last executing test programs: 7m24.136792339s ago: executing program 2 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0xe00, 0x0, 0x42804}, 0x84) 7m23.965065939s ago: executing program 2 (id=1378): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xfffffff7, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000000c0601080000000000040000010200090900020073797a31000000000900020073797a30000000000900020073797a32000000000900020073797a3100000000090000050001000700000005000100070000000500010007000000d93b2fdbc640a8aaf0cae401518a20b3eb1be26087217fe97690"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x3f00) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000006800010006010000fddbe00500000300000000000c00020001000000040000000800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000015}, 0x24004000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffff4cf7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000200)={r8, 0x7}, &(0x7f0000000280)=0x8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m22.748502815s ago: executing program 2 (id=1380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ce}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x10000000000001, 0x0, 0x3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, 0xffffffffffffffff, r7) sendmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000200)="3fb455037f9a1285676aa6672e8d5c7dac19592546a2d62119caa45a23b47ad295771e74ab19e1e47804ac1910899d6d5f684651c9159036551583efdd0c4e3f82444a983077a68646f86bf0cd7f32a6246330ffabf161ed4167f8051e83285094631b04a3cbaf99619efe96fc51ececc0a313cfd34d7458657eaa5ab89eaf2b545f9f47001d15cc245189f147b2b854bced5b2c4dc96b6af3899a677045d2d2e6aa9367764ef2f53c784c714a29e037cd90a564ab1a13dcbd065903e182041ed115b3fb52aac395500767a75924eb9b07c443e1b396fc895d2ec112620982658412", 0xe2}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="eda7bfe5d5bda23d09d62798d6a1c4be0e1155394a5f3b5bd8c9c473e9", 0x1d}], 0x3, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="00000ba618000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2], 0x60, 0x20000080}, 0x4000000) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r10, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) dup3(r3, r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 7m21.362952747s ago: executing program 2 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x21, 0x80002, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) chdir(&(0x7f00000001c0)='./bus\x00') (async) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000a60000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) (async) ptrace(0x10, 0x1) (async) landlock_restrict_self(r1, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x3, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5}, './bus\x00'}) (async, rerun: 64) open(&(0x7f00000000c0)='.\x00', 0x517002, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x68, 0x117, 0x2, 0x53, "2d08bd14ea0eb604489301e433481ebc7c17d584acc91d03f630cdaa0a72449f36b336c6859ede8873ca737c5f6ec75e97b5c408185d46c9b603a43990922d23aa0e1acb6b161999b08a84abade30c51a3090c"}, @iv={0x90, 0x117, 0x2, 0x7c, "0fbb493832b880403266c17d576ab4e157473e71993862eb33545934b4a9fc287437ca87c490dbcbe7e568b0affe753f61f4b92bef0c8cb0206ce537e96656daef53c0a99abdbccd7d93025621645f8a04b37273c6d0f26c595b042f4693c0cbcb96f280fddf103129cb799e4b6596e80c1b2b31e022f8471fd72d13"}, @iv={0xd0, 0x117, 0x2, 0xb6, "1405a847f600f74a947e6d893397cbbade43a8c7863c6ad48f32420fa34295bea76c76a1ed36125ba8f0a8e9e0f9a5c227fc690a5dc5d1bfee069ee5356bfba33eb4d3f8f1bb1a913206633cf052be9495563f3052e5513782120f432b2b9e72ba0c611ff2a9571019592388580f69b47ac3f315c22b810b7948125b9a48e7ba758bce73d77e22cb87f05dad16021e38d72fc9947c1326921c3dbfefd00649bd77cf74ecbfc9d930aecda914abf2a8c74ba1a758e164"}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x240, 0x48005}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000740)="5f56bf9c7f2fcb6eefca90df1e4b24e7f81b49278e441f7c8ad1b9687d0098ba3e2d4c57901ed4c3f1bfbb3fe8065ef9053a8adce7b0711acdbd3190672129e5a73b5f4363c6a2edf9956aab86bb692558c6688b1cfd540d3f4e8084f569c61c9d479fc79b65a226580c9d527db6683d6411a0c4395895d8a09ce1a96d30bae07d1c51d3d0249cbbaf34a021ffd3ca939570f144e01a6d02cc7e1b81704fb1c931a37f4ab9c6edd0f7f4b5c106d24c2b72d3e106ca2658", 0xb7}, {&(0x7f0000000800)="cc751a19ae32f6717ad46174bcb26bea446c75829baee855db26f961261e98d6bc737326968ce89bff433e5f3c2848f80d655ed9b40a060e1558aafc1af46ec2e74db6481a7959e929994af457b544f415aa172eb3de336f1108d5b2e74cae2230525d76b6d8c94f628799287d8268bd26129d31aa95e3b26416df55aeb08ed8a523ef9704d339672e4407d6bcfdcbed2a16c8518880c0978e20edfe845fba76286d01a81fc9af5c7a", 0xa9}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000050000000000000001701000002000000fd87e869dd92479845b35881d816f0c91bff25712cccf6197b8d1fbf730fbc28cd70f582c598cad01ce7502da12954979e8572d819b8cb1d854092fe1800000000000000170100000300"/124], 0x80, 0x20008040}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000f00)="6e3ceb638ff717023bd9ec2582b0d95d198c48b2ab86145170aa4472c51c8f4de5724d815dc8412f443e950b78dfb35ea1abe5ff9f9ec40846f5fc1e369c623d91e8b64c42a21c95ca6e426985c9012b1bd57d266eb6d543e8fe30d5efe5b79cc6e3444b94a5a1ebf9a812f047cef9ec1161be3be157ef962cc4e0a46ebd70b78802547e3bda", 0x86}], 0x1, &(0x7f0000000a40)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x8000}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="72e08559bdf743314474327fd372fddbd46323279ef01037a5c1d2fc4cbf1508e8d67f330e50b86c74294b5647b8258f17e5f88408201d5f5818330226854cf63bb435c16eb11c5b367313c1c01c4fc32139b04d147d6734484a5150db30e60e75ac54c6295f6cbd167cbad828e5bdbcf74cda6336b61f2ac58f1383b695ebd081b61165b586da16305515391b550b3ddd21f3337544f86898b3fa36b6e26666916ec27e149662d83e8185934d54285bd6a035837526e5e27fddbc2c564e5068f5acc53fb6e523b8ae41f86423680a9ab53c66d0cc51730004d0", 0xda}, {&(0x7f0000000bc0)="5c9731264669ba18102e7b820c82a1c7445cc9344291893208ab067150255f5546b8f0a80e4fdc02ae838b4aa63e9ac513739ae181f6dd04b91238a0075c80361c8c7735bd8cbd729347c67c99d67c137b73f33b57e88808c038051a965a9db4be6ffe596748801e309d9fc7163e469f5830e1daed194ca0c360ccea0e1837b0582122fd8867f455eb3a6500367467182cb966ce0c3a75b327e4cc788da528dad004876c54c6b661198466a35e389837f29272b9ea94a4ac4ecb8e6fb22e2c2ae4710a634e4ec0298fbf858757270af3deb0d65b13345b48e5b349286b23afe7e4f3adceafbaee4e92ab27757e9de850", 0xf0}, {&(0x7f0000000cc0)="d993c6e677a6bd6c3195de970623e11aed247952335c488b199119edd77670e9a2d08adc7f359f7c60f55a03ff90868b0d73d79d0212bc09a71d3624fff30ac1379d0b6e12ea65d0cdecc2d4573456dc1fab8321f9da3739a657dc9f68354c61671b74282f3bab6a04b0ec993d2ec85fa99f8f8f0cf199b26e06787ac0187ee24ef22b97c781324bd0fd7d79042f33a3c26047d744e4f5a4411c8eeba9ae33f58620b006e46623df26d232c1272d34a13d4d4048c56c9359f5c3e3ede100601c", 0xc0}], 0x3, &(0x7f0000000dc0)=[@op={0x18}], 0x18, 0x11}], 0x4, 0x20000000) (async) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x24a480, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x10000, 0x6, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x65, 0x0, 0xf, 0x2f, 0x0, @loopback, @private=0xa010100, {[@timestamp={0x44, 0x10, 0x46, 0x0, 0x5, [0x4, 0x1, 0x14d]}]}}}}}) 7m17.856234898s ago: executing program 2 (id=1391): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x40004) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) prlimit64(0x0, 0xf, &(0x7f00000004c0)={0x4, 0x7ffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', './file0', [], 0xa, "d0281bee3fc508e9462440040ce649eb0cb3f1cdf21c8beafa175a8524ffafdb10a2f670164a97f9ffc6a13c6d37963260c7440f4ddded29104f1cf16875d76632f07787ded571a24857f49e18db7e4f78389de5560f07a0a14a940dca994ceb1d71f01896ee9a8b954af924056ce2d0703effad72adde32e59feb65d40ac6ab5219c1db5838f015cfddb554"}, 0xffffffffffffffd0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14d482, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x541903, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x806, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x2194e5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1840, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x2a, 0x100000005, 0x0, &(0x7f0000000080)) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) 7m15.18244122s ago: executing program 2 (id=1404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000, 0x4}, 0x48) 7m14.460604378s ago: executing program 32 (id=1404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000, 0x4}, 0x48) 5m34.642168345s ago: executing program 5 (id=1792): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x44080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000, 0x0, r2, 0x1a81c5, 0x796cca48, 0x2, 0x3b5d72}) r3 = open_tree(r0, &(0x7f0000006180)='./mnt\x00', 0x100) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x248, 0x178, 0x178, 0x248, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'syz_tun\x00', 'geneve1\x00', {0xff}, {0xff}, 0x88, 0x2, 0x3d}, 0x12a, 0x198, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@cluster={{0x30}, {0x80000, 0x2, 0x6, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x40000}}, {0x28, '\x00', 0x4}}}}, 0x340) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@local, @dev}, &(0x7f0000000100)=0xc) 5m33.980394344s ago: executing program 5 (id=1796): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60102b00000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m33.729355706s ago: executing program 5 (id=1799): r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x1, 0x35}]}]}}, 0x0, 0x32}, 0x28) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x9, {{0x2, 0x4e21, @rand_addr=0x64010102}}}, 0x88) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000000080)={0x27, r9, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r8) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c", 0x4}], 0x1}}], 0x1, 0x2090) sendto$inet(r6, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', {0x3}, 0x8}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000001c0)='\'-@[](%N^\x00', 0x0, r1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff030000000905820208"], 0x0) 5m29.319338797s ago: executing program 5 (id=1812): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x148, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbd4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40800}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x400c050) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0xfffe) syz_emit_ethernet(0x42, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) r3 = socket(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000002000000040000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xe033d87df2635ce8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x842, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r4]) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r7, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', '', [], 0xa, "201100000000b073dbc2e1e649efc1d73828a06efe233dc8013ff03212750dda49e8d9eed99dedf65d632853f4dfe6d11ac5eb9dc22d5ec2b368dd84d61c"}, 0xffffff9b) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x80, r9}) 5m27.211967621s ago: executing program 5 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd0a, &(0x7f00000006c0)={&(0x7f0000000240)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0xa6ffffffffffffff) 5m26.728026898s ago: executing program 5 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x78}, 0x1, 0x12000000, 0x0, 0x4404c810}, 0x0) 5m26.234693824s ago: executing program 33 (id=1824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x78}, 0x1, 0x12000000, 0x0, 0x4404c810}, 0x0) 5m11.98122226s ago: executing program 6 (id=1825): mknod(0x0, 0x8001420, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xf) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r1 = getpid() (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES8=0x0], 0x15) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYBLOB, @ANYBLOB="0200", @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="040000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0], 0x5c, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01072bbd7400000000000500001d953bdce6f4648b751441705a18466cb5645a4dc4563592ee1184b6f93f533071d8a2232a06a5c30b52ee2f5b4842dfe6882b181d6c52515f7513d2cb74816d2bc4d11348f74e60743c347947942a7ed167a5b33d9a2f03491a1dc3ef7a54a2bb6ca69e91c5a4f2cdc51ca34c6a01a1f0c71be2025730883d1522277f963614a9c9e0bf14eb45413801dfd02780807737352793e8fab85cc52e5b093bb168a36ba594d1753d01565bcc275ae14435fe765a1ddf90aa651102737bb78af86281506a3216aee1a0b01a174e4196f282d7b2bf7288b5bc6588498576ab303a99a455778fc4"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) recvmmsg(r7, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x40012142, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x82, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x4f) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r10, 0x5}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4m55.465322866s ago: executing program 34 (id=1825): mknod(0x0, 0x8001420, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0xf) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r1 = getpid() (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES8=0x0], 0x15) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000200", @ANYBLOB, @ANYBLOB="0200", @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="040000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0], 0x5c, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01072bbd7400000000000500001d953bdce6f4648b751441705a18466cb5645a4dc4563592ee1184b6f93f533071d8a2232a06a5c30b52ee2f5b4842dfe6882b181d6c52515f7513d2cb74816d2bc4d11348f74e60743c347947942a7ed167a5b33d9a2f03491a1dc3ef7a54a2bb6ca69e91c5a4f2cdc51ca34c6a01a1f0c71be2025730883d1522277f963614a9c9e0bf14eb45413801dfd02780807737352793e8fab85cc52e5b093bb168a36ba594d1753d01565bcc275ae14435fe765a1ddf90aa651102737bb78af86281506a3216aee1a0b01a174e4196f282d7b2bf7288b5bc6588498576ab303a99a455778fc4"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) recvmmsg(r7, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x40012142, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x82, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x4f) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r10, 0x5}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2m38.452355575s ago: executing program 0 (id=2602): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0xc, 0x82, @vifc_lcl_addr=@multicast1, @local}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x1, 0x2) 2m38.283235717s ago: executing program 0 (id=2604): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {0xffe4}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 2m38.064965786s ago: executing program 0 (id=2606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@empty, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x2c, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x10, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x3, 0xfe}, 0x0, 0x4}, [@lastused={0xc, 0xf, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 2m38.016838714s ago: executing program 0 (id=2607): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000a00000000000000", 0x58}], 0x1) (async) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000880)=ANY=[@ANYBLOB="c8f4a10f98e26fcddc9083f51d158b274e78449481189525b602931bc15af9bf42b90a8aede17210243af7a46a2bb40886051550305ac8c31b961f8a66a9d1b64e9785a7b6af3f12e30428b9e5375f9849463a3d0581b6540a16417a9f6c5c85c1f9310bb28a"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x5e5201) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x100) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000000000)) (async) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f00000007c0)=[{0x0, 0x4000, 0x0, 0x0}, {0x3c, 0x10, 0x0, 0x0}, {0x1, 0x0, 0xf1, &(0x7f0000000080)="4faf34201678821344e7229123ca6b4aff8a3c10c4c812cb1811bdeaae336c01f5a22b1747c79fa4736e4df23ef1eb64334a16424b7435525157e095a33e88e6509fc154e22fd045c9cca268b1feaf71734c0e9c92bde096b0465a9bb96514ae3394b88a0bca76db3dfc369b923a6e790c94049744e7769e2caacce5089beb9ca29b50b00121698a9c55acc34f3e5af6b4628a6ef6ba1574a3c735d183c2101c68c1b40edc4b1819700f03ba2710f0d22af422f8f8ec14f4caff9b8ba8c9f2a754d43aaf2b89ad94316a8d42af0118451b1d0b2d1fc1c128ee3b78ba104e8f0df8cebc99bc5190c0774ef3b1e004caedb4"}, {0x401, 0x1000, 0x7c, &(0x7f0000000180)="f1af61dbd5f2905ca3d444fa59696d834077f77723d7b1548cc2009ac9ac7ffc59c039a8614ccc8b95cb7f75ff17d1f7033a8ea17236cd152359bfb11b477f22180d4eb74fc11cb1ae956c3b60af90b263c5188783d6f149cb7d7a60e25f4f589fa4ebf96f1579bc24f6807473764c9180ba476ad390532194482fea"}, {0x2, 0x800, 0x1000, &(0x7f0000001780)="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"}, {0x820b, 0x8000, 0x5d, &(0x7f0000000300)="8527b8b92d356646fe72980c2da2ca17a022c8c5ee501701c6e953f994b8a88976287af60d3e49663ee4ae9da73ff27ba6131913c5e5f1a35384879a28e2bdbd9dcd2bd19e0f232b8a178b1833a7bd0b856b0b0e7f1e0fe6c0683772f6"}, {0x7fff, 0x0, 0xdb, &(0x7f00000003c0)="7c4add60dbd670621478ecc1fe7b264e59420702fd6b09a7a4b1b4419c4d0862c5b518fdac22a9fcc8bcd52e8c5b83313a2af27319eb07d62fa4fb4575286545b2e51371de2992852affe823537f8dffe41f1587599b3403920a35d5054eb3feb61a6081078de9f1f93a3a6dcad715769874de7fd5b33487abf113e3c7d1d55bc72a3d685137b3dd3214f3f8e61b90bf7cafdaa2a4a587d13fa4b5562e2e865f0ac8b487aa47d425e12811289fa613ecf625fe85ad27a4ca20a830aa2cf0c8f184f42239ae8cfff07c435f0de7697d502dbcb608be3be1d56ae6d5"}, {0xc96, 0x1, 0x45, &(0x7f00000004c0)="68d6f56736ad1dff19974450439e633a52d9b77bfb63f4e4dc44707588e38114ca3470c2ee23679cdbeb2ebdaf215c77ddd17a9cd8b61a229a5619d5690a7e105931bb85d6"}, {0x9174, 0x8001, 0xd6, &(0x7f0000000580)="f229d7b8bdf15078a8a32bb22923c34771ff842d4af8ad36793f211c773c0e758fe1f8ff4b86676fda4cc1c607653272de6682888d4a578968cde11a90628057d68c6a7135e39efb7f17d10c545d34354359963719c204a99dc31bd7f69f1a77e1f2622dc7ac33b27f2cef65b70a6361e6ddda65cfd27908025c4824e055aea0446a1af41393442e42945900df43d312300d21eafdcdc355658c7a6b823c94176f46b39e74eebea479881d38a72ae2cf37940a1296d7857bce1df3daceb94aa1e3afe5720c64518a69db7d654e5d889c85cee79e02d9"}, {0x5, 0xc800, 0x74, &(0x7f0000000680)="cd21605043055713b6a294dc1c1f7d5d459c627436187f1ab6fabea3d944d921e40a50882ba40e022304c81316f506067ea7fc06849f1ee16199a637baacb1a08e7a5e7e3f0ce099889cb100c703bce2ae877b1f63de9587634a446279e4e4ebff1b4583d69943de62991531291323e55c83f268"}, {0x835, 0xe200, 0x7f, &(0x7f0000000700)="178c6aeed0ced49f094043df18d3e099bed4845378f2c5e627760cff17ef202b1cac254ae3eb53fef0c6a970f64bf61b5dde38bdf618f2422945ecd300e728005bb18d160cbaeb3aa7002521e209e9ffcd3ff8c9877a051b3c0f7e7b32cc025a7196372985bf63e161e777bc91ebdc6353c9cd16ae3c3fb79e6eac8ce6e681"}, {0xe, 0x8001, 0x0, &(0x7f0000000780)}], 0xc}) (async) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='f2fs\x00', 0x1800, &(0x7f0000000000)='discard') 2m34.584965024s ago: executing program 0 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000002000000000000000000000000000000000000000000000fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) 2m32.973382852s ago: executing program 0 (id=2632): sync() (async) sync() (async) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0xa3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async, rerun: 64) acct(&(0x7f00000001c0)='./file0\x00') (async, rerun: 64) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 2m16.803774381s ago: executing program 35 (id=2632): sync() (async) sync() (async) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/205, 0xcd}], 0x1, 0xa3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async, rerun: 64) acct(&(0x7f00000001c0)='./file0\x00') (async, rerun: 64) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 11.064851818s ago: executing program 3 (id=3240): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r1 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac2(0x3, 0xa0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r1) close(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) 9.55898812s ago: executing program 1 (id=3246): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 7.881087833s ago: executing program 8 (id=3256): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x4c, r3, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r5 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f00000005c0)={0xf, 0x400000000000, 0x0, 0x1, 0x7, r6, 0x0}]) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x713480, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080), 0x4) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r12 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_GUEST_MEMFD(r12, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r13, 0x0) openat$vcs(0xffffff9c, 0x0, 0x10001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 7.696962062s ago: executing program 3 (id=3257): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x3, &(0x7f0000000080)={0x12, "b3d92cdddf96c2069064264ccfc6000000fa00008c00"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.215302959s ago: executing program 8 (id=3260): bpf$MAP_CREATE(0x0, 0x0, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) setresuid(0xee00, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905"], 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x7, 0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x34, &(0x7f000002eff0)={0x0, 0x0}, 0x10) read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0x2020) 6.532065539s ago: executing program 8 (id=3264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000"], 0xe4}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xff86}, [@jmp={0x5, 0x0, 0x6, 0x7, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) readlink(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) 6.025357184s ago: executing program 1 (id=3266): socket$kcm(0x21, 0x2, 0xa) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x1, 0x80000000}) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x3, 0x0, 0x22}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x2, r2}) write(r0, &(0x7f00000000c0), 0x0) (fail_nth: 1) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r5, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 4.702761723s ago: executing program 7 (id=3269): bpf$MAP_CREATE(0x0, 0x0, 0x48) 4.540691922s ago: executing program 3 (id=3270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4, 0x7ff}) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='rdma']) 4.540164979s ago: executing program 1 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="a5652ec77d0cea1d7111ab00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x56, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r1], 0x40}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) 3.739994717s ago: executing program 7 (id=3272): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe3}, {0xffe0, 0xb}, {0x9, 0xfff2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b9, 0x4000010, r1, 0x9e5c1000) r8 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfff9, 0xfffffffffffffff7, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r12, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x20, 0x140c, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) r13 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xf7}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@alu={0x7, 0x1, 0x8, 0x1, 0x9, 0xffffffffffffffc8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) fchmod(r10, 0xb0) 3.424575839s ago: executing program 3 (id=3273): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000004e80)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="db", 0x1}], 0x1, &(0x7f0000001680)=[@sndinfo={0x20, 0x84, 0x2, {0xffff, 0x200, 0x8, 0x6}}], 0x20, 0x4000840}], 0x1, 0x20000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "0001000000000100", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) poll(&(0x7f00000003c0)=[{r1, 0x10}], 0x1, 0xffffff7f) read$FUSE(r0, &(0x7f00000049c0)={0x2020}, 0xfffffe4d) 3.315325321s ago: executing program 1 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000006680)) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x800000) lseek(r3, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x7ff, 0x1, 0x3, 0xa, 0x7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x10}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffff7f0003000000000000360001000800000095fb21c941a68760a68e5560000000000000009500000b00000000"], &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4ebc64e899b6b86153a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r7 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r7, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) getsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) 3.091652168s ago: executing program 4 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000f5010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x8044) 3.02517878s ago: executing program 8 (id=3276): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x7f7}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.024795059s ago: executing program 4 (id=3277): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.627099837s ago: executing program 4 (id=3278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802c0001800b000100736f636b657400001c000280080001400000000108007f00000000820800024000000002280001800b0001006f626a72656600001800028008000340000000170900040073797a30000000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000) 2.584635312s ago: executing program 4 (id=3279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001f0ffffff00000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0) 2.509053235s ago: executing program 4 (id=3280): epoll_create1(0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc2102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4f0000003bb55f3b0d8132e0adbc5d1293546e869c2fa9f3d8d052364ff3ca33a7b965afe122f4cba381216cd694a5c9a87db37f76b58bb77c86cd0cdc6edd845f3fc3feb0e6c2ba6d194d2558821128fbdc67d21541c7b4a40d5ee087ad2b6885a0ba2f321846d74866be1bde56e28f2d8b77f8e427831b634ce6864638e09f3779cbd6c71c985c285cecd17e5067dd98d0bc62ca872bdf1ada0ff059def8f4d7bb", @ANYRES16=r1, @ANYBLOB="0d022abd7000fedbdf25010000000500060002000000050005000400000008000300060000000800040026000000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xf8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x200500, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x648c41, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) close(r5) close(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000240)={0xef21, r3}, 0x0) landlock_restrict_self(r3, 0x0) close(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 1.806860147s ago: executing program 7 (id=3281): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x20500) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "e1089a4e21a761daadd6e288039a4988"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xff}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x5, 0x100, 0x2, 0xa6b1, 0xb6c]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0xd0}}, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xffff0001, 0x0, &(0x7f0000000240)}, {0x4, 0x4c, &(0x7f0000000280)="1496318b5220b5aa1fca773cfaf35597d5ff05e5d8b0f4b96f7d6916540b60c7d38aeb7aef3bed3d27c72752f916e02cdb9fa779aba24799b773e92e3c33e506acb34ec4bf86ad152bf6fc24", 0x1}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x1, 0x400, 0xc4, 0x6, 0x8000000000000001, 0x0}) fcntl$lock(r0, 0x0, &(0x7f0000000400)={0x0, 0x4, 0x6, 0x5e, r3}) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) fcntl$lock(r4, 0x5, &(0x7f00000004c0)={0x0, 0x1, 0x9704, 0xe, r3}) r5 = add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)={0x0, 0x0, @c}, 0x29, 0x0) keyctl$set_timeout(0xf, r5, 0x9) flock(r2, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x20, 0x8000, 0x401, 0x7, {{0xc, 0x4, 0x3, 0x32, 0x30, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast1, @remote, {[@end, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0xd, [{@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x8000) userfaultfd(0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xa0) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000900)={'veth0_macvtap\x00', @broadcast}) fcntl$setlease(r8, 0x400, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004815}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) flistxattr(r4, &(0x7f0000000a40)=""/137, 0x89) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000b00)={0x2, @meta={0x4131434d, 0x457cafdb, 0xdef7, 0x46c5, 0x64aef13c}}) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000c00)={0x3a, @private=0xa010101, 0x4e23, 0x3, 'dh\x00', 0x1e, 0x10fd, 0x24}, 0x2c) 1.805135955s ago: executing program 8 (id=3282): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x690042, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000940)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/fib_trie\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x700) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000840)={0x4, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0x88) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/85, 0x55, 0x0, &(0x7f00000005c0)=""/210, 0xd2}}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000024c0)={{r2, &(0x7f0000000740)='ns\x00', 0x103080, &(0x7f0000000780)={@align=0x8, {0x5, 0x0, 0x4364c8b4, 0xfffffffffffffff9}}, 0x8, &(0x7f00000007c0), &(0x7f0000000800)=0x8}, {[0x1, 0x3, 0xe8, 0x9]}, 0x5, 0x1000, &(0x7f00000014c0)=""/4096}) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x0, 0xc, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0xb}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x59}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x7, '\x00', r6, @fallback=0xd, r2, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0xb23, 0x1}, 0x10, r7, r8, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.543030642s ago: executing program 1 (id=3283): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe8000000000000000000000000000bbfe80000000000000000000003f0000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4"], 0x0) 1.542701617s ago: executing program 3 (id=3284): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0xfffffffd, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r3 = dup(r2) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="cc000205420100003f010000fbffffffe90200000400000000000000000000006d9c3e1275d5ae4f2543c06cb8329607a6c46dc146e4df2932e3048b349131889886ce03cead51cfd0be7e3a7625f42433c7eb3330722cb11c6989c00441e3b78b2c7d6108b6b41824bc25608dce89731ac4d4b61862dcbb3020a77e8269fda18c"], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) io_setup(0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) io_cancel(0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 1.065855512s ago: executing program 7 (id=3285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 1.063513179s ago: executing program 4 (id=3286): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000040), 0x1000, r3}, 0x38) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r4, r4, 0x0, 0xb) ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f00000029c0)) syz_emit_ethernet(0x76, &(0x7f0000002900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080045000068000040000001907864010100ac1414aa0b009078032f0000430007ff000300000089000000000000ac1414aa86230000000000065e00000000054eb8a600129606053d0006ff00800000b61af93a93831300ac1414007f00000107050000000000000000715259f91062892639cdbe2c86c58c4e237f8b1a7a9acb70c1b26b005509576469a08fefdf90c325a019bea0923b46eedc049f1a85958a55d916404b"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 747.194726ms ago: executing program 7 (id=3287): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = getpid() r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000240)=0x3, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000400)) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async, rerun: 32) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 32) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, 0x0) (async) fcntl$setsig(r7, 0xa, 0x12) (async) dup2(r7, r8) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 64) 596.693456ms ago: executing program 1 (id=3288): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r0, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000000580)="d9e83bdbb3883b267debb390dcf9064ecb517aa60fe2df5b93edd169486df829a90b55a0a2dd0755a058077255496bb96d065e976854b20382b071b30db3d6894820b4b0c4c29b7c01e76a11dd37a309e33c2c94df4e156eed53f5ba2dbe150f91a70ba8d09b74cdc1bbd8c9d8ccb568bea9671dca7a2d94fb6164c9b23a9ec70fdff1db11c243ac56330c74c5e76b397b15d49b2f7af084d26032717d82c83821fddca620680dbcc4030e3434f1fd867dc1e350ae88cf8062de5f", 0xffffff8f}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x0, 0xa, 0x2000, 0xffffffffffffffff, 0xe, '\x00', 0x0, r0, 0x2, 0x3, 0x2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_usb_connect$uac2(0x3, 0xa3, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x21, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x403, 0x1, 0x2, 0x2, 0x7f, 0x8}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x8}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 525.332125ms ago: executing program 3 (id=3289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000180)=0x80000001) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES8, @ANYBLOB="01"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000340)='wg1\x00', 0x4) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 162.538669ms ago: executing program 8 (id=3290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1006, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10002000005) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) mprotect(&(0x7f0000a80000/0x3000)=nil, 0x3000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0xfffffccf) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x2004880c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 0s ago: executing program 7 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300070000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) kernel console output (not intermixed with test programs): lNumber=0 [ 792.244266][ T29] usb 5-1: config 0 descriptor?? [ 792.281178][ T29] usb 5-1: can't set config #0, error -71 [ 792.306674][ T29] usb 5-1: USB disconnect, device number 78 [ 792.785596][T16986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.038494][T16982] vivid-000: reconnect [ 793.149962][T17022] tmpfs: Bad value for 'nr_blocks' [ 793.306320][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'. [ 793.474425][ T7838] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 793.634739][ T7838] usb 9-1: device descriptor read/64, error -71 [ 793.658216][T17043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.666633][T17043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.681463][T17043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.689225][T17043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.950471][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2747'. [ 793.959639][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2747'. [ 794.329396][ T7838] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 794.481513][ T7838] usb 9-1: device descriptor read/64, error -71 [ 794.521356][T17054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2751'. [ 794.629255][ T7838] usb usb9-port1: attempt power cycle [ 794.700648][T17058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2750'. [ 794.993489][T13772] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 795.505886][ T7838] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 795.547925][ T7838] usb 9-1: device descriptor read/8, error -71 [ 795.610953][T13772] usb 5-1: Using ep0 maxpacket: 8 [ 795.922008][T13772] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 795.981700][T13772] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 796.076853][T13772] usb 5-1: config 0 interface 0 has no altsetting 0 [ 796.076986][T13772] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 796.077015][T13772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.125850][ T7838] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 796.148016][ T7838] usb 9-1: device descriptor read/8, error -71 [ 796.188237][T13772] usb 5-1: config 0 descriptor?? [ 796.266165][ T7838] usb usb9-port1: unable to enumerate USB device [ 799.351798][T17086] tipc: Started in network mode [ 799.356681][T17086] tipc: Node identity ac1414aa, cluster identity 4711 [ 799.364491][T17086] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.371710][T17086] tipc: Enabled bearer , priority 10 [ 799.512410][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.661663][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.811272][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.971551][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.121152][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.270776][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.688595][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 800.688613][ T30] audit: type=1400 audit(1781434965.141:1346): avc: denied { setopt } for pid=17080 comm="syz.7.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 800.720700][ T4983] udevd[4983]: worker [7335] /devices/virtual/block/nbd0 timeout; kill it [ 800.724445][T16897] tipc: Node number set to 2886997162 [ 800.735129][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 800.811738][ T4983] udevd[4983]: seq 16693 '/devices/virtual/block/nbd0' killed [ 801.018799][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.113169][T17092] FAULT_INJECTION: forcing a failure. [ 801.113169][T17092] name failslab, interval 1, probability 0, space 0, times 0 [ 801.150805][T17092] CPU: 1 UID: 0 PID: 17092 Comm: syz.7.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.150834][T17092] Tainted: [L]=SOFTLOCKUP [ 801.150840][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.150851][T17092] Call Trace: [ 801.150857][T17092] [ 801.150864][T17092] dump_stack_lvl+0x100/0x190 [ 801.150888][T17092] should_fail_ex.cold+0x5/0xa [ 801.150911][T17092] ? bpf_test_init.isra.0+0x88/0x100 [ 801.150928][T17092] should_failslab+0xc2/0x120 [ 801.150947][T17092] __kmalloc_noprof+0xe0/0x850 [ 801.150978][T17092] bpf_test_init.isra.0+0x88/0x100 [ 801.150998][T17092] bpf_prog_test_run_flow_dissector+0x236/0x980 [ 801.151027][T17092] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 801.151050][T17092] ? find_held_lock+0x2b/0x80 [ 801.151066][T17092] ? __fget_files+0x215/0x3d0 [ 801.151091][T17092] ? __fget_files+0x21f/0x3d0 [ 801.151118][T17092] ? fput+0x79/0x100 [ 801.151141][T17092] ? __bpf_prog_get+0x97/0x2a0 [ 801.151163][T17092] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 801.151186][T17092] __sys_bpf+0x1725/0x4b90 [ 801.151215][T17092] ? __pfx___sys_bpf+0x10/0x10 [ 801.151238][T17092] ? proc_fail_nth_write+0x9f/0x220 [ 801.151257][T17092] ? find_held_lock+0x2b/0x80 [ 801.151277][T17092] ? find_held_lock+0x2b/0x80 [ 801.151292][T17092] ? ksys_write+0x190/0x250 [ 801.151310][T17092] ? ksys_write+0x190/0x250 [ 801.151332][T17092] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 801.151357][T17092] ? kernel_write+0x6b3/0x6c0 [ 801.151376][T17092] ? __fget_files+0x215/0x3d0 [ 801.151409][T17092] ? fput+0x79/0x100 [ 801.151432][T17092] ? ksys_write+0x1ac/0x250 [ 801.151450][T17092] ? __pfx_ksys_write+0x10/0x10 [ 801.151472][T17092] __x64_sys_bpf+0x7b/0xc0 [ 801.151488][T17092] ? lockdep_hardirqs_on+0x78/0x100 [ 801.151511][T17092] do_syscall_64+0x115/0x870 [ 801.151533][T17092] ? clear_bhb_loop+0x40/0x90 [ 801.151554][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.151572][T17092] RIP: 0033:0x7fdf9179ce59 [ 801.151587][T17092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.151604][T17092] RSP: 002b:00007fdf92732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 801.151621][T17092] RAX: ffffffffffffffda RBX: 00007fdf91a15fa0 RCX: 00007fdf9179ce59 [ 801.151633][T17092] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 801.151651][T17092] RBP: 00007fdf92732090 R08: 0000000000000000 R09: 0000000000000000 [ 801.151662][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.151673][T17092] R13: 00007fdf91a16038 R14: 00007fdf91a15fa0 R15: 00007ffd80c9ba98 [ 801.151697][T17092] [ 801.585151][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.791957][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 801.854905][T17102] gretap0: entered promiscuous mode [ 801.887003][T17102] macvlan2: entered allmulticast mode [ 801.919864][T17102] gretap0: entered allmulticast mode [ 802.081146][T13772] usbhid 5-1:0.0: can't add hid device: -32 [ 802.089828][T17108] ocfs2: Bad value for 'barrier' [ 802.100045][T13772] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 802.166992][T13772] usb 5-1: USB disconnect, device number 79 [ 803.118421][ T30] audit: type=1400 audit(1781434968.922:1347): avc: denied { read write } for pid=17124 comm="syz.4.2771" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 803.184074][ T30] audit: type=1400 audit(1781434968.922:1348): avc: denied { open } for pid=17124 comm="syz.4.2771" path="/21/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 803.252187][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 803.365115][T17110] kexec: Could not allocate control_code_buffer [ 803.423985][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 803.447820][ T9] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 803.464922][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.499379][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 803.533336][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.597813][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.611617][ T9] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 803.625771][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.656263][ T9] usb 9-1: config 0 descriptor?? [ 803.665120][T17108] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 803.715123][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input58 [ 803.788300][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 804.015270][T13772] usb 9-1: USB disconnect, device number 6 [ 804.021146][ C0] pxrc 9-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 804.673468][ T29] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 804.866239][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 804.882507][ T29] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 804.908502][ C1] net_ratelimit: 3 callbacks suppressed [ 804.908519][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 804.921183][ T29] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 804.951459][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 804.976121][ T29] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 805.011944][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.044036][ T29] usb 8-1: config 0 descriptor?? [ 805.920819][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 805.936378][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 805.956418][ T29] usb 8-1: USB disconnect, device number 35 [ 806.009185][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.369777][T17163] sit0: entered promiscuous mode [ 806.377465][T17163] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 806.385371][T17163] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2785'. [ 806.394446][T16897] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 806.556298][T16897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 806.580037][T16897] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 806.605576][T16897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.618038][T16897] usb 5-1: Product: syz [ 806.623200][T16897] usb 5-1: Manufacturer: syz [ 806.633635][T16897] usb 5-1: SerialNumber: syz [ 806.694103][T16897] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 806.912090][T17182] usb usb8: usbfs: process 17182 (syz.8.2791) did not claim interface 0 before use [ 806.936369][T17183] usb usb8: usbfs: process 17183 (syz.8.2791) did not claim interface 0 before use [ 807.099928][T13772] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 807.111720][T16897] usb 5-1: USB disconnect, device number 80 [ 807.128963][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 807.131253][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.189052][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 807.218361][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 807.240422][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 807.260107][T13772] usb 2-1: device descriptor read/64, error -71 [ 807.315341][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'. [ 807.526681][T13772] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 807.750999][T13772] usb 2-1: device descriptor read/64, error -71 [ 807.760283][T17195] netlink: 'syz.4.2795': attribute type 8 has an invalid length. [ 807.881881][T13772] usb usb2-port1: attempt power cycle [ 808.231901][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.671739][T13772] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 808.741615][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 808.751099][T13772] usb 2-1: device descriptor read/8, error -71 [ 808.751290][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 809.011949][T13772] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 809.056682][T13772] usb 2-1: device descriptor read/8, error -71 [ 809.184173][T13772] usb usb2-port1: unable to enumerate USB device [ 809.258431][T17186] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 809.264790][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 809.343211][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 809.942293][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 810.063110][T17235] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 810.146675][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2803'. [ 810.156966][T17239] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2803'. [ 810.177217][T17186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 810.183879][T17186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 810.189906][T17186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 810.195796][T17186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 810.202875][T17186] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 810.208848][T17186] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 810.215604][T17186] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 810.223055][T17186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 810.228992][T17186] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 810.237839][T17186] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 810.371376][T17245] IPVS: set_ctl: invalid protocol: 22 172.30.1.2:20003 [ 810.465262][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 810.507967][ T9] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 810.516025][ T7838] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 810.524456][T13772] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 810.626092][ T29] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 810.689669][ T7838] usb 4-1: Using ep0 maxpacket: 8 [ 810.697320][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.710068][T13772] usb 5-1: Using ep0 maxpacket: 8 [ 810.718633][ T7838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 810.729365][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 810.743708][ T7838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.753391][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 810.767033][ T7838] usb 4-1: Product: syz [ 810.771437][T13772] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 810.782853][ T7838] usb 4-1: Manufacturer: syz [ 810.796059][ T7838] usb 4-1: SerialNumber: syz [ 810.804848][T13772] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 810.820553][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 810.830744][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.835242][ T29] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 810.839044][T13772] usb 5-1: config 0 interface 0 has no altsetting 0 [ 810.855950][ T7838] usb 4-1: config 0 descriptor?? [ 810.862492][ T9] usb 9-1: Product: syz [ 810.866723][ T29] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 810.881043][T13772] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 810.937734][ T9] usb 9-1: Manufacturer: syz [ 810.943905][ T29] usb 8-1: Manufacturer: syz [ 810.943927][ T9] usb 9-1: SerialNumber: syz [ 810.958095][T17247] batman_adv: batadv0: Adding interface: dummy0 [ 810.964349][T17247] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.989979][T17247] batman_adv: batadv0: Interface activated: dummy0 [ 811.006505][T13772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.025621][ T29] usb 8-1: config 0 descriptor?? [ 811.043308][ T29] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 811.052524][ T29] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 811.061764][T13772] usb 5-1: config 0 descriptor?? [ 811.069398][ T9] hub 9-1:1.0: bad descriptor, ignoring hub [ 811.077480][ T9] hub 9-1:1.0: probe with driver hub failed with error -5 [ 811.085471][ T9] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 811.111049][ T7838] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 811.341941][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2805'. [ 811.424409][T17258] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 811.536028][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 811.566002][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.652191][T13772] usbhid 5-1:0.0: can't add hid device: -71 [ 811.658506][T13772] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 811.680163][ T9] usb 8-1: USB disconnect, device number 36 [ 811.687152][ T9] ftdi_sio 8-1:0.0: device disconnected [ 811.707472][T13772] usb 5-1: USB disconnect, device number 81 [ 811.728732][ T29] usb 9-1: USB disconnect, device number 7 [ 811.750230][ T7838] usb write operation failed. (-71) [ 811.777453][ T7838] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 811.813002][ T7838] dvbdev: DVB: registering new adapter (Terratec H7) [ 811.835710][ T7838] usb 4-1: media controller created [ 811.848067][ T7838] usb read operation failed. (-71) [ 811.853956][ T7838] usb write operation failed. (-71) [ 811.870731][ T7838] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 811.894127][ T7838] usb 4-1: USB disconnect, device number 91 [ 811.921398][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 812.079170][ T29] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 812.239138][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 812.257080][ T29] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 812.278123][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.292677][ T29] usb 2-1: Product: syz [ 812.296991][ T29] usb 2-1: Manufacturer: syz [ 812.301603][ T29] usb 2-1: SerialNumber: syz [ 812.322804][T17272] FAULT_INJECTION: forcing a failure. [ 812.322804][T17272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.338321][ T29] usb 2-1: config 0 descriptor?? [ 812.363644][T17272] CPU: 1 UID: 0 PID: 17272 Comm: syz.8.2813 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.363673][T17272] Tainted: [L]=SOFTLOCKUP [ 812.363679][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.363690][T17272] Call Trace: [ 812.363696][T17272] [ 812.363703][T17272] dump_stack_lvl+0x100/0x190 [ 812.363729][T17272] should_fail_ex.cold+0x5/0xa [ 812.363752][T17272] _copy_from_iter+0x1f4/0x1690 [ 812.363768][T17272] ? __asan_memset+0x23/0x50 [ 812.363786][T17272] ? __pfx__copy_from_iter+0x10/0x10 [ 812.363800][T17272] ? __pfx___alloc_skb+0x10/0x10 [ 812.363822][T17272] netlink_sendmsg+0x808/0xda0 [ 812.363839][T17272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.363852][T17272] ? __might_fault+0xa0/0x140 [ 812.363873][T17272] ____sys_sendmsg+0x9e1/0xb70 [ 812.363886][T17272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.363901][T17272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.363920][T17272] ___sys_sendmsg+0x190/0x1e0 [ 812.363935][T17272] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.364011][T17272] __sys_sendmsg+0x170/0x220 [ 812.364029][T17272] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.364052][T17272] ? rcu_is_watching+0x12/0xc0 [ 812.364071][T17272] do_syscall_64+0x115/0x870 [ 812.364086][T17272] ? clear_bhb_loop+0x40/0x90 [ 812.364100][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.364112][T17272] RIP: 0033:0x7f6751f9ce59 [ 812.364123][T17272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.364134][T17272] RSP: 002b:00007f6752f38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.364145][T17272] RAX: ffffffffffffffda RBX: 00007f6752215fa0 RCX: 00007f6751f9ce59 [ 812.364153][T17272] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 812.364160][T17272] RBP: 00007f6752f38090 R08: 0000000000000000 R09: 0000000000000000 [ 812.364166][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.364173][T17272] R13: 00007f6752216038 R14: 00007f6752215fa0 R15: 00007ffe5673cad8 [ 812.364187][T17272] [ 812.420849][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 812.492259][ T5634] Bluetooth: hci6: command 0x0c1a tx timeout [ 812.492790][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 812.498909][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 812.610695][ T29] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 812.627172][ T29] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 812.688661][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 812.770242][T17280] IPVS: set_ctl: invalid protocol: 22 172.30.1.8:20003 [ 812.803243][ T9] usb 2-1: USB disconnect, device number 123 [ 812.894049][T17283] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2816'. [ 813.318385][ T7838] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 813.459053][ T7838] usb 5-1: device descriptor read/64, error -71 [ 813.788605][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 813.842012][ T29] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 813.842028][ T7838] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 813.980985][ T7838] usb 5-1: device descriptor read/64, error -71 [ 814.050878][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 814.065245][ T29] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 814.095179][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 814.099043][ T7838] usb usb5-port1: attempt power cycle [ 814.104377][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 814.130680][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 814.180588][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 814.194670][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 814.224906][ T29] usb 9-1: Product: syz [ 814.231458][ T29] usb 9-1: Manufacturer: syz [ 814.252975][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 814.258286][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 814.275077][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 814.285598][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 814.399725][T17297] trusted_key: encrypted_key: keylen parameter is missing [ 814.505597][ T7838] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 814.540752][ T7838] usb 5-1: device descriptor read/8, error -71 [ 814.647579][ T4934] Bluetooth: hci6: command 0x0c1a tx timeout [ 814.655639][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 814.661706][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 814.700248][ T30] audit: type=1400 audit(1781434979.758:1349): avc: denied { read write } for pid=17291 comm="syz.8.2820" name="cdc-wdm0" dev="devtmpfs" ino=4195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 814.725511][ T30] audit: type=1400 audit(1781434979.758:1350): avc: denied { open } for pid=17291 comm="syz.8.2820" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 814.775895][ T5747] usb 9-1: USB disconnect, device number 8 [ 814.782386][ T3108] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 814.783171][T17314] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.815241][ T7838] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 814.847750][ T7838] usb 5-1: device descriptor read/8, error -71 [ 814.868898][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 814.910691][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.953397][ T3108] usb 2-1: device descriptor read/64, error -71 [ 814.964398][ T7838] usb usb5-port1: unable to enumerate USB device [ 815.028135][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 815.039170][ T9] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 815.048054][ T9] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 815.056599][ T9] usb 4-1: config 0 has no interface number 0 [ 815.062916][ T9] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 815.072973][ T9] usb 4-1: config 0 interface 200 has no altsetting 0 [ 815.083701][ T9] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 815.093103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.101167][ T9] usb 4-1: Product: syz [ 815.102977][T16897] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 815.105914][ T9] usb 4-1: Manufacturer: syz [ 815.119133][ T9] usb 4-1: SerialNumber: syz [ 815.128491][ T9] usb 4-1: config 0 descriptor?? [ 815.231801][ T3108] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 815.284628][T16897] usb 8-1: Using ep0 maxpacket: 8 [ 815.291303][T16897] usb 8-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 815.302550][T16897] usb 8-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 815.315654][T16897] usb 8-1: config 0 interface 0 has no altsetting 0 [ 815.322554][T16897] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 815.333020][T16897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.344506][T16897] usb 8-1: config 0 descriptor?? [ 815.380930][ T3108] usb 2-1: device descriptor read/64, error -71 [ 815.498632][ T3108] usb usb2-port1: attempt power cycle [ 815.510147][T17308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.518836][T17308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.594297][ T5747] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 815.695957][ T9] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input59 [ 815.715854][ T9] usb 4-1: USB disconnect, device number 92 [ 815.843753][T16897] usbhid 8-1:0.0: can't add hid device: -71 [ 815.850649][T16897] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 815.861363][T16897] usb 8-1: USB disconnect, device number 37 [ 815.867367][ T3108] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 815.894190][ T3108] usb 2-1: device descriptor read/8, error -71 [ 816.011347][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.992990][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 816.993574][ T7838] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 816.999073][T17311] Bluetooth: hci6: command 0x0c1a tx timeout [ 817.060104][ T3108] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 817.091151][ T3108] usb 2-1: device descriptor read/8, error -71 [ 817.122673][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.132395][T17311] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 817.275099][ T3108] usb usb2-port1: unable to enumerate USB device [ 817.775349][T17330] ip6erspan1: entered allmulticast mode [ 818.052867][T17343] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 818.234071][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 818.336182][T16897] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 818.538502][T16897] usb 4-1: Using ep0 maxpacket: 8 [ 818.554818][T16897] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 818.585785][T16897] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 818.615625][T16897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 818.634425][T16897] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 818.665787][T16897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.699984][T16897] usb 4-1: config 0 descriptor?? [ 818.779307][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 819.345482][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 819.486284][ T7838] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 819.655952][ T7838] usb 5-1: Using ep0 maxpacket: 16 [ 819.674323][ T7838] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 819.702245][ T7838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.727879][ T7838] usb 5-1: Product: syz [ 819.741760][ T7838] usb 5-1: Manufacturer: syz [ 819.755671][ T7838] usb 5-1: SerialNumber: syz [ 819.778297][ T7838] usb 5-1: config 0 descriptor?? [ 819.865297][T16897] usbhid 4-1:0.0: can't add hid device: -71 [ 819.882087][T16897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 819.915837][T16897] usb 4-1: USB disconnect, device number 93 [ 819.939910][T17387] fuse: Bad value for 'fd' [ 819.959954][T17387] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2848'. [ 819.990633][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2848'. [ 820.010481][ T7838] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 820.032153][ T7838] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 820.057938][T17387] : entered promiscuous mode [ 820.178832][ T29] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 820.230328][ T7838] usb 5-1: USB disconnect, device number 86 [ 820.364359][ T29] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 820.383492][ T29] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 820.402574][ T29] usb 2-1: Manufacturer: syz [ 820.417012][ T29] usb 2-1: config 0 descriptor?? [ 820.448333][ T29] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 820.457066][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 820.489267][ T29] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 820.799246][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 821.160532][T17399] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 821.568091][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 821.570260][ T1704] block nbd0: Possible stuck request ffff888027f47000: control (read@0,1024B). Runtime 330 seconds [ 821.589610][ T1704] block nbd0: Possible stuck request ffff888027f471c0: control (read@1024,1024B). Runtime 330 seconds [ 821.600754][ T1704] block nbd0: Possible stuck request ffff888027f47380: control (read@2048,1024B). Runtime 330 seconds [ 821.612034][ T1704] block nbd0: Possible stuck request ffff888027f47540: control (read@3072,1024B). Runtime 330 seconds [ 821.736012][T17410] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 821.891232][ T7838] usb 2-1: USB disconnect, device number 2 [ 822.107385][ T7838] ftdi_sio 2-1:0.0: device disconnected [ 822.291756][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.301002][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.310326][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.408725][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.426015][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.456025][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2855'. [ 822.679405][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 823.790765][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 824.023825][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.167744][T17437] bridge_slave_0 (unregistering): left allmulticast mode [ 824.174875][T17437] bridge_slave_0 (unregistering): left promiscuous mode [ 824.181977][T17437] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.416317][T17422] kexec: Could not allocate control_code_buffer [ 824.902118][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 825.454429][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 825.757234][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 825.771692][ T9] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 825.781003][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.790147][ T9] usb 5-1: Product: syz [ 825.794388][ T9] usb 5-1: Manufacturer: syz [ 825.799003][ T9] usb 5-1: SerialNumber: syz [ 825.807935][ T9] usb 5-1: config 0 descriptor?? [ 826.015232][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 826.260630][ T9] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 826.268281][ T9] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 826.592414][ T9] usb 5-1: USB disconnect, device number 87 [ 826.739072][T17476] kAFS: unable to lookup cell 'Þ({^ú@' [ 827.125268][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.431247][T17479] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 827.636705][T17484] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 827.648133][T17484] 9p: Bad value for 'wfdno' [ 828.234417][T17479] bond4 (unregistering): Released all slaves [ 828.246862][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 829.347578][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 829.454337][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 829.690996][T17502] PKCS8: Unsupported PKCS#8 version [ 829.702519][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 829.710912][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.738991][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 829.755393][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.768132][ T9] usb 5-1: config 0 descriptor?? [ 830.049380][T17513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 830.458923][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 830.559739][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 830.567795][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 830.624019][ T9] usb 5-1: USB disconnect, device number 88 [ 830.844847][T17520] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2887'. [ 830.893803][T17520] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2887'. [ 830.921959][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 831.358878][T17311] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 831.377024][T17534] team0: entered allmulticast mode [ 831.382263][T17534] team_slave_0: entered allmulticast mode [ 831.387994][T17534] team_slave_1: entered allmulticast mode [ 831.395847][T17534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28188 sclass=netlink_xfrm_socket pid=17534 comm=syz.4.2891 [ 831.570226][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 831.704169][T17536] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2892'. [ 831.750935][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 831.776704][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 831.795821][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 831.796055][T17543] FAULT_INJECTION: forcing a failure. [ 831.796055][T17543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.887869][T17543] CPU: 1 UID: 0 PID: 17543 Comm: syz.7.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.887897][T17543] Tainted: [L]=SOFTLOCKUP [ 831.887903][T17543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.887913][T17543] Call Trace: [ 831.887919][T17543] [ 831.887926][T17543] dump_stack_lvl+0x100/0x190 [ 831.887999][T17543] should_fail_ex.cold+0x5/0xa [ 831.888022][T17543] _copy_to_user+0x32/0xd0 [ 831.888080][T17543] bpf_test_finish.isra.0+0x4df/0x660 [ 831.888107][T17543] ? __pfx___set_cpus_allowed_ptr+0x10/0x10 [ 831.888128][T17543] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 831.888149][T17543] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 831.888169][T17543] ? ___migrate_enable+0x90/0xc0 [ 831.888184][T17543] ? __pfx____migrate_enable+0x10/0x10 [ 831.888205][T17543] bpf_prog_test_run_flow_dissector+0x5da/0x980 [ 831.888236][T17543] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 831.888260][T17543] ? find_held_lock+0x2b/0x80 [ 831.888276][T17543] ? __fget_files+0x215/0x3d0 [ 831.888302][T17543] ? __fget_files+0x21f/0x3d0 [ 831.888328][T17543] ? fput+0x79/0x100 [ 831.888352][T17543] ? __bpf_prog_get+0x97/0x2a0 [ 831.888373][T17543] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 831.888395][T17543] __sys_bpf+0x1725/0x4b90 [ 831.888426][T17543] ? __pfx___sys_bpf+0x10/0x10 [ 831.888450][T17543] ? proc_fail_nth_write+0x9f/0x220 [ 831.888470][T17543] ? find_held_lock+0x2b/0x80 [ 831.888489][T17543] ? find_held_lock+0x2b/0x80 [ 831.888504][T17543] ? ksys_write+0x190/0x250 [ 831.888522][T17543] ? ksys_write+0x190/0x250 [ 831.888545][T17543] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 831.888565][T17543] ? kernel_write+0x6b3/0x6c0 [ 831.888580][T17543] ? __fget_files+0x215/0x3d0 [ 831.888611][T17543] ? fput+0x79/0x100 [ 831.888635][T17543] ? ksys_write+0x1ac/0x250 [ 831.888653][T17543] ? __pfx_ksys_write+0x10/0x10 [ 831.888676][T17543] __x64_sys_bpf+0x7b/0xc0 [ 831.888693][T17543] ? lockdep_hardirqs_on+0x78/0x100 [ 831.888716][T17543] do_syscall_64+0x115/0x870 [ 831.888739][T17543] ? clear_bhb_loop+0x40/0x90 [ 831.888761][T17543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.888780][T17543] RIP: 0033:0x7fdf9179ce59 [ 831.888797][T17543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.888813][T17543] RSP: 002b:00007fdf92732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 831.888831][T17543] RAX: ffffffffffffffda RBX: 00007fdf91a15fa0 RCX: 00007fdf9179ce59 [ 831.888842][T17543] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 831.888853][T17543] RBP: 00007fdf92732090 R08: 0000000000000000 R09: 0000000000000000 [ 831.888864][T17543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.888874][T17543] R13: 00007fdf91a16038 R14: 00007fdf91a15fa0 R15: 00007ffd80c9ba98 [ 831.888897][T17543] [ 832.547103][T17557] FAULT_INJECTION: forcing a failure. [ 832.547103][T17557] name failslab, interval 1, probability 0, space 0, times 0 [ 832.563047][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 832.569587][T17557] CPU: 1 UID: 0 PID: 17557 Comm: syz.4.2898 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.569615][T17557] Tainted: [L]=SOFTLOCKUP [ 832.569620][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.569630][T17557] Call Trace: [ 832.569635][T17557] [ 832.569641][T17557] dump_stack_lvl+0x100/0x190 [ 832.569664][T17557] should_fail_ex.cold+0x5/0xa [ 832.569687][T17557] should_failslab+0xc2/0x120 [ 832.569704][T17557] __kmalloc_cache_noprof+0x7a/0x6f0 [ 832.569726][T17557] ? ip_set_create+0x342/0x14f0 [ 832.569746][T17557] ip_set_create+0x342/0x14f0 [ 832.569766][T17557] ? __pfx_ip_set_create+0x10/0x10 [ 832.569796][T17557] ? find_held_lock+0x2b/0x80 [ 832.569816][T17557] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 832.569849][T17557] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 832.569876][T17557] ? __lock_acquire+0x4a5/0x2630 [ 832.569914][T17557] ? avc_has_perm_noaudit+0x145/0x3b0 [ 832.569938][T17557] netlink_rcv_skb+0x159/0x420 [ 832.569958][T17557] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 832.569983][T17557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 832.570012][T17557] ? ns_capable+0xd2/0xf0 [ 832.570036][T17557] nfnetlink_rcv+0x1b3/0x440 [ 832.570060][T17557] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 832.570083][T17557] ? netlink_deliver_tap+0x1ae/0xcc0 [ 832.570111][T17557] netlink_unicast+0x585/0x850 [ 832.570133][T17557] ? __pfx_netlink_unicast+0x10/0x10 [ 832.570158][T17557] netlink_sendmsg+0x8b0/0xda0 [ 832.570181][T17557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.570199][T17557] ? __might_fault+0xa0/0x140 [ 832.570229][T17557] ____sys_sendmsg+0x9e1/0xb70 [ 832.570247][T17557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.570268][T17557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.570296][T17557] ___sys_sendmsg+0x190/0x1e0 [ 832.570317][T17557] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.570363][T17557] __sys_sendmsg+0x170/0x220 [ 832.570387][T17557] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.570420][T17557] ? rcu_is_watching+0x12/0xc0 [ 832.570445][T17557] do_syscall_64+0x115/0x870 [ 832.570465][T17557] ? clear_bhb_loop+0x40/0x90 [ 832.570485][T17557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.570501][T17557] RIP: 0033:0x7f744799ce59 [ 832.570516][T17557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.570531][T17557] RSP: 002b:00007f74487f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.570548][T17557] RAX: ffffffffffffffda RBX: 00007f7447c15fa0 RCX: 00007f744799ce59 [ 832.570559][T17557] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 832.570569][T17557] RBP: 00007f74487f9090 R08: 0000000000000000 R09: 0000000000000000 [ 832.570578][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.570587][T17557] R13: 00007f7447c16038 R14: 00007f7447c15fa0 R15: 00007ffd409e4da8 [ 832.570609][T17557] [ 832.692248][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 832.864679][T17545] lo speed is unknown, defaulting to 1000 [ 833.020571][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2895'. [ 834.362760][ T5747] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 834.551999][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 834.559318][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.571499][ T5747] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 834.583310][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.598986][ T5747] usb 5-1: config 0 descriptor?? [ 834.615752][ T3108] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 834.664665][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 834.786733][ T3108] usb 4-1: Using ep0 maxpacket: 16 [ 834.807328][ T3108] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 834.829422][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 834.830423][ T3108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.841125][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 834.852258][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.860430][ T9] usb 2-1: Product: syz [ 834.860865][ T3108] usb 4-1: Product: syz [ 834.865421][ T9] usb 2-1: Manufacturer: syz [ 834.873819][ T9] usb 2-1: SerialNumber: syz [ 834.879959][ T3108] usb 4-1: Manufacturer: syz [ 834.882579][ T9] usb 2-1: config 0 descriptor?? [ 834.891446][ T3108] usb 4-1: SerialNumber: syz [ 834.910187][ T3108] usb 4-1: config 0 descriptor?? [ 835.121383][ T9] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 835.136497][ T9] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 835.149253][ T3108] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 835.166321][ T3108] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 835.253223][T17584] CIFS: VFS: UNC: path must begin with // or \\ [ 835.260388][T17584] Malformed UNC in devname [ 835.260388][T17584] [ 835.267241][T17584] CIFS: VFS: Malformed UNC in devname [ 835.271191][ T5747] usbhid 5-1:0.0: can't add hid device: -71 [ 835.284705][ T5747] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 835.297374][ T5747] usb 5-1: USB disconnect, device number 89 [ 835.349528][ T3108] usb 2-1: USB disconnect, device number 3 [ 835.370941][ T9] usb 4-1: USB disconnect, device number 94 [ 836.343279][T17595] __nla_validate_parse: 2 callbacks suppressed [ 836.343297][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2910'. [ 836.381480][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2910'. [ 836.647512][ T9] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 836.744565][ T30] audit: type=1400 audit(1781435000.355:1351): avc: denied { listen } for pid=17598 comm="syz.4.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 837.040421][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 837.050189][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 837.195277][ T9] usb 8-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 837.209338][ T30] audit: type=1400 audit(1781435000.458:1352): avc: denied { ioctl } for pid=17598 comm="syz.4.2913" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 837.244831][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.256509][ T9] usb 8-1: Product: syz [ 837.262364][ T9] usb 8-1: Manufacturer: syz [ 837.267325][ T9] usb 8-1: SerialNumber: syz [ 837.499411][ T9] usb 8-1: config 0 descriptor?? [ 837.516262][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 837.524872][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 837.524872][ T9] [ 837.534815][ T9] usb 8-1: selecting invalid altsetting 3 [ 837.541601][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 837.541601][ T9] [ 837.555155][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 837.563640][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 837.575401][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 837.585183][ T9] usb 8-1: media controller created [ 837.612721][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 837.620167][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 837.629422][ T9] dvb-usb: MAC address reading failed. [ 837.654138][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.717931][ T9] DVB: Unable to find symbol stb0899_attach() [ 837.736990][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 837.955097][T16897] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 838.163485][ T9] rc_core: IR keymap rc-tt-1500 not found [ 838.169622][ T9] Registered IR keymap rc-empty [ 838.180570][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 838.200810][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input60 [ 838.217388][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 838.220254][T16897] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 838.224483][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 838.224483][ T9] [ 838.241203][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 838.250463][T16897] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 838.250488][T16897] usb 5-1: Manufacturer: syz [ 838.265694][T16897] usb 5-1: config 0 descriptor?? [ 838.270200][ T9] usb 8-1: USB disconnect, device number 38 [ 838.383500][ T7838] dvb-usb: bulk message failed: -22 (4/0) [ 838.408004][T17623] 9p: Bad value for 'rfdno' [ 838.500742][ T7838] dvb-usb: error -22 while querying for an remote control event. [ 838.619575][T16897] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 838.653902][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2915'. [ 838.656498][T16897] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 838.669851][T17624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.122151][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 839.307625][T16896] usb 5-1: USB disconnect, device number 90 [ 839.327923][T16896] ftdi_sio 5-1:0.0: device disconnected [ 839.446655][ T7838] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 839.533188][T17643] SET target dimension over the limit! [ 839.648878][ T7838] usb 2-1: Using ep0 maxpacket: 16 [ 839.665704][ T7838] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 839.680359][ T7838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.700833][ T7838] usb 2-1: Product: syz [ 839.709573][ T7838] usb 2-1: Manufacturer: syz [ 839.710138][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2926'. [ 839.728487][ T7838] usb 2-1: SerialNumber: syz [ 839.735305][T17646] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2926'. [ 839.748965][ T7838] usb 2-1: config 0 descriptor?? [ 840.060683][ T7838] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 840.110770][ T7838] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 840.289009][ T7838] usb 2-1: USB disconnect, device number 4 [ 841.009001][T17657] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 841.186271][T17657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.229898][T17665] vlan2: entered allmulticast mode [ 841.242476][T17665] bond1: entered allmulticast mode [ 841.304188][T17671] bond1: (slave geneve2): making interface the new active one [ 841.330539][T17671] geneve2: entered allmulticast mode [ 841.348194][T16897] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 841.372423][T17671] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 841.466334][T16896] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 841.522393][T16897] usb 8-1: Using ep0 maxpacket: 32 [ 841.536593][T16897] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 841.558136][T16897] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 841.567893][T16897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.578320][T16897] usb 8-1: Product: syz [ 841.582727][T16897] usb 8-1: Manufacturer: syz [ 841.587700][T16897] usb 8-1: SerialNumber: syz [ 841.617250][T16897] usb 8-1: config 0 descriptor?? [ 841.703266][T16896] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 841.712459][T16896] usb 2-1: config 0 has no interface number 0 [ 841.724202][T16896] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 841.734208][T16896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.742325][T16896] usb 2-1: Product: syz [ 841.748059][T16896] usb 2-1: Manufacturer: syz [ 841.752742][T16896] usb 2-1: SerialNumber: syz [ 841.787131][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 841.823530][T16896] usb 2-1: config 0 descriptor?? [ 841.865862][T16896] usb 2-1: selecting invalid altsetting 2 [ 841.943195][T16896] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 842.008251][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 842.053029][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.374571][T16896] usb 2-1: USB disconnect, device number 5 [ 843.394655][ T9] usb 5-1: config 0 descriptor?? [ 843.720462][T13772] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 843.893150][T13772] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 843.904607][T13772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.914858][T17311] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 843.926684][T13772] usb 4-1: config 0 has no interface number 0 [ 843.933018][T13772] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 843.944701][ T9] hackrf 5-1:0.0: Board ID: 00 [ 843.949485][ T9] hackrf 5-1:0.0: Firmware version: [ 843.957173][T13772] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 843.968761][ T9] hackrf 5-1:0.0: Registered as swradio24 [ 843.975373][ T9] videodev: could not get a free minor [ 843.982273][T13772] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.999446][ T9] hackrf 5-1:0.0: Failed to register as video device (-23) [ 844.017355][T13772] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 844.030848][ T9] hackrf 5-1:0.0: probe with driver hackrf failed with error -23 [ 844.038706][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.048305][T13772] usb 4-1: Product: syz [ 844.052981][T13772] usb 4-1: Manufacturer: syz [ 844.057585][T13772] usb 4-1: SerialNumber: syz [ 844.064913][T13772] usb 4-1: config 0 descriptor?? [ 844.158421][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 844.179738][T16897] usb 5-1: USB disconnect, device number 91 [ 844.303926][ T3108] usb 8-1: USB disconnect, device number 39 [ 844.319013][ T29] usb 2-1: device descriptor read/64, error -71 [ 845.472797][ T29] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 846.066916][ T29] usb 2-1: device descriptor read/64, error -71 [ 846.097085][T13772] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 846.116792][T13772] usb 4-1: USB disconnect, device number 95 [ 846.221129][ T29] usb usb2-port1: attempt power cycle [ 846.594768][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 846.628184][ T29] usb 2-1: device descriptor read/8, error -71 [ 846.947577][ T29] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 847.214833][ T29] usb 2-1: device descriptor read/8, error -71 [ 847.416476][ T29] usb usb2-port1: unable to enumerate USB device [ 848.850520][T17732] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 848.875579][ T5634] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 849.307755][ T5634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 849.325533][ T5634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 849.339074][ T5634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 849.347096][ T5634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 849.394480][T17732] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 850.100103][ T7838] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 850.147567][T17755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 850.230525][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2955'. [ 850.271478][ T7838] usb 5-1: Using ep0 maxpacket: 8 [ 850.285598][ T7838] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 850.310597][ T7838] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 850.341598][ T7838] usb 5-1: config 0 has no interface number 0 [ 850.358216][ T7838] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 850.372645][ T7838] usb 5-1: config 0 interface 200 has no altsetting 0 [ 850.382719][ T7838] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 850.402710][T17727] lo speed is unknown, defaulting to 1000 [ 850.415350][ T7838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.442318][ T7838] usb 5-1: Product: syz [ 850.458984][ T7838] usb 5-1: Manufacturer: syz [ 850.470121][ T7838] usb 5-1: SerialNumber: syz [ 850.484875][ T7838] usb 5-1: config 0 descriptor?? [ 850.531864][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.543425][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 850.678838][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.691031][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 850.730505][ T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 850.816113][T17772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.829746][T17772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.166294][ T29] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 851.178795][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.193266][ T29] usb 2-1: config 0 has no interface number 0 [ 851.199469][ T29] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 851.211154][ T29] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 851.230873][ T29] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.252594][ T29] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 851.265880][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.273950][ T29] usb 2-1: Product: syz [ 851.298480][ T29] usb 2-1: Manufacturer: syz [ 851.307073][ T29] usb 2-1: SerialNumber: syz [ 851.331942][ T29] usb 2-1: config 0 descriptor?? [ 851.468810][ T7838] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input63 [ 851.482610][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.501095][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 851.523858][ T7838] usb 5-1: USB disconnect, device number 92 [ 851.574513][ T5634] Bluetooth: hci7: command tx timeout [ 851.848120][ T29] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 851.860455][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.876007][ T29] usb 2-1: USB disconnect, device number 10 [ 851.906983][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 851.997090][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.012844][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.024774][T17727] bridge_slave_0: entered allmulticast mode [ 852.083689][T17727] bridge_slave_0: entered promiscuous mode [ 852.105405][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.121146][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.140088][T17727] bridge_slave_1: entered allmulticast mode [ 852.152371][T17727] bridge_slave_1: entered promiscuous mode [ 852.236469][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.284133][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.394842][T17727] team0: Port device team_slave_0 added [ 852.410367][T17727] team0: Port device team_slave_1 added [ 852.477837][T17791] bridge1: entered promiscuous mode [ 852.494510][T17791] bridge1: entered allmulticast mode [ 852.587952][T17798] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 852.610904][T17798] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 852.647818][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.671837][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.746348][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.105712][ T30] audit: type=1400 audit(1781435015.684:1353): avc: denied { write } for pid=17794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.146731][ T12] bridge_slave_1: left allmulticast mode [ 853.180283][ T12] bridge_slave_1: left promiscuous mode [ 853.195187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.224921][ T12] bridge_slave_0: left allmulticast mode [ 853.232780][ T12] bridge_slave_0: left promiscuous mode [ 853.237489][ T30] audit: type=1400 audit(1781435015.815:1354): avc: denied { write } for pid=17813 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.268158][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.295679][T17815] 9p: Bad value for 'rfdno' [ 853.546860][ T30] audit: type=1400 audit(1781435016.096:1355): avc: denied { setattr } for pid=17819 comm="syz.1.2970" name="[io_uring]" dev="anon_inodefs" ino=55771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 853.690300][ T7838] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 853.717090][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 853.794017][ T12] gretap0 (unregistering): left allmulticast mode [ 853.797719][ T5634] Bluetooth: hci7: command tx timeout [ 853.965678][ T12] bond0 (unregistering): (slave geneve2): Releasing active interface [ 854.389924][ T12] bond1 (unregistering): Released all slaves [ 854.439228][T17062] block nbd0: Possible stuck request ffff888027f47000: control (read@0,1024B). Runtime 360 seconds [ 854.450402][T17062] block nbd0: Possible stuck request ffff888027f471c0: control (read@1024,1024B). Runtime 360 seconds [ 854.461629][T17062] block nbd0: Possible stuck request ffff888027f47380: control (read@2048,1024B). Runtime 360 seconds [ 854.472804][T17062] block nbd0: Possible stuck request ffff888027f47540: control (read@3072,1024B). Runtime 360 seconds [ 854.564117][ T12] bond2 (unregistering): (slave lo): Releasing backup interface [ 854.575544][ T12] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 854.592448][ T12] bond2 (unregistering): Released all slaves [ 854.610864][ T7838] usb 5-1: Using ep0 maxpacket: 32 [ 854.630023][ T7838] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 854.659157][ T12] bond0 (unregistering): Released all slaves [ 854.691148][ T7838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.749004][ T7838] usb 5-1: Product: syz [ 854.782702][ T7838] usb 5-1: Manufacturer: syz [ 854.821378][ T7838] usb 5-1: SerialNumber: syz [ 854.901368][ T12] bond3 (unregistering): Released all slaves [ 854.934187][ T7838] usb 5-1: config 0 descriptor?? [ 854.999272][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.016094][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.069215][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.082720][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 855.100415][T13772] lo speed is unknown, defaulting to 1000 [ 855.107934][ T9] lo speed is unknown, defaulting to 1000 [ 855.256814][ T7838] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 855.519866][T17727] hsr_slave_0: entered promiscuous mode [ 855.566041][T17727] hsr_slave_1: entered promiscuous mode [ 855.567071][ T9] syz0: Port: 1 Link DOWN [ 855.581582][T17727] debugfs: 'hsr0' already exists in 'hsr' [ 855.582523][ T7838] airspy 5-1:0.0: Could not detect board [ 855.600434][T17727] Cannot create hsr debugfs directory [ 855.627135][ T7838] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 855.658321][ T12] tipc: Left network mode [ 856.084204][ T5634] Bluetooth: hci7: command tx timeout [ 856.290288][T17842] ip6erspan0: entered allmulticast mode [ 856.294054][T17848] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2977'. [ 856.589105][T17856] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 856.697984][T17856] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 857.017613][ T30] audit: type=1400 audit(1781435019.352:1356): avc: denied { write } for pid=17847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.120300][ T30] audit: type=1400 audit(1781435019.446:1357): avc: denied { write } for pid=17871 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.240984][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 857.326453][ T7838] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 857.495328][ T7838] usb 2-1: Using ep0 maxpacket: 32 [ 857.504433][ T12] hsr_slave_0: left promiscuous mode [ 857.519723][ T7838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.530738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.540072][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.547316][ T7838] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.558687][ T7838] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.570375][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.578336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.587130][T17882] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2982'. [ 857.600392][ T7838] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.614140][ T7838] usb 2-1: config 0 interface 0 has no altsetting 0 [ 857.625654][ T7838] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 857.631944][ T29] usb 5-1: USB disconnect, device number 93 [ 857.635933][ T12] veth0_macvtap: left promiscuous mode [ 857.646435][ T7838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.655332][ T12] veth1_vlan: left promiscuous mode [ 857.662620][ T12] veth0_vlan: left promiscuous mode [ 857.675017][ T7838] usb 2-1: config 0 descriptor?? [ 858.062476][ T12] team0 (unregistering): Port device team_slave_1 removed [ 858.095515][ T12] team0 (unregistering): Port device team_slave_0 removed [ 858.103995][ T29] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 858.116654][ T7838] hid_parser_main: 30 callbacks suppressed [ 858.116675][ T7838] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 858.157219][ T7838] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 858.164752][ T7838] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 858.184251][ T7838] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 858.199867][ T7838] corsair-cpro 0003:1B1C:0C10.0011: unknown main item tag 0x0 [ 858.236202][ T7838] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 858.253629][ T5634] Bluetooth: hci7: command tx timeout [ 858.297474][ T29] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 858.324949][ T7838] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -38 [ 858.335250][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.335276][ T29] usb 5-1: config 0 has no interface number 0 [ 858.335315][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 858.335340][ T29] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 858.335363][ T29] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.343655][ T29] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 858.441744][ T5850] smbdirect: ib_dev[syz0] removed [ 858.532331][ T7838] usb 2-1: USB disconnect, device number 11 [ 858.548377][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.627004][ T29] usb 5-1: Product: syz [ 858.655105][ T29] usb 5-1: Manufacturer: syz [ 858.661647][ T29] usb 5-1: SerialNumber: syz [ 858.704865][ T29] usb 5-1: config 0 descriptor?? [ 858.722633][T17896] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2988'. [ 859.241653][ T12] IPVS: stop unused estimator thread 0... [ 859.272349][ T29] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 859.301735][ T29] usb 5-1: USB disconnect, device number 94 [ 859.330869][T17727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 859.349429][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.360827][T17727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 859.371272][ T30] audit: type=1400 audit(1781435021.551:1358): avc: denied { write } for pid=17893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.409397][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.417394][T17727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 859.432522][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.441848][T17727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 859.459003][T17727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.554476][ T30] audit: type=1400 audit(1781435021.729:1359): avc: denied { write } for pid=17915 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.589579][T17727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.613489][T17727] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.626505][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.633698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.656829][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.663959][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.856680][ T7838] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 859.918158][T17933] netlink: 'syz.7.2994': attribute type 1 has an invalid length. [ 859.931534][T17933] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2994'. [ 860.055681][ T7838] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 860.079364][ T7838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.110516][ T7838] usb 2-1: config 0 has no interface number 0 [ 860.143763][ T7838] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 860.147611][ T30] audit: type=1400 audit(1781435022.281:1360): avc: denied { map } for pid=17939 comm="syz.7.2995" path="socket:[56124]" dev="sockfs" ino=56124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 860.173935][ T7838] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 860.217315][ T7838] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 860.288913][ T7838] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 860.328550][ T7838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.340655][ T30] audit: type=1400 audit(1781435022.468:1361): avc: denied { write } for pid=17926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.379217][ T7838] usb 2-1: Product: syz [ 860.391819][ T7838] usb 2-1: Manufacturer: syz [ 860.408545][ T7838] usb 2-1: SerialNumber: syz [ 860.450005][ T7838] usb 2-1: config 0 descriptor?? [ 860.634199][T17954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 860.683019][ T30] audit: type=1400 audit(1781435022.777:1362): avc: denied { write } for pid=17957 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.930998][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.984339][ T7838] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 861.027947][ T7838] usb 2-1: USB disconnect, device number 12 [ 861.140263][T17727] veth0_vlan: entered promiscuous mode [ 861.214591][T17727] veth1_vlan: entered promiscuous mode [ 861.306313][T17727] veth0_macvtap: entered promiscuous mode [ 861.339369][T17727] veth1_macvtap: entered promiscuous mode [ 861.421686][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.450653][ T30] audit: type=1400 audit(1781435023.507:1363): avc: denied { ioctl } for pid=17976 comm="syz.7.3000" path="socket:[56217]" dev="sockfs" ino=56217 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 861.478078][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.500296][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.581091][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.602473][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.638182][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.675145][ T30] audit: type=1400 audit(1781435023.704:1364): avc: denied { write } for pid=17965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.833502][ T30] audit: type=1400 audit(1781435023.797:1365): avc: denied { write } for pid=17988 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.036003][ T5850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.066622][ T5850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.104759][T17994] IPVS: set_ctl: invalid protocol: 22 172.30.1.2:20003 [ 862.182344][ T8293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.204281][ T8293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.512922][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3004'. [ 862.598242][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2950'. [ 862.625328][T17996] macvlan3: entered allmulticast mode [ 865.092885][T16896] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 865.302965][T16896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.384106][T16896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 865.469362][T16896] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 865.613425][T16896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.715596][T16896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.793216][T16896] usb 4-1: Product: syz [ 865.825752][T16896] usb 4-1: Manufacturer: syz [ 865.866020][T16896] usb 4-1: SerialNumber: syz [ 865.885274][T17311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 865.898571][T17311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 865.913379][T17311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 865.921452][T17311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 865.931448][T17311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 865.953119][T16896] hub 4-1:1.0: bad descriptor, ignoring hub [ 865.983354][T16896] hub 4-1:1.0: probe with driver hub failed with error -5 [ 866.014036][T16896] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 866.110431][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 866.204398][ T5614] syz_tun (unregistering): left allmulticast mode [ 866.231461][ T5614] syz_tun (unregistering): left promiscuous mode [ 866.257557][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 866.310779][ T9] usb 4-1: USB disconnect, device number 96 [ 866.679965][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3012'. [ 866.707467][T18034] gretap0: entered promiscuous mode [ 866.721757][T18034] macvlan2: entered allmulticast mode [ 866.733413][T18034] gretap0: entered allmulticast mode [ 866.909175][ T30] audit: type=1400 audit(1781435028.607:1366): avc: denied { lock } for pid=18035 comm="syz.8.3015" path="socket:[57372]" dev="sockfs" ino=57372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 867.598634][T18042] input: syz1 as /devices/virtual/input/input66 [ 868.209434][ T5634] Bluetooth: hci0: command tx timeout [ 868.264392][T18050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=18050 comm=syz.4.3013 [ 868.301531][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3017'. [ 868.360901][T18053] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3017'. [ 868.588953][ T5747] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 868.767202][ T8293] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 868.800550][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 868.838461][T18015] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.852132][T18015] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.861494][T18015] bridge_slave_0: entered allmulticast mode [ 868.869135][T18015] bridge_slave_0: entered promiscuous mode [ 868.877405][T18015] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.884568][T18015] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.892430][T18015] bridge_slave_1: entered allmulticast mode [ 868.900076][T18015] bridge_slave_1: entered promiscuous mode [ 868.930916][T18015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.942979][T18015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.975512][T18015] team0: Port device team_slave_0 added [ 868.983887][T18015] team0: Port device team_slave_1 added [ 869.010903][T18015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.018542][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.045045][T18015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.058519][T18015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.065464][T18015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.091830][T18015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.139392][T18015] hsr_slave_0: entered promiscuous mode [ 869.146023][T18015] hsr_slave_1: entered promiscuous mode [ 869.152214][T18015] debugfs: 'hsr0' already exists in 'hsr' [ 869.161706][T18015] Cannot create hsr debugfs directory [ 869.348949][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 870.276762][T18080] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 870.302832][T18080] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 870.352050][T18082] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 870.381950][ T5634] Bluetooth: hci0: command tx timeout [ 870.393614][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 870.498090][T18015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.529690][T18015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.557851][T18015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 871.223126][T18015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.233486][T18015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.247671][T18015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 871.279734][ T29] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 871.347508][T18015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.358670][T18015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.369177][T18015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 871.446608][T18015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.450560][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 871.457191][T18015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.465462][ T29] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 871.473592][T18015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 871.482067][ T29] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 871.482092][ T29] usb 4-1: config 0 has no interface number 0 [ 871.482133][ T29] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 871.482154][ T29] usb 4-1: config 0 interface 200 has no altsetting 0 [ 871.484285][ T29] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 871.539523][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.594578][ T29] usb 4-1: Product: syz [ 871.599552][ T29] usb 4-1: Manufacturer: syz [ 871.605384][ T29] usb 4-1: SerialNumber: syz [ 871.619439][ T29] usb 4-1: config 0 descriptor?? [ 871.830752][T18015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.840676][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.849289][T18015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.859920][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.868160][T18015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 872.223495][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 872.242622][T18099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.251259][T18099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.289804][T18015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 872.353183][ T29] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input68 [ 872.381224][T18015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 872.400988][ T29] usb 4-1: USB disconnect, device number 97 [ 872.424735][T18119] lo: entered allmulticast mode [ 872.604740][ T5634] Bluetooth: hci0: command tx timeout [ 872.643375][T18015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.863296][T18015] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.871511][T18132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3038'. [ 872.895682][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.902854][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.107492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.114580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.129582][T18133] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3037'. [ 873.216277][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'. [ 873.225242][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'. [ 873.234072][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3036'. [ 873.607247][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'. [ 873.616650][T18149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'. [ 874.229302][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 874.486566][T18015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.583868][T18015] veth0_vlan: entered promiscuous mode [ 874.601991][T18015] veth1_vlan: entered promiscuous mode [ 874.611397][T18171] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 874.620529][T18171] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3046'. [ 874.663586][T18015] veth0_macvtap: entered promiscuous mode [ 874.776785][T18169] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 874.838175][ T5634] Bluetooth: hci0: command tx timeout [ 874.852347][T18169] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3045'. [ 874.881955][T18015] veth1_macvtap: entered promiscuous mode [ 875.286296][T18015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.318492][T18015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.350294][T18080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.374276][T18080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.407780][T18080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.417300][T18080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.528459][ T30] audit: type=1400 audit(1781435036.674:1367): avc: denied { call } for pid=18185 comm="syz.4.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 875.555007][ T30] audit: type=1400 audit(1781435036.702:1368): avc: denied { transfer } for pid=18185 comm="syz.4.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 875.574653][ T30] audit: type=1400 audit(1781435036.702:1369): avc: denied { bind } for pid=18185 comm="syz.4.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 875.661476][ T30] audit: type=1400 audit(1781435036.702:1370): avc: denied { name_bind } for pid=18185 comm="syz.4.3051" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 875.703859][ T30] audit: type=1400 audit(1781435036.702:1371): avc: denied { node_bind } for pid=18185 comm="syz.4.3051" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 875.811664][ T30] audit: type=1400 audit(1781435036.842:1372): avc: denied { setopt } for pid=18183 comm="syz.3.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 875.840903][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 875.852911][T15053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.871445][T15053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.964205][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.981029][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.783008][ T5720] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 876.933821][ T29] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 876.955795][ T5720] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 876.974122][ T5720] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 877.001532][ T5720] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 877.020944][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.037370][ T5720] usb 4-1: Product: syz [ 877.043033][ T5720] usb 4-1: Manufacturer: syz [ 877.047838][ T5720] usb 4-1: SerialNumber: syz [ 877.058669][ T5720] usb 4-1: config 0 descriptor?? [ 877.103570][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 877.111448][ T29] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 877.120943][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.129279][ T29] usb 5-1: Product: syz [ 877.133534][ T29] usb 5-1: Manufacturer: syz [ 877.138603][ T29] usb 5-1: SerialNumber: syz [ 877.145696][ T29] usb 5-1: config 0 descriptor?? [ 877.281264][T18215] vivid-002: disconnect [ 877.387072][ T29] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 877.395995][ T29] airspy 5-1:0.0: Could not detect board [ 877.401806][ T29] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 877.527592][T18212] vivid-002: reconnect [ 877.535673][ T5720] mos7840 4-1:0.0: required endpoints missing [ 877.545423][ T5720] usb 4-1: USB disconnect, device number 98 [ 877.985326][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3061'. [ 878.009872][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3061'. [ 878.057410][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3062'. [ 878.088282][T18251] ªªªªªª: renamed from vlan0 (while UP) [ 878.465534][ T30] audit: type=1400 audit(1781435039.425:1373): avc: denied { wake_alarm } for pid=18262 comm="syz.7.3067" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 879.134008][ T9] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 879.307272][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 879.324521][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 879.348550][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 40, changing to 4 [ 879.419422][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3074'. [ 879.428369][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3074'. [ 879.437312][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3074'. [ 879.458037][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 879.489776][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 879.504508][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.517161][ T9] usb 4-1: Product: syz [ 879.524909][ T9] usb 4-1: Manufacturer: syz [ 879.530886][ T9] usb 4-1: SerialNumber: syz [ 879.676252][T18303] netlink: 'syz.7.3075': attribute type 1 has an invalid length. [ 879.684594][T18303] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3075'. [ 879.742930][T16897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 879.771465][ T9] usb 4-1: MBOX3: Invalid descriptor size=96. [ 879.794493][ T9] usb 4-1: MBOX3: Invalid descriptor size=96. [ 879.803433][ T9] usb 4-1: MBOX3: Invalid descriptor size=96. [ 879.813850][ T9] usb 4-1: USB disconnect, device number 99 [ 879.899574][ T5720] usb 5-1: USB disconnect, device number 95 [ 879.930256][T16897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 879.941377][T16897] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 879.958250][T16897] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.972851][T16897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 879.982206][T16897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 879.990478][T16897] usb 2-1: Product: syz [ 879.994719][T16897] usb 2-1: Manufacturer: syz [ 880.001184][T16897] usb 2-1: SerialNumber: syz [ 880.090872][ T30] audit: type=1326 audit(1781435040.950:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18309 comm="syz.8.3078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751f9ce59 code=0x7ffc0000 [ 880.120092][ T30] audit: type=1326 audit(1781435040.950:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18309 comm="syz.8.3078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751f9ce59 code=0x7ffc0000 [ 880.149814][ T30] audit: type=1326 audit(1781435040.978:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18309 comm="syz.8.3078" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6751f9ce59 code=0x7ffc0000 [ 880.225833][T16897] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 880.299308][ T5720] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 880.440912][ T9] usb 2-1: USB disconnect, device number 13 [ 880.444808][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3079'. [ 880.456543][T18315] openvswitch: netlink: Flow key attr not present in new flow. [ 880.464898][ T9] usblp0: removed [ 880.472254][ T5720] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.483276][ T5720] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 880.492411][ T5720] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.509011][ T5720] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 880.518491][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.526980][ T5720] usb 5-1: Product: syz [ 880.531274][ T5720] usb 5-1: Manufacturer: syz [ 880.538875][ T5720] usb 5-1: SerialNumber: syz [ 880.553988][ T5720] hub 5-1:1.0: bad descriptor, ignoring hub [ 880.561975][ T5720] hub 5-1:1.0: probe with driver hub failed with error -5 [ 880.576871][ T5720] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 880.735777][T18321] IPVS: set_ctl: invalid protocol: 22 172.30.1.9:20003 [ 880.833169][T13772] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 880.921461][ T5720] usb 5-1: USB disconnect, device number 96 [ 881.624437][T13772] usb 4-1: Using ep0 maxpacket: 32 [ 881.638561][T13772] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 881.663392][T13772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.677105][T13772] usb 4-1: Product: syz [ 881.681317][T13772] usb 4-1: Manufacturer: syz [ 881.685911][T13772] usb 4-1: SerialNumber: syz [ 881.694488][T13772] usb 4-1: config 0 descriptor?? [ 881.912209][ T5720] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 881.933184][T13772] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 100 [ 882.075017][ T5720] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.085190][ T5720] usb 2-1: config 0 has no interface number 0 [ 882.091331][ T5720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.103032][ T5720] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.122249][ T5720] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 882.149561][ T5720] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 882.168684][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.202410][ T5720] usb 2-1: config 0 descriptor?? [ 882.435861][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 883.136173][T18334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.267579][T18334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.356578][T13772] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 883.397879][ T5720] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0012/input/input69 [ 883.500130][T18354] tipc: Started in network mode [ 883.516975][T18354] tipc: Node identity 6ad66f299c73, cluster identity 4711 [ 883.532084][T18354] tipc: Enabled bearer , priority 0 [ 883.538946][ T5720] uclogic 0003:28BD:0042.0012: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 883.539900][T18354] syzkaller0: entered promiscuous mode [ 883.566779][T18354] syzkaller0: entered allmulticast mode [ 883.584473][T18354] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 883.638547][T18354] tipc: Resetting bearer [ 883.671858][T18354] tipc: Disabling bearer [ 883.773742][T16897] usb 2-1: USB disconnect, device number 14 [ 883.793007][T13772] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 883.823007][T13772] usb 4-1: USB disconnect, device number 100 [ 883.842724][T18364] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 885.331863][T16897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 885.727210][T16897] usb 2-1: Using ep0 maxpacket: 8 [ 885.810812][T16897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.822681][T16897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.833942][T16897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.875540][T16897] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 885.892953][T16897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.918323][T16897] usb 2-1: config 0 descriptor?? [ 885.954840][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 885.963861][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 885.972733][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3104'. [ 886.378498][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 886.378514][ T30] audit: type=1400 audit(1781435046.827:1399): avc: denied { read } for pid=18368 comm="syz.1.3097" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 886.413177][T16897] kye 0003:0458:4018.0013: item fetching failed at offset 3/5 [ 886.432629][T16897] kye 0003:0458:4018.0013: parse failed [ 886.438299][T16897] kye 0003:0458:4018.0013: probe with driver kye failed with error -22 [ 886.543275][T17062] block nbd0: Possible stuck request ffff888027f47000: control (read@0,1024B). Runtime 390 seconds [ 886.554111][T17062] block nbd0: Possible stuck request ffff888027f471c0: control (read@1024,1024B). Runtime 390 seconds [ 886.566049][T17062] block nbd0: Possible stuck request ffff888027f47380: control (read@2048,1024B). Runtime 390 seconds [ 886.577604][T17062] block nbd0: Possible stuck request ffff888027f47540: control (read@3072,1024B). Runtime 390 seconds [ 886.589869][ T5634] Bluetooth: hci4: Malformed HCI Event [ 886.630766][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.641020][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.664473][T13772] usb 2-1: USB disconnect, device number 15 [ 886.857226][T16897] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 887.063197][T13772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 887.247108][T13772] usb 2-1: device descriptor read/64, error -71 [ 887.265325][ T30] audit: type=1326 audit(1781435047.660:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.3.3114" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5d19ce59 code=0x0 [ 887.524714][T16897] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 887.554465][T13772] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 887.638237][T18425] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3114'. [ 887.652251][T18425] usb usb7: usbfs: interface 0 claimed by hub while 'syz.3.3114' sets config #40899 [ 888.003323][T13772] usb 2-1: device descriptor read/64, error -71 [ 888.121392][T13772] usb usb2-port1: attempt power cycle [ 888.484461][T13772] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 888.516661][T13772] usb 2-1: device descriptor read/8, error -71 [ 888.544242][T18447] veth1_to_batadv: entered promiscuous mode [ 888.644783][T16897] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 888.756234][T18451] netlink: 'syz.4.3120': attribute type 3 has an invalid length. [ 888.772817][T13772] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 888.806977][T13772] usb 2-1: device descriptor read/8, error -71 [ 888.905868][T18459] netlink: 'syz.8.3126': attribute type 64 has an invalid length. [ 888.937924][T13772] usb usb2-port1: unable to enumerate USB device [ 889.157363][T16897] usb 4-1: device descriptor read/64, error -71 [ 889.357712][T18463] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 889.368597][T18463] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 889.414055][T16897] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 889.633331][T16897] usb 4-1: Using ep0 maxpacket: 8 [ 889.667300][T16897] usb 4-1: config index 0 descriptor too short (expected 2075, got 27) [ 889.680627][T16897] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 889.689417][T16897] usb 4-1: config 0 has no interface number 0 [ 889.696274][T16897] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 889.706292][T16897] usb 4-1: config 0 interface 200 has no altsetting 0 [ 889.733861][T16897] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 889.749857][T16897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.758773][T16897] usb 4-1: Product: syz [ 889.766547][T16897] usb 4-1: Manufacturer: syz [ 889.781048][T16897] usb 4-1: SerialNumber: syz [ 889.791904][T16897] usb 4-1: config 0 descriptor?? [ 890.086630][T18471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.100048][T18471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.376328][T16897] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input70 [ 890.401846][T16897] usb 4-1: USB disconnect, device number 102 [ 890.536041][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 890.707382][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 890.722642][ T9] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 890.736442][ T9] usb 2-1: config 251 has no interface number 0 [ 890.752618][ T9] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 890.763071][ T9] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 890.773674][ T9] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 890.787317][ T9] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 890.803250][ T9] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 890.818222][ T9] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.832977][ T9] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.843654][T18481] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 890.856177][T18481] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 890.868707][ T9] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.885709][ T9] usb 2-1: config 251 interface 202 has no altsetting 0 [ 891.165909][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 891.177068][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 891.185396][ T9] usb 2-1: Product: syz [ 891.195071][ T9] usb 2-1: SerialNumber: syz [ 892.584032][ T9] cxacru 2-1:251.202: cxacru_bind: interface has incorrect endpoints [ 892.603632][ T9] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 892.624999][ T9] usb 2-1: USB disconnect, device number 20 [ 892.907934][ T30] audit: type=1400 audit(1781435052.938:1401): avc: denied { write } for pid=18520 comm="syz.3.3153" lport=44764 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 892.958722][ T30] audit: type=1400 audit(1781435052.966:1402): avc: denied { read } for pid=18520 comm="syz.3.3153" path="socket:[60520]" dev="sockfs" ino=60520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 893.045071][T18531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 893.857332][ T30] audit: type=1400 audit(1781435053.827:1403): avc: denied { mount } for pid=18580 comm="syz.8.3180" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 893.938860][ T30] audit: type=1400 audit(1781435053.855:1404): avc: denied { search } for pid=18580 comm="syz.8.3180" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.004471][ T30] audit: type=1400 audit(1781435053.855:1405): avc: denied { search } for pid=18580 comm="syz.8.3180" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.097467][ T30] audit: type=1400 audit(1781435053.855:1406): avc: denied { read } for pid=18580 comm="syz.8.3180" name="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.197201][ T30] audit: type=1400 audit(1781435053.855:1407): avc: denied { read open } for pid=18580 comm="syz.8.3180" path="/" dev="configfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 894.261373][ T30] audit: type=1400 audit(1781435053.892:1408): avc: denied { node_bind } for pid=18585 comm="syz.7.3183" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 894.488727][T18618] fuse: Bad value for 'fd' [ 894.657241][T18630] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3205'. [ 894.730264][T18630] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3205'. [ 894.991224][T18651] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 895.436297][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3217'. [ 895.515783][T16896] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 895.676835][T16896] usb 4-1: Using ep0 maxpacket: 32 [ 895.797201][T16896] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 895.806499][T16896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.814569][T16896] usb 4-1: Product: syz [ 895.818865][T16896] usb 4-1: Manufacturer: syz [ 895.823510][T16896] usb 4-1: SerialNumber: syz [ 895.830698][T16896] usb 4-1: config 0 descriptor?? [ 896.373657][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 896.552137][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 896.565892][ T9] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 896.634714][T16896] airspy 4-1:0.0: usb_control_msg() failed -32 request 0a [ 896.646287][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.671538][T16896] airspy 4-1:0.0: Could not detect board [ 896.680989][ T9] usb 5-1: Product: syz [ 896.687482][T16896] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 896.696152][ T9] usb 5-1: Manufacturer: syz [ 896.703208][ T9] usb 5-1: SerialNumber: syz [ 896.826639][ T9] usb 5-1: config 0 descriptor?? [ 897.242924][ T9] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 097 [ 897.943989][T18669] i2c i2c-1: failure reading status [ 897.968811][T16896] usb 5-1: USB disconnect, device number 97 [ 898.288057][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3228'. [ 898.493277][T16896] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 898.849773][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 899.100771][T16896] usb 2-1: Using ep0 maxpacket: 8 [ 899.110720][T16896] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 899.119966][T16896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.128523][T16896] usb 2-1: Product: syz [ 899.132782][T16896] usb 2-1: Manufacturer: syz [ 899.137386][T16896] usb 2-1: SerialNumber: syz [ 899.146766][T16896] usb 2-1: config 0 descriptor?? [ 899.161887][T16896] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 899.175599][ T9] usb 4-1: USB disconnect, device number 103 [ 899.194644][T16896] pctv452e: pctv452e_power_ctrl: 1 [ 899.194644][T16896] [ 899.232307][T16896] usb 2-1: selecting invalid altsetting 3 [ 899.257178][T16896] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 899.257178][T16896] [ 899.279283][T16896] dvb-usb: bulk message failed: -22 (5/0) [ 899.295509][T18718] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3235'. [ 899.296364][T16896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 899.326973][T16896] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 899.348318][T16896] usb 2-1: media controller created [ 899.356258][T16896] dvb-usb: bulk message failed: -22 (8/0) [ 899.380845][T16896] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 899.480369][T16896] dvb-usb: MAC address reading failed. [ 899.707222][T16896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.860502][T16896] DVB: Unable to find symbol stb0899_attach() [ 899.867845][T16896] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 899.982568][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 899.991385][T16896] rc_core: IR keymap rc-tt-1500 not found [ 899.998948][T16896] Registered IR keymap rc-empty [ 900.007134][T16896] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 900.027638][T16896] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input71 [ 900.126101][T18737] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3239'. [ 900.171826][T16896] dvb-usb: schedule remote query interval to 100 msecs. [ 900.178873][T16896] pctv452e: pctv452e_power_ctrl: 0 [ 900.178873][T16896] [ 900.186287][T16896] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 900.203141][T16896] usb 2-1: USB disconnect, device number 21 [ 900.238787][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 900.270153][ T9] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 900.686713][ T9] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 900.724796][ T9] usb 5-1: config 0 has no interface number 0 [ 900.738032][ T9] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 900.749093][ T9] usb 5-1: config 0 interface 200 has no altsetting 0 [ 900.750134][T16896] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 900.772813][ T9] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 900.786514][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.807105][ T9] usb 5-1: Product: syz [ 900.819942][ T9] usb 5-1: Manufacturer: syz [ 900.831214][ T9] usb 5-1: SerialNumber: syz [ 900.846291][ T9] usb 5-1: config 0 descriptor?? [ 901.538479][ T9] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input72 [ 901.567644][ T9] usb 5-1: USB disconnect, device number 98 [ 901.809582][T16896] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 901.969921][T16896] usb 2-1: Using ep0 maxpacket: 32 [ 901.978383][T16896] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 901.988420][T16896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.999188][T16896] usb 2-1: Product: syz [ 902.003597][T16896] usb 2-1: Manufacturer: syz [ 902.008242][T16896] usb 2-1: SerialNumber: syz [ 902.016001][T16896] usb 2-1: config 0 descriptor?? [ 902.237257][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 902.606113][T16896] airspy 2-1:0.0: usb_control_msg() failed -32 request 0a [ 902.613641][T16896] airspy 2-1:0.0: Could not detect board [ 902.619401][T16896] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 902.782096][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 902.801911][ T30] audit: type=1400 audit(1781435062.202:1409): avc: denied { getopt } for pid=18773 comm="syz.8.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 902.804169][T18774] devpts: Bad value for 'max' [ 902.881760][T18776] netlink: 'syz.8.3255': attribute type 2 has an invalid length. [ 902.899830][T16897] libceph: connect (1)[c::]:6789 error -101 [ 902.906046][T16897] libceph: mon0 (1)[c::]:6789 connect error [ 902.916237][T16897] libceph: connect (1)[c::]:6789 error -101 [ 902.922347][T16897] libceph: mon0 (1)[c::]:6789 connect error [ 902.942872][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 902.950336][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 902.967046][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 902.977842][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 902.986547][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 902.997188][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.005440][ T9] usb 5-1: Product: syz [ 903.009738][ T9] usb 5-1: Manufacturer: syz [ 903.014355][ T9] usb 5-1: SerialNumber: syz [ 903.020571][ T9] usb 5-1: config 0 descriptor?? [ 903.062054][T18776] ceph: No mds server is up or the cluster is laggy [ 903.465458][ T9] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 903.472794][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 903.583534][T16897] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 903.698837][ T3108] usb 5-1: USB disconnect, device number 99 [ 903.745574][T16897] usb 4-1: Using ep0 maxpacket: 32 [ 903.767626][T16897] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 903.785273][T16897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.807074][T16897] usb 4-1: Product: syz [ 903.812564][T16897] usb 4-1: Manufacturer: syz [ 903.817216][T16897] usb 4-1: SerialNumber: syz [ 903.825095][T16897] usb 4-1: config 0 descriptor?? [ 903.884068][ T3108] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 904.108343][T16897] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 104 [ 904.415036][T18805] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 904.677411][T16897] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 904.791656][T18787] i2c i2c-1: failure reading status [ 904.807867][T16896] usb 4-1: USB disconnect, device number 104 [ 904.966831][T16897] usb 2-1: USB disconnect, device number 22 [ 905.934233][T18820] FAULT_INJECTION: forcing a failure. [ 905.934233][T18820] name failslab, interval 1, probability 0, space 0, times 0 [ 905.947572][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.1.3266 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.947606][T18820] Tainted: [L]=SOFTLOCKUP [ 905.947612][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.947622][T18820] Call Trace: [ 905.947629][T18820] [ 905.947636][T18820] dump_stack_lvl+0x100/0x190 [ 905.947655][T18820] should_fail_ex.cold+0x5/0xa [ 905.947672][T18820] should_failslab+0xc2/0x120 [ 905.947685][T18820] __kmalloc_cache_noprof+0x7a/0x6f0 [ 905.947701][T18820] ? __vb2_init_fileio+0x18f/0x1000 [ 905.947719][T18820] ? rcu_is_watching+0x12/0xc0 [ 905.947740][T18820] __vb2_init_fileio+0x18f/0x1000 [ 905.947758][T18820] ? vb2_fop_write+0xe5/0x550 [ 905.947774][T18820] ? trace_sched_exit_tp+0x11c/0x160 [ 905.947797][T18820] ? __schedule+0x12a7/0x67a0 [ 905.947812][T18820] __vb2_perform_fileio+0x91e/0x1380 [ 905.947828][T18820] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 905.947843][T18820] vb2_fop_write+0x1f8/0x550 [ 905.947862][T18820] v4l2_write+0x229/0x2c0 [ 905.947879][T18820] vfs_write+0x2aa/0x1070 [ 905.947893][T18820] ? __pfx_v4l2_write+0x10/0x10 [ 905.947907][T18820] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 905.947923][T18820] ? __pfx_vfs_write+0x10/0x10 [ 905.947934][T18820] ? rcu_is_watching+0x12/0xc0 [ 905.947952][T18820] ? __rcu_read_unlock+0x27f/0x5e0 [ 905.947968][T18820] ? __fget_files+0x21f/0x3d0 [ 905.947986][T18820] ksys_write+0x12a/0x250 [ 905.947999][T18820] ? __pfx_ksys_write+0x10/0x10 [ 905.948012][T18820] ? rcu_is_watching+0x12/0xc0 [ 905.948031][T18820] do_syscall_64+0x115/0x870 [ 905.948046][T18820] ? clear_bhb_loop+0x40/0x90 [ 905.948065][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.948077][T18820] RIP: 0033:0x7fbbc159ce59 [ 905.948088][T18820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.948099][T18820] RSP: 002b:00007fbbc248e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.948111][T18820] RAX: ffffffffffffffda RBX: 00007fbbc1816180 RCX: 00007fbbc159ce59 [ 905.948118][T18820] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 905.948125][T18820] RBP: 00007fbbc248e090 R08: 0000000000000000 R09: 0000000000000000 [ 905.948132][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.948139][T18820] R13: 00007fbbc1816218 R14: 00007fbbc1816180 R15: 00007ffc54a0bc38 [ 905.948153][T18820] [ 906.557608][T18825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.713220][T18840] syzkaller0: entered promiscuous mode [ 907.718837][T18840] syzkaller0: entered allmulticast mode [ 907.738774][T18840] tipc: Enabled bearer , priority 0 [ 907.750414][ T30] audit: type=1400 audit(1781435066.825:1410): avc: denied { map } for pid=18839 comm="syz.7.3272" path="/dev/net/tun" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 907.778450][T18839] tipc: Resetting bearer [ 907.821455][T18839] tipc: Disabling bearer [ 908.060970][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3274'. [ 908.088755][T18852] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.096237][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.310593][T18852] vlan2: left allmulticast mode [ 908.315479][T18852] bond1: left allmulticast mode [ 908.320543][T18852] geneve2: left allmulticast mode [ 908.331378][T18852] bridge1: left promiscuous mode [ 908.336342][T18852] bridge1: left allmulticast mode [ 908.345501][ T1168] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.363591][ T1168] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.378337][ T1168] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.391144][ T1168] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.624946][ T30] audit: type=1400 audit(1781435068.585:1411): avc: denied { lock } for pid=18864 comm="syz.7.3281" path="socket:[61522]" dev="sockfs" ino=61522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 909.953396][T18871] xt_hashlimit: size too large, truncated to 1048576 [ 910.464805][ T30] audit: type=1400 audit(1781435069.371:1412): avc: denied { getopt } for pid=18883 comm="syz.7.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 910.669447][ T30] audit: type=1404 audit(1781435069.539:1413): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 910.691895][T18894] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 910.699667][ T30] audit: type=1400 audit(1781435069.586:1414): avc: denied { recv } for pid=18893 comm="syz.3.3289" saddr=10.128.0.169 src=30006 daddr=10.128.0.115 dest=48564 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 910.771818][ T30] audit: type=1400 audit(1781435069.605:1415): avc: denied { map_create } for pid=18888 comm="syz.1.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 910.826143][ T30] audit: type=1400 audit(1781435069.605:1416): avc: denied { prog_load } for pid=18888 comm="syz.1.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 910.859982][ T30] audit: type=1400 audit(1781435069.633:1417): avc: denied { read write } for pid=18888 comm="syz.1.3288" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 910.892539][ T30] audit: type=1400 audit(1781435069.651:1418): avc: denied { prog_load } for pid=18898 comm="syz.8.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 910.924563][ T30] audit: type=1400 audit(1781435069.698:1419): avc: denied { execmem } for pid=18898 comm="syz.8.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 910.999288][T18894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3289'. [ 911.008461][ T30] audit: type=1400 audit(1781435069.736:1420): avc: denied { recv } for pid=18875 comm="syz.4.3286" saddr=10.128.0.169 src=30006 daddr=10.128.0.115 dest=48564 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 911.094973][T18901] bond1: (slave geneve2): making interface the new active one [ 911.163994][T18901] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 911.181756][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 911.198378][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 911.356082][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 911.393577][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 912.528138][ T31] INFO: task syz.0.2632:16549 blocked for more than 143 seconds. [ 912.549217][ T31] Tainted: G L syzkaller #0 [ 912.570624][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.591847][ T31] task:syz.0.2632 state:D stack:27560 pid:16549 tgid:16547 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 912.623869][ T31] Call Trace: [ 912.628878][ T31] [ 912.647512][ T31] __schedule+0x1295/0x67a0 [ 912.656110][ T31] ? __pfx___schedule+0x10/0x10 [ 912.666905][ T31] ? find_held_lock+0x2b/0x80 [ 912.676166][ T31] ? schedule+0x2bf/0x390 [ 912.688029][ T31] schedule+0xdd/0x390 [ 912.692112][ T31] schedule_preempt_disabled+0x13/0x30 [ 912.697569][ T31] __mutex_lock+0xced/0x1b10 [ 912.703442][ T31] ? sync_bdevs+0x153/0x480 [ 912.709583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 912.715667][ T31] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 912.721584][ T31] ? iput.part.0+0x1a0/0xf50 [ 912.730866][ T31] ? sync_bdevs+0x153/0x480 [ 912.741577][ T31] sync_bdevs+0x153/0x480 [ 912.745945][ T31] ksys_sync+0xb0/0xf0 [ 912.750043][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 912.755348][ T31] ? rcu_is_watching+0x12/0xc0 [ 912.763012][ T31] ? do_syscall_64+0x90/0x870 [ 912.767766][ T31] __do_sys_sync+0xe/0x20 [ 912.772100][ T31] do_syscall_64+0x115/0x870 [ 912.779887][ T31] ? clear_bhb_loop+0x40/0x90 [ 912.795132][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.801089][ T31] RIP: 0033:0x7f774cf9ce59 [ 912.816448][ T31] RSP: 002b:00007f774de58028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 912.825979][ T31] RAX: ffffffffffffffda RBX: 00007f774d215fa0 RCX: 00007f774cf9ce59 [ 912.837923][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 912.859249][ T31] RBP: 00007f774d215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 912.880744][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.901799][ T31] R13: 00007f774d216038 R14: 00007f774d215fa0 R15: 00007ffe06d04a88 [ 912.911349][ T31] [ 912.923138][ T31] INFO: task syz.0.2632:16551 blocked for more than 143 seconds. [ 912.930913][ T31] Tainted: G L syzkaller #0 [ 912.940129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 912.956415][ T31] task:syz.0.2632 state:D stack:28456 pid:16551 tgid:16547 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 912.968609][ T31] Call Trace: [ 912.973564][ T31] [ 912.978207][ T31] __schedule+0x1295/0x67a0 [ 912.982765][ T31] ? __pfx___schedule+0x10/0x10 [ 912.990657][ T31] ? find_held_lock+0x2b/0x80 [ 912.995350][ T31] ? schedule+0x2bf/0x390 [ 913.008876][ T31] schedule+0xdd/0x390 [ 913.029991][ T31] schedule_preempt_disabled+0x13/0x30 [ 913.035502][ T31] __mutex_lock+0xced/0x1b10 [ 913.040078][ T31] ? sync_bdevs+0x153/0x480 [ 913.051327][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 913.056436][ T31] ? __pfx___schedule+0x10/0x10 [ 913.061309][ T31] ? iput.part.0+0x1a0/0xf50 [ 913.072687][ T31] ? sync_bdevs+0x153/0x480 [ 913.077200][ T31] sync_bdevs+0x153/0x480 [ 913.081517][ T31] ksys_sync+0xb0/0xf0 [ 913.105067][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 913.115649][ T31] ? rcu_is_watching+0x12/0xc0 [ 913.126659][ T31] ? do_syscall_64+0x90/0x870 [ 913.131422][ T31] __do_sys_sync+0xe/0x20 [ 913.147474][ T31] do_syscall_64+0x115/0x870 [ 913.153114][ T31] ? clear_bhb_loop+0x40/0x90 [ 913.157824][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.169244][ T31] RIP: 0033:0x7f774cf9ce59 [ 913.179682][ T31] RSP: 002b:00007f774de37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 913.188397][ T31] RAX: ffffffffffffffda RBX: 00007f774d216090 RCX: 00007f774cf9ce59 [ 913.196478][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.204507][ T31] RBP: 00007f774d216090 R08: 0000000000000000 R09: 0000000000000000 [ 913.212835][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.220821][ T31] R13: 00007f774d216128 R14: 00007f774d216090 R15: 00007ffe06d04a88 [ 913.229136][ T31] [ 913.232196][ T31] [ 913.232196][ T31] Showing all locks held in the system: [ 913.240359][ T31] 1 lock held by khungtaskd/31: [ 913.245221][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 913.255282][ T31] 2 locks held by getty/5366: [ 913.259974][ T31] #0: ffff888037a9d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 913.270773][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 913.280966][ T31] 1 lock held by udevd/7335: [ 913.285559][ T31] #0: ffff888027e46350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 913.294983][ T31] 1 lock held by syz.0.2632/16549: [ 913.300223][ T31] #0: ffff888027e46350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 913.309661][ T31] 1 lock held by syz.0.2632/16551: [ 913.314759][ T31] #0: ffff888027e46350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 913.324240][ T31] [ 913.326560][ T31] ============================================= [ 913.326560][ T31] [ 913.335024][ T31] NMI backtrace for cpu 1 [ 913.335039][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 913.335060][ T31] Tainted: [L]=SOFTLOCKUP [ 913.335067][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.335076][ T31] Call Trace: [ 913.335081][ T31] [ 913.335087][ T31] dump_stack_lvl+0x100/0x190 [ 913.335110][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 913.335130][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 913.335149][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 913.335178][ T31] sys_info+0x141/0x190 [ 913.335202][ T31] watchdog+0xcb1/0x1030 [ 913.335224][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 913.335245][ T31] ? __pfx_watchdog+0x10/0x10 [ 913.335263][ T31] ? __kthread_parkme+0x18c/0x230 [ 913.335292][ T31] ? kthread+0x13a/0x450 [ 913.335308][ T31] ? __pfx_watchdog+0x10/0x10 [ 913.335325][ T31] kthread+0x370/0x450 [ 913.335342][ T31] ? __pfx_kthread+0x10/0x10 [ 913.335360][ T31] ret_from_fork+0x72b/0xd50 [ 913.335382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 913.335403][ T31] ? __switch_to+0x800/0x1100 [ 913.335426][ T31] ? __pfx_kthread+0x10/0x10 [ 913.335447][ T31] ret_from_fork_asm+0x1a/0x30 [ 913.335480][ T31] [ 913.335487][ T31] Sending NMI from CPU 1 to CPUs 0: [ 913.467847][ C0] NMI backtrace for cpu 0 [ 913.467863][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.467883][ C0] Tainted: [L]=SOFTLOCKUP [ 913.467888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.467896][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 913.467919][ C0] Code: a6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f2 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 913.467932][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 913.467947][ C0] RAX: 00000000048d153b RBX: ffffffff8e4955c0 RCX: ffffffff8b89a225 [ 913.467956][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fe0d RDI: ffffffff8c1c4780 [ 913.467965][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 913.467974][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 913.467983][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d71950 [ 913.467993][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 913.468007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 913.468016][ C0] CR2: 00007fbbc17e8158 CR3: 000000000e596000 CR4: 00000000003526f0 [ 913.468026][ C0] Call Trace: [ 913.468032][ C0] [ 913.468038][ C0] default_idle+0x9/0x10 [ 913.468057][ C0] default_idle_call+0x6c/0xb0 [ 913.468075][ C0] do_idle+0x464/0x590 [ 913.468097][ C0] ? __pfx_do_idle+0x10/0x10 [ 913.468118][ C0] cpu_startup_entry+0x4f/0x60 [ 913.468138][ C0] rest_init+0x251/0x260 [ 913.468150][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 913.468166][ C0] start_kernel+0x484/0x490 [ 913.468179][ C0] x86_64_start_reservations+0x24/0x30 [ 913.468193][ C0] x86_64_start_kernel+0x12b/0x130 [ 913.468206][ C0] common_startup_64+0x13e/0x148 [ 913.468229][ C0] [ 913.468926][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 913.468940][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 913.468962][ T31] Tainted: [L]=SOFTLOCKUP [ 913.468973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.468983][ T31] Call Trace: [ 913.468989][ T31] [ 913.468996][ T31] dump_stack_lvl+0x100/0x190 [ 913.469017][ T31] vpanic+0x552/0x970 [ 913.469034][ T31] ? __pfx_vpanic+0x10/0x10 [ 913.469050][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 913.469077][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 913.469106][ T31] panic+0xd1/0xe0 [ 913.469122][ T31] ? __pfx_panic+0x10/0x10 [ 913.469140][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 913.469165][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 913.469190][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 913.469214][ T31] ? watchdog.cold+0x1ec/0x234 [ 913.469231][ T31] ? watchdog+0xcc1/0x1030 [ 913.469251][ T31] watchdog.cold+0x1fd/0x234 [ 913.469272][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 913.469293][ T31] ? __pfx_watchdog+0x10/0x10 [ 913.469312][ T31] ? __kthread_parkme+0x18c/0x230 [ 913.469339][ T31] ? kthread+0x13a/0x450 [ 913.469356][ T31] ? __pfx_watchdog+0x10/0x10 [ 913.469372][ T31] kthread+0x370/0x450 [ 913.469389][ T31] ? __pfx_kthread+0x10/0x10 [ 913.469409][ T31] ret_from_fork+0x72b/0xd50 [ 913.469429][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 913.469450][ T31] ? __switch_to+0x800/0x1100 [ 913.469473][ T31] ? __pfx_kthread+0x10/0x10 [ 913.469492][ T31] ret_from_fork_asm+0x1a/0x30 [ 913.469524][ T31] [ 913.815563][ T31] Kernel Offset: disabled [ 913.819862][ T31] Rebooting in 86400 seconds..