promiscuous mode [ 1120.393643][T18305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.403679][T18305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.411730][T18337] validate_nla: 41 callbacks suppressed [ 1120.411744][T18337] netlink: 'syz.5.3095': attribute type 1 has an invalid length. [ 1120.412455][T18305] bridge_slave_1: entered allmulticast mode [ 1120.432846][T18305] bridge_slave_1: entered promiscuous mode [ 1120.587314][T14729] Bluetooth: hci6: command tx timeout [ 1120.598419][T18337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.731976][T18340] bond1: (slave ip6gretap1): making interface the new active one [ 1120.744273][T18340] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1120.814751][T18305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.995649][T18305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.156242][T18305] team0: Port device team_slave_0 added [ 1121.238013][T18305] team0: Port device team_slave_1 added [ 1121.318834][T18305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.325861][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.352320][T18305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.397282][T18305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.404266][T18305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.575403][T18305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.807334][T18305] hsr_slave_0: entered promiscuous mode [ 1121.829053][T18305] hsr_slave_1: entered promiscuous mode [ 1121.839419][T18305] debugfs: 'hsr0' already exists in 'hsr' [ 1121.845161][T18305] Cannot create hsr debugfs directory [ 1122.207268][ T29] audit: type=1400 audit(1772820606.193:821): avc: denied { create } for pid=18367 comm="syz.2.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1122.352375][ T29] audit: type=1400 audit(1772820606.333:822): avc: denied { connect } for pid=18369 comm="syz.3.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1123.450358][T14729] Bluetooth: hci6: command tx timeout [ 1124.074413][ T29] audit: type=1400 audit(1772820607.942:823): avc: denied { bind } for pid=18379 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1124.132216][T18305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.150964][ T29] audit: type=1400 audit(1772820608.007:824): avc: denied { ioctl } for pid=18379 comm="syz.6.3106" path="socket:[66362]" dev="sockfs" ino=66362 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1124.181241][T18381] geneve2: entered promiscuous mode [ 1124.188608][T18381] geneve2: entered allmulticast mode [ 1124.200230][ T8052] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1124.210170][ T8052] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1124.228606][ T8052] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1124.302565][T18305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.350996][ T8052] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1124.428866][T18305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.610181][ T5932] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1124.661060][T18305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.170699][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 1125.177530][ T5932] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1125.186437][ T5932] usb 7-1: config 0 has no interface number 0 [ 1125.208678][ T5932] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1125.242417][ T5932] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1125.264806][ T5932] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1125.275606][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.285413][ T5932] usb 7-1: Product: syz [ 1125.297442][ T5932] usb 7-1: Manufacturer: syz [ 1125.302278][ T5932] usb 7-1: SerialNumber: syz [ 1125.798878][T14729] Bluetooth: hci6: command tx timeout [ 1125.834698][T18305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1125.841983][ T5932] usb 7-1: config 0 descriptor?? [ 1125.858099][T18305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1125.871980][T18305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1125.885539][T18305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1126.064923][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.097759][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.113785][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.120891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.137462][T17127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.145539][T17127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.221345][T18413] FAULT_INJECTION: forcing a failure. [ 1126.221345][T18413] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.234468][T18413] CPU: 1 UID: 0 PID: 18413 Comm: syz.2.3115 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.234494][T18413] Tainted: [L]=SOFTLOCKUP [ 1126.234501][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.234511][T18413] Call Trace: [ 1126.234517][T18413] [ 1126.234524][T18413] dump_stack_lvl+0x100/0x190 [ 1126.234557][T18413] should_fail_ex.cold+0x5/0xa [ 1126.234579][T18413] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1126.234600][T18413] should_failslab+0xc2/0x120 [ 1126.234619][T18413] __kmalloc_noprof+0xe0/0x850 [ 1126.234647][T18413] tomoyo_realpath_from_path+0xb6/0x690 [ 1126.234675][T18413] tomoyo_path_number_perm+0x23c/0x580 [ 1126.234693][T18413] ? tomoyo_path_number_perm+0x22e/0x580 [ 1126.234713][T18413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1126.234757][T18413] ? find_held_lock+0x2b/0x80 [ 1126.234778][T18413] ? __fget_files+0x215/0x3d0 [ 1126.234795][T18413] ? hook_file_ioctl_common+0x146/0x410 [ 1126.234823][T18413] ? __fget_files+0x21f/0x3d0 [ 1126.234845][T18413] security_file_ioctl+0xd3/0x230 [ 1126.234868][T18413] __x64_sys_ioctl+0xb7/0x210 [ 1126.234894][T18413] do_syscall_64+0x106/0xf80 [ 1126.234913][T18413] ? clear_bhb_loop+0x40/0x90 [ 1126.234934][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.234952][T18413] RIP: 0033:0x7fe18079c799 [ 1126.234967][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.234982][T18413] RSP: 002b:00007fe1815b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.234999][T18413] RAX: ffffffffffffffda RBX: 00007fe180a15fa0 RCX: 00007fe18079c799 [ 1126.235010][T18413] RDX: 0000200000001340 RSI: 00000000c004500a RDI: 0000000000000003 [ 1126.235020][T18413] RBP: 00007fe1815b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.235030][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.235040][T18413] R13: 00007fe180a16038 R14: 00007fe180a15fa0 R15: 00007ffec463f3d8 [ 1126.235063][T18413] [ 1126.235070][T18413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1126.429440][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.481299][T18305] veth0_vlan: entered promiscuous mode [ 1126.491839][T18305] veth1_vlan: entered promiscuous mode [ 1126.545588][T18305] veth0_macvtap: entered promiscuous mode [ 1126.651110][T18305] veth1_macvtap: entered promiscuous mode [ 1126.673518][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.690246][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1126.724042][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.736489][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.760923][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.777162][T17127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.956016][T17127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.988042][T17127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.052241][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.070615][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.695464][ T5932] appletouch 7-1:0.85: Geyser mode initialized. [ 1128.003403][ T5932] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input64 [ 1128.015578][T14729] Bluetooth: hci6: command tx timeout [ 1128.113355][ T5932] usb 7-1: USB disconnect, device number 2 [ 1128.113396][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1128.147489][ T5932] appletouch 7-1:0.85: input: appletouch disconnected [ 1128.206923][T16314] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1128.401749][T16314] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1128.438237][T16314] usb 6-1: not running at top speed; connect to a high speed hub [ 1128.469919][T13866] block nbd0: Possible stuck request ffff888027d30000: control (read@0,1024B). Runtime 990 seconds [ 1128.490948][T13866] block nbd0: Possible stuck request ffff888027d30200: control (read@1024,1024B). Runtime 990 seconds [ 1128.525454][T16314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.549969][T13866] block nbd0: Possible stuck request ffff888027d30400: control (read@2048,1024B). Runtime 990 seconds [ 1128.561265][T13866] block nbd0: Possible stuck request ffff888027d30600: control (read@3072,1024B). Runtime 990 seconds [ 1128.578929][T16314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.590695][T16314] usb 6-1: string descriptor 0 read error: -22 [ 1128.597078][T16314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.606416][T16314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.624999][T16314] usb 6-1: 0:2 : does not exist [ 1128.642273][T18437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.714859][T18437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.923144][ T5915] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1129.030019][ T5932] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1129.094095][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 1129.100846][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1129.115946][ T5915] usb 2-1: config 4 has an invalid interface number: 25 but max is 0 [ 1129.212496][ T5915] usb 2-1: config 4 has no interface number 0 [ 1129.218650][ T5915] usb 2-1: config 4 interface 25 has no altsetting 0 [ 1129.229763][ T5915] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 1129.238887][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.246983][ T5915] usb 2-1: Product: syz [ 1129.252840][ T5915] usb 2-1: Manufacturer: syz [ 1129.257539][ T5915] usb 2-1: SerialNumber: syz [ 1129.269634][ T5932] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.293623][ T5932] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1129.914682][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.925582][ T5932] usb 7-1: config 0 descriptor?? [ 1129.929405][ T5915] go7007 2-1:4.25: probe with driver go7007 failed with error -12 [ 1129.985642][T16314] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1129.988129][ T5915] usb 2-1: USB disconnect, device number 72 [ 1130.021591][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 1130.043641][T16314] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1130.064760][T16314] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1130.112053][T16314] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1130.175607][T16314] usb 6-1: USB disconnect, device number 2 [ 1130.516169][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1130.549003][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 1130.589645][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1130.602069][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 1130.609929][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 1130.654610][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 1130.678450][ T5932] pwc: recv_control_msg error -32 req 02 val 2000 [ 1130.721931][ T5932] pwc: recv_control_msg error -32 req 02 val 2100 [ 1130.733116][ T5932] pwc: recv_control_msg error -32 req 04 val 1500 [ 1130.740138][ T5932] pwc: recv_control_msg error -32 req 02 val 2500 [ 1130.901111][ T5932] pwc: recv_control_msg error -32 req 02 val 2400 [ 1130.937263][ T5932] pwc: recv_control_msg error -32 req 02 val 2600 [ 1131.026964][ T5932] pwc: recv_control_msg error -32 req 02 val 2900 [ 1131.259167][ T5932] pwc: recv_control_msg error -32 req 04 val 1100 [ 1131.267882][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 1131.276828][ T5932] pwc: Registered as video103. [ 1131.286978][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65 [ 1131.306506][ T5932] usb 7-1: USB disconnect, device number 3 [ 1131.980245][T10668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1131.990856][T10668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1132.001118][ T10] IPVS: starting estimator thread 0... [ 1132.006871][T18477] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1132.020831][T10668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1132.033166][T10668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1132.047135][T10668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.140087][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.150815][T18478] IPVS: using max 79 ests per chain, 189600 per kthread [ 1132.476510][T18483] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1132.476959][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.519748][T18472] vxcan1 speed is unknown, defaulting to 1000 [ 1132.574469][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.652441][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.830699][ T49] bridge_slave_1: left allmulticast mode [ 1132.836702][ T49] bridge_slave_1: left promiscuous mode [ 1132.843623][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.862161][ T49] bridge_slave_0: left allmulticast mode [ 1132.868427][ T49] bridge_slave_0: left promiscuous mode [ 1132.875526][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.093512][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.112230][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.122911][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 1133.132837][ T49] bond0 (unregistering): Released all slaves [ 1133.152042][ T49] bond1 (unregistering): Released all slaves [ 1133.268607][ T49] !: left promiscuous mode [ 1133.490192][T18472] chnl_net:caif_netlink_parms(): no params data found [ 1133.853524][T18472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.889122][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.905032][T18472] bridge_slave_0: entered allmulticast mode [ 1133.935007][T18472] bridge_slave_0: entered promiscuous mode [ 1133.956892][ T49] hsr_slave_0: left promiscuous mode [ 1133.965757][ T49] hsr_slave_1: left promiscuous mode [ 1133.983726][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.992043][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.114350][ T49] veth1_macvtap: left promiscuous mode [ 1134.136363][ T49] veth0_macvtap: left promiscuous mode [ 1134.153296][ T49] veth1_vlan: left promiscuous mode [ 1134.158694][ T49] veth0_vlan: left promiscuous mode [ 1134.190336][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1134.257824][T10668] Bluetooth: hci2: command tx timeout [ 1134.564518][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1134.622802][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1135.087926][T18521] loop9: detected capacity change from 0 to 7 [ 1135.134868][T18521] buffer_io_error: 138 callbacks suppressed [ 1135.134884][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.165878][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.301433][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.328955][T18472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.334984][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.351632][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.356506][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.376113][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.380773][T18472] bridge_slave_1: entered allmulticast mode [ 1135.392569][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.404267][T18472] bridge_slave_1: entered promiscuous mode [ 1135.411045][T18521] ldm_validate_partition_table(): Disk read failed. [ 1135.417762][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.431734][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.450718][T18521] Buffer I/O error on dev loop9, logical block 0, async page read [ 1135.464910][T18521] Dev loop9: unable to read RDB block 0 [ 1135.474461][T18472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.486248][T18472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.506331][T18521] loop9: unable to read partition table [ 1135.527919][T18521] loop9: partition table beyond EOD, truncated [ 1135.558436][T18521] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1135.558436][T18521] ) failed (rc=-5) [ 1135.610665][T18472] team0: Port device team_slave_0 added [ 1135.703556][T18472] team0: Port device team_slave_1 added [ 1135.766873][T18533] FAULT_INJECTION: forcing a failure. [ 1135.766873][T18533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.829186][T18533] CPU: 1 UID: 0 PID: 18533 Comm: syz.1.3141 Tainted: G L syzkaller #0 PREEMPT(full) [ 1135.829214][T18533] Tainted: [L]=SOFTLOCKUP [ 1135.829220][T18533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1135.829231][T18533] Call Trace: [ 1135.829238][T18533] [ 1135.829245][T18533] dump_stack_lvl+0x100/0x190 [ 1135.829279][T18533] should_fail_ex.cold+0x5/0xa [ 1135.829302][T18533] _copy_from_user+0x2e/0xd0 [ 1135.829329][T18533] copy_msghdr_from_user+0x9f/0x4f0 [ 1135.829361][T18533] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1135.829397][T18533] ___sys_sendmsg+0x106/0x1e0 [ 1135.829423][T18533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1135.829475][T18533] __sys_sendmsg+0x170/0x220 [ 1135.829496][T18533] ? __pfx___sys_sendmsg+0x10/0x10 [ 1135.829530][T18533] do_syscall_64+0x106/0xf80 [ 1135.829550][T18533] ? clear_bhb_loop+0x40/0x90 [ 1135.829571][T18533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.829589][T18533] RIP: 0033:0x7fe3ddf9c799 [ 1135.829604][T18533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.829620][T18533] RSP: 002b:00007fe3def22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.829638][T18533] RAX: ffffffffffffffda RBX: 00007fe3de215fa0 RCX: 00007fe3ddf9c799 [ 1135.829649][T18533] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1135.829659][T18533] RBP: 00007fe3def22090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.829670][T18533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.829680][T18533] R13: 00007fe3de216038 R14: 00007fe3de215fa0 R15: 00007ffce2243768 [ 1135.829703][T18533] [ 1136.137662][T18472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.147315][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.185166][T18472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.206253][T18472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.214486][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.521813][T10668] Bluetooth: hci2: command tx timeout [ 1136.575950][T18472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.479051][ T5142] block nbd2: Possible stuck request ffff888027e40000: control (read@0,1024B). Runtime 960 seconds [ 1137.496225][ T5142] block nbd2: Possible stuck request ffff888027e40200: control (read@1024,1024B). Runtime 960 seconds [ 1137.508718][ T5142] block nbd2: Possible stuck request ffff888027e40400: control (read@2048,1024B). Runtime 960 seconds [ 1137.519712][ T5142] block nbd2: Possible stuck request ffff888027e40600: control (read@3072,1024B). Runtime 960 seconds [ 1137.864778][T18472] hsr_slave_0: entered promiscuous mode [ 1137.880927][T18472] hsr_slave_1: entered promiscuous mode [ 1137.909417][ T49] IPVS: stop unused estimator thread 0... [ 1138.706981][T10668] Bluetooth: hci2: command tx timeout [ 1138.769117][ T29] audit: type=1400 audit(1772820621.646:825): avc: denied { setopt } for pid=18598 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1139.556347][T18472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1139.571347][T18472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1139.584122][T18472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1139.595582][T18472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1139.682951][ T29] audit: type=1400 audit(1772820622.450:826): avc: denied { cmd } for pid=18614 comm="syz.5.3153" path="socket:[68631]" dev="sockfs" ino=68631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1139.968452][T18472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.006315][T18472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.552905][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.560014][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.647798][T17125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.654945][T17125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.798788][T18472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1140.810325][T18472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1140.929312][T10668] Bluetooth: hci2: command tx timeout [ 1140.949764][T18644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18644 comm=syz.3.3155 [ 1140.971593][ T5857] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1141.657082][ T5857] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.667384][ T5857] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.676475][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.720849][ T5857] usb 7-1: config 0 descriptor?? [ 1141.772420][ T5857] pwc: Askey VC010 type 2 USB webcam detected. [ 1142.075522][T18665] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1142.212957][ T5857] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1142.240685][ T5857] pwc: recv_control_msg error -32 req 02 val 2700 [ 1142.253521][T18472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.268450][ T5857] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1142.414883][ T5857] pwc: recv_control_msg error -32 req 04 val 1000 [ 1142.588176][ T5857] pwc: recv_control_msg error -32 req 04 val 1300 [ 1142.603845][ T5857] pwc: recv_control_msg error -32 req 04 val 1400 [ 1142.670248][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1142.754969][ T5857] pwc: recv_control_msg error -32 req 02 val 2000 [ 1142.769046][ T5857] pwc: recv_control_msg error -32 req 02 val 2100 [ 1142.785829][T18472] veth0_vlan: entered promiscuous mode [ 1142.791974][ T5857] pwc: recv_control_msg error -32 req 04 val 1500 [ 1142.798998][ T5857] pwc: recv_control_msg error -32 req 02 val 2500 [ 1142.842814][T18472] veth1_vlan: entered promiscuous mode [ 1142.875973][T18472] veth0_macvtap: entered promiscuous mode [ 1142.890068][ T5857] pwc: recv_control_msg error -32 req 02 val 2400 [ 1142.890505][T18472] veth1_macvtap: entered promiscuous mode [ 1142.929261][ T5857] pwc: recv_control_msg error -32 req 02 val 2600 [ 1142.944457][T18472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.953765][ T5857] pwc: recv_control_msg error -32 req 02 val 2900 [ 1142.959527][T18472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.004671][T17130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.014727][T17130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.056688][T17130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.076387][T17130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.154786][T17127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.162632][T17127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.215373][T17127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.226534][T17127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.240538][ T5857] pwc: recv_control_msg error -32 req 04 val 1100 [ 1143.248258][ T5857] pwc: recv_control_msg error -71 req 04 val 1200 [ 1143.264802][ T5857] pwc: Registered as video103. [ 1143.294998][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 1143.349300][ T5857] usb 7-1: USB disconnect, device number 4 [ 1143.407395][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'. [ 1143.439605][T18688] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1143.732878][ T5856] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1143.912042][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 1143.918470][ T5856] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1143.927121][ T5856] usb 3-1: config 0 has no interface number 0 [ 1143.933761][ T5856] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1143.951078][ T5856] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1143.963090][ T5856] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1143.972594][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.980817][ T5856] usb 3-1: Product: syz [ 1143.984974][ T5856] usb 3-1: Manufacturer: syz [ 1143.989973][ T5856] usb 3-1: SerialNumber: syz [ 1143.997091][ T5856] usb 3-1: config 0 descriptor?? [ 1144.007886][ T5932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1144.093725][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1144.180876][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 1144.187308][ T5932] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1144.195705][ T5932] usb 6-1: config 0 has no interface number 0 [ 1144.202068][ T5932] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.216147][ T5932] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1144.218591][ T5856] radio-si470x 3-1:0.35: this is not a si470x device. [ 1144.224573][ T5932] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1144.239546][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.247793][ T5932] usb 6-1: Product: syz [ 1144.252054][ T5932] usb 6-1: Manufacturer: syz [ 1144.258863][ T5932] usb 6-1: SerialNumber: syz [ 1144.266858][ T10] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1144.276417][ T10] usb 7-1: config 0 has no interface number 0 [ 1144.283486][ T5932] usb 6-1: config 0 descriptor?? [ 1144.292710][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1144.301776][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.310101][ T10] usb 7-1: Product: syz [ 1144.314261][ T10] usb 7-1: Manufacturer: syz [ 1144.318890][ T10] usb 7-1: SerialNumber: syz [ 1144.325566][ T10] usb 7-1: config 0 descriptor?? [ 1144.432944][ T5856] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1144.648301][ T5856] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1145.225087][ T5932] appletouch 6-1:0.85: Geyser mode initialized. [ 1145.659146][ T5932] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input67 [ 1146.606937][ T5857] usb 3-1: USB disconnect, device number 73 [ 1146.622291][ T5857] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1146.781512][T18694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1146.916288][T13866] block nbd1: Possible stuck request ffff888027e20c00: control (read@0,1024B). Runtime 60 seconds [ 1146.927013][T13866] block nbd1: Possible stuck request ffff888027e20e00: control (read@1024,1024B). Runtime 60 seconds [ 1146.934695][ T5857] usb 6-1: USB disconnect, device number 3 [ 1146.937949][T13866] block nbd1: Possible stuck request ffff888027e21000: control (read@2048,1024B). Runtime 60 seconds [ 1146.954598][T13866] block nbd1: Possible stuck request ffff888027e21200: control (read@3072,1024B). Runtime 60 seconds [ 1147.055542][ T5857] appletouch 6-1:0.85: input: appletouch disconnected [ 1147.087802][ T29] audit: type=1400 audit(1772820629.447:827): avc: denied { read write } for pid=18305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1147.301108][ T29] audit: type=1400 audit(1772820629.456:828): avc: denied { open } for pid=18305 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1147.440056][T18750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18750 comm=syz.3.3168 [ 1147.533798][ T10] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1147.543894][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1147.669667][ T29] audit: type=1400 audit(1772820629.456:829): avc: denied { ioctl } for pid=18305 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1147.683974][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1147.696764][ T29] audit: type=1400 audit(1772820629.896:830): avc: denied { bpf } for pid=18748 comm="syz.1.3169" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1148.237951][ T10] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1148.550781][T18761] Bluetooth: hci4: Frame reassembly failed (-84) [ 1148.601402][ T10] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1148.632038][T17127] Bluetooth: hci4: Frame reassembly failed (-84) [ 1148.684739][ T10] usb 7-1: USB disconnect, device number 5 [ 1148.719379][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1149.090496][ T10] keyspan 7-1:0.133: device disconnected [ 1150.148223][T18776] binder: 18775:18776 ioctl 4018620d 0 returned -22 [ 1150.155327][T18776] binder: 18775:18776 ioctl c0306201 0 returned -14 [ 1150.162261][T18776] binder: 18775:18776 unknown command 0 [ 1150.167834][T18776] binder: 18775:18776 ioctl c0306201 200000000280 returned -22 [ 1150.198394][ T29] audit: type=1400 audit(1772820632.328:831): avc: denied { perfmon } for pid=18775 comm="syz.2.3175" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1150.856161][T14729] Bluetooth: hci4: command 0x1003 tx timeout [ 1150.862555][T10668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1152.078701][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1152.470455][T18798] syzkaller1: entered promiscuous mode [ 1152.485878][T18798] syzkaller1: entered allmulticast mode [ 1152.537994][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18802 comm=syz.6.3182 [ 1153.648835][T18827] Bluetooth: hci4: Frame reassembly failed (-84) [ 1153.758344][ T29] audit: type=1400 audit(1772820635.695:832): avc: denied { bind } for pid=18826 comm="syz.1.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1153.802114][ T49] Bluetooth: hci4: Frame reassembly failed (-84) [ 1155.768988][ T29] audit: type=1326 audit(1772820637.491:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.844673][ T29] audit: type=1326 audit(1772820637.491:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.877852][ T29] audit: type=1326 audit(1772820637.491:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.907694][ T29] audit: type=1326 audit(1772820637.491:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.931287][ T29] audit: type=1326 audit(1772820637.510:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.955667][ T29] audit: type=1326 audit(1772820637.510:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1155.981043][T17397] Bluetooth: hci4: command 0x1003 tx timeout [ 1155.989249][T10668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1156.129668][ T29] audit: type=1326 audit(1772820637.510:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1156.246515][ T29] audit: type=1326 audit(1772820637.538:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1156.362888][ T29] audit: type=1326 audit(1772820637.538:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18842 comm="syz.6.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1158.332935][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1158.540912][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1158.583687][T18885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18885 comm=syz.5.3198 [ 1158.925245][ T10] usb 2-1: config 51 has an invalid interface number: 208 but max is 0 [ 1159.047064][ T10] usb 2-1: config 51 has no interface number 0 [ 1159.116826][ T10] usb 2-1: config 51 interface 208 has no altsetting 0 [ 1159.127943][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 1159.127953][ T29] audit: type=1326 audit(1772820640.728:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1159.223865][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1159.269055][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.323026][ T10] usb 2-1: Product: syz [ 1159.327481][ T10] usb 2-1: Manufacturer: syz [ 1159.332051][ T10] usb 2-1: SerialNumber: syz [ 1159.413666][ T29] audit: type=1326 audit(1772820640.962:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1159.731430][ T29] audit: type=1326 audit(1772820640.971:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1159.766626][ T29] audit: type=1326 audit(1772820640.980:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1159.861728][ T5932] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1160.108167][ T29] audit: type=1326 audit(1772820640.980:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1160.133890][ T5932] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1160.142168][ T5932] usb 6-1: config 0 has no interface number 0 [ 1160.296479][ T29] audit: type=1326 audit(1772820640.980:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1160.379477][ T5932] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1160.407746][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.432853][ T29] audit: type=1326 audit(1772820640.980:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1160.478188][ T5932] usb 6-1: Product: syz [ 1160.505199][ T5932] usb 6-1: Manufacturer: syz [ 1160.513459][ T5932] usb 6-1: SerialNumber: syz [ 1160.582032][ T5932] usb 6-1: config 0 descriptor?? [ 1160.592080][ T29] audit: type=1326 audit(1772820640.980:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1160.637283][T13866] block nbd0: Possible stuck request ffff888027d30000: control (read@0,1024B). Runtime 1020 seconds [ 1160.649368][T13866] block nbd0: Possible stuck request ffff888027d30200: control (read@1024,1024B). Runtime 1020 seconds [ 1160.661683][T13866] block nbd0: Possible stuck request ffff888027d30400: control (read@2048,1024B). Runtime 1020 seconds [ 1160.674792][ T29] audit: type=1326 audit(1772820640.980:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1160.703181][T13866] block nbd0: Possible stuck request ffff888027d30600: control (read@3072,1024B). Runtime 1020 seconds [ 1160.750320][ T29] audit: type=1326 audit(1772820640.980:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18882 comm="syz.6.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x7ffc0000 [ 1161.980593][ T10] f81534a_ctrl 2-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1162.155781][ T10] usb 2-1: USB disconnect, device number 73 [ 1162.472579][T18913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18913 comm=syz.2.3212 [ 1162.552246][T18916] overlayfs: failed to clone upperpath [ 1162.652198][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1163.208745][ T5932] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1163.263197][ T5932] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1163.294051][T18922] FAULT_INJECTION: forcing a failure. [ 1163.294051][T18922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.309173][ T5932] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1163.346387][ T5932] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1163.379074][T18922] CPU: 0 UID: 0 PID: 18922 Comm: syz.5.3214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.379100][T18922] Tainted: [L]=SOFTLOCKUP [ 1163.379107][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.379118][T18922] Call Trace: [ 1163.379124][T18922] [ 1163.379130][T18922] dump_stack_lvl+0x100/0x190 [ 1163.379163][T18922] should_fail_ex.cold+0x5/0xa [ 1163.379187][T18922] _copy_from_user+0x2e/0xd0 [ 1163.379213][T18922] kstrtouint_from_user+0xd6/0x1d0 [ 1163.379233][T18922] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1163.379251][T18922] ? __lock_acquire+0x4a5/0x2630 [ 1163.379282][T18922] ? lock_acquire+0x1cf/0x380 [ 1163.379314][T18922] proc_fail_nth_write+0x83/0x220 [ 1163.379339][T18922] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1163.379370][T18922] vfs_write+0x2aa/0x1070 [ 1163.379404][T18922] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1163.379429][T18922] ? __pfx_vfs_write+0x10/0x10 [ 1163.379453][T18922] ? __fget_files+0x215/0x3d0 [ 1163.379477][T18922] ? __fget_files+0x21f/0x3d0 [ 1163.379500][T18922] ksys_write+0x12a/0x250 [ 1163.379524][T18922] ? __pfx_ksys_write+0x10/0x10 [ 1163.379556][T18922] do_syscall_64+0x106/0xf80 [ 1163.379574][T18922] ? clear_bhb_loop+0x40/0x90 [ 1163.379594][T18922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.379611][T18922] RIP: 0033:0x7f1014d5cfce [ 1163.379626][T18922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.379641][T18922] RSP: 002b:00007f1015bddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1163.379659][T18922] RAX: ffffffffffffffda RBX: 00007f1015bde6c0 RCX: 00007f1014d5cfce [ 1163.379670][T18922] RDX: 0000000000000001 RSI: 00007f1015bde0a0 RDI: 0000000000000004 [ 1163.379680][T18922] RBP: 00007f1015bde090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.379689][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.379699][T18922] R13: 00007f1015016038 R14: 00007f1015015fa0 R15: 00007ffd0e421878 [ 1163.379725][T18922] [ 1163.589533][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1163.651630][ T5932] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1163.671303][ T5932] usb 6-1: USB disconnect, device number 4 [ 1163.742982][ T5932] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1163.753029][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1163.764269][ T5932] keyspan 6-1:0.133: device disconnected [ 1163.773222][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1163.807286][ T9] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1163.816334][ T9] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1163.824574][ T9] usb 3-1: Product: syz [ 1163.829084][ T9] usb 3-1: Manufacturer: syz [ 1163.833673][ T9] usb 3-1: SerialNumber: syz [ 1164.212443][T18929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18929 comm=syz.3.3216 [ 1164.480239][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1164.706547][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.717019][ T5932] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1164.735649][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.756720][ T9] usb 3-1: Invalid connection information received from device [ 1164.770950][ T5932] usb 6-1: config 0 descriptor?? [ 1164.792668][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 1165.496699][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1165.505654][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 1165.514758][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1165.521915][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 1165.534395][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 1165.537696][ T5857] usb 3-1: USB disconnect, device number 74 [ 1165.549578][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 1165.557655][ T5932] pwc: recv_control_msg error -32 req 02 val 2000 [ 1165.572832][ T5932] pwc: recv_control_msg error -32 req 02 val 2100 [ 1165.574359][T18937] netlink: 822 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1165.627434][ T5932] pwc: recv_control_msg error -32 req 04 val 1500 [ 1165.636168][ T5932] pwc: recv_control_msg error -32 req 02 val 2500 [ 1165.651828][ T5932] pwc: recv_control_msg error -32 req 02 val 2400 [ 1165.659326][ T5932] pwc: recv_control_msg error -32 req 02 val 2600 [ 1165.666389][ T5932] pwc: recv_control_msg error -32 req 02 val 2900 [ 1165.677109][ T5932] pwc: recv_control_msg error -32 req 02 val 2800 [ 1165.906047][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 1165.994922][ T5932] pwc: Registered as video103. [ 1166.036839][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 1166.515704][ T5932] usb 6-1: USB disconnect, device number 5 [ 1166.757490][T10668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1167.189299][T18961] audit_log_lost: 1 callbacks suppressed [ 1167.189309][T18961] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1167.207463][ T5932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1167.221695][T18961] audit: out of memory in audit_log_start [ 1167.387940][ T5932] usb 6-1: Using ep0 maxpacket: 32 [ 1167.395686][ T5932] usb 6-1: config 51 has an invalid interface number: 208 but max is 0 [ 1167.464624][ T5932] usb 6-1: config 51 has no interface number 0 [ 1167.473533][ T5932] usb 6-1: config 51 interface 208 has no altsetting 0 [ 1167.537859][ T5932] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1167.568265][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.623786][ T5932] usb 6-1: Product: syz [ 1167.754368][ T5932] usb 6-1: Manufacturer: syz [ 1167.773475][ T5932] usb 6-1: SerialNumber: syz [ 1167.838856][T18974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=18974 comm=syz.3.3228 [ 1168.422638][ T29] audit: type=1400 audit(1772820649.418:894): avc: denied { getopt } for pid=18976 comm="syz.2.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1169.707741][ T5915] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1169.905074][T19001] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3235'. [ 1169.995478][ T5932] f81534a_ctrl 6-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1170.004595][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1170.021055][ T5915] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1170.047510][ T5915] usb 3-1: config 0 has no interface number 0 [ 1170.074558][ T5932] usb 6-1: USB disconnect, device number 6 [ 1170.080150][ T5915] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1170.203044][ T5142] block nbd2: Possible stuck request ffff888027e40000: control (read@0,1024B). Runtime 990 seconds [ 1170.213772][ T5142] block nbd2: Possible stuck request ffff888027e40200: control (read@1024,1024B). Runtime 990 seconds [ 1170.225529][ T5142] block nbd2: Possible stuck request ffff888027e40400: control (read@2048,1024B). Runtime 990 seconds [ 1170.236569][ T5142] block nbd2: Possible stuck request ffff888027e40600: control (read@3072,1024B). Runtime 990 seconds [ 1170.257056][ T5915] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1170.310291][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1170.320746][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.329968][ T5915] usb 3-1: Product: syz [ 1170.334256][ T5915] usb 3-1: Manufacturer: syz [ 1170.338988][ T5915] usb 3-1: SerialNumber: syz [ 1170.367943][ T5915] usb 3-1: config 0 descriptor?? [ 1170.712378][T19015] Bluetooth: hci4: Frame reassembly failed (-84) [ 1170.812003][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.820635][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.061525][T19024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=19024 comm=syz.1.3242 [ 1171.405136][ T5915] appletouch 3-1:0.85: Geyser mode initialized. [ 1171.413525][ T5915] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input69 [ 1171.430334][ T5915] usb 3-1: USB disconnect, device number 75 [ 1171.462420][ T5915] appletouch 3-1:0.85: input: appletouch disconnected [ 1172.449506][ T5857] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1172.617871][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.629423][ T5857] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1172.641259][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.663254][ T5857] usb 2-1: config 0 descriptor?? [ 1172.678059][ T5857] pwc: Askey VC010 type 2 USB webcam detected. [ 1172.861432][T10668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1173.161768][ T5857] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1173.199812][ T5857] pwc: recv_control_msg error -32 req 02 val 2700 [ 1173.230645][ T5857] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1173.264301][ T5857] pwc: recv_control_msg error -32 req 04 val 1000 [ 1173.292606][ T5857] pwc: recv_control_msg error -32 req 04 val 1300 [ 1173.315535][ T5857] pwc: recv_control_msg error -32 req 04 val 1400 [ 1173.341379][ T5857] pwc: recv_control_msg error -32 req 02 val 2000 [ 1173.397408][ T5857] pwc: recv_control_msg error -32 req 02 val 2100 [ 1173.422132][ T5857] pwc: recv_control_msg error -32 req 04 val 1500 [ 1173.455293][ T5857] pwc: recv_control_msg error -32 req 02 val 2500 [ 1173.525129][ T5857] pwc: recv_control_msg error -32 req 02 val 2400 [ 1173.558546][ T5857] pwc: recv_control_msg error -32 req 02 val 2600 [ 1173.586766][ T5857] pwc: recv_control_msg error -32 req 02 val 2900 [ 1173.754017][T19014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1173.768656][ T5857] pwc: recv_control_msg error -32 req 02 val 2800 [ 1174.395564][ T29] audit: type=1400 audit(1772820655.011:895): avc: denied { module_load } for pid=19047 comm="syz.6.3252" path="/sys/kernel/oops_count" dev="sysfs" ino=57509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1174.461321][ T5857] pwc: recv_control_msg error -71 req 04 val 1200 [ 1174.730320][ T5857] pwc: Registered as video103. [ 1174.780945][ T5857] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 1174.847838][ T5857] usb 2-1: USB disconnect, device number 74 [ 1175.309680][ T5915] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1175.508107][T19068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=19068 comm=syz.1.3255 [ 1176.849760][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1177.009554][ T5915] usb 6-1: config 51 has an invalid interface number: 208 but max is 0 [ 1177.028754][ T5915] usb 6-1: config 51 has no interface number 0 [ 1177.050243][ T5915] usb 6-1: config 51 interface 208 has no altsetting 0 [ 1177.104940][ T5915] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1177.130777][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.174993][ T5915] usb 6-1: Product: syz [ 1177.180631][ T5915] usb 6-1: Manufacturer: syz [ 1177.196748][T19086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1177.214345][T19086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1177.271980][ T5915] usb 6-1: SerialNumber: syz [ 1179.104813][T13866] block nbd1: Possible stuck request ffff888027e20c00: control (read@0,1024B). Runtime 90 seconds [ 1179.115627][T13866] block nbd1: Possible stuck request ffff888027e20e00: control (read@1024,1024B). Runtime 90 seconds [ 1179.126936][T13866] block nbd1: Possible stuck request ffff888027e21000: control (read@2048,1024B). Runtime 90 seconds [ 1179.139212][T13866] block nbd1: Possible stuck request ffff888027e21200: control (read@3072,1024B). Runtime 90 seconds [ 1179.223237][ T5915] f81534a_ctrl 6-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1179.241155][ T5915] usb 6-1: USB disconnect, device number 7 [ 1179.862022][T19112] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3268'. [ 1180.118719][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3269'. [ 1180.182512][ T29] audit: type=1326 audit(1772820660.352:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.210293][ T29] audit: type=1326 audit(1772820660.362:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.325161][T19121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.353640][ T29] audit: type=1326 audit(1772820660.362:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.454220][ T29] audit: type=1326 audit(1772820660.362:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.480497][ T29] audit: type=1326 audit(1772820660.362:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.513442][ T29] audit: type=1326 audit(1772820660.362:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.544119][ T29] audit: type=1326 audit(1772820660.362:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1180.776020][ T5915] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1180.872503][ T29] audit: type=1326 audit(1772820660.362:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1181.052022][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 1181.064750][ T5915] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1181.081192][ T5915] usb 2-1: config 0 has no interface number 0 [ 1181.093362][ T29] audit: type=1326 audit(1772820660.362:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1181.117405][ T5915] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.142330][ T5915] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1181.161479][ T29] audit: type=1326 audit(1772820660.362:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19114 comm="syz.5.3269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f1014d9c799 code=0x7ffc0000 [ 1181.188008][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1181.198788][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.207847][ T5915] usb 2-1: Product: syz [ 1181.220906][ T5915] usb 2-1: Manufacturer: syz [ 1181.239528][ T5915] usb 2-1: SerialNumber: syz [ 1181.262071][ T5915] usb 2-1: config 0 descriptor?? [ 1181.722259][T19123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.732078][T19123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.947279][T19140] fuse: Bad value for 'user_id' [ 1181.953492][T19140] fuse: Bad value for 'user_id' [ 1181.966979][ T5915] appletouch 2-1:0.85: Failed to request geyser raw mode [ 1181.976351][ T5915] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1181.996014][ T5915] usb 2-1: USB disconnect, device number 75 [ 1182.292273][T19146] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3278'. [ 1183.927791][T19170] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1186.147681][T19178] netlink: 'syz.3.3287': attribute type 3 has an invalid length. [ 1186.258952][T19178] netlink: 'syz.3.3287': attribute type 3 has an invalid length. [ 1186.567180][ T5936] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1186.737979][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 1186.752302][ T5936] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1186.760994][ T5936] usb 2-1: config 0 has no interface number 0 [ 1186.785484][ T5936] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1186.824773][ T5936] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1186.865733][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1186.875189][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.883395][ T5936] usb 2-1: Product: syz [ 1186.891156][ T5936] usb 2-1: Manufacturer: syz [ 1186.895823][ T5936] usb 2-1: SerialNumber: syz [ 1186.913848][ T5936] usb 2-1: config 0 descriptor?? [ 1187.005162][ T5856] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1187.167240][ T5856] usb 7-1: Using ep0 maxpacket: 32 [ 1187.174062][ T5856] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1187.182778][ T5856] usb 7-1: config 0 has no interface number 0 [ 1187.190331][ T5856] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1187.213646][ T5856] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1187.231316][ T5856] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1187.241060][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.249555][ T5856] usb 7-1: Product: syz [ 1187.257950][ T5856] usb 7-1: Manufacturer: syz [ 1187.264340][ T5856] usb 7-1: SerialNumber: syz [ 1187.276302][ T5856] usb 7-1: config 0 descriptor?? [ 1187.472604][T19199] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3293'. [ 1187.748224][T19186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.758353][T19186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.817845][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1187.990966][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1188.000239][ T5936] appletouch 2-1:0.85: Geyser mode initialized. [ 1188.007107][ T10] usb 6-1: config 0 has no interface number 0 [ 1188.015322][ T5856] appletouch 7-1:0.85: Failed to request geyser raw mode [ 1188.025007][ T5856] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1188.027167][ T5936] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input72 [ 1188.053558][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1188.063870][ T5856] usb 7-1: USB disconnect, device number 6 [ 1188.104347][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.118213][ T10] usb 6-1: Product: syz [ 1188.134330][ T10] usb 6-1: Manufacturer: syz [ 1188.144734][ T10] usb 6-1: SerialNumber: syz [ 1188.155418][ T10] usb 6-1: config 0 descriptor?? [ 1188.414062][ T10] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1188.724794][T19209] Bluetooth: hci4: Frame reassembly failed (-84) [ 1188.818869][T19211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=19211 comm=syz.5.3294 [ 1188.833057][T19211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=19211 comm=syz.5.3294 [ 1190.410537][T19189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1190.480848][ T5857] usb 2-1: USB disconnect, device number 76 [ 1190.521912][ T5857] appletouch 2-1:0.85: input: appletouch disconnected [ 1191.184289][T17397] Bluetooth: hci4: command 0x1003 tx timeout [ 1191.193136][T10668] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1191.211832][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1191.211856][ T29] audit: type=1400 audit(1772820670.380:950): avc: denied { map } for pid=19215 comm="syz.3.3297" path="socket:[71777]" dev="sockfs" ino=71777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1191.519407][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1191.619417][ T10] usb 6-1: USB disconnect, device number 8 [ 1191.784411][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1191.790630][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1191.798913][ T9] usb 3-1: config 0 has no interface number 0 [ 1191.804982][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.818271][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 9216, setting to 1024 [ 1191.830865][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1191.840139][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1191.849369][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.857364][ T9] usb 3-1: Product: syz [ 1191.861983][ T9] usb 3-1: Manufacturer: syz [ 1191.866593][ T9] usb 3-1: SerialNumber: syz [ 1191.873807][ T9] usb 3-1: config 0 descriptor?? [ 1192.608094][ T9] appletouch 3-1:0.85: Failed to read mode from device. [ 1192.616239][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1192.714133][ T9] usb 3-1: USB disconnect, device number 76 [ 1192.885928][T13866] block nbd0: Possible stuck request ffff888027d30000: control (read@0,1024B). Runtime 1050 seconds [ 1192.896913][T13866] block nbd0: Possible stuck request ffff888027d30200: control (read@1024,1024B). Runtime 1050 seconds [ 1192.909218][T13866] block nbd0: Possible stuck request ffff888027d30400: control (read@2048,1024B). Runtime 1050 seconds [ 1192.940444][T13866] block nbd0: Possible stuck request ffff888027d30600: control (read@3072,1024B). Runtime 1050 seconds [ 1196.315950][T19273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1196.461137][ T29] audit: type=1326 audit(1772820675.646:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19276 comm="syz.6.3315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f492979c799 code=0x0 [ 1198.421730][T19312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.890750][ T29] audit: type=1400 audit(1772820677.919:952): avc: denied { map } for pid=19313 comm="syz.3.3324" path="socket:[71923]" dev="sockfs" ino=71923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1200.073621][T19330] input: syz0 as /devices/virtual/input/input76 [ 1200.133409][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1200.146083][T19328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1200.163601][T19328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1200.196432][T19328] vxcan1 speed is unknown, defaulting to 1000 [ 1201.560128][T19352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1201.572918][ T5856] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1202.181585][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1202.210653][ T5856] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1202.231522][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.290929][ T5856] usb 7-1: config 0 descriptor?? [ 1202.322332][T19358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1202.353047][ T5142] block nbd2: Possible stuck request ffff888027e40000: control (read@0,1024B). Runtime 1020 seconds [ 1202.363978][ T5142] block nbd2: Possible stuck request ffff888027e40200: control (read@1024,1024B). Runtime 1020 seconds [ 1202.376263][ T5856] cp210x 7-1:0.0: cp210x converter detected [ 1202.382542][ T5142] block nbd2: Possible stuck request ffff888027e40400: control (read@2048,1024B). Runtime 1020 seconds [ 1202.393732][ T5142] block nbd2: Possible stuck request ffff888027e40600: control (read@3072,1024B). Runtime 1020 seconds [ 1202.761669][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1203.286985][T10668] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 1203.295674][ T29] audit: type=1400 audit(1772820681.941:953): avc: denied { map } for pid=19347 comm="syz.6.3335" path="socket:[71989]" dev="sockfs" ino=71989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1203.404205][ T29] audit: type=1400 audit(1772820681.941:954): avc: denied { read } for pid=19347 comm="syz.6.3335" path="socket:[71989]" dev="sockfs" ino=71989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1203.635106][ T29] audit: type=1400 audit(1772820682.362:955): avc: denied { setattr } for pid=19374 comm="syz.5.3344" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1203.741674][T19377] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1204.146981][ T5857] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1204.325735][ T5857] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1204.334004][ T5857] usb 6-1: not running at top speed; connect to a high speed hub [ 1204.530780][ T5856] cp210x 7-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1204.548518][ T5856] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1204.856099][ T5857] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1204.921697][ T5856] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1204.928722][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.940364][ T5856] usb 7-1: USB disconnect, device number 7 [ 1204.946622][ T5857] usb 6-1: Product: syz [ 1204.967716][ T5857] usb 6-1: Manufacturer: syz [ 1204.974135][ T5856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1204.982304][ T5857] usb 6-1: SerialNumber: syz [ 1204.991872][ T5856] cp210x 7-1:0.0: device disconnected [ 1205.868449][ T5857] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1205.888911][ T5857] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1205.978290][ T5857] usb 6-1: USB disconnect, device number 9 [ 1206.070368][ T8572] udevd[8572]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.249410][T19424] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3359'. [ 1207.356067][ T29] audit: type=1400 audit(1772820685.842:956): avc: denied { call } for pid=19426 comm="syz.5.3361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1207.375579][T19429] binder_alloc: 19426: binder_alloc_buf, no vma [ 1207.520422][ T5857] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1207.573880][ T5856] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1207.649014][T10668] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1207.658722][T10668] Bluetooth: hci3: Injecting HCI hardware error event [ 1207.670217][T10668] Bluetooth: hci3: hardware error 0x00 [ 1207.744089][ T5857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.762558][ T5856] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.790590][ T5856] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1207.840945][ T5857] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1207.864232][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.872461][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1207.956647][ T5857] usb 3-1: Product: syz [ 1207.967788][ T5856] usb 7-1: config 0 descriptor?? [ 1208.050792][ T5857] usb 3-1: Manufacturer: syz [ 1208.082651][ T5856] pwc: Askey VC010 type 2 USB webcam detected. [ 1208.104287][ T5857] usb 3-1: SerialNumber: syz [ 1208.124543][ T5857] usb 3-1: config 0 descriptor?? [ 1208.143719][ T5857] gspca_main: conex-2.14.0 probing 0572:0041 [ 1208.668896][T19442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.679639][T19442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.805061][ T5856] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1209.010898][ T5856] pwc: recv_control_msg error -32 req 02 val 2700 [ 1209.036503][ T5856] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1209.058151][ T5856] pwc: recv_control_msg error -32 req 04 val 1000 [ 1209.099463][ T5856] pwc: recv_control_msg error -32 req 04 val 1300 [ 1209.120450][ T5856] pwc: recv_control_msg error -32 req 04 val 1400 [ 1209.145473][ T5856] pwc: recv_control_msg error -32 req 02 val 2000 [ 1209.173624][ T5856] pwc: recv_control_msg error -32 req 02 val 2100 [ 1209.209263][ T5856] pwc: recv_control_msg error -32 req 04 val 1500 [ 1209.217561][ T5936] usb 3-1: USB disconnect, device number 77 [ 1209.226843][ T5856] pwc: recv_control_msg error -32 req 02 val 2500 [ 1209.235258][ T29] audit: type=1800 audit(1772820687.573:957): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3357" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1209.256784][ T5856] pwc: recv_control_msg error -32 req 02 val 2400 [ 1209.270366][ T5856] pwc: recv_control_msg error -32 req 02 val 2600 [ 1209.334051][ T29] audit: type=1400 audit(1772820687.629:958): avc: denied { create } for pid=19447 comm="syz.5.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1209.393162][ T29] audit: type=1400 audit(1772820687.629:959): avc: denied { read } for pid=19449 comm="syz.1.3366" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1209.436876][ T29] audit: type=1400 audit(1772820687.629:960): avc: denied { open } for pid=19449 comm="syz.1.3366" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1209.471372][ T29] audit: type=1400 audit(1772820687.647:961): avc: denied { write } for pid=19449 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1209.491536][ T29] audit: type=1400 audit(1772820687.647:962): avc: denied { getopt } for pid=19449 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1209.575901][ T5856] pwc: recv_control_msg error -32 req 02 val 2800 [ 1210.129408][T10668] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1210.136227][ T5856] pwc: recv_control_msg error -71 req 04 val 1200 [ 1210.144809][ T5856] pwc: Registered as video103. [ 1210.151679][ T5856] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input77 [ 1210.249537][ T5856] usb 7-1: USB disconnect, device number 8 [ 1210.663618][T19467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3369'. [ 1210.691683][T19456] SELinux: failed to load policy [ 1210.822196][T19470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3369'. [ 1210.908235][T19472] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3371'. [ 1211.294452][T13866] block nbd1: Possible stuck request ffff888027e20c00: control (read@0,1024B). Runtime 120 seconds [ 1211.305254][T13866] block nbd1: Possible stuck request ffff888027e20e00: control (read@1024,1024B). Runtime 120 seconds [ 1211.316245][T13866] block nbd1: Possible stuck request ffff888027e21000: control (read@2048,1024B). Runtime 120 seconds [ 1211.327713][T13866] block nbd1: Possible stuck request ffff888027e21200: control (read@3072,1024B). Runtime 120 seconds [ 1213.252538][T19514] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3381'. [ 1213.338853][T19516] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3384'. [ 1213.400417][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1213.431436][T19518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.641131][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1213.652337][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1213.660497][ T9] usb 3-1: config 0 has no interface number 0 [ 1213.666564][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1213.678803][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1213.687448][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1213.696855][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.705522][ T9] usb 3-1: Product: syz [ 1213.709688][ T9] usb 3-1: Manufacturer: syz [ 1213.714858][ T9] usb 3-1: SerialNumber: syz [ 1213.727244][ T9] usb 3-1: config 0 descriptor?? [ 1214.277778][T19511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.294233][T19511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.525704][ T9] appletouch 3-1:0.85: Geyser mode initialized. [ 1214.540056][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input78 [ 1214.753843][ T9] usb 3-1: USB disconnect, device number 78 [ 1214.780166][ T9] appletouch 3-1:0.85: input: appletouch disconnected [ 1215.132411][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3388'. [ 1215.350492][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3388'. [ 1216.652351][T19552] ceph: No mds server is up or the cluster is laggy [ 1216.659786][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 1216.680917][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1217.402859][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1219.269403][ T5877] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1219.515470][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 1219.530497][ T5877] usb 3-1: config 51 has an invalid interface number: 208 but max is 0 [ 1219.557307][ T5877] usb 3-1: config 51 has no interface number 0 [ 1219.605983][ T5877] usb 3-1: config 51 interface 208 has no altsetting 0 [ 1219.615784][T17397] Bluetooth: hci1: command 0x0406 tx timeout [ 1219.616004][ T5128] Bluetooth: hci5: command 0x0406 tx timeout [ 1219.710653][ T5877] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 1219.750666][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.761383][T19605] kAFS: unable to lookup cell 'ÿ' [ 1219.772627][T19607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19607 comm=syz.6.3403 [ 1219.801128][T19605] kAFS: unable to lookup cell '(,c¾Ì' [ 1219.869746][ T5877] usb 3-1: Product: syz [ 1219.873940][ T5877] usb 3-1: Manufacturer: syz [ 1219.886212][ T5877] usb 3-1: SerialNumber: syz [ 1220.809450][ T5856] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1220.991762][T19624] netlink: 'syz.5.3407': attribute type 3 has an invalid length. [ 1221.015255][T19624] netlink: 'syz.5.3407': attribute type 3 has an invalid length. [ 1221.035511][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 1221.046736][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1221.364639][ T5856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1221.455976][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1221.469470][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1221.480819][ T5856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1221.494208][ T5856] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1221.503518][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.711422][ T5877] f81534a_ctrl 3-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 1221.785792][ T5877] usb 3-1: USB disconnect, device number 79 [ 1222.893900][ T5856] usb 2-1: GET_CAPABILITIES returned 0 [ 1222.910699][ T5856] usbtmc 2-1:16.0: can't read capabilities [ 1223.017619][T19651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.110491][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1223.200036][T19656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1223.289110][ T5932] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1223.460150][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 1223.466957][ T5932] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1223.888727][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1223.895510][ T5932] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1223.904938][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.922179][ T5932] usb 3-1: config 0 descriptor?? [ 1224.242491][ T10] usb 2-1: USB disconnect, device number 77 [ 1224.381508][ T5932] usbhid 3-1:0.0: can't add hid device: -71 [ 1224.401091][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1224.444869][ T5932] usb 3-1: USB disconnect, device number 80 [ 1225.192314][T19672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.546831][T19681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1225.619030][T19684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1225.664526][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3424'. [ 1225.685914][T13866] block nbd0: Possible stuck request ffff888027d30000: control (read@0,1024B). Runtime 1080 seconds [ 1225.696766][T13866] block nbd0: Possible stuck request ffff888027d30200: control (read@1024,1024B). Runtime 1080 seconds [ 1225.707835][T13866] block nbd0: Possible stuck request ffff888027d30400: control (read@2048,1024B). Runtime 1080 seconds [ 1225.721959][T13866] block nbd0: Possible stuck request ffff888027d30600: control (read@3072,1024B). Runtime 1080 seconds [ 1226.028997][T19700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3424'. [ 1226.264204][T19704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.271527][T19704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.648933][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.681145][T19704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.790222][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 1226.799234][T19710] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1227.191142][ T5936] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1227.256944][T17127] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.266974][T17127] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.279283][T17127] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.290750][T17127] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.351493][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 1227.353315][T19721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1227.467479][ T5936] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1227.488453][ T5936] usb 2-1: config 0 has no interface number 0 [ 1227.507890][ T5936] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1227.541261][ T5936] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1227.695453][ T5936] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1227.723149][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.754367][ T5936] usb 2-1: Product: syz [ 1227.771120][ T5936] usb 2-1: Manufacturer: syz [ 1227.901647][ T5936] usb 2-1: SerialNumber: syz [ 1227.938026][ T5936] usb 2-1: config 0 descriptor?? [ 1228.232823][ T5936] radio-si470x 2-1:0.35: this is not a si470x device. [ 1228.449728][ T5936] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1228.855544][ T5936] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1230.152576][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1230.286888][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1230.312803][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1230.325917][ T10] usb 6-1: config 5 has an invalid interface number: 168 but max is 0 [ 1230.334260][ T10] usb 6-1: config 5 has no interface number 0 [ 1230.342870][ T10] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1230.354695][ T10] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1230.375166][ T10] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 1230.388025][ T10] usb 6-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1230.403802][ T10] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 1230.415841][ T10] usb 6-1: config 5 interface 168 has no altsetting 0 [ 1230.430691][ T10] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1230.439923][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.448030][ T10] usb 6-1: Product: syz [ 1230.455722][ T10] usb 6-1: Manufacturer: syz [ 1230.462460][ T10] usb 6-1: SerialNumber: syz [ 1230.471774][T19749] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1230.529213][T19755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1230.617889][ T5936] usb 2-1: USB disconnect, device number 78 [ 1230.628231][ T5936] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1231.963106][ T5856] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1232.367364][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1232.375522][ T5856] usb 2-1: not running at top speed; connect to a high speed hub [ 1232.388395][ T5856] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1232.398282][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.406324][ T5856] usb 2-1: Product: syz [ 1232.412779][ T5856] usb 2-1: Manufacturer: syz [ 1232.417468][ T5856] usb 2-1: SerialNumber: syz [ 1232.723137][ T29] audit: type=1400 audit(1772820709.573:963): avc: denied { create } for pid=19779 comm="syz.2.3451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1233.223456][ T29] audit: type=1400 audit(1772820710.041:964): avc: denied { unlink } for pid=18472 comm="syz-executor" name="file1" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1233.278011][ T10] usb 6-1: NFC: Unable to get FW version [ 1233.294969][ T10] pn533_usb 6-1:5.168: probe with driver pn533_usb failed with error -90 [ 1233.326991][ T10] usb 6-1: USB disconnect, device number 10 [ 1233.463342][ T5856] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1233.478791][ T5856] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1233.500701][T19788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.994112][ T5856] usb 2-1: USB disconnect, device number 79 [ 1234.184288][ T5877] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1234.350043][ T8572] udevd[8572]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1234.418055][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 1234.451167][ T5877] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1234.471581][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1234.478951][ T5877] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1234.488137][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.496975][ T5142] block nbd2: Possible stuck request ffff888027e40000: control (read@0,1024B). Runtime 1050 seconds [ 1234.508091][ T5142] block nbd2: Possible stuck request ffff888027e40200: control (read@1024,1024B). Runtime 1050 seconds [ 1234.519167][ T5142] block nbd2: Possible stuck request ffff888027e40400: control (read@2048,1024B). Runtime 1050 seconds [ 1234.530817][ T5142] block nbd2: Possible stuck request ffff888027e40600: control (read@3072,1024B). Runtime 1050 seconds [ 1234.557724][ T5877] usb 3-1: config 0 descriptor?? [ 1235.318318][ T5877] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1235.741265][ T5877] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-71) [ 1235.769788][ T5877] corsair-psu 0003:1B1C:1C09.000A: probe with driver corsair-psu failed with error -71 [ 1235.810693][ T5877] usb 3-1: USB disconnect, device number 81 [ 1235.910861][T19816] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3459'. [ 1236.588200][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1236.751019][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.764122][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1236.773213][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.787118][ T10] usb 3-1: config 0 descriptor?? [ 1236.795491][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1237.227253][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1237.235128][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1237.242786][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1237.249847][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1237.257587][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1237.264710][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1237.271682][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1237.279469][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1237.285967][T19797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1237.295456][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1237.329864][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1237.370890][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1237.390880][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1237.632939][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1237.828025][T19841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1237.995388][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1238.006698][ T10] pwc: Registered as video103. [ 1238.028648][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input79 [ 1238.059864][ T10] usb 3-1: USB disconnect, device number 82 [ 1238.116988][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1238.288081][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1238.294495][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1238.305562][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1238.313021][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1238.322132][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.331994][ T9] usb 2-1: config 0 descriptor?? [ 1238.830168][ T9] corsair-psu 0003:1B1C:1C09.000B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 1239.016907][T19854] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1239.255491][ T9] corsair-psu 0003:1B1C:1C09.000B: unable to initialize device (-71) [ 1239.276448][ T9] corsair-psu 0003:1B1C:1C09.000B: probe with driver corsair-psu failed with error -71 [ 1239.282561][ T5856] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1239.301829][ T9] usb 2-1: USB disconnect, device number 80 [ 1239.453349][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 1239.463425][ T5856] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1239.484512][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1239.495776][ T5856] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1239.514374][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.532005][ T5856] usb 3-1: config 0 descriptor?? [ 1239.993966][ T5856] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1240.121202][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3473'. [ 1240.131315][T19868] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1240.418797][ T5856] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-71) [ 1240.433079][ T5856] corsair-psu 0003:1B1C:1C09.000C: probe with driver corsair-psu failed with error -71 [ 1240.446257][ T5856] usb 3-1: USB disconnect, device number 83 [ 1240.452319][T17433] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1240.618500][T17433] usb 6-1: Using ep0 maxpacket: 32 [ 1240.625039][T17433] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1240.640294][T17433] usb 6-1: config 0 has no interface number 0 [ 1240.646385][T17433] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1240.687836][T17433] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1240.727252][T17433] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1240.736819][T17433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.745106][T17433] usb 6-1: Product: syz [ 1240.752259][T17433] usb 6-1: Manufacturer: syz [ 1240.758604][T17433] usb 6-1: SerialNumber: syz [ 1240.768018][T17433] usb 6-1: config 0 descriptor?? [ 1240.864126][T19879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3475'. [ 1240.994855][T17433] radio-si470x 6-1:0.35: this is not a si470x device. [ 1241.277332][T17433] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1241.795282][T17433] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1243.055584][T19861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.154873][T19893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3479'. [ 1243.372221][ T5932] usb 6-1: USB disconnect, device number 11 [ 1243.404477][T19902] vivid-000: disconnect [ 1243.415550][ T5932] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1243.424064][T13866] block nbd1: Possible stuck request ffff888027e20c00: control (read@0,1024B). Runtime 150 seconds [ 1243.437905][T13866] block nbd1: Possible stuck request ffff888027e20e00: control (read@1024,1024B). Runtime 150 seconds [ 1243.449058][T13866] block nbd1: Possible stuck request ffff888027e21000: control (read@2048,1024B). Runtime 150 seconds [ 1243.463212][T13866] block nbd1: Possible stuck request ffff888027e21200: control (read@3072,1024B). Runtime 150 seconds [ 1243.729912][ T5877] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1243.810593][T19909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1243.967575][ T5877] usb 7-1: device descriptor read/64, error -71 [ 1243.997455][ T5932] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1244.157419][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 1244.168391][ T5932] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.179625][ T5932] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.198782][ T5932] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1244.222946][ T5877] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1244.392406][ T5877] usb 7-1: device descriptor read/64, error -71 [ 1244.446067][T19926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1244.470166][T10668] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 1244.470275][T10668] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 1244.478815][T10668] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1244.513609][ T5877] usb usb7-port1: attempt power cycle [ 1244.761758][ T5932] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1244.773748][ T5932] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1244.782955][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.823074][ T5932] usb 6-1: config 0 descriptor?? [ 1244.884235][ T5877] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1244.916667][ T5877] usb 7-1: device descriptor read/8, error -71 [ 1245.296897][ T5877] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1245.367041][ T5877] usb 7-1: device descriptor read/8, error -71 [ 1245.478336][ T5932] usbhid 6-1:0.0: can't add hid device: -71 [ 1245.486044][ T5932] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1245.504353][ T5877] usb usb7-port1: unable to enumerate USB device [ 1245.513633][T19901] vivid-000: reconnect [ 1245.522955][ T5932] usb 6-1: USB disconnect, device number 12 [ 1245.653819][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1245.827861][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1245.839222][ T9] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1245.865354][T19969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3493'. [ 1245.900298][ T9] usb 3-1: config 0 has no interface number 0 [ 1245.914110][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.041327][ T9] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 9216, setting to 1024 [ 1246.067889][ T9] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1246.097834][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1246.107291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.132833][ T9] usb 3-1: Product: syz [ 1246.144431][ T9] usb 3-1: Manufacturer: syz [ 1246.176246][ T9] usb 3-1: SerialNumber: syz [ 1246.202816][ T9] usb 3-1: config 0 descriptor?? [ 1246.476271][ T9] appletouch 3-1:0.85: Failed to read mode from device. [ 1246.517257][ T9] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1246.524927][T19978] netlink: 'syz.5.3494': attribute type 10 has an invalid length. [ 1246.568455][T19980] FAULT_INJECTION: forcing a failure. [ 1246.568455][T19980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.584258][T19980] CPU: 1 UID: 0 PID: 19980 Comm: syz.6.3495 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.584277][T19980] Tainted: [L]=SOFTLOCKUP [ 1246.584281][T19980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1246.584288][T19980] Call Trace: [ 1246.584292][T19980] [ 1246.584297][T19980] dump_stack_lvl+0x100/0x190 [ 1246.584320][T19980] should_fail_ex.cold+0x5/0xa [ 1246.584334][T19980] _copy_to_user+0x32/0xd0 [ 1246.584352][T19980] simple_read_from_buffer+0xcb/0x170 [ 1246.584372][T19980] proc_fail_nth_read+0x1af/0x230 [ 1246.584389][T19980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.584406][T19980] ? rw_verify_area+0xce/0x6d0 [ 1246.584421][T19980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.584436][T19980] vfs_read+0x1e4/0xb30 [ 1246.584455][T19980] ? __pfx_vfs_read+0x10/0x10 [ 1246.584471][T19980] ? __fget_files+0x215/0x3d0 [ 1246.584486][T19980] ? __fget_files+0x21f/0x3d0 [ 1246.584501][T19980] ksys_read+0x12a/0x250 [ 1246.584518][T19980] ? __pfx_ksys_read+0x10/0x10 [ 1246.584539][T19980] do_syscall_64+0x106/0xf80 [ 1246.584551][T19980] ? clear_bhb_loop+0x40/0x90 [ 1246.584565][T19980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.584577][T19980] RIP: 0033:0x7f492975cfce [ 1246.584586][T19980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1246.584597][T19980] RSP: 002b:00007f492a599fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1246.584608][T19980] RAX: ffffffffffffffda RBX: 00007f492a59a6c0 RCX: 00007f492975cfce [ 1246.584615][T19980] RDX: 000000000000000f RSI: 00007f492a59a0a0 RDI: 0000000000000004 [ 1246.584621][T19980] RBP: 00007f492a59a090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.584628][T19980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.584634][T19980] R13: 00007f4929a16038 R14: 00007f4929a15fa0 R15: 00007ffc6a8ff828 [ 1246.584649][T19980] [ 1246.900613][T19981] macsec1: entered allmulticast mode [ 1246.938557][ T9] usb 3-1: USB disconnect, device number 84 [ 1246.978551][T19981] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1247.017749][T19984] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1247.065806][T19984] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1247.185194][T19994] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1247.207403][T19996] pimreg: entered allmulticast mode [ 1247.498585][ T30] INFO: task syz.0.2905:17694 blocked for more than 143 seconds. [ 1247.534906][ T30] Tainted: G L syzkaller #0 [ 1247.561672][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.582715][ T30] task:syz.0.2905 state:D stack:25616 pid:17694 tgid:17692 ppid:5802 task_flags:0x400140 flags:0x00080002 [ 1247.610094][ T30] Call Trace: [ 1247.698953][ T30] [ 1247.701958][ T30] __schedule+0xfee/0x6120 [ 1247.707337][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1247.737848][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.749184][ T30] ? find_held_lock+0x2b/0x80 [ 1247.755850][ T29] audit: type=1400 audit(1772820723.632:965): avc: denied { write } for pid=20020 comm="syz.1.3503" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1247.756524][ T30] ? schedule+0x2bf/0x390 [ 1247.800793][ T29] audit: type=1400 audit(1772820723.632:966): avc: denied { ioctl } for pid=20020 comm="syz.1.3503" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1247.815318][ T30] schedule+0xdd/0x390 [ 1247.831486][ T30] io_schedule+0x8a/0xf0 [ 1247.839088][ T30] folio_wait_bit_common+0x414/0xa70 [ 1247.860935][ T30] ? folio_wait_bit_common+0x2a0/0xa70 [ 1247.884551][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1247.897752][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1247.909198][ T30] ? __pfx___might_resched+0x10/0x10 [ 1247.920473][ T30] migrate_pages_batch+0x1b85/0x4530 [ 1247.931582][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1247.938293][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1247.944576][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1247.950326][ T30] ? css_rstat_updated+0x1ce/0x5a0 [ 1247.955731][ T30] ? __pfx_css_rstat_updated+0x10/0x10 [ 1247.961307][ T30] ? sched_clock+0x38/0x60 [ 1247.966176][ T30] ? lock_acquire+0x1cf/0x380 [ 1247.970928][ T30] migrate_pages_sync+0x4db/0x880 [ 1247.976277][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1247.981718][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1247.987373][ T30] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1247.992998][ T30] migrate_pages+0x1aae/0x28a0 [ 1247.998103][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 1248.003544][ T30] ? __pfx_compaction_free+0x10/0x10 [ 1248.009886][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 1248.015080][ T30] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1248.031672][ T30] ? __nr_to_section+0xaa/0x100 [ 1248.036664][ T30] ? pfn_to_online_page+0x178/0x4c0 [ 1248.042251][ T30] compact_zone+0x2464/0x44c0 [ 1248.047007][ T30] ? debug_object_free+0x295/0x550 [ 1248.053604][ T30] ? __pfx_compact_zone+0x10/0x10 [ 1248.058699][ T30] ? __flush_work+0xa38/0xcb0 [ 1248.064375][ T30] ? __flush_work+0xa38/0xcb0 [ 1248.069120][ T30] compact_node+0x17f/0x2c0 [ 1248.073949][ T30] ? __pfx_compact_node+0x10/0x10 [ 1248.079087][ T30] ? __lru_add_drain_all+0x43c/0x650 [ 1248.084790][ T30] ? __lru_add_drain_all+0x441/0x650 [ 1248.090303][ T30] sysctl_compaction_handler+0x141/0x210 [ 1248.097830][ T30] proc_sys_call_handler+0x47f/0x5a0 [ 1248.103379][ T30] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1248.109257][ T30] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1248.115113][ T30] iter_file_splice_write+0x830/0x10a0 [ 1248.120648][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1248.126931][ T30] ? __pfx_copy_splice_read+0x10/0x10 [ 1248.132378][ T30] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1248.142735][ T30] direct_splice_actor+0x192/0x6c0 [ 1248.148899][ T30] splice_direct_to_actor+0x345/0xa30 [ 1248.154293][ T30] ? __pfx_direct_splice_actor+0x10/0x10 [ 1248.160030][ T30] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1248.167057][ T30] do_splice_direct+0x174/0x240 [ 1248.171959][ T30] ? __pfx_do_splice_direct+0x10/0x10 [ 1248.177705][ T30] ? avc_policy_seqno+0x9/0x20 [ 1248.182479][ T30] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1248.189274][ T30] ? rw_verify_area+0xce/0x6d0 [ 1248.194170][ T30] do_sendfile+0xadc/0xe20 [ 1248.198758][ T30] ? __pfx_do_sendfile+0x10/0x10 [ 1248.203811][ T30] __x64_sys_sendfile64+0x154/0x220 [ 1248.209374][ T30] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1248.215217][ T30] do_syscall_64+0x106/0xf80 [ 1248.219998][ T30] ? clear_bhb_loop+0x40/0x90 [ 1248.224783][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.231035][ T30] RIP: 0033:0x7f6861f9c799 [ 1248.235556][ T30] RSP: 002b:00007f6862e74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1248.244193][ T30] RAX: ffffffffffffffda RBX: 00007f6862216090 RCX: 00007f6861f9c799 [ 1248.254757][ T30] RDX: 00002000000000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 1248.264392][ T30] RBP: 00007f6862032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1248.274452][ T30] R10: 000000000010000a R11: 0000000000000246 R12: 0000000000000000 [ 1248.282531][ T30] R13: 00007f6862216128 R14: 00007f6862216090 R15: 00007ffd45ae5408 [ 1248.290868][ T30] [ 1248.301036][ T30] [ 1248.301036][ T30] Showing all locks held in the system: [ 1248.308977][ T30] 3 locks held by kworker/0:1/10: [ 1248.314060][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1248.368956][ T30] #1: ffffffff9b1d5d48 (&____s->seqcount#2){----}-{0:0}, at: __schedule+0x3ac1/0x6120 [ 1248.378958][ T30] #2: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 1248.390069][ T30] 1 lock held by khungtaskd/30: [ 1248.395184][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1248.405365][ T30] 2 locks held by getty/5565: [ 1248.410112][ T30] #0: ffff8880391b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1248.420228][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1248.457442][ T30] 1 lock held by dhcpcd/5645: [ 1248.462131][ T30] #0: ffff88807d9235c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1248.472922][ T30] 1 lock held by udevd/5793: [ 1248.477587][ T30] #0: ffff888027c35358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1248.487033][ T30] 1 lock held by udevd/5819: [ 1248.492779][ T30] #0: ffff888027cd9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1248.503263][ T30] 1 lock held by udevd/5980: [ 1248.507862][ T30] #0: ffff888027cdd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1248.517298][ T30] 1 lock held by syz.0.2905/17694: [ 1248.522902][ T30] #0: ffff888032b38420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1248.533021][ T30] 2 locks held by syz.1.3503/20028: [ 1248.538294][ T30] #0: ffffffff8e6b0a08 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0 [ 1248.547879][ T30] #1: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1248.558100][ T30] 1 lock held by sed/20046: [ 1248.577212][ T30] [ 1248.579572][ T30] ============================================= [ 1248.579572][ T30] [ 1248.589871][ T30] NMI backtrace for cpu 1 [ 1248.589886][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.589910][ T30] Tainted: [L]=SOFTLOCKUP [ 1248.589917][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1248.589927][ T30] Call Trace: [ 1248.589934][ T30] [ 1248.589941][ T30] dump_stack_lvl+0x100/0x190 [ 1248.589972][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1248.589991][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1248.590020][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1248.590049][ T30] sys_info+0x141/0x190 [ 1248.590070][ T30] watchdog+0xd25/0x1050 [ 1248.590101][ T30] ? __pfx_watchdog+0x10/0x10 [ 1248.590126][ T30] ? __kthread_parkme+0x18c/0x230 [ 1248.590154][ T30] ? kthread+0x13a/0x450 [ 1248.590169][ T30] ? __pfx_watchdog+0x10/0x10 [ 1248.590196][ T30] kthread+0x370/0x450 [ 1248.590212][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.590231][ T30] ret_from_fork+0x754/0xd80 [ 1248.590250][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.590269][ T30] ? __switch_to+0x7b4/0x1120 [ 1248.590291][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.590309][ T30] ret_from_fork_asm+0x1a/0x30 [ 1248.590342][ T30] [ 1248.590350][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1248.717907][ C0] NMI backtrace for cpu 0 [ 1248.717923][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.717942][ C0] Tainted: [L]=SOFTLOCKUP [ 1248.717947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1248.717955][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1248.717973][ C0] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 1c 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1248.717986][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1248.717998][ C0] RAX: 00000000060d02c1 RBX: ffffffff8e4975c0 RCX: ffffffff8b8f7c75 [ 1248.718008][ C0] RDX: 0000000000000000 RSI: ffffffff8de7383e RDI: ffffffff8c1af9a0 [ 1248.718017][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1248.718025][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1248.718034][ C0] R13: 0000000000000000 R14: ffffffff90d98b10 R15: 0000000000000000 [ 1248.718043][ C0] FS: 0000000000000000(0000) GS:ffff888124346000(0000) knlGS:0000000000000000 [ 1248.718056][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1248.718066][ C0] CR2: 00007efd259fe7e8 CR3: 0000000032cd7000 CR4: 00000000003526f0 [ 1248.718074][ C0] Call Trace: [ 1248.718079][ C0] [ 1248.718084][ C0] default_idle+0x9/0x10 [ 1248.718100][ C0] default_idle_call+0x6c/0xb0 [ 1248.718115][ C0] do_idle+0x35b/0x4b0 [ 1248.718132][ C0] ? __pfx_do_idle+0x10/0x10 [ 1248.718150][ C0] cpu_startup_entry+0x4f/0x60 [ 1248.718167][ C0] rest_init+0x251/0x260 [ 1248.718183][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1248.718203][ C0] start_kernel+0x47f/0x480 [ 1248.718222][ C0] x86_64_start_reservations+0x24/0x30 [ 1248.718240][ C0] x86_64_start_kernel+0x12b/0x130 [ 1248.718258][ C0] common_startup_64+0x13e/0x148 [ 1248.718279][ C0] [ 1248.937415][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1248.944272][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.954921][ T30] Tainted: [L]=SOFTLOCKUP [ 1248.959220][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1248.969268][ T30] Call Trace: [ 1248.972524][ T30] [ 1248.975435][ T30] dump_stack_lvl+0x100/0x190 [ 1248.980104][ T30] vpanic+0x552/0x970 [ 1248.984085][ T30] ? __pfx_vpanic+0x10/0x10 [ 1248.988591][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1248.994753][ T30] panic+0xd1/0xe0 [ 1248.998469][ T30] ? __pfx_panic+0x10/0x10 [ 1249.002876][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1249.009020][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1249.015168][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1249.021312][ T30] ? watchdog.cold+0x198/0x1ca [ 1249.026068][ T30] ? watchdog+0xd35/0x1050 [ 1249.030473][ T30] watchdog.cold+0x1a9/0x1ca [ 1249.035054][ T30] ? __pfx_watchdog+0x10/0x10 [ 1249.039721][ T30] ? __kthread_parkme+0x18c/0x230 [ 1249.044742][ T30] ? kthread+0x13a/0x450 [ 1249.048970][ T30] ? __pfx_watchdog+0x10/0x10 [ 1249.053634][ T30] kthread+0x370/0x450 [ 1249.057687][ T30] ? __pfx_kthread+0x10/0x10 [ 1249.062260][ T30] ret_from_fork+0x754/0xd80 [ 1249.066837][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1249.071932][ T30] ? __switch_to+0x7b4/0x1120 [ 1249.076593][ T30] ? __pfx_kthread+0x10/0x10 [ 1249.081172][ T30] ret_from_fork_asm+0x1a/0x30 [ 1249.085930][ T30] [ 1249.089124][ T30] Kernel Offset: disabled [ 1249.093424][ T30] Rebooting in 86400 seconds..