last executing test programs: 16m8.755507746s ago: executing program 4 (id=2324): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)={0x16}, 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @mcast1, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040080}, 0x24000810) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c0014800800"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16m8.232786551s ago: executing program 4 (id=2325): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a011e00000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbb81000000000000000000182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0202000100000000fc0100"/78], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="0300006768696a8100000000000000737475767778797a3031323334c697"], 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x32344d59, 0x80000001}}) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x28042081}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x25}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565f", 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 16m6.850756077s ago: executing program 4 (id=2330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @dev, @private}, &(0x7f0000000900)=0xc) syz_open_dev$usbmon(&(0x7f0000000340), 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0xfff0, 0x1, 0x7, 0x3}, {0x8, 0x21, 0x3, 0xfffffff7}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 16m6.373962868s ago: executing program 4 (id=2331): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f00000000c0)='.\x00', 0x900, &(0x7f0000001dc0)={0x0, 0xf7, 0x40000}, 0x20) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r3}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x5, 0x1, 0x401, &(0x7f0000000140)=""/1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket(0x0, 0x4, 0x80) 16m5.747106636s ago: executing program 4 (id=2335): r0 = syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c1"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x9, 0x48, {0x48, 0x22, "db3c22abacac8efba2c0f29f35312994a2703763efe0412a4b4686e9c7a6ceb13959b355c3a322a06c63b2c9cda79e4a5435b8d17cbbc15fdc2e192f97d194e14e8bebbae6c4"}}, &(0x7f0000000100)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "ad774b42e83e36a3bee94bdbed326a3a691f700e7370e9b8988d461e81f4aaa67b5dad086f68a08ee0aa55db43fa1f35be53a0bb3b11b468777e7e3161c9e9fd7e9701d13d7570e62333c1b0de6dbfcdd80666411fa0a58d488cda5bc7ef8907298d86910f880cc0531f947f716be3a5e809244fc7425797763fa2e60090bc1dd3e4a45017d486894dc804875e41baf9269c69c502cf3f6134a0f52ff787b8e4c424743a930b6c50f375af331ea138aa3d0035b8e4c05f92a4d4a39f56820795538c179804fac3bc07e6"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000240)={0x40, 0xe, 0xfe, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xe0}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000400)={0xc0, 0xa1, 0x4, 0xb}, &(0x7f0000000440)={0x40, 0xa0, 0x4, 0xb6a7}, &(0x7f0000000480)={0xc0, 0xa2, 0x2f, "b7d42a135fc976bb2dc94224f245211dca4a055b2156491e92e5a8122bb26fe387b06c0d09d30561d9a8130b8a3154"}}) 16m4.494700956s ago: executing program 4 (id=2339): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4000) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 16m3.706055316s ago: executing program 32 (id=2339): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4000) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 3m47.190513687s ago: executing program 2 (id=4597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a5726390f1063451b979150a3c829a7580c77629f6687f184d9db9d6789cbddf790504291218d8250e3fe4699643e61cdf7093fc1cf0c71b8ee6165f37dd93dd75d", 0xae}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2, 0x0, 0x8dff}, 0x0) 3m46.941997043s ago: executing program 2 (id=4599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, 0x0, 0x8080) 3m46.810841167s ago: executing program 2 (id=4602): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000001) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="bf8170c130887ef9943a3d269b8f5f2c00"]) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000140)=0x5) 3m45.847394887s ago: executing program 2 (id=4606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="92ddcebb221e4c709c7c1624a6ddf3ee1150e499e428cc9ed99c13fbe564a884854dd71ce92b145b238f4d3235051044c9ee11c2edff0252653a4dd66c", 0x3d}], 0x1}}], 0x1, 0x4080) sendto$inet(r0, &(0x7f0000001c40)='m', 0x1, 0x4000805, 0x0, 0x0) 3m44.649747102s ago: executing program 2 (id=4610): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3m44.489018615s ago: executing program 2 (id=4612): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) pipe(&(0x7f0000000280)) (async) pipe(&(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000340)=0x400005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) r6 = socket(0xa, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=&(0x7f0000000200)=0x77bd4698}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="4e617700000000000000000000000000000000000000000000000000000000000300000000000000959f00000000000000000000000000000000000000000000000000000000000000000000000000000000090dfd5e6677c2000000000000"], 0x58) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="4e617700000000000000000000000000000000000000000000000000000000000300000000000000959f00000000000000000000000000000000000000000000000000000000000000000000000000000000090dfd5e6677c2000000000000"], 0x58) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r8, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) (async) sendmmsg(r8, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) 3m29.167836647s ago: executing program 33 (id=4612): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) pipe(&(0x7f0000000280)) (async) pipe(&(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000340)=0x400005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) r6 = socket(0xa, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=&(0x7f0000000200)=0x77bd4698}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="4e617700000000000000000000000000000000000000000000000000000000000300000000000000959f00000000000000000000000000000000000000000000000000000000000000000000000000000000090dfd5e6677c2000000000000"], 0x58) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="4e617700000000000000000000000000000000000000000000000000000000000300000000000000959f00000000000000000000000000000000000000000000000000000000000000000000000000000000090dfd5e6677c2000000000000"], 0x58) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r8, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) (async) sendmmsg(r8, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20000004) socket$unix(0x1, 0x5, 0x0) (async) socket$unix(0x1, 0x5, 0x0) 14.527807318s ago: executing program 3 (id=5168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) unshare(0x6020400) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x88) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cpu.idle\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x10000a006) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='zonefs\x00', 0x800001, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 13.240476067s ago: executing program 3 (id=5172): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d530496e) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req={0x4, 0x10000, 0x0, 0x400000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x8, 0x5, 0x0) syz_open_dev$dvb_demux(0x0, 0xffff, 0x400002) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') pread64(r3, 0x0, 0x0, 0x2) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) openat(r3, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028", 0x42}], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000027c0088dd76e2800c000180", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0xc020) 13.083997698s ago: executing program 5 (id=5173): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60910100001611fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001690780203000000000000000000000000b1784ab2dcc8dc52e9f0ea1e2f493d1a6bea2f80335360f0474fe6d43d20dbfe8a25c2a4e29136bd358358a68ecb755f95f48877363895701292d69ecd417ca351e328b59a67cdfd8671cc84013346974d0bda5733cbdcca00f376a09f2772df611afada55c6fd514df41bf48a148f72e45f86217203403d211cd42ba109f059b5b6323312ce76d3e322136d8437743afa19b73c14b85059d751ea5cc4aba62a82c3d23293b1bf49eeb2a687351d9e02c7c508eadc3baedf14a2f1faf4cde7e7715c97e47d21d0dd4dc2324060442b039ccd5ae165"], 0x0) 11.956756228s ago: executing program 3 (id=5174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="ba8c729185009309109d69802dff", 0x0, 0x1008, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 11.751791922s ago: executing program 5 (id=5175): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) read$fb(r7, 0x0, 0x0) 11.623291223s ago: executing program 3 (id=5177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r3 = syz_clone(0x808000, 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x800000000a) close_range(r5, 0xffffffffffffffff, 0x0) 9.311888s ago: executing program 3 (id=5178): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) timerfd_create(0x9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x1f8c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_usb_control_io(r5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3934, 0x0, 0x0, 0x0, 0x69}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0xee, &(0x7f0000000500)=""/238, 0x41100, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000600)={0x9, 0xffff8001}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x7, 0x6, 0xe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x5, 0x5, 0x0, 0x7}, {0x4, 0x5, 0x2, 0x3}, {0x0, 0x4, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002440)={r6, 0x0, 0x20, 0x1000, &(0x7f0000000780)="f506713faa51ef9d592eced3f08ae66ef15f30a01a0c4451b5080c3679a6882e", &(0x7f0000001300)=""/4096, 0xc1f2, 0x0, 0x9a, 0x46, &(0x7f0000002300)="34913f2fac53db2a701ae9fcebbe31ea9ea8b40e8d551f4ccc854d279d8668df5adc65e25ef4d405312cbde069de8c1f749319b07576c37fc681537f74d0ba3f5ef06137b5e959a78db8bddf03db0adf92d2890ed3b0ac064a9a1049690e3abf88347a18a64eb7bd1dc86b25fe3cbaf643392f5082ccb728bad983318b5a2fa94c0bca9e703dddc12a18c247cda47d713c8d5dc88dd42e4bf437", &(0x7f00000023c0)="f6b66e4c321f104cd6f937644d09ae574dd1aa7f08bfc94fc800979366f109c2aac753e0945e5c2fb1a0d33dd752df7df6bb2b503868a7782057b776bcf5599508a158bf05d7", 0x2, 0x0, 0x40}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 9.259433392s ago: executing program 5 (id=5179): userfaultfd(0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104) sendfile(r0, r0, 0x0, 0x4) connect$bt_sco(r0, &(0x7f0000000180), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) writev(r2, &(0x7f0000001500)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f00000002c0)='}', 0x1}], 0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, 0xffffffffffffffff, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, 0x0, 0x0) 9.184568155s ago: executing program 1 (id=5180): r0 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x2, 0x3e5}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000040)={r0, 0x6, 0x0, 0xa80, 0x1}, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x41, 0x1, 0x70bd29, 0x80000004, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r3, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@random={'osx.', '\x00'}, &(0x7f0000000300)='{(\'-^\x00', 0x6, 0x1) 8.851750183s ago: executing program 1 (id=5181): getpid() socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x41}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x24e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x20, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xa, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) 8.79034387s ago: executing program 0 (id=5182): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2}) 8.231403989s ago: executing program 0 (id=5184): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x15, 0x301, 0x270bd24, 0x25dfdbfa, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = socket$inet6(0xa, 0x80002, 0x4) write$sysctl(r0, &(0x7f0000000180)='7\x00', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fcntl$getown(r1, 0x9) prlimit64(r3, 0x4, &(0x7f0000000100)={0x7, 0x4}, &(0x7f0000000140)) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0xfe4d}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0xa}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$key(0xf, 0x3, 0x2) 8.160193653s ago: executing program 6 (id=5185): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000040)={0xb}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x2a, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x300000e) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x97}, 0x1c) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 8.159809227s ago: executing program 5 (id=5186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x7}) ioctl(0xffffffffffffffff, 0x8b32, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x56) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x29) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 6.918287142s ago: executing program 5 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x14, 0x0, &(0x7f0000000500)="d0c0a833fcfb0085a881548182bb1ca4b0ffa260", 0x0, 0xa1b, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x4c) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "20d18300", "fcffffff", ["000000008000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xdbbca5e2e2fba6f}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) dup2(r4, r4) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x1, 'veth0_to_batadv\x00', {}, 0x1}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$rxrpc(0x21, 0x2, 0xa) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) 6.737106877s ago: executing program 6 (id=5188): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) r1 = socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(r0, 0x5) bind$unix(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000300"/28], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x10}, 0x200440d1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x4) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000d80000000400000001", @ANYRES8=r2, @ANYRESHEX=r1, @ANYRES64, @ANYRES32=r3], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) 6.271712941s ago: executing program 0 (id=5189): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0010"]) 5.702861183s ago: executing program 1 (id=5190): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x80) r1 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x20) ioctl$BLKPG(r2, 0xc0184d16, &(0x7f0000000580)={0x2, 0x300, 0x0, 0x0}) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000180)={&(0x7f0000000980)={{@host=0x10}, {@my=0x0, 0x1}, 0x400, "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"}, 0x41f, 0x2001}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f0000004540)={0x2020}, 0x2020) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.149036324s ago: executing program 0 (id=5191): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, 0x0, 0x70) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) fcntl$getflags(r0, 0x408) r1 = io_uring_setup(0x7, &(0x7f0000000100)={0x0, 0xc8a1, 0x10, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0xbd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r4, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000280)=ANY=[], 0x20000) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) 2.759171114s ago: executing program 6 (id=5192): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x50a7, 0xc000, 0x0, 0x282}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) r3 = open(&(0x7f0000000280)='.\x00', 0x2082, 0x40) fcntl$notify(r3, 0x402, 0x80000024) fcntl$setsig(r3, 0xa, 0x11) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x8926, &(0x7f00000000c0)={0xfdfd, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000100)=0xffffffff, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x28a5673d, 0x800c1) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000040)=0x200) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.58882555s ago: executing program 1 (id=5193): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x1f, "1c1f3de348ce1f393d1130c1a0f2023aad7f739a423386059e7395041e478d"}, &(0x7f0000000280)=0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sync_file_range(r4, 0x800, 0x7fffffffffffffff, 0x4) r7 = open(&(0x7f0000000080)='./file1\x00', 0x46c01, 0x31) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x12000, &(0x7f00000001c0)={0x77359400}) 2.532025993s ago: executing program 0 (id=5194): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x80000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x1, 0x0, 0x2, 0x9, 0x10, 0x80000001, 0x1000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2503000000060001004e"], 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x24040854) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x480001, 0x0) sendfile(r3, r6, 0x0, 0x100000003) 2.45170384s ago: executing program 5 (id=5195): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf4"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f7c0000007cb28f6e75a78af36da709fc40246cad3498d9a3104d7d21d08b5f358ebdffce91ebf81367ab2b98012d20bcbec089b210246a7360f5983552c7bd1cf558e756ccb0cb67f54a0493ec8ca3d65a492a9691b688a6137cfeb4adcbe66d276aa1e74c3441884ea950d2fedf76581270e0552305bcc6f5470b3f99481c93243c13c55043f1fb8c955bc3b118ced7725ff0bc5a7c29f223c8bb8031e77bf95c04e103a8d7e1bfa0ee67bc2c13f31201505db1bae44ff9028ab7432ccc97c966db8b0743cfdc8ce4f90ee4c64cd793f4b19598de3627ccbd0fb0742efe23c2168a53e40000000000"], &(0x7f0000000180)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "79f38614e21cee1e765a2455c79445a7e37ec869180bff76c26a39122ed540427d3fd79c02cb08ac481aec40426d7767dbbabf4ae5a6ef4677bb02400fe88f2ca7705a6a02c23b302cf28b062681b6c40c7c6da48ea0c462a363a1d7aefc980b6c178fb0f1e7e75571e925fb68ba7738be3e77b7e57b48481c54a4fb991eddc59b05090764e6639b437ddd993e08cdf2260bacec6b0691cb8bfa4018637c72a50f55d807c63710e19fe6ae135591a97f8463936bfa53843491de0682458632ebceaba4594d3bbd4448c9b750a598997bff9ed21ba5131fcb75af436eab7c1ef59e1b"}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0xe, 0xa0, "02e802f91a6993049412149963bbbbbf2e791f157829573461b6de51a8321ef5c798b880647c98f9fa9e47a5f5f712a83bf75094ad91842c9f919cc89c388ee62d1b92c14ee5d492cd07492459c56ecae29a5d8ddb4eab83a027e1f7aa30cf87c120626ee93e165230388309a88d67239aef460010bc130189615c51e38a685350875157a2b377eb0e979b31cd3020af217f4e6275a3dec558c30f33086c5fee"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000400)={0x20, 0x0, 0xd7, {0xd5, "3f128c59db34f9607e62d128e42694814f2d7b210c2aabde748bbf7c9481c9cc79cc75e61c811ebe36624735beaf1e5e08dbbfe7f12f596e18ba44f81ffee156e71123456d9c3298c7d571f067da58b0b6cf422b75b695aa0d0d02e2ef327b66e1fbfb69a446029532b4cfd25aec6dcce398ec7f0a115ea9fc1ed3d4a99088eba692ffadca680f85869e75a2ee20db3f458c65e72664192b3f1b905176681ffc0e98bd7a0d83275ce176571b22383bc6dc537ab2b0e10b7178e832f0f3121ccf00b5a67750052d35c98b5cd9d13dd20e0718b8af19"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x5}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40542, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40101, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0205647, &(0x7f0000000940)={0xf010000, @pix={0xfffffb71, 0x0, 0x38414762, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000040)) readv(r1, &(0x7f00000021c0)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000001180)=""/4081, 0xff1}], 0x2) 1.222636162s ago: executing program 1 (id=5196): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000400), &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x140b, 0x4, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x240400c4) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x280000, @bt={0xa00, 0x642, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3, 0x6, 0x3, 0x5, 0x2800, 0x2800, 0x2, 0x100, 0xd, 0x27, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2552181b080d29428f0e1ac6e7049b3468959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ffc4ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a5869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be1200fdc4e9134f77020000f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d594c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d0100d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfd7b2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154504b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94223f6c15d07f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef928ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f87a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17cb51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea62839b4a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30842b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bbb935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e975be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb909729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0bff60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bccf8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) listen(r0, 0x7ff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) close(0x3) 1.221134964s ago: executing program 6 (id=5197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x7}) ioctl(0xffffffffffffffff, 0x8b32, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x56) sendmmsg$unix(r2, &(0x7f0000000380), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x29) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 540.947967ms ago: executing program 3 (id=5198): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f3330102030109021200010000"], 0x0) sync() syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0xffffffffffffffff, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb02251000000000000000046b3ee57a29337e0080000a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0x80b5) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r4, 0x0, 0x0) 347.89691ms ago: executing program 1 (id=5199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x48000) 302.402893ms ago: executing program 6 (id=5200): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x700, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x53c9}}], 0x30}], 0x1, 0x0) 239.486681ms ago: executing program 0 (id=5201): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000440)={0x3, 0x32, &(0x7f00000002c0)="01cf657e0e70a659099d9a0c92f95abea5765f542158095e04246700a46068f74a5220cac072704c0996126b83dab5ab17f8"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x16c, 0x1, 0xfffffff2, 0x337}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x44, 0x4000, @fd=r1, 0x7, 0x0, 0x0, 0x4, 0x1, {0x1, 0x0, 0x6, '\x00', &(0x7f00000007c0)={0x1c0, 0x4, 0x1a, &(0x7f00000008c0)="8bbbb3506985524cf42f9e9188eecce11512d98f029579"}, 0xa0f}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_ublk_setup_io_uring(0x53fc, &(0x7f00000000c0)={0x0, 0x8f73, 0x400, 0x2, 0x2cf, 0x0, r2}, 0x0, 0x0, 0x0) syz_ublk_add_dev(r2, 0x0, r4, r5, &(0x7f0000000840)={0x2e, 0x3, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@any_dev={0x1, 0xa49, 0x0, 0x0, 0x1000, 0xcf, 0x0, 0x0, 0x8}}}, 0x0) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="c2", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x3c76c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r10, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendto$inet(r10, &(0x7f0000000300)="87dc102b4f79fa7ebfbd", 0x1, 0x8821, 0x0, 0x11) r11 = memfd_create(&(0x7f00000003c0)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r11, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r12, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5202): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f16"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): item tag 0x0 [ 1560.076849][T16504] hid-generic 0000:0000:0004.0044: unknown main item tag 0x0 [ 1560.084987][T16504] hid-generic 0000:0000:0004.0044: unknown main item tag 0x0 [ 1560.093524][T16504] hid-generic 0000:0000:0004.0044: unknown main item tag 0x0 [ 1560.102585][T16504] hid-generic 0000:0000:0004.0044: unknown main item tag 0x0 [ 1560.110611][T16504] hid-generic 0000:0000:0004.0044: unknown main item tag 0x0 [ 1560.137794][T16504] hid-generic 0000:0000:0004.0044: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1561.882731][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1562.085753][T23919] fido_id[23919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1562.672951][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1562.683434][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1565.124935][T23946] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 1565.281068][T23946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1565.339197][T23955] fuse: fd is not a fuse device [ 1565.388649][T23951] bond3: (slave geneve2): making interface the new active one [ 1565.450184][T23951] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1565.724888][T23962] siw: device registration error -23 [ 1565.768973][T23966] FAULT_INJECTION: forcing a failure. [ 1565.768973][T23966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.792978][T23966] CPU: 1 UID: 0 PID: 23966 Comm: syz.1.4626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1565.793009][T23966] Tainted: [L]=SOFTLOCKUP [ 1565.793015][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1565.793025][T23966] Call Trace: [ 1565.793031][T23966] [ 1565.793038][T23966] dump_stack_lvl+0x100/0x190 [ 1565.793065][T23966] should_fail_ex.cold+0x5/0xa [ 1565.793087][T23966] _copy_to_user+0x32/0xd0 [ 1565.793110][T23966] simple_read_from_buffer+0xcb/0x170 [ 1565.793139][T23966] proc_fail_nth_read+0x1af/0x230 [ 1565.793163][T23966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1565.793188][T23966] ? rw_verify_area+0xce/0x6d0 [ 1565.793209][T23966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1565.793232][T23966] vfs_read+0x1e4/0xb40 [ 1565.793258][T23966] ? __pfx_vfs_read+0x10/0x10 [ 1565.793281][T23966] ? __fget_files+0x215/0x3d0 [ 1565.793311][T23966] ? __fget_files+0x21f/0x3d0 [ 1565.793343][T23966] ksys_read+0x12a/0x250 [ 1565.793366][T23966] ? __pfx_ksys_read+0x10/0x10 [ 1565.793395][T23966] do_syscall_64+0x115/0x870 [ 1565.793418][T23966] ? clear_bhb_loop+0x40/0x90 [ 1565.793439][T23966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.793459][T23966] RIP: 0033:0x7f1ede95e68e [ 1565.793474][T23966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1565.793489][T23966] RSP: 002b:00007f1edf94efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1565.793506][T23966] RAX: ffffffffffffffda RBX: 00007f1edf94f6c0 RCX: 00007f1ede95e68e [ 1565.793518][T23966] RDX: 000000000000000f RSI: 00007f1edf94f0a0 RDI: 0000000000000004 [ 1565.793528][T23966] RBP: 00007f1edf94f090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.793538][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.793547][T23966] R13: 00007f1edec26038 R14: 00007f1edec25fa0 R15: 00007ffe191c0688 [ 1565.793571][T23966] [ 1568.420745][T23986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.427922][T23986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.435583][T23986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.442706][T23986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.530828][T23986] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1568.555122][T23986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1568.679894][T16486] lo speed is unknown, defaulting to 1000 [ 1568.692288][T16486] syz2: Port: 1 Link ACTIVE [ 1568.881495][T23983] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1569.788145][T23995] fuse: Bad value for 'group_id' [ 1569.795408][T23995] fuse: Bad value for 'group_id' [ 1572.222054][T24003] netlink: 'syz.3.4637': attribute type 1 has an invalid length. [ 1572.628220][T24003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1574.340348][T24024] tipc: Enabling of bearer rejected, failed to enable media [ 1575.078049][T24042] fuse: fd is not a fuse device [ 1575.107305][T24046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1576.821228][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1576.851668][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1576.888635][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1576.916488][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1576.918286][T24061] netlink: 'syz.5.4651': attribute type 1 has an invalid length. [ 1576.969537][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1577.810737][T24061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1577.957084][T24082] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 1578.228259][T24082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1578.277715][T24083] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1578.369999][T24085] vlan2: entered allmulticast mode [ 1578.391394][T24085] veth0_to_bond: entered allmulticast mode [ 1578.412899][T24085] veth0_to_bond: entered promiscuous mode [ 1578.432957][T24085] veth0_to_bond: left promiscuous mode [ 1578.459916][T24085] bond4: (slave vlan2): making interface the new active one [ 1578.480593][T24085] veth0_to_bond: entered promiscuous mode [ 1578.498779][T24085] vlan2: entered promiscuous mode [ 1578.510100][T24085] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 1579.162483][ T5622] Bluetooth: hci4: command tx timeout [ 1579.637716][T24059] lo speed is unknown, defaulting to 1000 [ 1579.778748][T24125] fuseblk: Unknown parameter 'fe' [ 1579.921941][T24130] fuse: fd is not a fuse device [ 1580.810466][T24135] fuse: fd is not a fuse device [ 1580.871127][T24135] Dropped outbound packet type=8100 [ 1581.242541][ T5622] Bluetooth: hci4: command tx timeout [ 1583.338246][ T5622] Bluetooth: hci4: command tx timeout [ 1583.552153][T24059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.670978][T24059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.703225][T24059] bridge_slave_0: entered allmulticast mode [ 1583.712839][T24059] bridge_slave_0: entered promiscuous mode [ 1583.729248][T24059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.741308][T24059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.749666][T24059] bridge_slave_1: entered allmulticast mode [ 1583.761127][T24059] bridge_slave_1: entered promiscuous mode [ 1583.900340][T24059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.966099][T24059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.170001][T24059] team0: Port device team_slave_0 added [ 1584.219862][T24059] team0: Port device team_slave_1 added [ 1584.551033][T24059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.572274][T24059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.642880][T24059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.723939][T24059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.752193][T24059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.807636][T24059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.020940][T24059] hsr_slave_0: entered promiscuous mode [ 1585.038893][T24059] hsr_slave_1: entered promiscuous mode [ 1585.067400][T24059] debugfs: 'hsr0' already exists in 'hsr' [ 1585.088970][T24059] Cannot create hsr debugfs directory [ 1585.210054][T24188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1585.333716][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 1585.432514][T20246] Bluetooth: hci4: command tx timeout [ 1585.614159][T16501] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1585.686513][T24059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1585.715366][T24059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1585.890262][T24059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1585.905359][T16501] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.927097][T24059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1586.119635][T24197] netlink: 'syz.3.4682': attribute type 4 has an invalid length. [ 1586.659215][T16501] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=52.91 [ 1586.669541][T16501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.765134][T24059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1586.783919][T16501] ttusb_dec_send_command: command bulk message failed: error -22 [ 1586.821397][T24059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1586.823040][T16501] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1586.870281][T24059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1586.911914][T24059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1587.403577][ T5622] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1587.425328][T20246] Bluetooth: hci2: command 0x1003 tx timeout [ 1589.128845][ T5811] usb 2-1: USB disconnect, device number 121 [ 1589.348003][T24059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.428257][T24059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.486508][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.493688][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.577465][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.584635][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.613897][T24229] FAULT_INJECTION: forcing a failure. [ 1589.613897][T24229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.672455][T24229] CPU: 1 UID: 0 PID: 24229 Comm: syz.1.4688 Tainted: G L syzkaller #0 PREEMPT(full) [ 1589.672483][T24229] Tainted: [L]=SOFTLOCKUP [ 1589.672490][T24229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1589.672499][T24229] Call Trace: [ 1589.672505][T24229] [ 1589.672512][T24229] dump_stack_lvl+0x100/0x190 [ 1589.672538][T24229] should_fail_ex.cold+0x5/0xa [ 1589.672560][T24229] _copy_from_user+0x2e/0xd0 [ 1589.672587][T24229] copy_mount_options+0x76/0x190 [ 1589.672612][T24229] __x64_sys_mount+0x1ab/0x310 [ 1589.672632][T24229] ? __pfx___x64_sys_mount+0x10/0x10 [ 1589.672659][T24229] do_syscall_64+0x115/0x870 [ 1589.672684][T24229] ? clear_bhb_loop+0x40/0x90 [ 1589.672705][T24229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.672722][T24229] RIP: 0033:0x7f1ede99de59 [ 1589.672737][T24229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.672753][T24229] RSP: 002b:00007f1edf94f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1589.672770][T24229] RAX: ffffffffffffffda RBX: 00007f1edec25fa0 RCX: 00007f1ede99de59 [ 1589.672782][T24229] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 1589.672792][T24229] RBP: 00007f1edf94f090 R08: 0000200000000440 R09: 0000000000000000 [ 1589.672802][T24229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.672813][T24229] R13: 00007f1edec26038 R14: 00007f1edec25fa0 R15: 00007ffe191c0688 [ 1589.672836][T24229] [ 1589.723123][T24231] No source specified [ 1590.780827][T24244] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 1590.787463][T24244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1590.830084][T24244] vhci_hcd vhci_hcd.0: Device attached [ 1590.922790][T16485] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1591.153029][T16484] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1591.182064][T16485] usb 4-1: Using ep0 maxpacket: 16 [ 1591.717470][ T5811] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1591.762442][T16485] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.775629][T16485] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.787017][T16485] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1591.797383][T16485] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1591.855609][T16485] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1591.895684][T16485] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1591.926154][T16485] usb 4-1: SerialNumber: syz [ 1592.082284][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 1592.083326][T16485] hub 4-1:1.0: bad descriptor, ignoring hub [ 1592.105957][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1592.117411][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 1592.147454][T16485] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1592.147724][ T5811] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1592.166403][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.189799][ T5811] usb 2-1: Product: syz [ 1592.197744][ T5811] usb 2-1: Manufacturer: syz [ 1592.200890][T16485] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1592.221105][ T5811] usb 2-1: SerialNumber: syz [ 1592.446291][T24246] usb 35-1: recv xbuf, 0 [ 1592.451790][ T5811] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1592.464437][T24059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1592.499186][ T6332] vhci_hcd vhci_hcd.1: stop threads [ 1592.530803][ T6332] vhci_hcd vhci_hcd.1: release socket [ 1592.562125][ T6332] vhci_hcd vhci_hcd.1: disconnect device [ 1592.590351][ T5811] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1592.625770][ T5811] usb 2-1: USB disconnect, device number 122 [ 1592.659451][T24190] udevd[24190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1593.297946][T24059] veth0_vlan: entered promiscuous mode [ 1593.345702][T24059] veth1_vlan: entered promiscuous mode [ 1593.468032][T24059] veth0_macvtap: entered promiscuous mode [ 1593.517504][T24059] veth1_macvtap: entered promiscuous mode [ 1593.683673][T16485] usb 4-1: USB disconnect, device number 38 [ 1593.685330][T24059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1594.016184][T24059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.075986][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.108280][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.178384][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.241019][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.489698][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.517599][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.639480][T13995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1594.662967][ T1119] vlan2: left promiscuous mode [ 1594.663383][T13995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.908593][T24302] fuse: Bad value for 'group_id' [ 1594.924745][T24302] fuse: Bad value for 'group_id' [ 1596.112981][T16504] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1596.288357][ T5811] Process accounting resumed [ 1597.146364][T24317] netlink: 'syz.1.4705': attribute type 1 has an invalid length. [ 1597.180034][T16504] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1597.193062][T24317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1597.224568][T16504] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 1597.244807][T16504] usb 7-1: config 189 has no interface number 0 [ 1597.274023][T16504] usb 7-1: config 189 interface 127 has no altsetting 0 [ 1597.327588][T16504] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 1597.342042][T16504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.373268][T16504] usb 7-1: Product: syz [ 1597.382045][T16504] usb 7-1: Manufacturer: syz [ 1597.397023][T16504] usb 7-1: SerialNumber: syz [ 1597.595985][T24322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1597.609148][ T30] audit: type=1400 audit(1783777652.101:1472): avc: denied { map } for pid=24321 comm="syz.1.4706" path="socket:[87734]" dev="sockfs" ino=87734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1597.646574][T16504] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1597.690238][T16504] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1597.691436][ T30] audit: type=1400 audit(1783777652.101:1473): avc: denied { read } for pid=24321 comm="syz.1.4706" path="socket:[87734]" dev="sockfs" ino=87734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1597.786748][T16504] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 1597.824703][T16504] safe_serial 7-1:189.127: safe_serial converter detected [ 1597.854310][T16504] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 1598.006728][T16504] usb 7-1: USB disconnect, device number 2 [ 1600.684327][T24338] fuse: Bad value for 'group_id' [ 1600.689397][T24338] fuse: Bad value for 'group_id' [ 1600.972585][T16484] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1601.142349][T16484] usb 2-1: Using ep0 maxpacket: 32 [ 1601.187078][T16484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.320910][T16484] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1601.520087][T16484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.576678][T16484] usb 2-1: config 0 descriptor?? [ 1601.616070][T16484] hub 2-1:0.0: bad descriptor, ignoring hub [ 1601.630397][T24346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24346 comm=syz.0.4712 [ 1601.669573][T16484] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1601.730994][T16484] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1602.627422][T24362] input: syz1 as /devices/virtual/input/input69 [ 1602.846778][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.853203][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1605.961204][T16504] usb 2-1: USB disconnect, device number 123 [ 1610.680681][ T30] audit: type=1400 audit(1783777665.121:1474): avc: denied { write } for pid=24433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1610.771145][ T30] audit: type=1400 audit(1783777665.231:1475): avc: denied { write } for pid=24460 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1610.890604][T24463] netlink: 'syz.5.4738': attribute type 1 has an invalid length. [ 1611.290645][T24463] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1611.434065][T16504] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1611.453984][T24485] fuse: Bad value for 'group_id' [ 1611.475901][T24485] fuse: Bad value for 'group_id' [ 1611.582487][T16485] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1612.505212][T16504] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1612.688710][T16504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.717250][T16504] usb 4-1: Product: syz [ 1612.732468][ T30] audit: type=1400 audit(1783777667.221:1476): avc: denied { write } for pid=24467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.744508][T16504] usb 4-1: Manufacturer: syz [ 1612.774113][T16504] usb 4-1: SerialNumber: syz [ 1612.839407][T16485] usb 2-1: Using ep0 maxpacket: 32 [ 1612.846390][T16485] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.862067][T16485] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1612.880407][T16485] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1613.062173][T16485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.117944][T16485] usb 2-1: Product: syz [ 1613.139049][ T30] audit: type=1400 audit(1783777667.621:1477): avc: denied { write } for pid=24507 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.181488][T16485] usb 2-1: Manufacturer: syz [ 1613.186695][T16485] usb 2-1: SerialNumber: syz [ 1613.211318][T16485] usb 2-1: config 0 descriptor?? [ 1613.221181][T16504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1613.234501][T16504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1613.838311][T24522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.899316][T24522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.993568][T16485] usb 2-1: USB disconnect, device number 124 [ 1614.084208][T16504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 1614.102491][T16504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1614.145615][T16504] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1614.179831][T16504] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1614.275896][T24532] netlink: 'syz.6.4755': attribute type 1 has an invalid length. [ 1616.451279][T16504] usb 4-1: USB disconnect, device number 39 [ 1619.202510][T24577] fuse: Unknown parameter '*M¨²Ò¢' [ 1619.230682][T24569] lo speed is unknown, defaulting to 1000 [ 1621.462872][T24601] CIFS mount error: No usable UNC path provided in device string! [ 1621.462872][T24601] [ 1621.502443][T24601] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1621.517344][T24602] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24602 comm=syz.0.4772 [ 1621.568188][T24602] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4772'. [ 1621.736240][T24294] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1621.816008][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1621.916753][T24610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24610 comm=syz.0.4774 [ 1621.937174][T24613] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1621.992450][T24294] usb 7-1: Using ep0 maxpacket: 32 [ 1622.013622][T24294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.031466][T24294] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.058573][T24294] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1622.268469][T24294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.287488][T24294] usb 7-1: config 0 descriptor?? [ 1622.308829][T24294] hub 7-1:0.0: USB hub found [ 1622.519041][T24294] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1622.549156][T24598] input: syz1 as /devices/virtual/input/input70 [ 1622.774510][T24632] /dev/nullb0: Can't lookup blockdev [ 1622.986853][T24294] usbhid 7-1:0.0: can't add hid device: -71 [ 1624.563998][T24294] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1624.986872][T24294] usb 7-1: USB disconnect, device number 3 [ 1625.159151][T24643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4780'. [ 1625.638014][T24654] netlink: 'syz.6.4783': attribute type 4 has an invalid length. [ 1627.190227][T24657] fuse: Bad value for 'group_id' [ 1627.224181][T24657] fuse: Bad value for 'group_id' [ 1627.245001][T24664] lo speed is unknown, defaulting to 1000 [ 1629.092799][T24686] netlink: 'syz.3.4790': attribute type 4 has an invalid length. [ 1629.450347][T24690] 9p: Bad value for 'wfdno' [ 1631.609100][T24703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1631.881893][T16485] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1632.789445][T16485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.894155][T16485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.934237][T16485] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1632.955563][T16485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.104093][T16485] usb 2-1: config 0 descriptor?? [ 1634.329271][T16485] arvo 0003:1E7D:30D4.0045: collection stack underflow [ 1634.491770][T16485] arvo 0003:1E7D:30D4.0045: item 0 4 0 12 parsing failed [ 1634.780101][T16485] arvo 0003:1E7D:30D4.0045: parse failed [ 1634.994117][T16485] arvo 0003:1E7D:30D4.0045: probe with driver arvo failed with error -22 [ 1635.927440][T24753] fuse: fd is not a fuse device [ 1637.078371][T24294] usb 2-1: USB disconnect, device number 125 [ 1637.622133][T24294] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1637.787113][T24774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1637.792151][T24294] usb 2-1: device descriptor read/64, error -71 [ 1638.053316][T24294] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1638.261044][T24294] usb 2-1: device descriptor read/64, error -71 [ 1638.371337][T24779] pim6reg: entered allmulticast mode [ 1638.394253][T24294] usb usb2-port1: attempt power cycle [ 1638.402283][T24779] pim6reg: left allmulticast mode [ 1638.772400][T24294] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1638.815850][T24294] usb 2-1: device descriptor read/8, error -71 [ 1638.906693][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1638.915591][T24796] bond1: left allmulticast mode [ 1638.920464][T24796] bond1: left promiscuous mode [ 1638.931101][T24796] bridge0: port 3(bond1) entered disabled state [ 1639.089274][T24796] bridge_slave_1: left allmulticast mode [ 1639.095825][T24796] bridge_slave_1: left promiscuous mode [ 1639.101758][T24796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.374303][T24294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1639.677775][T24294] usb 2-1: device descriptor read/8, error -71 [ 1639.908047][T24294] usb usb2-port1: unable to enumerate USB device [ 1639.993669][T24796] bridge_slave_0: left allmulticast mode [ 1639.999567][T24796] bridge_slave_0: left promiscuous mode [ 1640.005567][T24796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.489960][T24807] overlayfs: conflicting lowerdir path [ 1641.080806][T24811] netlink: 'syz.0.4823': attribute type 1 has an invalid length. [ 1641.166247][T24811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1642.470073][T16485] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1642.563052][T24830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1642.605133][T16485] usb 2-1: device descriptor read/64, error -71 [ 1642.803211][T24840] netlink: 'syz.3.4831': attribute type 16 has an invalid length. [ 1642.846317][T24840] netlink: 'syz.3.4831': attribute type 17 has an invalid length. [ 1642.872363][T16485] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1642.996455][T24847] netlink: 'syz.5.4832': attribute type 32 has an invalid length. [ 1643.013345][T16485] usb 2-1: device descriptor read/64, error -71 [ 1643.031184][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4832'. [ 1643.085903][T24847] bond9: Setting coupled_control to off (0) [ 1643.132728][T16485] usb usb2-port1: attempt power cycle [ 1644.221687][T16486] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1644.312103][T16485] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1644.346283][T16485] usb 2-1: device descriptor read/8, error -71 [ 1644.413520][T16486] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.424158][T16486] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1644.437311][T16486] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1644.447066][T16486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1644.458648][T16486] usb 4-1: SerialNumber: syz [ 1644.592082][T16485] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1644.624333][T16485] usb 2-1: device descriptor read/8, error -71 [ 1644.688008][T16486] usb 4-1: skipping empty audio interface (v1) [ 1644.742841][T16485] usb usb2-port1: unable to enumerate USB device [ 1644.773269][T16486] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1644.797154][T16486] usb 4-1: USB disconnect, device number 40 [ 1644.839100][T24578] udevd[24578]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.870602][T24862] overlayfs: failed to resolve './file1': -2 [ 1645.749775][T24873] ubi: mtd0 is already attached to ubi16 [ 1645.803804][ T30] audit: type=1400 audit(1783777700.301:1478): avc: denied { associate } for pid=24872 comm="syz.1.4840" name="blkio.throttle.io_service_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1645.866253][ T30] audit: type=1400 audit(1783777700.361:1479): avc: denied { create } for pid=24865 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1645.917027][ T30] audit: type=1400 audit(1783777700.361:1480): avc: denied { write } for pid=24865 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1645.968224][ T30] audit: type=1400 audit(1783777700.361:1481): avc: denied { read } for pid=24865 comm="syz.3.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1646.105365][T24878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1646.182078][T16488] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1646.263775][T24880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1646.338087][T16488] usb 4-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 1646.381842][T16488] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1646.415425][T16488] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1646.468767][T16488] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1646.506617][T16488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.530145][T16488] usb 4-1: Product: syz [ 1647.568964][T16488] usb 4-1: Manufacturer: syz [ 1647.575058][T16488] usb 4-1: SerialNumber: syz [ 1647.585281][T16488] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1647.592269][T16488] cdc_ncm 4-1:1.0: bind() failure [ 1647.631431][T24892] libceph: resolve '0' (ret=-3): failed [ 1647.653642][T24892] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1647.876782][T24867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.885820][T24867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.901543][ T5811] usb 4-1: USB disconnect, device number 41 [ 1647.908861][T24896] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1648.253544][T16504] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1648.452129][T16504] usb 7-1: Using ep0 maxpacket: 32 [ 1648.468424][T16504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.517826][T16504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.571926][T16504] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1648.599554][T16504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.620365][T16504] usb 7-1: config 0 descriptor?? [ 1648.641140][T16504] hub 7-1:0.0: USB hub found [ 1649.008739][ T5811] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1649.040993][T24919] overlayfs: failed to clone lowerpath [ 1649.048032][T16504] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1649.051560][T24902] input: syz1 as /devices/virtual/input/input71 [ 1649.406812][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.575489][T16504] usbhid 7-1:0.0: can't add hid device: -71 [ 1651.155792][T16504] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1651.319769][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1651.335023][ T5811] usb 4-1: New USB device found, idVendor=240c, idProduct=1018, bcdDevice= 0.40 [ 1651.345815][T16504] usb 7-1: USB disconnect, device number 4 [ 1651.352453][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.372100][ T5811] usb 4-1: Product: syz [ 1651.379846][ T5811] usb 4-1: Manufacturer: syz [ 1651.385445][ T5811] usb 4-1: SerialNumber: syz [ 1651.417666][T24931] fuse: fd is not a fuse device [ 1651.524193][ T30] audit: type=1326 audit(1783777706.021:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24934 comm="syz.0.4859" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4499f9de59 code=0x0 [ 1651.930097][T24942] FAULT_INJECTION: forcing a failure. [ 1651.930097][T24942] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.943914][T24942] CPU: 0 UID: 0 PID: 24942 Comm: syz.6.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.943941][T24942] Tainted: [L]=SOFTLOCKUP [ 1651.943948][T24942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1651.943959][T24942] Call Trace: [ 1651.943966][T24942] [ 1651.943973][T24942] dump_stack_lvl+0x100/0x190 [ 1651.943999][T24942] should_fail_ex.cold+0x5/0xa [ 1651.944023][T24942] should_failslab+0xc2/0x120 [ 1651.944044][T24942] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1651.944064][T24942] ? __pfx_vsnprintf+0x10/0x10 [ 1651.944090][T24942] ? kasprintf+0xc7/0x100 [ 1651.944117][T24942] kvasprintf+0xbc/0x150 [ 1651.944137][T24942] ? __pfx_kvasprintf+0x10/0x10 [ 1651.944157][T24942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.944185][T24942] kasprintf+0xc7/0x100 [ 1651.944205][T24942] ? __pfx_kasprintf+0x10/0x10 [ 1651.944239][T24942] logfc+0x11c/0x4e0 [ 1651.944261][T24942] ? __pfx_logfc+0x10/0x10 [ 1651.944280][T24942] ? kasan_save_track+0x14/0x30 [ 1651.944301][T24942] ? lockdep_init_map_type+0x5c/0x250 [ 1651.944323][T24942] ? lockdep_init_map_type+0x5c/0x250 [ 1651.944344][T24942] ? __init_waitqueue_head+0xca/0x150 [ 1651.944370][T24942] virtio_fs_get_tree+0x88b/0x1020 [ 1651.944395][T24942] ? vfs_cmd_create+0x75/0x2a0 [ 1651.944423][T24942] ? vfs_get_tree+0x49/0x320 [ 1651.944447][T24942] vfs_get_tree+0x92/0x320 [ 1651.944470][T24942] vfs_cmd_create+0xd7/0x2a0 [ 1651.944494][T24942] __do_sys_fsconfig+0x55a/0xcb0 [ 1651.944518][T24942] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1651.944540][T24942] ? fput+0x79/0x100 [ 1651.944561][T24942] ? trace_hardirqs_off+0x70/0x170 [ 1651.944589][T24942] do_syscall_64+0x115/0x870 [ 1651.944613][T24942] ? clear_bhb_loop+0x40/0x90 [ 1651.944635][T24942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.944654][T24942] RIP: 0033:0x7f322719de59 [ 1651.944669][T24942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.944686][T24942] RSP: 002b:00007f322808e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1651.944704][T24942] RAX: ffffffffffffffda RBX: 00007f3227426180 RCX: 00007f322719de59 [ 1651.944716][T24942] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 1651.944726][T24942] RBP: 00007f322808e090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.944736][T24942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.944746][T24942] R13: 00007f3227426218 R14: 00007f3227426180 R15: 00007ffdee5345d8 [ 1651.944772][T24942] [ 1652.380436][ T5811] usb 4-1: USB disconnect, device number 42 [ 1652.395884][ T30] audit: type=1400 audit(1783777706.861:1483): avc: denied { ioctl } for pid=24944 comm="syz.1.4862" path="socket:[89699]" dev="sockfs" ino=89699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1652.428480][T24946] macvtap1: entered promiscuous mode [ 1652.429238][T24946] ip6gretap0: entered promiscuous mode [ 1652.561566][T24946] team0: Device macvtap1 failed to register rx_handler [ 1652.606477][T24578] udevd[24578]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1652.611101][T24946] ip6gretap0: left promiscuous mode [ 1653.576926][ T30] audit: type=1400 audit(1783777708.061:1484): avc: denied { connect } for pid=24943 comm="syz.3.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1653.596746][ T30] audit: type=1400 audit(1783777708.061:1485): avc: denied { setopt } for pid=24943 comm="syz.3.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1653.704051][T24957] SELinux: invalid class [ 1653.764522][T24957] SELinux: failed to load policy [ 1654.313515][T24980] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 1654.566422][T24988] kAFS: unable to lookup cell 'ÿ' [ 1654.631033][T24985] netlink: 'syz.5.4869': attribute type 10 has an invalid length. [ 1654.704887][T24988] netlink: 'syz.5.4869': attribute type 10 has an invalid length. [ 1655.780634][T24997] overlayfs: failed to clone upperpath [ 1656.014868][T24985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1656.046185][T24985] team0: Port device netdevsim1 added [ 1656.627314][T24988] team0: Port device netdevsim1 removed [ 1656.701527][T24988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1656.810084][T24988] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1657.000776][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1657.033232][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1657.163350][T25012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1657.182607][T25012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1658.247223][T25031] netlink: 'syz.6.4882': attribute type 4 has an invalid length. [ 1662.095788][T25067] binder: 25062:25067 ioctl c0306201 0 returned -14 [ 1662.452250][T25080] overlayfs: failed lookup in lower (newroot/412, name='file1', err=-40): overlapping layers [ 1662.528077][T25084] netlink: 'syz.5.4895': attribute type 32 has an invalid length. [ 1662.541481][T25084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4895'. [ 1662.613018][ T5624] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 1662.774132][T25084] bond10: Setting coupled_control to off (0) [ 1664.362551][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1664.368939][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1665.962658][T16504] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1666.132286][T16504] usb 4-1: Using ep0 maxpacket: 32 [ 1666.151511][T16504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.179694][T16504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.205376][T16504] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1666.228450][T16504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.276794][T16504] usb 4-1: config 0 descriptor?? [ 1668.355995][T25139] /dev/nullb0: Can't lookup blockdev [ 1668.567619][T25147] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1668.681984][T25152] tipc: Enabling of bearer rejected, failed to enable media [ 1669.707248][T16504] usbhid 4-1:0.0: can't add hid device: -71 [ 1669.731391][T16504] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1669.744068][ T30] audit: type=1326 audit(1783777724.221:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.4917" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1bcb9de59 code=0x0 [ 1669.746598][T16504] usb 4-1: USB disconnect, device number 43 [ 1669.797795][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1669.986038][ T5811] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1669.996404][ T5811] usb 2-1: config 0 has no interface number 0 [ 1670.028122][ T5811] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1670.057180][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.087093][ T5811] usb 2-1: Product: syz [ 1670.095518][ T5811] usb 2-1: Manufacturer: syz [ 1670.101451][ T5811] usb 2-1: SerialNumber: syz [ 1670.115868][T25165] fuse: Bad value for 'group_id' [ 1670.130225][ T5811] usb 2-1: config 0 descriptor?? [ 1670.165035][T25165] fuse: Bad value for 'group_id' [ 1671.432410][ T5811] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1671.529070][T25170] CIFS mount error: No usable UNC path provided in device string! [ 1671.529070][T25170] [ 1671.570608][T25170] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1672.825479][T25183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1672.988289][T16488] usb 2-1: USB disconnect, device number 8 [ 1673.772088][T16486] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1673.813525][T25186] netlink: 'syz.0.4927': attribute type 32 has an invalid length. [ 1673.858480][T25186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1673.991228][T16486] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.284605][T25186] bond4: Setting coupled_control to off (0) [ 1674.305765][T16486] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1674.366067][T16486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.421404][T25199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25199 comm=syz.5.4919 [ 1674.480882][T16486] usb 7-1: config 0 descriptor?? [ 1675.122466][T16485] usb 7-1: USB disconnect, device number 5 [ 1675.621915][T25208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1675.629169][T25208] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.636417][T25208] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.772076][T16488] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1676.318401][T16488] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1676.376247][T16488] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.403789][T25210] kAFS: unable to lookup cell 'syz0' [ 1676.433559][T16488] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1676.493243][T16488] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.540864][T16488] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1676.580991][T16488] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1676.616851][T16488] usb 2-1: Product: syz [ 1676.630682][T25221] overlayfs: failed to clone upperpath [ 1676.639386][T16488] usb 2-1: Manufacturer: syz [ 1676.669800][T16488] cdc_wdm 2-1:1.0: skipping garbage [ 1676.702281][T16486] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1676.821629][T16488] cdc_wdm 2-1:1.0: skipping garbage [ 1676.838788][T25223] FAULT_INJECTION: forcing a failure. [ 1676.838788][T25223] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.870301][T16488] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1676.897413][T16488] cdc_wdm 2-1:1.0: Unknown control protocol [ 1676.982699][T25223] CPU: 0 UID: 0 PID: 25223 Comm: syz.3.4938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.982732][T25223] Tainted: [L]=SOFTLOCKUP [ 1676.982739][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1676.982750][T25223] Call Trace: [ 1676.982757][T25223] [ 1676.982764][T25223] dump_stack_lvl+0x100/0x190 [ 1676.982794][T25223] should_fail_ex.cold+0x5/0xa [ 1676.982818][T25223] should_failslab+0xc2/0x120 [ 1676.982840][T25223] __kmalloc_noprof+0xfc/0x820 [ 1676.982860][T25223] ? tomoyo_encode2+0xfb/0x3c0 [ 1676.982891][T25223] tomoyo_encode2+0xfb/0x3c0 [ 1676.982921][T25223] tomoyo_encode+0x29/0x50 [ 1676.982945][T25223] tomoyo_realpath_from_path+0x18c/0x690 [ 1676.982977][T25223] tomoyo_path_number_perm+0x23c/0x580 [ 1676.982998][T25223] ? tomoyo_path_number_perm+0x22e/0x580 [ 1676.983022][T25223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1676.983071][T25223] ? find_held_lock+0x2b/0x80 [ 1676.983097][T25223] ? __fget_files+0x215/0x3d0 [ 1676.983123][T25223] ? hook_file_ioctl_common+0x140/0x440 [ 1676.983140][T25223] ? __fget_files+0x215/0x3d0 [ 1676.983170][T25223] ? __fget_files+0x21f/0x3d0 [ 1676.983201][T25223] security_file_ioctl+0xd3/0x230 [ 1676.983227][T25223] __x64_sys_ioctl+0xb7/0x210 [ 1676.983253][T25223] do_syscall_64+0x115/0x870 [ 1676.983279][T25223] ? clear_bhb_loop+0x40/0x90 [ 1676.983303][T25223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.983321][T25223] RIP: 0033:0x7fa1bcb9de59 [ 1676.983338][T25223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.983356][T25223] RSP: 002b:00007fa1bdad8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.983374][T25223] RAX: ffffffffffffffda RBX: 00007fa1bce25fa0 RCX: 00007fa1bcb9de59 [ 1676.983386][T25223] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000005 [ 1676.983397][T25223] RBP: 00007fa1bdad8090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.983408][T25223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.983419][T25223] R13: 00007fa1bce26038 R14: 00007fa1bce25fa0 R15: 00007ffeada89528 [ 1676.983445][T25223] [ 1676.983536][T25223] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1677.133361][T16486] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1677.133389][T16486] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.133408][T16486] usb 7-1: config 220 has no interface number 2 [ 1677.133456][T16486] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1677.133604][T16486] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1677.265957][T16486] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1677.272976][T16486] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1677.281631][T16486] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1677.290813][T16486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.298931][T16486] usb 7-1: Product: syz [ 1677.303138][T16486] usb 7-1: Manufacturer: syz [ 1677.307727][T16486] usb 7-1: SerialNumber: syz [ 1677.316706][T25204] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.450314][T25234] overlayfs: failed to clone upperpath [ 1677.532945][T25235] usb usb9: usbfs: process 25235 (syz.1.4932) did not claim interface 0 before use [ 1678.212473][T16486] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1678.237990][T16486] uvcvideo 7-1:220.0: No valid video chain found. [ 1678.267648][T16486] usb 7-1: selecting invalid altsetting 0 [ 1678.311338][T16486] usb 7-1: selecting invalid altsetting 0 [ 1678.318878][T16486] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1678.345327][T16486] usb 7-1: USB disconnect, device number 6 [ 1678.477030][T16488] usb 2-1: USB disconnect, device number 9 [ 1678.543898][ T5811] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1680.014570][ T5811] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1680.032090][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.054836][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.073190][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1680.102908][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1680.117590][ T5811] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1680.128374][ T5811] usb 4-1: Manufacturer: syz [ 1680.141076][ T5811] usb 4-1: config 0 descriptor?? [ 1680.542120][T16484] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1680.618134][ T5811] hid_parser_main: 91 callbacks suppressed [ 1680.618159][ T5811] appleir 0003:05AC:8243.0046: unknown main item tag 0x0 [ 1680.656669][ T5811] appleir 0003:05AC:8243.0046: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1680.703445][T16484] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.730188][T16484] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1680.756610][T16484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.786531][T16484] usb 2-1: config 0 descriptor?? [ 1680.809780][T16484] pwc: Askey VC010 type 2 USB webcam detected. [ 1681.531426][T16484] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1681.813900][T25273] loop2: detected capacity change from 0 to 7 [ 1681.971302][T25273] Dev loop2: unable to read RDB block 7 [ 1681.985100][T25273] loop2: unable to read partition table [ 1682.002428][T25273] loop2: partition table beyond EOD, truncated [ 1682.017180][T25273] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1682.071720][ T4978] Dev loop2: unable to read RDB block 7 [ 1682.077615][ T4978] loop2: unable to read partition table [ 1682.083360][ T4978] loop2: partition table beyond EOD, truncated [ 1682.093019][T16484] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1682.128884][T16484] pwc: recv_control_msg error -71 req 04 val 1000 [ 1682.155505][T16484] pwc: recv_control_msg error -71 req 04 val 1300 [ 1682.200500][T16484] pwc: recv_control_msg error -71 req 04 val 1400 [ 1682.222842][T16484] pwc: recv_control_msg error -71 req 02 val 2000 [ 1682.255490][T16484] pwc: recv_control_msg error -71 req 02 val 2100 [ 1682.275724][T16484] pwc: recv_control_msg error -71 req 04 val 1500 [ 1682.297812][T16484] pwc: recv_control_msg error -71 req 02 val 2500 [ 1682.319762][T16484] pwc: recv_control_msg error -71 req 02 val 2400 [ 1682.339833][T16484] pwc: recv_control_msg error -71 req 02 val 2600 [ 1682.375520][T16484] pwc: recv_control_msg error -71 req 02 val 2900 [ 1682.396327][T16484] pwc: recv_control_msg error -71 req 02 val 2800 [ 1682.397322][T24294] usb 4-1: USB disconnect, device number 44 [ 1682.429732][T16484] pwc: recv_control_msg error -71 req 04 val 1100 [ 1682.448345][T16484] pwc: recv_control_msg error -71 req 04 val 1200 [ 1682.483663][ T5811] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1682.653805][T16484] pwc: Registered as video103. [ 1682.661329][T16484] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72 [ 1682.675080][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.715935][T16484] usb 2-1: USB disconnect, device number 10 [ 1682.717538][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.726799][T25309] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4963'. [ 1683.385656][T25313] syzkaller0: entered promiscuous mode [ 1683.402451][T25313] syzkaller0: entered allmulticast mode [ 1683.463184][T25313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25313 comm=syz.1.4964 [ 1683.701430][ T5811] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1683.720189][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.740654][ T5811] usb 7-1: config 0 descriptor?? [ 1683.852054][T16484] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1684.415714][T16484] usb 2-1: Using ep0 maxpacket: 16 [ 1684.450819][T16484] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1684.481908][T16484] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1684.527503][T16484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.560663][T16484] usb 2-1: Product: syz [ 1684.586700][T16484] usb 2-1: Manufacturer: syz [ 1684.608542][T24213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1684.611337][T16484] usb 2-1: SerialNumber: syz [ 1684.623469][T24213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1684.634498][T24213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1684.641691][T16484] usb 2-1: config 0 descriptor?? [ 1684.663344][T24213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1684.674470][T24213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1684.793597][ T5811] arvo 0003:1E7D:30D4.0047: collection stack underflow [ 1684.860668][ T5811] arvo 0003:1E7D:30D4.0047: item 0 4 0 12 parsing failed [ 1684.868246][ T5811] arvo 0003:1E7D:30D4.0047: parse failed [ 1684.917429][ T5811] arvo 0003:1E7D:30D4.0047: probe with driver arvo failed with error -22 [ 1684.993704][T16484] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1685.065460][T16484] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 1685.216220][T16484] usb 2-1: USB disconnect, device number 11 [ 1685.356996][T24294] usb 7-1: USB disconnect, device number 7 [ 1685.676612][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.706603][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.894402][T25322] lo speed is unknown, defaulting to 1000 [ 1686.762874][ T5624] Bluetooth: hci2: command tx timeout [ 1686.903681][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1687.351858][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.751362][T25379] erspan1: entered promiscuous mode [ 1688.756913][T25379] erspan1: entered allmulticast mode [ 1688.842385][ T5624] Bluetooth: hci2: command tx timeout [ 1690.268968][T25393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4977'. [ 1690.341606][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 1690.404291][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1690.442254][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.610805][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1690.652301][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.922483][ T5624] Bluetooth: hci2: command tx timeout [ 1691.343676][T25322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.393312][T25322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.429015][T25322] bridge_slave_0: entered allmulticast mode [ 1691.440480][T25322] bridge_slave_0: entered promiscuous mode [ 1691.522959][T25322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.550855][T25322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.578296][T25322] bridge_slave_1: entered allmulticast mode [ 1691.765089][T25322] bridge_slave_1: entered promiscuous mode [ 1691.818552][T25429] netlink: 'syz.3.4984': attribute type 32 has an invalid length. [ 1691.875196][ T36] dummy0: left allmulticast mode [ 1691.884021][T25429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4984'. [ 1691.953071][ T36] dummy0: left promiscuous mode [ 1691.994378][ T36] bridge0: port 3(dummy0) entered disabled state [ 1692.058365][ T36] bridge_slave_1: left allmulticast mode [ 1692.090680][ T36] bridge_slave_1: left promiscuous mode [ 1692.120324][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.153449][ T36] bridge_slave_0: left allmulticast mode [ 1692.173334][ T36] bridge_slave_0: left promiscuous mode [ 1692.196208][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.444529][ T30] audit: type=1400 audit(1783777746.941:1487): avc: denied { write } for pid=25426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.811813][ T30] audit: type=1400 audit(1783777747.301:1488): avc: denied { write } for pid=25440 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1693.025093][ T5624] Bluetooth: hci2: command tx timeout [ 1693.176902][T25443] can: request_module (can-proto-0) failed. [ 1693.182992][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4985'. [ 1693.301357][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.352845][ T36] bond0 (unregistering): Released all slaves [ 1693.392832][ T36] bond1 (unregistering): Released all slaves [ 1693.423427][ T36] bond2 (unregistering): Released all slaves [ 1693.469641][ T36] bond3 (unregistering): Released all slaves [ 1693.509962][ T36] bond4 (unregistering): Released all slaves [ 1693.556684][ T36] bond5 (unregistering): Released all slaves [ 1693.595500][ T36] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1693.624400][ T36] bond6 (unregistering): Released all slaves [ 1693.658702][ T36] bond7 (unregistering): Released all slaves [ 1693.698924][ T36] bond8 (unregistering): Released all slaves [ 1693.737027][ T36] bond9 (unregistering): Released all slaves [ 1693.788349][ T36] bond10 (unregistering): Released all slaves [ 1693.856371][T25429] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1693.861235][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1694.110677][T25443] batadv_slave_1: entered promiscuous mode [ 1694.167018][T25322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.233127][T25322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.460839][T25322] team0: Port device team_slave_0 added [ 1694.474685][T25322] team0: Port device team_slave_1 added [ 1695.092348][T25322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.128777][T25322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.316276][T25322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.228707][T25322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.277563][T25322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.313509][T25322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.892124][T16485] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1697.135186][T25322] hsr_slave_0: entered promiscuous mode [ 1697.194217][T16485] usb 4-1: Using ep0 maxpacket: 32 [ 1697.253370][T25322] hsr_slave_1: entered promiscuous mode [ 1697.280105][T16485] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 1697.318935][T25322] debugfs: 'hsr0' already exists in 'hsr' [ 1697.343095][T16485] usb 4-1: config 2 has no interface number 0 [ 1697.412806][T25322] Cannot create hsr debugfs directory [ 1697.430055][T16485] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 1697.477389][T16485] usb 4-1: config 2 interface 88 has no altsetting 0 [ 1697.509967][T16485] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1697.576637][T16485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1697.590466][ T30] audit: type=1400 audit(1783777752.071:1489): avc: denied { write } for pid=25469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.639779][T16485] usb 4-1: Product: syz [ 1697.660501][T16485] usb 4-1: Manufacturer: syz [ 1697.707942][T16485] usb 4-1: SerialNumber: syz [ 1697.741253][T25493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1697.833504][ T30] audit: type=1400 audit(1783777752.321:1490): avc: denied { write } for pid=25504 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.967085][ T36] hsr_slave_0: left promiscuous mode [ 1697.977447][T25487] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1698.040082][ T36] hsr_slave_1: left promiscuous mode [ 1698.053308][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1698.067063][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.097616][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.183903][ T36] veth1_macvtap: left promiscuous mode [ 1698.189584][ T36] veth0_macvtap: left promiscuous mode [ 1698.195590][ T36] veth1_vlan: left promiscuous mode [ 1698.207085][ T36] veth0_vlan: left promiscuous mode [ 1698.283224][T16488] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1698.449869][T16488] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1698.472521][T16488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.504104][T16488] usb 2-1: Product: syz [ 1698.511554][T16488] usb 2-1: Manufacturer: syz [ 1698.519869][T16488] usb 2-1: SerialNumber: syz [ 1698.558037][T16488] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1698.576314][T16484] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1698.653104][ T5811] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1699.029379][T25509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.041374][T25509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.077980][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1699.110355][T16486] usb 2-1: USB disconnect, device number 12 [ 1699.147974][ T5811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.159125][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1699.194159][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1699.208775][ T5811] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1699.217839][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.244245][ T5811] usb 7-1: config 0 descriptor?? [ 1699.293800][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 1699.596882][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1699.646737][T16484] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1699.677636][T16484] ath9k_htc: Failed to initialize the device [ 1699.723503][T16486] usb 2-1: ath9k_htc: USB layer deinitialized [ 1699.859863][T25517] comedi: valid board names for 8255 driver are: [ 1699.880215][T25517] 8255 [ 1699.888043][T25517] comedi: valid board names for vmk80xx driver are: [ 1699.907108][T25517] vmk80xx [ 1699.935061][T25517] comedi: valid board names for usbduxsigma driver are: [ 1699.956969][T25517] usbduxsigma [ 1699.966741][T25517] comedi: valid board names for usbduxfast driver are: [ 1700.005358][T25517] usbduxfast [ 1700.020007][T25517] comedi: valid board names for usbdux driver are: [ 1700.056410][T25517] usbdux [ 1700.061643][T25517] comedi: valid board names for ni6501 driver are: [ 1700.127744][T25517] ni6501 [ 1700.146727][T25517] comedi: valid board names for dt9812 driver are: [ 1700.190383][T25517] dt9812 [ 1700.218142][T25517] comedi: valid board names for ni_labpc_cs driver are: [ 1700.275270][ T36] IPVS: stop unused estimator thread 0... [ 1700.290233][T25517] ni_labpc_cs [ 1700.303876][T25517] comedi: valid board names for ni_daq_700 driver are: [ 1700.348069][T25517] ni_daq_700 [ 1700.351388][T25517] comedi: valid board names for labpc_pci driver are: [ 1700.408815][T25517] labpc_pci [ 1700.433824][T25517] comedi: valid board names for adl_pci9118 driver are: [ 1700.498630][T16485] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1700.530734][T25517] pci9118dg [ 1700.542172][T16485] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1700.595072][T16485] asix 4-1:2.88: probe with driver asix failed with error -71 [ 1700.595976][T25517] pci9118hg [ 1700.655293][T16485] usb 4-1: USB disconnect, device number 45 [ 1700.697100][T25517] pci9118hr [ 1700.713896][T25517] comedi: valid board names for 8255_pci driver are: [ 1700.720579][T25517] 8255_pci [ 1700.773048][T25517] comedi: valid board names for s526 driver are: [ 1700.822688][T25517] s526 [ 1700.830696][T25517] comedi: valid board names for multiq3 driver are: [ 1700.910002][T25517] multiq3 [ 1700.941923][T25517] comedi: valid board names for pcmuio driver are: [ 1700.975185][T25517] pcmuio48 [ 1700.990944][T25517] pcmuio96 [ 1701.006302][T25517] comedi: valid board names for pcmmio driver are: [ 1701.040270][T25517] pcmmio [ 1701.048580][T25517] comedi: valid board names for pcmda12 driver are: [ 1701.234317][T25517] pcmda12 [ 1701.237701][T25517] comedi: valid board names for pcmad driver are: [ 1701.272460][T25517] pcmad12 [ 1701.383745][T25536] FAULT_INJECTION: forcing a failure. [ 1701.383745][T25536] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.397821][T25536] CPU: 0 UID: 0 PID: 25536 Comm: syz.3.5001 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.397846][T25536] Tainted: [L]=SOFTLOCKUP [ 1701.397850][T25536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1701.397857][T25536] Call Trace: [ 1701.397868][T25536] [ 1701.397874][T25536] dump_stack_lvl+0x100/0x190 [ 1701.397892][T25536] should_fail_ex.cold+0x5/0xa [ 1701.397906][T25536] should_failslab+0xc2/0x120 [ 1701.397920][T25536] __kmalloc_cache_noprof+0x91/0x6c0 [ 1701.397938][T25536] ? l2tp_tunnel_create+0x96/0x460 [ 1701.397954][T25536] l2tp_tunnel_create+0x96/0x460 [ 1701.397973][T25536] l2tp_nl_cmd_tunnel_create+0x3ae/0x990 [ 1701.397992][T25536] ? __kasan_kmalloc+0xaa/0xb0 [ 1701.398004][T25536] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1701.398024][T25536] ? __nla_parse+0x40/0x60 [ 1701.398043][T25536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1701.398062][T25536] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1701.398085][T25536] genl_family_rcv_msg_doit+0x214/0x300 [ 1701.398105][T25536] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1701.398127][T25536] ? bpf_lsm_capable+0x9/0x10 [ 1701.398137][T25536] ? security_capable+0x80/0x260 [ 1701.398150][T25536] ? ns_capable+0xd2/0xf0 [ 1701.398164][T25536] genl_rcv_msg+0x560/0x800 [ 1701.398183][T25536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1701.398201][T25536] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1701.398224][T25536] netlink_rcv_skb+0x159/0x420 [ 1701.398240][T25536] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1701.398258][T25536] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1701.398280][T25536] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1701.398297][T25536] genl_rcv+0x28/0x40 [ 1701.398313][T25536] netlink_unicast+0x585/0x850 [ 1701.398331][T25536] ? __pfx_netlink_unicast+0x10/0x10 [ 1701.398350][T25536] netlink_sendmsg+0x8b0/0xda0 [ 1701.398371][T25536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.398385][T25536] ? ____sys_sendmsg+0x2d4/0xbe0 [ 1701.398400][T25536] ? hook_socket_sendmsg+0x52/0x1c0 [ 1701.398417][T25536] ____sys_sendmsg+0xa4d/0xbe0 [ 1701.398430][T25536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.398447][T25536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1701.398468][T25536] ___sys_sendmsg+0x190/0x1e0 [ 1701.398484][T25536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.398506][T25536] ? lockdep_hardirqs_on+0x78/0x100 [ 1701.398522][T25536] ? irqentry_exit+0x24d/0xa00 [ 1701.398548][T25536] __sys_sendmsg+0x160/0x210 [ 1701.398559][T25536] ? __pfx___sys_sendmsg+0x10/0x10 [ 1701.398578][T25536] do_syscall_64+0x115/0x870 [ 1701.398595][T25536] ? clear_bhb_loop+0x40/0x90 [ 1701.398609][T25536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.398621][T25536] RIP: 0033:0x7fa1bcb9de59 [ 1701.398631][T25536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.398643][T25536] RSP: 002b:00007fa1bdab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.398655][T25536] RAX: ffffffffffffffda RBX: 00007fa1bce26090 RCX: 00007fa1bcb9de59 [ 1701.398662][T25536] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 1701.398669][T25536] RBP: 00007fa1bdab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.398676][T25536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.398682][T25536] R13: 00007fa1bce26128 R14: 00007fa1bce26090 R15: 00007ffeada89528 [ 1701.398697][T25536] [ 1701.852987][T25517] pcmad16 [ 1701.856053][T25517] comedi: valid board names for ni_labpc driver are: [ 1701.862729][T25517] lab-pc-1200 [ 1701.866097][T25517] lab-pc-1200ai [ 1701.869635][T25517] lab-pc+ [ 1701.872651][T25517] comedi: valid board names for atmio16 driver are: [ 1701.879223][T25517] atmio16 [ 1701.882222][T25517] atmio16d [ 1701.885326][T25517] comedi: valid board names for ni_at_ao driver are: [ 1701.891971][T25517] at-ao-6 [ 1701.894973][T25517] at-ao-10 [ 1701.898052][T25517] comedi: valid board names for ni_at_a2150 driver are: [ 1701.904961][T25517] ni_at_a2150 [ 1701.908301][T25517] comedi: valid board names for adq12b driver are: [ 1701.914767][T25517] adq12b [ 1701.917682][T25517] comedi: valid board names for mpc624 driver are: [ 1701.924145][T25517] mpc624 [ 1701.927048][T25517] comedi: valid board names for c6xdigio driver are: [ 1701.933684][T25517] c6xdigio [ 1701.936763][T25517] comedi: valid board names for aio_iiro_16 driver are: [ 1701.943677][T25517] aio_iiro_16 [ 1701.952555][T25517] comedi: valid board names for aio_aio12_8 driver are: [ 1701.959752][T25517] aio_aio12_8 [ 1701.964684][T25517] aio_ai12_8 [ 1701.968144][T25517] aio_ao12_4 [ 1701.971529][T25517] comedi: valid board names for fl512 driver are: [ 1701.978492][T25517] fl512 [ 1701.981428][T25517] comedi: valid board names for dmm32at driver are: [ 1701.988267][T25517] dmm32at [ 1701.991383][T25517] comedi: valid board names for dt282x driver are: [ 1701.998133][T25517] dt2821 [ 1702.001172][T25517] dt2821-f [ 1702.004643][T25517] dt2821-g [ 1702.007856][T25517] dt2823 [ 1702.010880][T25517] dt2824-pgh [ 1702.014311][T25517] dt2824-pgl [ 1702.017714][T25517] dt2825 [ 1702.020743][T25517] dt2827 [ 1702.023792][T25517] dt2828 [ 1702.026830][T25517] dt2829 [ 1702.029872][T25517] dt21-ez [ 1702.033253][T25517] dt23-ez [ 1702.036366][T25517] dt24-ez [ 1702.039487][T25517] dt24-ez-pgl [ 1702.043022][T25517] comedi: valid board names for dt2817 driver are: [ 1702.049737][T25517] dt2817 [ 1702.052789][T25517] comedi: valid board names for dt2815 driver are: [ 1702.059504][T25517] dt2815 [ 1702.062806][T25517] comedi: valid board names for dt2814 driver are: [ 1702.069532][T25517] dt2814 [ 1702.072604][T25517] comedi: valid board names for dt2811 driver are: [ 1702.079321][T25517] dt2811-pgh [ 1702.082713][T25517] dt2811-pgl [ 1702.086110][T25517] comedi: valid board names for dt2801 driver are: [ 1702.093072][T25517] dt2801 [ 1702.096104][T25517] comedi: valid board names for das6402 driver are: [ 1702.102933][T25517] das6402-12 [ 1702.106326][T25517] das6402-16 [ 1702.109735][T25517] comedi: valid board names for das1800 driver are: [ 1702.117279][T25517] das-1701st [ 1702.120889][T25517] das-1701st-da [ 1702.125271][T25517] das-1702st [ 1702.128857][T25517] das-1702st-da [ 1702.133530][T25517] das-1702hr [ 1702.137008][T25517] das-1702hr-da [ 1702.140673][T25517] das-1701ao [ 1702.144146][T25517] das-1702ao [ 1702.147562][T25517] das-1801st [ 1702.150970][T25517] das-1801st-da [ 1702.155280][T25517] das-1802st [ 1702.158677][T25517] das-1802st-da [ 1702.163915][T25517] das-1802hr [ 1702.167553][T25517] das-1802hr-da [ 1702.171441][T25517] das-1801hc [ 1702.176750][T25517] das-1802hc [ 1702.216670][T24213] Bluetooth: hci4: command 0x0406 tx timeout [ 1702.259632][T25517] das-1801ao [ 1702.304092][T25517] das-1802ao [ 1702.313591][ T30] audit: type=1400 audit(1783777756.811:1491): avc: denied { write } for pid=25520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.368954][T25517] comedi: valid board names for das800 driver are: [ 1702.404528][T25517] das-800 [ 1702.558683][T25517] cio-das800 [ 1702.578958][ T30] audit: type=1400 audit(1783777757.071:1492): avc: denied { write } for pid=25543 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1702.752138][T25517] das-801 [ 1703.542640][T25517] cio-das801 [ 1703.606745][T25517] das-802 [ 1703.620014][T25517] cio-das802 [ 1703.971447][T25517] cio-das802/16 [ 1703.994515][T25517] comedi: valid board names for isa-das08 driver are: [ 1704.082070][T25517] isa-das08 [ 1704.092198][T25517] das08-pgm [ 1704.105038][T25517] das08-pgh [ 1704.120609][T25517] das08-pgl [ 1704.131701][T25517] das08-aoh [ 1704.147517][T25517] das08-aol [ 1704.163498][T25517] das08-aom [ 1704.180482][T25517] das08/jr-ao [ 1704.192357][T25517] das08jr-16-ao [ 1704.205563][T25517] pc104-das08 [ 1704.215646][T25517] das08jr/16 [ 1704.230904][T25517] comedi: valid board names for das16m1 driver are: [ 1704.262122][T25517] das16m1 [ 1704.265263][T25517] comedi: valid board names for dac02 driver are: [ 1704.292156][T25517] dac02 [ 1704.302224][T25517] comedi: valid board names for rti802 driver are: [ 1704.334137][T25517] rti802 [ 1704.350523][T25517] comedi: valid board names for rti800 driver are: [ 1704.362936][ T5811] pwc: send_video_command error -110 [ 1704.380332][ T5811] pwc: Failed to set video mode CIF@30 fps; return code = -110 [ 1704.381570][T25517] rti800 [ 1704.437358][T25517] rti815 [ 1704.450233][ T5811] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -110 [ 1704.475037][T25517] comedi: valid board names for pcm3724 driver are: [ 1704.528402][T25517] pcm3724 [ 1704.538394][T25517] comedi: valid board names for pcl818 driver are: [ 1704.573604][T25517] pcl818l [ 1704.585119][T25517] pcl818h [ 1704.609860][T25517] pcl818hd [ 1704.634948][T25517] pcl818hg [ 1704.650808][T25517] pcl818 [ 1704.667638][T25517] pcl718 [ 1704.686889][T25517] pcm3718 [ 1704.709632][T25517] comedi: valid board names for pcl816 driver are: [ 1704.738873][T25517] pcl816 [ 1704.746408][T25517] pcl814b [ 1704.755770][T25517] comedi: valid board names for pcl812 driver are: [ 1704.777984][T25517] pcl812 [ 1704.789688][T25517] pcl812pg [ 1704.805379][T25517] acl8112pg [ 1704.824138][T25517] acl8112dg [ 1704.838623][T25517] acl8112hg [ 1704.851622][T25517] a821pgl [ 1704.861745][T25517] a821pglnda [ 1704.877708][T25517] a821pgh [ 1704.891835][T25517] a822pgl [ 1704.905602][T25517] a822pgh [ 1704.912586][T25517] a823pgl [ 1704.917723][T25517] a823pgh [ 1704.927101][T25517] pcl813 [ 1704.938457][T25517] pcl813b [ 1704.948731][T25517] acl8113 [ 1704.964811][T25517] iso813 [ 1704.976254][T25517] acl8216 [ 1704.990724][T25517] a826pg [ 1704.993799][T25517] comedi: valid board names for pcl730 driver are: [ 1705.023588][T25517] pcl730 [ 1705.032143][T25517] iso730 [ 1705.041268][T25517] acl7130 [ 1705.051911][T25517] pcm3730 [ 1705.056158][T25322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1705.061402][T25517] pcl725 [ 1705.077474][T25517] p8r8dio [ 1705.088162][T25517] acl7225b [ 1705.103014][T25517] p16r16dio [ 1705.104050][T25322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1705.120078][T25517] pcl733 [ 1705.131646][T25517] pcl734 [ 1705.141739][T25517] opmm-1616-xt [ 1705.143199][T25322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1705.164922][T25517] pearl-mm-p [ 1705.176209][T25517] ir104-pbf [ 1705.189935][T25517] comedi: valid board names for pcl726 driver are: [ 1705.212198][T25517] pcl726 [ 1705.219999][T25517] pcl727 [ 1705.227677][T25322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1705.237006][T25517] pcl728 [ 1705.259139][T25517] acl6126 [ 1705.262752][T25322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1705.273898][ T30] audit: type=1400 audit(1783777759.771:1493): avc: denied { write } for pid=25551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1705.280410][T25517] acl6128 [ 1705.349644][T25322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1705.377269][T16485] usb 7-1: USB disconnect, device number 8 [ 1705.389289][T25517] comedi: valid board names for pcl724 driver are: [ 1705.400832][T25322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1705.426385][T25517] pcl724 [ 1705.435735][T25517] pcl722 [ 1705.440900][T25517] pcl731 [ 1705.454004][T25517] acl7122 [ 1705.471025][T25517] acl7124 [ 1705.479047][T25322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1705.511181][T25517] pet48dio [ 1705.514360][T25517] pcmio48 [ 1705.518241][T25517] onyx-mm-dio [ 1705.521595][T25517] comedi: valid board names for pcl711 driver are: [ 1705.528137][T25517] pcl711 [ 1705.531055][T25517] pcl711b [ 1705.536663][T25517] acl8112hg [ 1705.540306][T25517] acl8112dg [ 1705.548669][T25517] comedi: valid board names for amplc_pc263 driver are: [ 1705.568602][T25517] pc263 [ 1705.576892][T25517] comedi: valid board names for amplc_pc236 driver are: [ 1705.674307][T25517] pc36at [ 1705.692949][T25517] comedi: valid board names for amplc_dio200 driver are: [ 1705.844609][T25517] pc212e [ 1705.866704][T25517] pc214e [ 1705.891335][T25517] pc215e [ 1705.914902][T25517] pc218e [ 1706.061642][T25517] pc272e [ 1706.091060][T25517] comedi: valid board names for comedi_parport driver are: [ 1706.208066][T25517] comedi_parport [ 1706.264970][T25517] comedi: valid board names for comedi_test driver are: [ 1706.340740][T25517] comedi_test [ 1706.413441][T25517] comedi: valid board names for comedi_bond driver are: [ 1706.521846][T25517] comedi_bond [ 1706.866278][ T30] audit: type=1400 audit(1783777761.311:1494): avc: denied { write } for pid=25566 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.076325][T25322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.210868][T25604] netlink: 'syz.3.5010': attribute type 21 has an invalid length. [ 1708.248870][T25322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.256097][T25604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5010'. [ 1708.320754][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.328175][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.397661][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.405117][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.599109][T25613] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1708.988040][ T30] audit: type=1400 audit(1783777763.481:1495): avc: denied { write } for pid=25600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.333866][ T30] audit: type=1400 audit(1783777764.831:1496): avc: denied { write } for pid=25628 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.363236][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1710.952646][T16486] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1711.685732][T16486] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.737423][T16486] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1713.834200][T16486] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1713.875103][T16486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.203456][T16486] usb 4-1: config 0 descriptor?? [ 1714.237088][T16486] usb 4-1: can't set config #0, error -71 [ 1714.272091][T16486] usb 4-1: USB disconnect, device number 46 [ 1714.303193][ T30] audit: type=1400 audit(1783777768.801:1497): avc: denied { map } for pid=25654 comm="syz.3.5019" path="/dev/video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1714.393720][ T30] audit: type=1400 audit(1783777768.801:1498): avc: denied { setattr } for pid=25654 comm="syz.3.5019" name="NETLINK" dev="sockfs" ino=92842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1714.433854][T25322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.683644][T25668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1714.706417][T25668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1715.594859][ T30] audit: type=1400 audit(1783777770.091:1499): avc: denied { write } for pid=25650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.642160][ T5811] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1715.693832][T24294] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1715.845909][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.861472][T25322] veth0_vlan: entered promiscuous mode [ 1715.874369][T24294] usb 4-1: Using ep0 maxpacket: 32 [ 1715.890187][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.909123][T24294] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1715.925764][ T5811] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1715.931819][T25322] veth1_vlan: entered promiscuous mode [ 1715.938297][T24294] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1715.940565][ T30] audit: type=1400 audit(1783777770.421:1500): avc: denied { write } for pid=25693 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.962965][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.004131][T24294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.026400][T24294] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1716.037988][T25322] veth0_macvtap: entered promiscuous mode [ 1716.038133][T24294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1716.053990][T24294] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1716.064449][ T5811] usb 7-1: config 0 descriptor?? [ 1716.076092][T24294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1716.090707][T24294] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1716.101098][T24294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.116153][T25322] veth1_macvtap: entered promiscuous mode [ 1716.118407][T24294] usb 4-1: config 0 descriptor?? [ 1716.169612][T25322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.206107][T25322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.230126][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.240855][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.280777][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.292433][T25703] netlink: 'syz.0.5027': attribute type 32 has an invalid length. [ 1716.307303][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5027'. [ 1716.316193][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.356243][T25703] bond5: Setting coupled_control to off (0) [ 1716.635399][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.665214][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.835694][ T5811] hid-steam 0003:28DE:1142.0048: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1716.850304][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.913175][ T5811] hid-steam 0003:28DE:1142.0048: Steam wireless receiver connected [ 1717.026380][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.159336][ T30] audit: type=1400 audit(1783777771.651:1501): avc: denied { write } for pid=25698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.305051][ T5811] hid-steam 0003:28DE:1142.0049: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1717.794691][ T30] audit: type=1400 audit(1783777772.291:1502): avc: denied { map } for pid=25729 comm="syz.5.4965" path="socket:[92930]" dev="sockfs" ino=92930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1717.848030][ T30] audit: type=1400 audit(1783777772.321:1503): avc: denied { write } for pid=25728 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.879734][T25753] SELinux: failed to load policy [ 1719.034119][T16485] usb 7-1: USB disconnect, device number 9 [ 1719.114436][T25757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5037'. [ 1719.336820][T16485] hid-steam 0003:28DE:1142.0048: Steam wireless receiver disconnected [ 1719.472030][T16485] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1719.612166][T16485] usb 7-1: device descriptor read/64, error -71 [ 1719.634576][T25761] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1719.643804][T25761] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1719.962185][T16485] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1720.276866][T25762] batadv_slave_1: entered promiscuous mode [ 1720.342182][T16485] usb 7-1: device descriptor read/64, error -71 [ 1720.464225][T16485] usb usb7-port1: attempt power cycle [ 1720.786379][T16486] usb 4-1: USB disconnect, device number 47 [ 1720.945615][T24213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1720.960382][T24213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1720.971512][T24213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1721.014998][T24213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1721.025190][T24213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1721.047041][T16485] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1721.314535][T16485] usb 7-1: device descriptor read/8, error -71 [ 1721.652023][T16485] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1721.992020][T16485] usb 7-1: device descriptor read/8, error -71 [ 1722.133709][T16485] usb usb7-port1: unable to enumerate USB device [ 1722.312150][T16504] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1723.118896][T16504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.152806][T16504] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.153011][T25800] CIFS mount error: No usable UNC path provided in device string! [ 1723.153011][T25800] [ 1723.178213][T25800] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1723.347064][ T5624] Bluetooth: hci0: command tx timeout [ 1723.431417][T16504] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1723.441868][T16504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1723.452681][T16504] usb 4-1: SerialNumber: syz [ 1723.832310][T25806] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[24059] was attempted by " [ 1724.109467][T16504] usb 4-1: 0:2 : does not exist [ 1724.273074][T16504] usb 4-1: unit 5 not found! [ 1724.379841][T16504] usb 4-1: USB disconnect, device number 48 [ 1724.740284][ T5811] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1725.168027][ T5811] usb 2-1: device descriptor read/64, error -71 [ 1725.450936][ T5811] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1725.506373][ T5624] Bluetooth: hci0: command tx timeout [ 1725.744872][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1725.753685][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1725.786281][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.840553][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.850588][T25770] lo speed is unknown, defaulting to 1000 [ 1727.172273][T25839] cgroup: Bad value for 'name' [ 1727.562123][ T5624] Bluetooth: hci0: command tx timeout [ 1728.095109][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1728.138752][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.381138][T25847] xt_hashlimit: size too large, truncated to 1048576 [ 1728.755844][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1728.793935][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.642005][ T5624] Bluetooth: hci0: command tx timeout [ 1729.829621][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5061'. [ 1729.882675][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1729.961785][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.612351][T16504] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1731.870732][ T30] audit: type=1400 audit(1783777786.311:1504): avc: denied { append } for pid=25885 comm="syz.3.5066" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1732.314169][T16504] usb 6-1: Using ep0 maxpacket: 16 [ 1732.714272][T16504] usb 6-1: config 0 has no interfaces? [ 1733.022526][T16504] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 1733.033209][T16504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.041842][T16504] usb 6-1: Product: syz [ 1733.046008][T16504] usb 6-1: Manufacturer: syz [ 1733.050610][T16504] usb 6-1: SerialNumber: syz [ 1733.062915][T16504] usb 6-1: config 0 descriptor?? [ 1733.112275][ T30] audit: type=1400 audit(1783777787.591:1505): avc: denied { write } for pid=25887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1733.593935][T16504] usb 6-1: USB disconnect, device number 31 [ 1733.789501][ T30] audit: type=1400 audit(1783777788.271:1506): avc: denied { write } for pid=25919 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.361848][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1734.403002][ T13] team0: Port device geneve1 removed [ 1734.405969][T25932] vxfs: unable to read disk superblock at 1 [ 1734.436691][T25932] vxfs: unable to read disk superblock at 8 [ 1734.443534][T25932] vxfs: can't find superblock. [ 1734.514368][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.659994][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.690966][ T13] bond0 (unregistering): Released all slaves [ 1734.799370][ T13] bond1 (unregistering): Released all slaves [ 1734.966483][ T13] bond2 (unregistering): Released all slaves [ 1735.075828][ T13] bond3 (unregistering): Released all slaves [ 1735.316095][ T13] bond4 (unregistering): Released all slaves [ 1735.417124][ T13] bond5 (unregistering): Released all slaves [ 1736.238965][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1736.248699][T25770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.336356][T25770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.386106][T25770] bridge_slave_0: entered allmulticast mode [ 1736.601406][T25770] bridge_slave_0: entered promiscuous mode [ 1737.581065][T25770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.589054][T25770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.597444][T25770] bridge_slave_1: entered allmulticast mode [ 1737.610222][T25770] bridge_slave_1: entered promiscuous mode [ 1737.949079][T25770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.014961][T25770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.305914][T25770] team0: Port device team_slave_0 added [ 1738.320701][T25770] team0: Port device team_slave_1 added [ 1738.536867][T25770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.567547][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.018383][T25770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.201835][T25770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.241167][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.397543][T25770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.958736][T25770] hsr_slave_0: entered promiscuous mode [ 1739.973157][T25770] hsr_slave_1: entered promiscuous mode [ 1740.037657][T25770] debugfs: 'hsr0' already exists in 'hsr' [ 1740.091446][T25770] Cannot create hsr debugfs directory [ 1740.545820][ T30] audit: type=1400 audit(1783777795.041:1507): avc: denied { write } for pid=25959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.020982][ T30] audit: type=1400 audit(1783777795.511:1508): avc: denied { write } for pid=25985 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1741.304147][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1741.718953][T25994] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1742.456243][ T13] hsr_slave_0: left promiscuous mode [ 1742.495417][ T13] hsr_slave_1: left promiscuous mode [ 1742.514142][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.525477][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.540888][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.549863][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.681394][ T13] veth1_macvtap: left promiscuous mode [ 1742.695503][ T13] veth0_macvtap: left promiscuous mode [ 1742.708398][ T13] veth1_vlan: left promiscuous mode [ 1742.719011][ T13] veth0_vlan: left promiscuous mode [ 1743.813010][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1743.839421][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1744.134475][ T5811] lo speed is unknown, defaulting to 1000 [ 1744.931407][ T5811] syz2: Port: 1 Link DOWN [ 1745.348646][T13995] smbdirect: ib_dev[syz2] removed [ 1745.564048][T16501] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1745.753393][T16501] usb 4-1: Using ep0 maxpacket: 8 [ 1745.789158][T16501] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1745.803595][T16501] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1745.828656][T16501] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1745.840708][T16501] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1745.873440][T16501] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.889284][T16501] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1745.976078][T16501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.578436][T26012] bond4: entered promiscuous mode [ 1747.583873][T26012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1747.591238][T26014] dummy0: entered allmulticast mode [ 1747.621243][T26014] dummy0: left allmulticast mode [ 1747.765988][T16501] usb 4-1: usb_control_msg returned -71 [ 1747.831390][T16501] usbtmc 4-1:16.0: can't read capabilities [ 1748.212543][T16501] usb 4-1: USB disconnect, device number 49 [ 1748.270831][T26038] input: syz1 as /devices/virtual/input/input73 [ 1748.320629][ T13] IPVS: stop unused estimator thread 0... [ 1748.506858][ T30] audit: type=1400 audit(1783777802.991:1509): avc: denied { write } for pid=26024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1748.639012][ T30] audit: type=1400 audit(1783777803.091:1510): avc: denied { write } for pid=26051 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.691511][T25770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1750.024131][T25770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1750.056406][T25770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1750.098062][ T30] audit: type=1400 audit(1783777804.591:1511): avc: denied { unmount } for pid=24059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1750.132204][T25770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1750.149041][T25770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1750.208792][T25770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1750.218602][T25770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1750.248111][T25770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1751.193648][T25770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.212349][T25770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.226940][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.234075][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.266098][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.273230][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.331720][T25770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1752.072084][T16485] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1752.382035][T16485] usb 6-1: Using ep0 maxpacket: 32 [ 1752.508470][T16485] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.599567][T16485] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1752.716724][T16485] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1752.807458][T16485] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.887546][T16485] usb 6-1: Product: syz [ 1752.931436][T16485] usb 6-1: Manufacturer: syz [ 1752.981658][T16485] usb 6-1: SerialNumber: syz [ 1753.191413][T16485] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1754.035444][ T30] audit: type=1400 audit(1783777808.521:1512): avc: denied { write } for pid=26062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.177586][T16485] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1754.444778][T16504] usb 6-1: USB disconnect, device number 32 [ 1754.500378][T24578] udevd[24578]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.706528][ T30] audit: type=1400 audit(1783777809.201:1513): avc: denied { write } for pid=26111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1755.077186][T26110] SELinux: invalid class [ 1755.104176][T26110] SELinux: failed to load policy [ 1755.255136][T26128] overlayfs: workdir and upperdir must reside under the same mount [ 1756.500921][T25770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.712451][T25770] veth0_vlan: entered promiscuous mode [ 1756.747268][ T30] audit: type=1400 audit(1783777811.171:1514): avc: denied { write } for pid=26116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.787328][T25770] veth1_vlan: entered promiscuous mode [ 1756.804921][ T30] audit: type=1400 audit(1783777811.291:1515): avc: denied { write } for pid=26152 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1756.848798][T26151] syzkaller0: entered promiscuous mode [ 1756.865245][T26151] syzkaller0: entered allmulticast mode [ 1756.948185][T26155] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5113'. [ 1757.002489][T25770] veth0_macvtap: entered promiscuous mode [ 1757.023829][T25770] veth1_macvtap: entered promiscuous mode [ 1757.063395][ T30] audit: type=1400 audit(1783777811.561:1516): avc: denied { ioctl } for pid=26156 comm="syz.5.5114" path="socket:[95736]" dev="sockfs" ino=95736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1757.108794][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1757.111268][T25770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.135847][T25770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.189108][T26162] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5115'. [ 1757.269022][T26171] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1757.306778][T26170] netlink: 'syz.1.5116': attribute type 1 has an invalid length. [ 1757.323595][T26170] netlink: 756 bytes leftover after parsing attributes in process `syz.1.5116'. [ 1757.363591][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.376129][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.386724][T26165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1757.409742][T26165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.458807][ T30] audit: type=1400 audit(1783777811.951:1517): avc: denied { write } for pid=26157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.482219][ T5811] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1757.588549][ T30] audit: type=1400 audit(1783777812.081:1518): avc: denied { write } for pid=26180 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.676780][ T5811] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1757.696762][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.700948][ T5811] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1757.730683][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.731798][ T5811] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1757.779469][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1757.794752][ T5811] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1758.044458][ T30] audit: type=1400 audit(1783777812.511:1519): avc: denied { write } for pid=26184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.094549][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.109149][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.154427][T15414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.166075][T15414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.193882][ T30] audit: type=1400 audit(1783777812.661:1520): avc: denied { write } for pid=26200 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.385469][ T5811] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1758.394536][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1758.404337][ T5811] usb 7-1: Product: syz [ 1758.408477][ T5811] usb 7-1: Manufacturer: syz [ 1758.496809][T16501] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1759.571222][ T5811] cdc_wdm 7-1:1.0: skipping garbage [ 1759.600832][ T5811] cdc_wdm 7-1:1.0: skipping garbage [ 1759.616103][ T5811] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1759.643463][ T5811] cdc_wdm 7-1:1.0: Unknown control protocol [ 1759.844730][T16501] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1759.857192][T16501] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1759.867517][T16501] usb 6-1: can't read configurations, error -61 [ 1760.311398][T16501] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1760.336383][ C1] cdc_wdm 7-1:1.0: Unexpected error -71 [ 1760.343535][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1760.350318][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1760.356727][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1760.363316][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1760.369559][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1760.376143][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1760.382435][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1760.389024][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1760.402164][T16467] usb 7-1: USB disconnect, device number 14 [ 1760.462139][T16485] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1760.473929][T16501] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1760.483506][T16501] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1760.492094][T16501] usb 6-1: can't read configurations, error -61 [ 1760.523177][T16501] usb usb6-port1: attempt power cycle [ 1760.612238][T16485] usb 1-1: device descriptor read/64, error -71 [ 1760.722680][T26231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5126'. [ 1760.882102][T16485] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1761.021367][ T30] audit: type=1400 audit(1783777815.511:1521): avc: denied { bind } for pid=26238 comm="syz.1.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1761.047001][T16485] usb 1-1: device descriptor read/64, error -71 [ 1761.166077][T16485] usb usb1-port1: attempt power cycle [ 1761.522210][T26100] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1761.544892][T16485] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1761.595014][T26250] tipc: Started in network mode [ 1761.599984][T26250] tipc: Node identity 7f000001, cluster identity 4711 [ 1761.607099][T26250] tipc: Enabling of bearer rejected, failed to enable media [ 1762.252762][T16485] usb 1-1: device descriptor read/8, error -71 [ 1762.433823][T26100] usb 2-1: Using ep0 maxpacket: 8 [ 1762.449433][T26100] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1762.470416][T26100] usb 2-1: config 3 has an invalid interface number: 171 but max is 0 [ 1762.485591][T26100] usb 2-1: config 3 has no interface number 0 [ 1762.500956][T26100] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 1762.518182][T26100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.536129][T26100] usb 2-1: Product: syz [ 1762.542380][T16485] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1762.551863][T26100] usb 2-1: Manufacturer: syz [ 1762.564537][T26100] usb 2-1: SerialNumber: syz [ 1762.593878][T16485] usb 1-1: device descriptor read/8, error -71 [ 1762.712378][T16485] usb usb1-port1: unable to enumerate USB device [ 1762.798968][T26243] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1762.836516][T26265] netlink: 'syz.5.5140': attribute type 4 has an invalid length. [ 1762.856758][T26265] netlink: 'syz.5.5140': attribute type 4 has an invalid length. [ 1762.869538][T26100] (null): radio-mr800 - initialization failed [ 1762.908818][T26100] radio-mr800 2-1:3.171: probe with driver radio-mr800 failed with error -22 [ 1762.929946][T26100] usbhid 2-1:3.171: couldn't find an input interrupt endpoint [ 1762.953920][T26100] usb 2-1: USB disconnect, device number 15 [ 1763.342060][T16485] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1763.432058][T26100] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1763.522040][T16485] usb 6-1: Using ep0 maxpacket: 8 [ 1763.530166][T16485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1763.541984][T16485] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1763.554556][T16485] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1763.575276][T16485] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 1763.589662][T16485] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1763.602020][T16485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.612370][T26100] usb 1-1: Using ep0 maxpacket: 8 [ 1763.625317][T26100] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1763.634082][T26100] usb 1-1: config 0 has no interface number 0 [ 1763.667104][T26100] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1763.685226][T16485] usb 6-1: config 0 descriptor?? [ 1763.706888][T26272] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1763.727764][T26100] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1763.770995][T26100] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1763.823550][T26100] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1763.983797][T26100] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.034615][T26100] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1764.052820][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.053260][ C0] Bluetooth: hci1: Unexpected continuation: 1 bytes [ 1764.063803][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.073882][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.083108][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.092939][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.099826][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.106916][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.116453][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.123817][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.130676][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.137669][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.144559][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.151697][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.163141][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.170032][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.177045][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.184628][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.191624][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.198541][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.205920][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.212778][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.219706][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.226651][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.233608][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.240521][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.247580][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.254451][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.261425][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.268333][T24213] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1764.282564][T26100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.304395][T26100] usb 1-1: Product: syz [ 1764.309850][T26100] usb 1-1: Manufacturer: syz [ 1764.592744][T26100] usb 1-1: SerialNumber: syz [ 1764.635707][T26100] usb 1-1: config 0 descriptor?? [ 1764.972807][T26100] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1765.057058][T26100] usb 1-1: USB disconnect, device number 27 [ 1766.001115][ T5624] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 1766.001151][T16485] usb 6-1: USB disconnect, device number 36 [ 1766.133886][T26301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1766.619328][ T30] audit: type=1400 audit(1783777821.111:1522): avc: denied { append } for pid=26316 comm="syz.6.5155" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1766.645548][ T30] audit: type=1400 audit(1783777821.131:1523): avc: denied { map } for pid=26316 comm="syz.6.5155" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1766.679489][ T30] audit: type=1400 audit(1783777821.131:1524): avc: denied { execute } for pid=26316 comm="syz.6.5155" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1766.763272][T16485] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1766.925167][T16485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1766.935588][T16485] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1766.952269][T16485] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1766.961572][T16485] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.970349][T16485] usb 1-1: Product: syz [ 1766.974952][T16485] usb 1-1: Manufacturer: syz [ 1766.982512][T26100] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1767.016426][T16485] usb 1-1: SerialNumber: syz [ 1767.102980][T16485] usb 1-1: config 0 descriptor?? [ 1767.120555][T16485] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1767.173778][T26100] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1767.194772][T26100] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1767.365581][T26100] usb 6-1: config 220 has no interface number 2 [ 1767.380464][T26100] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1767.394285][T26100] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1767.401335][T26100] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1767.409168][T26100] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1767.494110][T26330] netlink: 'syz.3.5158': attribute type 16 has an invalid length. [ 1767.502043][T26330] netlink: 'syz.3.5158': attribute type 17 has an invalid length. [ 1767.583977][T26330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1768.166086][T26331] netlink: 'syz.1.5159': attribute type 12 has an invalid length. [ 1768.197992][T26331] netlink: 'syz.1.5159': attribute type 29 has an invalid length. [ 1768.257239][T26331] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5159'. [ 1768.274600][T26331] netlink: 'syz.1.5159': attribute type 1 has an invalid length. [ 1768.278440][T26100] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1768.319021][T26100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.342278][T26331] netlink: 'syz.1.5159': attribute type 2 has an invalid length. [ 1768.351241][T26100] usb 6-1: Product: syz [ 1768.370991][T26100] usb 6-1: Manufacturer: syz [ 1768.388949][T26100] usb 6-1: SerialNumber: syz [ 1768.479181][T16485] usb 1-1: USB disconnect, device number 28 [ 1768.646736][ T30] audit: type=1400 audit(1783777823.141:1525): avc: denied { mounton } for pid=26338 comm="syz.1.5162" path="/proc/1628/net/netfilter" dev="proc" ino=4026532802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 1769.179363][T26348] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5165'. [ 1769.215365][ T5811] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1769.285749][T26349] tmpfs: Bad value for 'mpol' [ 1769.679538][T26100] usb 6-1: selecting invalid altsetting 0 [ 1769.692876][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 1769.701051][T26100] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1769.724259][ T5811] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1769.764901][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.812711][ T5811] usb 2-1: Product: syz [ 1769.844883][ T5811] usb 2-1: Manufacturer: syz [ 1769.860548][T26100] uvcvideo 6-1:220.0: No valid video chain found. [ 1769.875442][T26100] usb 6-1: selecting invalid altsetting 0 [ 1769.881314][T26100] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1770.647728][ T5811] usb 2-1: SerialNumber: syz [ 1770.670405][T26100] usb 6-1: USB disconnect, device number 37 [ 1771.017682][ T5811] usb 2-1: config 0 descriptor?? [ 1771.138955][ T5811] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1771.832747][ T5811] gspca_topro: reg_w err -110 [ 1771.834995][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1772.113253][ T5811] gspca_topro: Sensor soi763a [ 1774.926517][T16467] usb 2-1: USB disconnect, device number 16 [ 1775.027445][T26418] openvswitch: netlink: Flow actions attr not present in new flow. [ 1775.285723][T26416] SELinux: syz.5.5179 (26416) wrote to checkreqprot. This is no longer supported. [ 1775.720331][T26427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1778.801814][T26453] program syz.0.5189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1780.352886][T16476] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1781.180236][T16476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.392864][T16476] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1781.454476][T16476] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1781.494352][T16476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.575034][T16476] usb 4-1: config 0 descriptor?? [ 1781.604725][T16476] pwc: Askey VC010 type 2 USB webcam detected. [ 1782.908345][T26476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1782.953021][ T5811] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1783.442576][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 1783.459161][ T5811] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.536200][T16476] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1783.617941][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1783.634324][T16476] pwc: recv_control_msg error -71 req 02 val 2700 [ 1783.657212][T16476] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1783.669992][ T5811] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1783.689419][T16476] pwc: recv_control_msg error -71 req 04 val 1000 [ 1783.708170][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.720090][T16476] pwc: recv_control_msg error -71 req 04 val 1300 [ 1783.742706][T16476] pwc: recv_control_msg error -71 req 04 val 1400 [ 1783.761515][ T5811] usb 6-1: config 0 descriptor?? [ 1783.837995][T16476] pwc: recv_control_msg error -71 req 02 val 2000 [ 1783.857995][T16476] pwc: recv_control_msg error -71 req 02 val 2100 [ 1783.873184][T16476] pwc: recv_control_msg error -71 req 04 val 1500 [ 1783.882698][T16476] pwc: recv_control_msg error -71 req 02 val 2500 [ 1783.891339][ T5811] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1783.917036][T16476] pwc: recv_control_msg error -71 req 02 val 2400 [ 1783.948037][T16476] pwc: recv_control_msg error -71 req 02 val 2600 [ 1783.971718][T16476] pwc: recv_control_msg error -71 req 02 val 2900 [ 1783.985157][T16476] pwc: recv_control_msg error -71 req 02 val 2800 [ 1784.017082][T16476] pwc: recv_control_msg error -71 req 04 val 1100 [ 1784.044039][T16476] pwc: recv_control_msg error -71 req 04 val 1200 [ 1784.079826][T16476] pwc: Registered as video103. [ 1784.111353][T16476] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input74 [ 1784.203112][T16476] usb 4-1: USB disconnect, device number 50 [ 1787.173965][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1809.727282][T24213] Bluetooth: hci2: command 0x0406 tx timeout [ 1845.577375][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 1848.625778][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1889.371896][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1889.378869][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26504/3:b..l P26503/1:b..l P26507/1:b..l [ 1889.389982][ C1] rcu: (detected by 1, t=10505 jiffies, g=180605, q=708 ncpus=2) [ 1889.397774][ C1] task:syz.6.5202 state:R running task stack:27080 pid:26507 tgid:26505 ppid:24059 task_flags:0x40054c flags:0x00080000 [ 1889.412244][ C1] Call Trace: [ 1889.415524][ C1] [ 1889.418453][ C1] __schedule+0x125c/0x6730 [ 1889.422977][ C1] ? __pfx___schedule+0x10/0x10 [ 1889.427826][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1889.433194][ C1] preempt_schedule_common+0x42/0xc0 [ 1889.438474][ C1] preempt_schedule_thunk+0x16/0x40 [ 1889.443665][ C1] _raw_spin_unlock+0x3e/0x50 [ 1889.448334][ C1] __zap_vma_range+0x16f7/0x4a30 [ 1889.453284][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 1889.458565][ C1] ? find_held_lock+0x2b/0x80 [ 1889.463246][ C1] unmap_vmas+0x299/0x5f0 [ 1889.467572][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1889.472416][ C1] ? mas_next_slot+0x10a3/0x1960 [ 1889.477356][ C1] exit_mmap+0x1ef/0xa00 [ 1889.481601][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1889.486355][ C1] ? rcu_is_watching+0x12/0xc0 [ 1889.491123][ C1] ? uprobe_clear_state+0x49/0x260 [ 1889.496228][ C1] ? find_held_lock+0x2b/0x80 [ 1889.500916][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1889.506027][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1889.511668][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1889.517299][ C1] __mmput+0x12a/0x410 [ 1889.521360][ C1] mmput+0x67/0x80 [ 1889.525076][ C1] do_exit+0x8b1/0x2ae0 [ 1889.529231][ C1] ? __pfx_do_exit+0x10/0x10 [ 1889.533815][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1889.538835][ C1] ? find_held_lock+0x2b/0x80 [ 1889.543507][ C1] ? get_signal+0x7e0/0x21e0 [ 1889.548093][ C1] do_group_exit+0xd5/0x2a0 [ 1889.552594][ C1] get_signal+0x1ec7/0x21e0 [ 1889.557088][ C1] ? __pfx_futex_wake+0x10/0x10 [ 1889.561944][ C1] ? __pfx_get_signal+0x10/0x10 [ 1889.566791][ C1] ? do_futex+0x190/0x440 [ 1889.571117][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1889.576653][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1889.582809][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 1889.588174][ C1] ? rcu_is_watching+0x12/0xc0 [ 1889.592936][ C1] do_syscall_64+0x666/0x870 [ 1889.597520][ C1] ? clear_bhb_loop+0x40/0x90 [ 1889.602190][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.608071][ C1] RIP: 0033:0x7f322719de59 [ 1889.612473][ C1] RSP: 002b:00007f32280d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1889.620877][ C1] RAX: 0000000000000001 RBX: 00007f3227425fa8 RCX: 00007f322719de59 [ 1889.628835][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3227425fac [ 1889.636794][ C1] RBP: 00007f3227425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1889.644752][ C1] R10: 0000000000000058 R11: 0000000000000246 R12: 0000000000000000 [ 1889.652713][ C1] R13: 00007f3227426038 R14: 00007ffdee5344f0 R15: 00007ffdee5345d8 [ 1889.660686][ C1] [ 1889.663691][ C1] task:syz.0.5201 state:R running task stack:26200 pid:26503 tgid:26498 ppid:25770 task_flags:0x40054c flags:0x00080001 [ 1889.677165][ C1] Call Trace: [ 1889.680431][ C1] [ 1889.683351][ C1] __schedule+0x125c/0x6730 [ 1889.687867][ C1] ? __pfx___schedule+0x10/0x10 [ 1889.692712][ C1] ? mark_held_locks+0x40/0x70 [ 1889.697469][ C1] preempt_schedule_irq+0x50/0x90 [ 1889.702489][ C1] irqentry_exit+0x205/0xa00 [ 1889.707080][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1889.713049][ C1] RIP: 0010:unwind_next_frame+0x169e/0x2090 [ 1889.718937][ C1] Code: c1 ea 03 80 3c 02 00 0f 85 29 06 00 00 49 8d 7d 08 49 8b 5d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 c1 07 00 00 49 8d 7d 10 49 8b 6d 08 48 b8 00 00 00 00 00 fc [ 1889.738531][ C1] RSP: 0018:ffffc90002ff7410 EFLAGS: 00000246 [ 1889.744584][ C1] RAX: dffffc0000000000 RBX: ffffc90002ff77e8 RCX: ffffffff91d34504 [ 1889.752541][ C1] RDX: 1ffff920005fee91 RSI: ffffc90002ff77d8 RDI: ffffc90002ff7488 [ 1889.760500][ C1] RBP: ffff8880288dd380 R08: 0000000000000001 R09: 0000000000000007 [ 1889.768457][ C1] R10: 0000000000000200 R11: 0000000000017a48 R12: ffffc90002ff74d0 [ 1889.776413][ C1] R13: ffffc90002ff7480 R14: ffffc90002ff77e8 R15: ffffc90002ff74b4 [ 1889.784385][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1889.789761][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1889.795914][ C1] arch_stack_walk+0x94/0xf0 [ 1889.800502][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1889.806563][ C1] ? tear_down_vmas+0x2a5/0x600 [ 1889.811408][ C1] stack_trace_save+0x8e/0xc0 [ 1889.816082][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1889.821456][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1889.826384][ C1] kasan_save_stack+0x30/0x50 [ 1889.831055][ C1] ? kasan_save_stack+0x30/0x50 [ 1889.835890][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 1889.841294][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 1889.846493][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1889.852643][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1889.858533][ C1] ? tear_down_vmas+0x2a5/0x600 [ 1889.863374][ C1] kmem_cache_free+0x43e/0x6b0 [ 1889.868142][ C1] tear_down_vmas+0x2a5/0x600 [ 1889.872821][ C1] exit_mmap+0x469/0xa00 [ 1889.877061][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1889.881817][ C1] ? rcu_is_watching+0x12/0xc0 [ 1889.886582][ C1] ? uprobe_clear_state+0x49/0x260 [ 1889.891688][ C1] ? find_held_lock+0x2b/0x80 [ 1889.896361][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1889.901477][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1889.907116][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1889.912746][ C1] __mmput+0x12a/0x410 [ 1889.916808][ C1] mmput+0x67/0x80 [ 1889.920520][ C1] do_exit+0x8b1/0x2ae0 [ 1889.924674][ C1] ? __pfx_do_exit+0x10/0x10 [ 1889.929257][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1889.934276][ C1] ? find_held_lock+0x2b/0x80 [ 1889.938947][ C1] ? get_signal+0x7e0/0x21e0 [ 1889.943530][ C1] do_group_exit+0xd5/0x2a0 [ 1889.948032][ C1] get_signal+0x1ec7/0x21e0 [ 1889.952538][ C1] ? __pfx_get_signal+0x10/0x10 [ 1889.957380][ C1] ? do_futex+0x190/0x440 [ 1889.961709][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 1889.967244][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1889.973396][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1889.978677][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 1889.984043][ C1] ? rcu_is_watching+0x12/0xc0 [ 1889.988803][ C1] do_syscall_64+0x666/0x870 [ 1889.993392][ C1] ? clear_bhb_loop+0x40/0x90 [ 1889.998061][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.003942][ C1] RIP: 0033:0x7f131719de59 [ 1890.008345][ C1] RSP: 002b:00007f131805d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1890.016749][ C1] RAX: fffffffffffffe00 RBX: 00007f1317426098 RCX: 00007f131719de59 [ 1890.024709][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1317426098 [ 1890.032666][ C1] RBP: 00007f1317426090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.040630][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1890.048587][ C1] R13: 00007f1317426128 R14: 00007ffc6faedca0 R15: 00007ffc6faedd88 [ 1890.056560][ C1] [ 1890.059567][ C1] task:v4l_id state:R running task stack:26008 pid:26504 tgid:26504 ppid:24578 task_flags:0x400000 flags:0x00080000 [ 1890.073041][ C1] Call Trace: [ 1890.076307][ C1] [ 1890.079234][ C1] __schedule+0x125c/0x6730 [ 1890.083731][ C1] ? find_held_lock+0x2b/0x80 [ 1890.088412][ C1] ? page_table_check_set+0x4f7/0x930 [ 1890.093781][ C1] ? __pfx___schedule+0x10/0x10 [ 1890.098625][ C1] ? xas_find+0x32c/0x8e0 [ 1890.102955][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1890.108314][ C1] preempt_schedule_common+0x42/0xc0 [ 1890.113596][ C1] preempt_schedule_thunk+0x16/0x40 [ 1890.118787][ C1] _raw_spin_unlock+0x3e/0x50 [ 1890.123456][ C1] filemap_map_pages+0x173f/0x1fe0 [ 1890.128574][ C1] ? look_up_lock_class+0x55/0x120 [ 1890.133684][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1890.139142][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1890.144074][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1890.149531][ C1] do_fault+0x985/0x1750 [ 1890.153772][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1890.158885][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 1890.164160][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1890.169618][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 1890.174828][ C1] handle_mm_fault+0x37b/0xa30 [ 1890.179593][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 1890.184707][ C1] exc_page_fault+0x6f/0xd0 [ 1890.189206][ C1] asm_exc_page_fault+0x26/0x30 [ 1890.194044][ C1] RIP: 0033:0x7f57aa835000 [ 1890.198448][ C1] RSP: 002b:00007ffea7737598 EFLAGS: 00010206 [ 1890.204501][ C1] RAX: 00007f57aa835000 RBX: 00007f57aa894020 RCX: 00007ffea7737630 [ 1890.212457][ C1] RDX: 00007ffea7737630 RSI: 00007ffea7737618 RDI: 0000000000000002 [ 1890.220414][ C1] RBP: 0000000000000002 R08: 00007f57aa994af8 R09: 0000000000000000 [ 1890.228373][ C1] R10: 00007ffea7737240 R11: 0000000000000246 R12: 00007ffea7737618 [ 1890.236333][ C1] R13: 00007ffea7737630 R14: 00007f57aa997310 R15: 0000000000000000 [ 1890.244303][ C1] [ 1890.247308][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g180605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1890.259699][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=124739 [ 1890.267654][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g180605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1890.279092][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1890.289041][ C1] rcu: RCU grace-period kthread stack dump: [ 1890.294909][ C1] task:rcu_preempt state:I stack:26104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1890.306819][ C1] Call Trace: [ 1890.310084][ C1] [ 1890.313006][ C1] __schedule+0x125c/0x6730 [ 1890.317519][ C1] ? __pfx___schedule+0x10/0x10 [ 1890.322359][ C1] ? find_held_lock+0x2b/0x80 [ 1890.327034][ C1] ? schedule+0x225/0x2c0 [ 1890.331358][ C1] schedule+0xdd/0x2c0 [ 1890.335426][ C1] schedule_timeout+0x127/0x280 [ 1890.340270][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1890.345631][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1890.350917][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1890.356716][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1890.362167][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1890.366920][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1890.372200][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1890.377128][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1890.382312][ C1] ? rcu_is_watching+0x12/0xc0 [ 1890.387071][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1890.392871][ C1] rcu_gp_kthread+0x179/0x230 [ 1890.397537][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1890.402725][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1890.408527][ C1] ? __kthread_parkme+0x18c/0x230 [ 1890.413547][ C1] ? kthread+0x13a/0x450 [ 1890.417783][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1890.422968][ C1] kthread+0x370/0x450 [ 1890.427034][ C1] ? __pfx_kthread+0x10/0x10 [ 1890.431620][ C1] ret_from_fork+0x72b/0xd50 [ 1890.436292][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1890.441402][ C1] ? __switch_to+0x800/0x10f0 [ 1890.446074][ C1] ? __pfx_kthread+0x10/0x10 [ 1890.450681][ C1] ret_from_fork_asm+0x1a/0x30 [ 1890.455459][ C1] [ 1890.458466][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1890.464772][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1890.469963][ C0] NMI backtrace for cpu 0 [ 1890.469978][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.469996][ C0] Tainted: [L]=SOFTLOCKUP [ 1890.470001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1890.470008][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 1890.470025][ C0] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 1890.470037][ C0] RSP: 0018:ffffc90000007de0 EFLAGS: 00000046 [ 1890.470048][ C0] RAX: 0000000000000001 RBX: ffff88807e957300 RCX: 0000000000000001 [ 1890.470056][ C0] RDX: 0000000000000046 RSI: 0000000000000001 RDI: 0000000000000000 [ 1890.470064][ C0] RBP: ffff88805759e800 R08: 0000000000000005 R09: 0000000000000000 [ 1890.470073][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1890.470081][ C0] R13: ffffffff89c6e680 R14: ffff8880b8428640 R15: ffff8880b8428690 [ 1890.470091][ C0] FS: 0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 1890.470105][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1890.470114][ C0] CR2: 00002000000000c0 CR3: 00000000262d4000 CR4: 00000000003526f0 [ 1890.470123][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1890.470131][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1890.470140][ C0] Call Trace: [ 1890.470145][ C0] [ 1890.470149][ C0] advance_sched+0x7b0/0xd20 [ 1890.470165][ C0] ? find_held_lock+0x2b/0x80 [ 1890.470185][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1890.470202][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1890.470215][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1890.470236][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1890.470260][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1890.470279][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1890.470297][ C0] [ 1890.470302][ C0] [ 1890.470307][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1890.470321][ C0] RIP: 0010:sched_core_balance+0xa6/0xff0 [ 1890.470342][ C0] Code: 0e 00 e8 cd aa e2 09 5a 85 c0 0f 85 3d 0b 00 00 e9 02 0a 00 00 49 8d 7c 24 48 e8 85 9e e5 09 e8 40 b7 3b 00 fb 48 63 44 24 58 <48> c7 c3 c0 04 65 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 6c [ 1890.470354][ C0] RSP: 0018:ffffffff8e807b78 EFLAGS: 00000206 [ 1890.470364][ C0] RAX: 0000000000000000 RBX: ffffffff8e891480 RCX: 0000000000000000 [ 1890.470372][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80 [ 1890.470381][ C0] RBP: ffffffff8e807c98 R08: 0000000000000001 R09: 0000000000000000 [ 1890.470389][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b4c0 [ 1890.470397][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843b4c0 [ 1890.470412][ C0] ? sched_core_balance+0xa0/0xff0 [ 1890.470431][ C0] ? lock_acquire+0x1b9/0x370 [ 1890.470448][ C0] finish_task_switch.isra.0+0x538/0x10c0 [ 1890.470467][ C0] __schedule+0x1264/0x6730 [ 1890.470483][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1890.470502][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1890.470518][ C0] ? __pfx___schedule+0x10/0x10 [ 1890.470534][ C0] ? rcu_is_watching+0x12/0xc0 [ 1890.470551][ C0] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 1890.470568][ C0] schedule_idle+0x54/0x80 [ 1890.470584][ C0] do_idle+0x35e/0x5b0 [ 1890.470601][ C0] ? __pfx_do_idle+0x10/0x10 [ 1890.470618][ C0] ? do_idle+0x12/0x5b0 [ 1890.470634][ C0] cpu_startup_entry+0x4f/0x60 [ 1890.470651][ C0] rest_init+0x251/0x260 [ 1890.470664][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1890.470679][ C0] start_kernel+0x48e/0x490 [ 1890.470698][ C0] x86_64_start_reservations+0x24/0x30 [ 1890.470719][ C0] x86_64_start_kernel+0x12b/0x130 [ 1890.470739][ C0] common_startup_64+0x13e/0x158 [ 1890.470762][ C0]