last executing test programs: 3m47.940604031s ago: executing program 2 (id=523): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a00a00000000b700000000000000e77b70a108ffffffff00ff00008d7edd"], 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x1000001, &(0x7f0000000500)=ANY=[]) r1 = syz_usb_connect$uac2(0x4, 0xf6, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x0, 0xc0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x6, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x43}, [@mixer_unit={0x7, 0x24, 0x4, 0x3, 0xfd, "09b2"}, @extension_unit={0x9, 0x24, 0x9, 0x5, 0xfffb, 0x3, "47f4"}, @sample_rate={0x13, 0x24, 0xd, 0x2, 0x3, 0x6, [0x2, 0x3, 0x0, 0x0, 0x1, 0x0]}, @source_unit={0x8, 0x24, 0xa, 0x6, 0x4, 0x4, 0x3, 0x2}, @source_unit={0x8, 0x24, 0xa, 0x6, 0x4, 0x5, 0x1, 0x4}, @extension_unit={0x7, 0x24, 0x9, 0x2, 0x100, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x511f, 0x9, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf8, 0xe, 0x2d, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x2c, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x90, 0x1, 0xbf, 0xff, "5fd6bc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xed, 0x2, 0xe, 0xc, "711a", ']'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x40, 0x7, 0xb, "6bc8cdb439a6278a"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0xf4, 0x7d}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x7, 0xa, {0x8, 0x25, 0x1, 0x81, 0xc, 0x5, 0x65}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x40, 0x6, 0x20, 0x4}, 0x5e, &(0x7f00000003c0)={0x5, 0xf, 0x5e, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xf0, 0x5, 0x81, 0xf00, 0x1, [0x3f30, 0xc000, 0x0, 0xff3f00, 0x3f30]}, @ssp_cap={0x18, 0x10, 0xa, 0x6e, 0x3, 0x5, 0xff0f, 0x6, [0xff00c0, 0xc0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "40726147828d06618176a2d082a6f61a"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x6}]}, 0x8, [{0x59, &(0x7f0000000640)=@string={0x59, 0x3, "8ce7f68405f4376c5b883e98865619428e6f13742473d5cbfcb133d6d392206537b2d8eb65a10471b8b355295f5e571a70bdb07bbe17c4abbb1091d4696d0be17f54092d780c9f7cbf2fbab5830fd3c5411d7631c4f3c6"}}, {0xa1, &(0x7f0000000a80)=ANY=[@ANYBLOB="a10342b680ab3e316305e2d9933246c499c094a2b6ce2009fc7c23a34ad8dc6570c96ec1546a62905f8f7abd2451b2bc9f4aab93789edfd6d105d2e7ac760bece60be3286fb23b49339fa393522a635fe0ce8bfbffd1f08cbef8d33aff6a23f939f985a430743f35a09b8f8697f827eb7ca931779825890ca3a07f0e0e28a000602d8f08c58acb311109dd7132742ddb422047e4d95e48b9996c76710000000000"]}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x34, &(0x7f0000000700)=@string={0x34, 0x3, "7ea8ed232d5b911250c0122324a9b0f186d65f71fe3610d513161dcd7ca3b2c11da7b0bd2c639e018ba8eb167ab1d3c4dfa6"}}, {0xee, &(0x7f0000000b40)=@string={0xee, 0x3, "0b6fe64b82e3573ba68df6624cd5469fcec2a21c303422da3b5379153e9a81095a956aa9952de5821609de781bbf1a7fd225f52afb603cc921e878132071e7692e0235bb26eb4936d16d67eb82e7dda4aab85e7f7f3cf1280f71243b6d0699e91aaffba825521b2fd77764cd68124e56d058f98940a3d42f5586bd81916d61ec02250cff7d4113c34cfc3bc743661e9d251ed318edaedab46f0fc86c13746a2362907a279ccdc2fe84fc325fd3d70816b02db061ca25260779bdada5417c4da949ed86c0bdbb2b3f2a198a15b2842e899318d65cb0a6d88fae7e57bd8fb9a86da9ab02960718e41c2b0ec728"}}, {0x27, &(0x7f0000000800)=@string={0x27, 0x3, "784672b8f85c92b3ef6bf9a53391934545d61cd47c793de92c4eaf34825c8d11613cf5198f"}}, {0xa2, &(0x7f00000009c0)=ANY=[@ANYBLOB="a203e479b403e3c619900c6c12530ac03dccdc0e6604fdffffffcee0903bb090344002f39be8a1bc7dd87c818745f8465af3d4eadcae3a8ddcd5ffd7ad9e800218ad234fdb7d63734ecdbdb81db3c8e54779368f8962409185ee3f4286df4b98262d2f8561f15a61914c83043211d748ee6006339ec99f0695c55ab5ce9f0a148a8b223284a21d6b9d3b11e0c8320575e3062b2f005002e3e8424ef3d5875d0ab03bb847e0a97c6df354e7b817ee83de"]}, {0x23, &(0x7f0000000900)=@string={0x23, 0x3, "4cbb861652374ea9b33e9d4abb78e91b900472787f1ed53bd34d9a80612b953247"}}]}) syz_usb_disconnect(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xbc, &(0x7f0000000840)=""/188, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0xb4, &(0x7f0000000c40)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "021736", 0x76, 0x2b, 0x0, @private2, @mcast2, {[], {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xe07, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "d4ee477fd7fcffe8f9ae012bacec5d60509948c6e3bda9a5b7ea5fb6990fdab80da707bd73f8345b75ef9f3d3372"}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x8}}}}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3m46.15467457s ago: executing program 2 (id=531): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xb0, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3m45.896941861s ago: executing program 2 (id=534): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904030000ff4f9b000904b000003a3846000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008102f8edb45038e9000086e8a4d009d472972245c03ea054d5ff9b344d62373d37ad08d453b4959418f977fd93812bcb6c28203ea174a00b3c92da977766f28eb5754609863983aa529d21eb64546edb0fed26731064cff711bc2ffc284da2e4111aa0eeb379e5856ffc86d0272d68aea2d31ceef9c02510650493a0d56982424fd3dbca60d7488b8484b8f154322d43bdc2e72abb2ee783ff0815a5c409dc9804ad1b12293f036635f269dc35c6072f573d2800e930539f76230a8b3160a8ea1f1772c4"], 0x48) mkdir(0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfff, 0x6, 0x1ff, 0x3}, 0x14) 3m42.825184807s ago: executing program 2 (id=542): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) clock_getres(0x6, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3m42.210115263s ago: executing program 2 (id=546): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) personality(0x8) uname(&(0x7f0000000640)=""/4096) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x1, 0x1, 0x7, 0x2, 0x6, 0x7, "7bec075c"}, 0x8001, 0x3, {0x0}, 0xfffffffc}) 3m39.25712554s ago: executing program 2 (id=554): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="00002bbd7000ffdbf6250101000000010000a900000000ed058667cb32b16e816d6ebc4b0174e816170916d0"], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40010) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (fail_nth: 3) 3m37.245442039s ago: executing program 3 (id=558): syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3m36.923092294s ago: executing program 3 (id=562): io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x26) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x10000, 0xfffffffb, 0x7fff, 0x8, 0x6, "3aa868335b9cd312916f01c4fffc60ab508f04"}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xb1, 0x4}}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x8, 0x0, 0x0}}, 0x10) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m34.14185982s ago: executing program 3 (id=567): mmap(&(0x7f000045e000/0x1000)=nil, 0x1000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f00007f3000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3m33.064787915s ago: executing program 3 (id=569): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x5, 0x1008) read$FUSE(r0, 0x0, 0x0) 3m31.793916875s ago: executing program 3 (id=572): syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3m31.101704975s ago: executing program 3 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r3, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r6 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="10002d"], 0x2c}}, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x10, 0x8000000000000000}) 3m18.822507924s ago: executing program 32 (id=554): sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="00002bbd7000ffdbf6250101000000010000a900000000ed058667cb32b16e816d6ebc4b0174e816170916d0"], 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40010) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) (fail_nth: 3) 3m15.224017782s ago: executing program 33 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff, 0x0}) sched_setparam(r3, &(0x7f00000000c0)=0x7f) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) r6 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="10002d"], 0x2c}}, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x10, 0x8000000000000000}) 2m40.444161342s ago: executing program 4 (id=607): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc5001, 0x104) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) personality(0x8) uname(&(0x7f0000000640)=""/4096) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x1, 0x1, 0x7, 0x2, 0x6, 0x7, "7bec075c"}, 0x8001, 0x3, {0x0}, 0xfffffffc}) 2m38.933918298s ago: executing program 4 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000100)="5205aad27718f2ea74fc7d857023cf5844c0b965402225773b489619958d7e4b6ec26ad280d24951fcd0e7860841909db9ef0c0620ee6c6ffcfbf38a0c2c44cb7a") r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x82044d0d, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000e40)={0x1, 0x0, {0x36, 0x35, 0x6, 0xd, 0x7, 0xc0, 0x5, 0x3e}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m37.924480504s ago: executing program 4 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x121200) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000680)={r2, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) r5 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) setsockopt$WPAN_SECURITY(r5, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, 0x0, 0x0, r4], [0x2b8]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000380)={0x0, 0xffff, 0xc2e, 0x6, 0x3, [0x0], [0x1, 0xb8, 0xffffffb2, 0xfffffffd], [0x1, 0xd2, 0x81, 0xd], [0xecf, 0x6, 0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000500)={0x0, 0xfffffffb, 0xfffffff0, 0x2, 0x2, [r4, r6, r7, r8], [0x199c, 0x8, 0x5, 0x5], [0xffff, 0xa1, 0x2, 0x28000], [0x3, 0x5, 0x8000000000000001, 0x81]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x2ad, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="804007b690780000220afe868b9362909f1201008d295be305970f8a43bbea12cf2f8d7fccd3190437898d7c554325ee88d28f5af6f61542f6b065270e66dc1231d55de4f3e96569448b27205d6e7559ea1f2b4890c89d2ca8a87a47b20576a5f7815b21ed67bf0b98fcf872ca9ddd44fac167897aa622d6b251943c368c0ea3ebd6cf"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x900f, 0x100, 0x4, 0x162}, &(0x7f0000000400)=0x0, &(0x7f0000000000)=0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000480)={0x1}, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x8, 0x1}) io_uring_enter(r9, 0x3517, 0x173d, 0x42, 0x0, 0x0) 2m34.05474662s ago: executing program 1 (id=613): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 2m33.33795136s ago: executing program 4 (id=614): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x48c7, 0x1008, 0x0, 0x1000168}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000280)='./file0\x00', 0x1e5242, 0x1df2a23c5997fa0b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0xfb0, 0x3, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001380)={{0x1, 0x1, 0x18}, './file2\x00'}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) pselect6(0x40, &(0x7f0000000240)={0x4bf, 0x0, 0x1ff, 0x7d, 0x9979, 0x8000, 0x1000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0x2400000000000000, 0x80000006}, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2m31.348740988s ago: executing program 0 (id=615): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1fe, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20f", 0x86}, {&(0x7f0000002700)="d6f4de", 0x3}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64d0, &(0x7f0000000280)={0x2, r4, 0x800, 0x0, 0xfffffffd, 0x0, 0x2}) 2m20.374736801s ago: executing program 0 (id=616): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) lseek(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x25, 0x0, @void}, 0x10) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) open_by_handle_at(r5, 0x0, 0x830200) 2m19.518569834s ago: executing program 1 (id=617): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904030000ff4f9b000904b000003a3846000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008102f8edb45038e9000086e8a4d009d472972245c03ea054d5ff9b344d62373d37ad08d453b4959418f977fd93812bcb6c28203ea174a00b3c92da977766f28eb5754609863983aa529d21eb64546edb0fed26731064cff711bc2ffc284da2e4111aa0eeb379e5856ffc86d0272d68aea2d31ceef9c02510650493a0d56982424fd3dbca60d7488b8484b8f154322d43bdc2e72abb2ee783ff0815a5c409dc9804ad1b12293f036635f269dc35c6072f573d2800e930539f76230a8b3160a8ea1f1772c4"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r1, @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="426fd37471f1e7f594726459bf5ea505fcfec10898a8b438e72f5073b76aab68cd0d823af57bafe46c24e20d9caea8992a54f460a07aa2794b6103e6e09a6caf8af90f6f0c942875f0f9499b0c515a33bfe9555df760d8d80659102c28920ebb88ecbada03690e383f84f22b7d207a70e4d9d23ad92d98b6ec9eb8052b5698b4e05097b28d60"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) dup(r5) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7, 0xfff, 0x6, 0x1ff, 0x3}, 0x14) 2m19.517754078s ago: executing program 4 (id=618): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 2m15.761798402s ago: executing program 1 (id=619): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x101181, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002440)=""/4100, 0x1004) 2m14.305700164s ago: executing program 0 (id=620): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m12.495075655s ago: executing program 0 (id=621): add_key$fscrypt_provisioning(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 2m10.701085153s ago: executing program 0 (id=622): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0xd0}}, 0x0) ioperm(0x1, 0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d"}) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='ac', @ANYRES32]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m10.559813847s ago: executing program 4 (id=623): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) lseek(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) open_by_handle_at(r5, 0x0, 0x830200) 2m9.581339669s ago: executing program 1 (id=624): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 2m7.567509952s ago: executing program 0 (id=625): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x40) syz_clone3(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x51}}, 0x24040800) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r10, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r10, 0x80) accept$netrom(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2m6.502732896s ago: executing program 1 (id=626): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x34, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 1m52.290638612s ago: executing program 34 (id=623): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) lseek(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) open_by_handle_at(r5, 0x0, 0x830200) 1m50.912544488s ago: executing program 35 (id=625): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x40) syz_clone3(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x51}}, 0x24040800) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r10, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r10, 0x80) accept$netrom(r10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1m50.874991849s ago: executing program 1 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x111}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1m27.959568815s ago: executing program 36 (id=629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x111}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 51.073868976s ago: executing program 7 (id=633): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 50.979705013s ago: executing program 8 (id=628): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) lseek(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x25, 0x0, @void}, 0x10) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) open_by_handle_at(r5, 0x0, 0x830200) 49.817800032s ago: executing program 7 (id=634): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000003100)={0x0, 0x0, 0x0}, 0x8050) 49.810759708s ago: executing program 9 (id=635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f000000a000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.152031115s ago: executing program 7 (id=636): syz_emit_vhci(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) 47.991692746s ago: executing program 9 (id=637): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x101181, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000480)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000002440)=""/4100, 0x1004) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) fcntl$setlease(r7, 0x400, 0x1) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000280)={0x2e, &(0x7f0000000080)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @uvalue=0x4}, {0x3}, {0x3, @svalue=0x40004000000}]}, 0x5}, {0x8, '\x00', @buffer={"c4a31076fc6cbf522789141bf36f9baddfafec36f841350d0dafec57db7bd01f", 0x20}}, {0x3d, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffffff1}, {0x0, @uvalue=0x3}, {0x3, @uvalue=0x40000000}, {0x1, @svalue}]}, 0x5}, {0x3, '\x00', @st={0x4, [{0x1, @uvalue=0x932c}, {0x0, @svalue=0x2}, {0x2, @svalue=0x10000}, {0x2, @uvalue=0x4}]}, 0x5}, {0x2a, '\x00', @data=0x9c, 0xa69f}, {0x23, '\x00', @buffer={"bb63b02668abfabb3de03a2aad7ea3cf75a29823055ba632bf1321c9766a2003", 0x20}, 0x6}]}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81001000080045000058000000000001907864010100ac1414bb03009078000d00004f00000000000000002f0000ac14141eac1414bb440c03c1ac1414bb00000000070700ac1414aa0713937f000001ac1414aaac1414aa7f0000010000e1eff4121b62910ad2511fab7707d3d2aaaeae23fff979bf86d307189a3a63505454649c3c1925cb35e14188485a326f04e7274cb6193a"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c) ptrace(0x10, r0) 43.681064358s ago: executing program 7 (id=638): syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000400)={0x40, 0x12, 0x4, "dd3e97d5"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xfd}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x81, 0x1, "84"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "6fa8"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, "9d6b"}, &(0x7f0000000440)={0x20, 0x84, 0x3, "fb8f7b"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "31e0ec"}}) 40.503048292s ago: executing program 7 (id=639): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 40.234708159s ago: executing program 5 (id=577): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) clock_getres(0x6, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 40.014554116s ago: executing program 9 (id=640): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r6, 0x40081271, 0x0) 37.152054402s ago: executing program 5 (id=641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0102000000070000"], 0x8, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) r3 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)='u', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0xa4, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0xa, 0xc}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x0, 0x6, 0x1, 0x20, 0x8}, 0x4a, &(0x7f0000000580)={0x5, 0xf, 0x4a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x1, 0x7, 0xfa, 0x8e}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x4, 0xf8, 0xa, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "5e3d52d5ead54273333945d5e9630a7b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f7ce93308177a68ae9d7fb66905d0681"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0xdab}]}, 0x9, [{0x40, &(0x7f0000000380)=@string={0x40, 0x3, "50cc2e624ee3c26143d04db9469349fbb37470b7c27e0239aef3cc57437a6148cd2d8cfcf79648fe5cddefad859bd4de1abadd06646fd2b444ebcbf64800"}}, {0xed, &(0x7f0000000600)=@string={0xed, 0x3, "77dfdba1d0575669898ce2bbe5a6335c47e9cb2a59c5e01ccc7ff9b0a70dcf531459bb85c857f132a9001b5b1b7513d8ba1628d208b783d895d452e24ab8d08857662e058a7a59df3de4a6b9fbd593951ef38a1df3c5f089098e447e96c278370f01ccb717a6fac296fdb663841ef92df668b6d34d2bc00845a9a570c8996d2b2874d52208bc336f4526eb5c4bea6aafdfe3de6cb870f57cb42432966f0688971e83a6a481336ba9d5f9161b6028429ad360ad0a42a09464725a2f5fd7321829717b016ce19c383f64c25a2090957450404ef8f46df0707fd9b7d4a862fa7c674478d07b89da1989ac83b6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44a}}, {0xae, &(0x7f0000000740)=@string={0xae, 0x3, "86978bc2327565f734835554c421629bd1ebea2834fbad70147fc70806f6e58442cd3c79f47753597b0b37fc0e58f724200b0ab65ea8907c7d59c13527eee5d8674c32c4557fd9dc6b6fe0d0d961728877379ed1b5eac99d6e90c0c2065a85a9b2a3dc9c402748c554aec0d6d1ed7150ea5a8bef3578c3fb7e87f3d14fb21ab3dd789186943f6410c79452cabd9b7669bc37dee78d31be8cd29b3c115ccf4c52351adde48b1380710ee9fccb"}}, {0xdb, &(0x7f0000000800)=@string={0xdb, 0x3, "96761758a160cae776d16f7409407e50189c120774a65dc202f0a21b61d26e33c5f5d1cb78b7d92de5c8304aa9cc16f4f498c8dcbdc300adf67a6bb7c474873ec957547bfa08adc625509b6cdc3c4764ab0b51bf13955bb22537951829eea72f263c10b71b3badc484aff5fc5050ee70536ae089fd3a64c87a644cf66b54d9a7e5859e8a323a0b9d542e80a8b3d1d7f95ecfffd60ea123f1c44b874e311e842dd6c3292172db1baebb8529bdd73ed1443cbc2369c8fdeaa4805d8637a2e1fc5600080c662922e22e6b880b08bf9d18ca15ca76586f2e286a08"}}, {0x77, &(0x7f0000000900)=@string={0x77, 0x3, "0a38e30bcfab3a87af9b7f85da6d0ce0e56e7e203f0f74bce0130845a22493788bd5d6cd8ffa1ac932cd7b46a27f1abe87193fec86ff21e7e6df61a9ee097f75d6f796f6125fa9052a09e2e0fc1e998417a5bb5f85fd16751e27a1c752f359bf7eef1eb127080e02a81f4b98612a4a9aa3e03faebf"}}, {0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="3e039e1dccaee7baf082e1c89817b40c002ab1bcdb68d26979d7f9ead0baa083114b9a5af79dd9667751bccf0c8baa454b575bf55eeeb58c446449469856"]}, {0xe6, &(0x7f00000009c0)=@string={0xe6, 0x3, "e26d97d196c420844c60d47758ab5ac460ca29d6f27a2e93410bc462865c97d8d34f3111daeede39d9a22f27e55864756efe2447668d2d87663e243d8200de7c7c5d39a3851a60b6c138d62081d400ffaaa6c4ca8302f610e39f2f3d9301ba618b06ef66ab466e536de6b6be11c55e857d819806652aeefe34887aaa2c3a4111f8212a067850072fd8039977763599abe15de89dc058318f89d50e8899f3e8693bd17632c6db34fa8162f33d6c8b4833aafa3d04634f290cd124398e0c942183192e35942c2747e6c977b5c61775696a1415ee3c22f0fb6ed3f964ab1f28cd16ecb4ad7e"}}, {0x5e, &(0x7f0000000ac0)=@string={0x5e, 0x3, "0abee0a285193beb797f4d28e782338e46b067d56768084b045170caa57a01cca2139decd1ff80efcd07bd333d720068e9f86c25376b41b6768602bfef1c69d6c36747d519a297449d57ff260d2b3ecdaa2c0d0fb0e292c93ee86370"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000dc0)={0x14, &(0x7f0000000c00)={0x40, 0x9, 0xff, {0xff, 0x22, "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"}}, &(0x7f0000000d40)={0x0, 0x3, 0x69, @string={0x69, 0x3, "4dc7a2c93a09bb1d57b1a2227e6cbd3899849760815254d6ee1a45e4c647486286021ceab5f6deb0254058670602bc5ee2c7d188318d5031474e4445ac6b8f722a78711387efd2d9817a072f506feeaf58d00d50e5d0e40e67dab52ec69afb4609a2d238bb7d82"}}}, &(0x7f0000001000)={0x34, &(0x7f0000000e00)={0x40, 0x13, 0xfffffffffffffd10, "c810aee8dcd4f6028b86da0f875d49e06eeae7be1029674905b61a87"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000ec0)={0x20, 0x0, 0xd, {0x91, "1352a4b83d8e8fa86eff76a74c02cd4497a7b068012ee25cca443690abb3d347e686e40404ed2b57cc31dfc25b26e758c116eae75fdc4134fbd6d896e99cc8da952d2e491a0681a61fd071096451fe21a135a601941667b116bddc5bc113c3ab038c1f1f5d473e402f677c93fe4ed73eebb474c9baf9882415e5e0947fd4a63005aacecbc208cb5cf1da34002f1e0cc9ce"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x10}}) 35.783271662s ago: executing program 37 (id=628): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './bus\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) lseek(0xffffffffffffffff, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r6, 0x25, 0x0, @void}, 0x10) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r7, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) open_by_handle_at(r5, 0x0, 0x830200) 35.108199783s ago: executing program 6 (id=582): socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x625b3224, 0x121501) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) clock_getres(0x6, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 31.705279047s ago: executing program 6 (id=643): syz_io_uring_setup(0x2007eb3, &(0x7f0000000440)={0x0, 0x1c32, 0x8, 0xfffffffc, 0x28f}, &(0x7f0000000340), &(0x7f0000000140)) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0x5, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000340)) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x40, 0x3, 0x0, 0x0, @remote}, 0x10) pipe2$9p(&(0x7f0000000400), 0x80800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0xc008, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYBLOB="67e74d3250436c50db9b451ec21cc0c12552c16455b68468365e90169785a2f10ce357fa6790fb0bc20365ee5950acaec74c8d5c37961449fd7cc34b176959f9b8", @ANYBLOB]) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d00, &(0x7f0000000100)) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0xd1, 0x0, 0xcc7, 0x8, 0x7, 0x4, 0x5, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x41, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x55, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='7'], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x80) 30.792615909s ago: executing program 9 (id=644): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x101181, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4100, 0x1004) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) fcntl$setlease(r6, 0x400, 0x1) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000280)={0x2e, &(0x7f0000000080)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @uvalue=0x4}, {0x3}, {0x3, @svalue=0x40004000000}]}, 0x5}, {0x8, '\x00', @buffer={"c4a31076fc6cbf522789141bf36f9baddfafec36f841350d0dafec57db7bd01f", 0x20}}, {0x3d, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffffff1}, {0x0, @uvalue=0x3}, {0x3, @uvalue=0x40000000}, {0x1, @svalue}]}, 0x5}, {0x3, '\x00', @st={0x4, [{0x1, @uvalue=0x932c}, {0x0, @svalue=0x2}, {0x2, @svalue=0x10000}, {0x2, @uvalue=0x4}]}, 0x5}, {0x2a, '\x00', @data=0x9c, 0xa69f}, {0x23, '\x00', @buffer={"bb63b02668abfabb3de03a2aad7ea3cf75a29823055ba632bf1321c9766a2003", 0x20}, 0x6}]}) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81001000080045000058000000000001907864010100ac1414bb03009078000d00004f00000000000000002f0000ac14141eac1414bb440c03c1ac1414bb00000000070700ac1414aa0713937f000001ac1414aaac1414aa7f0000010000e1eff4121b62910ad2511fab7707d3d2aaaeae23fff979bf86d307189a3a63505454649c3c1925cb35e14188485a326f04e7274cb6193a"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @local, 0x3}, 0x1c) 26.825202697s ago: executing program 7 (id=645): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = mq_open(&(0x7f0000000040)='\xa3\\@.@{/!),^\x00', 0x2, 0x102, &(0x7f0000000080)={0x1fd, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f00000000c0)=""/175, 0xaf, 0x7, &(0x7f0000000180)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) r8 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r9 = fanotify_init(0xf00, 0x1) fanotify_mark(r9, 0x105, 0x40009975, r8, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 26.823995461s ago: executing program 5 (id=646): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) 26.733730891s ago: executing program 6 (id=647): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0xd0}}, 0x0) ioperm(0x1, 0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0xe7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"6538535a2270f2bfb7a7624449262a0d764e59779d15ef996f25c5c3f2c04f8d"}) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='ac', @ANYRES32]) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 22.881125575s ago: executing program 5 (id=648): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = mq_open(&(0x7f0000000040)='\xa3\\@.@{/!),^\x00', 0x2, 0x102, &(0x7f0000000080)={0x1fd, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f00000000c0)=""/175, 0xaf, 0x7, &(0x7f0000000180)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) r8 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r8, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 22.147946698s ago: executing program 9 (id=649): syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mount$bind(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x0) 21.251762235s ago: executing program 9 (id=650): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.602584999s ago: executing program 6 (id=651): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 1.023351363s ago: executing program 38 (id=650): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4d) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 426.304384ms ago: executing program 39 (id=648): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = mq_open(&(0x7f0000000040)='\xa3\\@.@{/!),^\x00', 0x2, 0x102, &(0x7f0000000080)={0x1fd, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f00000000c0)=""/175, 0xaf, 0x7, &(0x7f0000000180)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) r8 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r8, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) 102.032713ms ago: executing program 40 (id=651): add_key$fscrypt_provisioning(&(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22001) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) 0s ago: executing program 41 (id=645): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = mq_open(&(0x7f0000000040)='\xa3\\@.@{/!),^\x00', 0x2, 0x102, &(0x7f0000000080)={0x1fd, 0x7, 0x4}) mq_timedreceive(r0, &(0x7f00000000c0)=""/175, 0xaf, 0x7, &(0x7f0000000180)={0x77359400}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000025300)=""/102392, 0x18ff8) r8 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r9 = fanotify_init(0xf00, 0x1) fanotify_mark(r9, 0x105, 0x40009975, r8, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x81) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) kernel console output (not intermixed with test programs): w USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.233223][ T7258] binder: 7257:7258 ioctl c0306201 200000000240 returned -11 [ 179.241430][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.267474][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.301211][ T24] usb 2-1: config 0 descriptor?? [ 179.325702][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.371524][ T5874] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 179.390967][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.437688][ T5874] usb 4-1: config 0 descriptor?? [ 179.503113][ T7268] FAULT_INJECTION: forcing a failure. [ 179.503113][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.516474][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.0.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.516498][ T7268] Tainted: [L]=SOFTLOCKUP [ 179.516504][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.516515][ T7268] Call Trace: [ 179.516521][ T7268] [ 179.516527][ T7268] dump_stack_lvl+0x100/0x190 [ 179.516557][ T7268] should_fail_ex.cold+0x5/0xa [ 179.516579][ T7268] _copy_from_user+0x2e/0xd0 [ 179.516604][ T7268] copy_msghdr_from_user+0x9f/0x4f0 [ 179.516627][ T7268] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.516655][ T7268] ? __pfx__kstrtoull+0x10/0x10 [ 179.516676][ T7268] ___sys_sendmsg+0x106/0x1e0 [ 179.516700][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.516735][ T7268] ? find_held_lock+0x2b/0x80 [ 179.516774][ T7268] __sys_sendmmsg+0x205/0x430 [ 179.516793][ T7268] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.516816][ T7268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.516844][ T7268] ? fput+0x79/0x100 [ 179.516861][ T7268] ? ksys_write+0x1ac/0x250 [ 179.516885][ T7268] ? __pfx_ksys_write+0x10/0x10 [ 179.516913][ T7268] __x64_sys_sendmmsg+0x9c/0x100 [ 179.516930][ T7268] ? lockdep_hardirqs_on+0x78/0x100 [ 179.516948][ T7268] do_syscall_64+0x106/0xf80 [ 179.516965][ T7268] ? clear_bhb_loop+0x40/0x90 [ 179.516985][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.517003][ T7268] RIP: 0033:0x7fa8a059c799 [ 179.517018][ T7268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.517033][ T7268] RSP: 002b:00007fa8a14e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.517050][ T7268] RAX: ffffffffffffffda RBX: 00007fa8a0816090 RCX: 00007fa8a059c799 [ 179.517061][ T7268] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000006 [ 179.517070][ T7268] RBP: 00007fa8a14e6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.517079][ T7268] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.517088][ T7268] R13: 00007fa8a0816128 R14: 00007fa8a0816090 R15: 00007ffe9d6a2b18 [ 179.517110][ T7268] [ 179.519406][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.790810][ T5936] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 179.958429][ T5936] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.529706][ T7271] fido_id[7271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0004/report_descriptor': No such device [ 180.574541][ T30] audit: type=1400 audit(1772468971.483:329): avc: denied { accept } for pid=7265 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.594719][ T30] audit: type=1400 audit(1772468971.873:330): avc: denied { listen } for pid=7272 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 180.621292][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 180.626217][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 180.627369][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 180.643597][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 180.650942][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 180.656589][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 180.692703][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 180.704574][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 180.712395][ T5874] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 180.726968][ T5874] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 181.189153][ T7280] random: crng reseeded on system resumption [ 181.201720][ T30] audit: type=1400 audit(1772468972.523:331): avc: denied { append } for pid=7243 comm="syz.3.354" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.281151][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.346296][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 181.355042][ T30] audit: type=1400 audit(1772468972.523:332): avc: denied { open } for pid=7243 comm="syz.3.354" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.390906][ T5874] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 181.402860][ T24] usb 2-1: media controller created [ 181.433590][ T5874] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 181.446293][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.552070][ T792] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.871100][ T24] az6027: usb out operation failed. (-71) [ 181.884692][ T24] az6027: usb out operation failed. (-71) [ 181.915909][ T24] stb0899_attach: Driver disabled by Kconfig [ 181.925852][ T792] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 181.940849][ T5874] usb 4-1: USB disconnect, device number 20 [ 181.958403][ T24] az6027: no front-end attached [ 181.958403][ T24] [ 181.976645][ T792] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 182.011640][ T24] az6027: usb out operation failed. (-71) [ 182.105525][ T7288] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 182.117274][ T7288] overlayfs: overlapping lowerdir path [ 182.343141][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.350610][ T792] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 182.363711][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 182.364088][ T5797] buffer_io_error: 38 callbacks suppressed [ 182.364099][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 182.650505][ T5818] Bluetooth: Frame is too long (len 18, expected len 8) [ 182.650624][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 182.761111][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 182.777075][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.809614][ T24] usb 2-1: USB disconnect, device number 7 [ 182.809819][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.683227][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.692652][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.701071][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.709517][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.718419][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.727248][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.735483][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 183.777340][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.317046][ T7308] nfs: Unknown parameter 'ac˙˙˙˙' [ 184.522572][ T7307] binder: BINDER_SET_CONTEXT_MGR already set [ 184.528658][ T7307] binder: 7306:7307 ioctl 4018620d 200000000040 returned -16 [ 184.542198][ T7307] binder: 7306:7307 ioctl c0306201 200000000240 returned -11 [ 185.760498][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 186.063638][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 186.092376][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.136907][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.174693][ T24] usb 2-1: config 0 descriptor?? [ 186.501790][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 186.529174][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.638112][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 186.651783][ T24] usb 2-1: media controller created [ 186.672630][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.683074][ T5874] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 187.379901][ T5874] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.389446][ T30] audit: type=1804 audit(1772468978.643:333): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.379" name="/newroot/78/file0" dev="tmpfs" ino=429 res=1 errno=0 [ 187.889879][ T7337] fido_id[7337]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.204996][ T7344] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 188.953097][ T5797] buffer_io_error: 22 callbacks suppressed [ 188.953160][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.070117][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.304457][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.321687][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.434647][ T24] az6027: usb out operation failed. (-110) [ 189.471865][ T24] az6027: usb out operation failed. (-32) [ 189.480900][ T5818] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 189.495561][ T24] stb0899_attach: Driver disabled by Kconfig [ 189.526558][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.535216][ T24] az6027: no front-end attached [ 189.535216][ T24] [ 189.546106][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.557400][ T24] az6027: usb out operation failed. (-32) [ 189.570730][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.578647][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 189.596876][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.626784][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 189.694390][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.716765][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 189.728696][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 189.756607][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 190.056990][ T7356] nfs: Unknown parameter 'ac˙˙˙˙' [ 190.857119][ T7364] binder: 7361:7364 ioctl c0306201 200000000240 returned -11 [ 191.341674][ T24] usb 2-1: USB disconnect, device number 8 [ 191.383668][ T7378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=7378 comm=syz.0.391 [ 191.439725][ T7375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.390'. [ 191.449051][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 191.782482][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 191.819462][ T792] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.956788][ T792] usb 3-1: device descriptor read/64, error -71 [ 192.281056][ T7389] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 192.352091][ T7388] nfs: Unknown parameter 'ac˙˙˙˙' [ 192.968775][ T30] audit: type=1400 audit(1772468984.303:334): avc: denied { execute } for pid=7392 comm="syz.4.397" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.996239][ T7393] binder: BINDER_SET_CONTEXT_MGR already set [ 193.002624][ T7393] binder: 7392:7393 ioctl 4018620d 2000000002c0 returned -16 [ 193.053293][ T7393] binder: 7392:7393 ioctl 89f1 200000000380 returned -22 [ 193.066669][ T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.130838][ T7396] Illegal XDP return value 7396 on prog (id 22) dev N/A, expect packet loss! [ 193.216625][ T792] usb 3-1: device descriptor read/64, error -71 [ 193.337075][ T792] usb usb3-port1: attempt power cycle [ 193.365046][ T7403] binder: 7402:7403 ioctl c0306201 200000000240 returned -11 [ 193.442138][ T7407] FAULT_INJECTION: forcing a failure. [ 193.442138][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 193.455867][ T7407] CPU: 0 UID: 0 PID: 7407 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.455910][ T7407] Tainted: [L]=SOFTLOCKUP [ 193.455916][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.455926][ T7407] Call Trace: [ 193.455932][ T7407] [ 193.455939][ T7407] dump_stack_lvl+0x100/0x190 [ 193.455971][ T7407] should_fail_ex.cold+0x5/0xa [ 193.455994][ T7407] should_failslab+0xc2/0x120 [ 193.456017][ T7407] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 193.456037][ T7407] ? __alloc_skb+0x140/0x710 [ 193.456053][ T7407] __alloc_skb+0x140/0x710 [ 193.456063][ T7407] ? __alloc_skb+0x5b7/0x710 [ 193.456075][ T7407] ? __pfx___alloc_skb+0x10/0x10 [ 193.456101][ T7407] netlink_alloc_large_skb+0x69/0x150 [ 193.456119][ T7407] netlink_sendmsg+0x680/0xda0 [ 193.456137][ T7407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.456151][ T7407] ? __might_fault+0x40/0x140 [ 193.456175][ T7407] ____sys_sendmsg+0xa54/0xc30 [ 193.456194][ T7407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.456220][ T7407] ___sys_sendmsg+0x190/0x1e0 [ 193.456245][ T7407] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.456285][ T7407] __sys_sendmsg+0x170/0x220 [ 193.456299][ T7407] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.456324][ T7407] do_syscall_64+0x106/0xf80 [ 193.456338][ T7407] ? clear_bhb_loop+0x40/0x90 [ 193.456355][ T7407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.456368][ T7407] RIP: 0033:0x7f10dcf9c799 [ 193.456380][ T7407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.456394][ T7407] RSP: 002b:00007f10ddd9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.456408][ T7407] RAX: ffffffffffffffda RBX: 00007f10dd215fa0 RCX: 00007f10dcf9c799 [ 193.456416][ T7407] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.456424][ T7407] RBP: 00007f10ddd9d090 R08: 0000000000000000 R09: 0000000000000000 [ 193.456432][ T7407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.456440][ T7407] R13: 00007f10dd216038 R14: 00007f10dd215fa0 R15: 00007fffe897d928 [ 193.456458][ T7407] [ 193.727678][ T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.749207][ T792] usb 3-1: device descriptor read/8, error -71 [ 193.835953][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.842746][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.986765][ T792] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.069514][ T792] usb 3-1: device descriptor read/8, error -71 [ 194.098511][ T5797] buffer_io_error: 54 callbacks suppressed [ 194.098522][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.123493][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.166222][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.180261][ T792] usb usb3-port1: unable to enumerate USB device [ 194.194126][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.206036][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.235093][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.243495][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.267298][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.280885][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.325737][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 194.338816][ T5818] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 194.452327][ T30] audit: type=1804 audit(1772468985.783:335): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.404" name="/newroot/73/file0" dev="fuse" ino=1 res=1 errno=0 [ 194.540152][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.820420][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 194.937859][ T5875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 195.084416][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.397016][ T7430] nfs: Unknown parameter 'ac˙˙˙˙' [ 195.822575][ T5875] pvrusb2: Hardware description: Terratec Grabster AV400 [ 195.840896][ T5875] pvrusb2: ********** [ 195.844906][ T5875] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 196.413548][ T5875] pvrusb2: Important functionality might not be entirely working. [ 196.421515][ T5875] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 196.432847][ T5875] pvrusb2: ********** [ 196.460772][ T2338] pvrusb2: Invalid write control endpoint [ 197.367498][ T7441] binder: 7440:7441 ioctl c0306201 200000000240 returned -11 [ 197.369418][ T2338] pvrusb2: Invalid write control endpoint [ 197.393297][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 197.399524][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 197.423278][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 197.459883][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.489074][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.535542][ T2338] pvrusb2: Device being rendered inoperable [ 197.558101][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.591657][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 197.627817][ T2338] pvrusb2: Attached sub-driver cx25840 [ 197.651100][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 197.791287][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 197.873042][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 197.940473][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 198.379557][ T7445] ceph: No mds server is up or the cluster is laggy [ 198.556021][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 198.562193][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 198.590367][ T30] audit: type=1400 audit(1772468989.913:336): avc: denied { setopt } for pid=7459 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.687851][ T5875] usb 5-1: USB disconnect, device number 7 [ 198.700966][ T30] audit: type=1400 audit(1772468989.953:337): avc: denied { connect } for pid=7468 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.724362][ T30] audit: type=1400 audit(1772468989.953:338): avc: denied { read write } for pid=7468 comm="syz.1.417" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 198.876680][ T30] audit: type=1400 audit(1772468989.953:339): avc: denied { open } for pid=7468 comm="syz.1.417" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 198.949816][ T7473] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 198.952726][ T7473] fuse: Bad value for 'rootmode' [ 199.050376][ T30] audit: type=1400 audit(1772468990.283:340): avc: denied { create } for pid=7472 comm="syz.4.418" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 199.050827][ T30] audit: type=1400 audit(1772468990.283:341): avc: denied { associate } for pid=7472 comm="syz.4.418" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 199.164633][ T5797] buffer_io_error: 54 callbacks suppressed [ 199.164650][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 199.396219][ T30] audit: type=1400 audit(1772468990.283:342): avc: denied { read write open } for pid=7472 comm="syz.4.418" path="/102/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 199.397323][ T30] audit: type=1400 audit(1772468990.283:343): avc: denied { mounton } for pid=7472 comm="syz.4.418" path="/102/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 199.489510][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 199.489827][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 199.766656][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 200.020410][ T30] audit: type=1400 audit(1772468990.653:344): avc: denied { execute } for pid=7472 comm="syz.4.418" name="file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 200.104966][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 200.227957][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 200.243261][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 200.578097][ T7484] nfs: Unknown parameter 'ac˙˙˙˙' [ 201.078897][ T30] audit: type=1400 audit(1772468991.603:345): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 201.089484][ T9] usb 4-1: device descriptor read/64, error -71 [ 201.237173][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 201.245435][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 201.287393][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 201.312890][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 201.668448][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.776837][ T5944] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.026696][ T9] usb 4-1: device descriptor read/64, error -71 [ 202.116621][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 202.127792][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.144234][ T5944] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 202.153819][ T9] usb usb4-port1: attempt power cycle [ 202.181364][ T5944] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 202.196669][ T5944] usb 5-1: Manufacturer: syz [ 202.208943][ T5944] usb 5-1: config 0 descriptor?? [ 202.266891][ T7497] overlayfs: missing 'lowerdir' [ 202.632173][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.817000][ T9] usb 4-1: device descriptor read/8, error -71 [ 202.876705][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.046606][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 203.124562][ T5867] usb 3-1: too many configurations: 71, using maximum allowed: 8 [ 203.147507][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.178376][ T5867] usb 3-1: can't read configurations, error -61 [ 203.202572][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.211200][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.226746][ T5944] usbhid 5-1:0.0: can't add hid device: -71 [ 203.232803][ T5944] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.243557][ T5944] usb 5-1: USB disconnect, device number 8 [ 203.325482][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.388769][ T7512] openvswitch: netlink: IP tunnel TTL not specified. [ 203.556904][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 203.585668][ T5867] usb 3-1: too many configurations: 71, using maximum allowed: 8 [ 203.848225][ T5818] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 203.855997][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 203.895572][ T5867] usb 3-1: can't read configurations, error -61 [ 203.918378][ T5867] usb usb3-port1: attempt power cycle [ 203.944054][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 203.944071][ T30] audit: type=1400 audit(1772468995.273:347): avc: denied { connect } for pid=7511 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.348343][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 205.737182][ T7529] nfs: Unknown parameter 'ac˙˙˙˙' [ 206.386828][ T5867] usb 3-1: device descriptor read/8, error -71 [ 207.547575][ T7541] capability: warning: `syz.2.437' uses deprecated v2 capabilities in a way that may be insecure [ 207.844101][ T30] audit: type=1400 audit(1772468998.623:348): avc: denied { create } for pid=7537 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.875803][ T30] audit: type=1400 audit(1772468998.823:349): avc: denied { setopt } for pid=7537 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.997270][ T7540] syz.2.437 (7540) used greatest stack depth: 19344 bytes left [ 209.226443][ T7561] binder: 7560:7561 ioctl c0306201 200000000240 returned -11 [ 209.349628][ T5797] buffer_io_error: 22 callbacks suppressed [ 209.349643][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.397069][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 209.668504][ T7568] nfs: Unknown parameter 'ac˙˙˙˙' [ 210.210892][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.227046][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.275111][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.324296][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.346451][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.364537][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.405653][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 210.443393][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 211.838607][ T7593] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 213.194694][ T7614] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 213.564727][ T7613] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 213.574853][ T7613] overlayfs: overlapping lowerdir path [ 214.553561][ T5797] buffer_io_error: 38 callbacks suppressed [ 214.553576][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 214.787896][ T7629] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 215.168612][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 215.210373][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.240855][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.252710][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.280549][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.717843][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.735566][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.752017][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.760455][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.771090][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 215.843342][ T30] audit: type=1400 audit(1772469007.163:350): avc: denied { call } for pid=7633 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 215.882822][ T30] audit: type=1400 audit(1772469007.213:351): avc: denied { listen } for pid=7635 comm="syz.1.464" lport=57748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.906006][ T7642] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.639922][ T7652] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 218.976672][ T5807] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 219.467342][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 219.482133][ T5807] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 219.511071][ T5807] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 219.556965][ T5807] usb 3-1: config 0 has no interface number 0 [ 219.563090][ T5807] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.679015][ T5797] buffer_io_error: 22 callbacks suppressed [ 219.679032][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.699390][ T5807] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 219.726733][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.747374][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.769642][ T5807] usb 3-1: Product: syz [ 219.773822][ T5807] usb 3-1: Manufacturer: syz [ 219.790294][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.894353][ T5807] usb 3-1: SerialNumber: syz [ 219.907726][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.920716][ T5807] usb 3-1: config 0 descriptor?? [ 219.945214][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.965867][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 219.986434][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 220.023485][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 220.055197][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 220.100726][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 220.147911][ T5807] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 220.183237][ T5807] usb 3-1: USB disconnect, device number 13 [ 220.788704][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 221.173645][ T7684] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 221.670341][ T7690] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 223.857928][ T7714] nfs: Unknown parameter 'ac˙˙˙˙' [ 225.048590][ T7726] binder: BINDER_SET_CONTEXT_MGR already set [ 225.055751][ T7726] binder: 7724:7726 ioctl 4018620d 200000000040 returned -16 [ 225.093418][ T7726] binder: 7724:7726 ioctl c0306201 200000000240 returned -11 [ 225.128167][ T5823] buffer_io_error: 54 callbacks suppressed [ 225.128179][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.136630][ T5807] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 225.146218][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.159995][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.177515][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.192656][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.289135][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.418639][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.486638][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.520093][ T7737] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 225.922398][ T5807] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 225.930772][ T5807] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 225.939094][ T5807] usb 3-1: config 0 has no interface number 1 [ 225.945570][ T5807] usb 3-1: config 0 has no interface number 2 [ 225.952299][ T5807] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 225.961914][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.970329][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 225.973299][ T5807] usb 3-1: config 0 descriptor?? [ 225.982295][ T5823] Buffer I/O error on dev loop3, logical block 0, async page read [ 226.139094][ T30] audit: type=1400 audit(1772469017.473:352): avc: denied { mounton } for pid=7741 comm="syz.4.495" path="/118/file0" dev="ramfs" ino=16977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 226.235566][ T7738] 9p: Bad value for 'rfdno' [ 226.300119][ T7742] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 227.415036][ T30] audit: type=1400 audit(1772469018.743:353): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 227.880680][ T7753] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 227.887483][ T7753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.896437][ T7753] vhci_hcd vhci_hcd.0: Device attached [ 227.954213][ T7764] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 228.381539][ T7762] vhci_hcd: connection closed [ 228.482790][ T5807] usb 3-1: Could not set interface, error -71 [ 228.501325][ T5807] usb 3-1: USB disconnect, device number 14 [ 228.542638][ T13] vhci_hcd vhci_hcd.0: stop threads [ 228.568345][ T13] vhci_hcd vhci_hcd.0: release socket [ 228.574416][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 228.918147][ T7774] 9p: Bad value for 'rfdno' [ 228.927182][ T30] audit: type=1400 audit(1772469020.253:354): avc: denied { ioctl } for pid=7768 comm="syz.2.500" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 228.936861][ T7767] kvm: kvm [7766]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 229.004447][ T30] audit: type=1400 audit(1772469020.253:355): avc: denied { mounton } for pid=7768 comm="syz.2.500" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 229.007078][ T7778] binder: BINDER_SET_CONTEXT_MGR already set [ 229.122523][ T7778] binder: 7776:7778 ioctl 4018620d 200000000040 returned -16 [ 230.950570][ T5797] buffer_io_error: 70 callbacks suppressed [ 230.950582][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 230.997105][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.028181][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.056056][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.088467][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.118624][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.136323][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.157485][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.178124][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.186350][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 231.206873][ T30] audit: type=1800 audit(1772469022.533:356): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.511" name="file0" dev="overlay" ino=600 res=0 errno=0 [ 231.257374][ T5867] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 231.434830][ T5867] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 231.458377][ T5867] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 231.505657][ T5867] usb 4-1: config 0 has no interface number 1 [ 231.548307][ T5867] usb 4-1: config 0 has no interface number 2 [ 231.639370][ T5867] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 231.760872][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.972759][ T5867] usb 4-1: config 0 descriptor?? [ 232.806025][ T7824] kvm: kvm [7823]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 233.131358][ T30] audit: type=1400 audit(1772469024.453:357): avc: denied { create } for pid=7834 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.206565][ T7837] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 233.661579][ T30] audit: type=1400 audit(1772469024.463:358): avc: denied { bind } for pid=7834 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 234.341277][ T5867] usb 4-1: Could not set interface, error -71 [ 234.386858][ T5867] usb 4-1: USB disconnect, device number 25 [ 234.712759][ T7842] netlink: 'syz.0.521': attribute type 16 has an invalid length. [ 234.721184][ T7842] netlink: 'syz.0.521': attribute type 17 has an invalid length. [ 234.750868][ T7842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.239583][ T30] audit: type=1400 audit(1772469026.563:359): avc: denied { create } for pid=7843 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.722997][ T30] audit: type=1400 audit(1772469026.573:360): avc: denied { listen } for pid=7843 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.743961][ T30] audit: type=1400 audit(1772469026.573:361): avc: denied { accept } for pid=7843 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.830559][ T7865] binder: BINDER_SET_CONTEXT_MGR already set [ 235.836659][ T7865] binder: 7864:7865 ioctl 4018620d 200000000040 returned -16 [ 235.847161][ T7865] binder: 7864:7865 ioctl c0306201 200000000240 returned -11 [ 235.906465][ T30] audit: type=1804 audit(1772469026.763:362): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.526" name="/newroot/99/file0" dev="tmpfs" ino=548 res=1 errno=0 [ 236.267848][ T30] audit: type=1400 audit(1772469027.593:363): avc: denied { name_bind } for pid=7877 comm="syz.2.531" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 236.348194][ T30] audit: type=1400 audit(1772469027.623:364): avc: denied { name_connect } for pid=7877 comm="syz.2.531" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 236.393096][ T30] audit: type=1400 audit(1772469027.673:365): avc: denied { create } for pid=7881 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.421814][ T30] audit: type=1400 audit(1772469027.753:366): avc: denied { mount } for pid=7881 comm="syz.0.532" name="/" dev="autofs" ino=17504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 236.537540][ T30] audit: type=1400 audit(1772469027.873:367): avc: denied { read } for pid=7881 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.605764][ T5797] buffer_io_error: 22 callbacks suppressed [ 236.605777][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.619995][ T5944] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 236.642134][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.651768][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.661535][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.672382][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.676571][ T30] audit: type=1400 audit(1772469028.003:368): avc: denied { write } for pid=7890 comm="syz.3.535" lport=54170 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.681392][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.716738][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.725637][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.742802][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.748673][ T30] audit: type=1400 audit(1772469028.003:369): avc: denied { setopt } for pid=7890 comm="syz.3.535" lport=54170 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.778348][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.798325][ T5944] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 236.806453][ T5944] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 236.817912][ T5944] usb 3-1: config 0 has no interface number 1 [ 236.824125][ T5944] usb 3-1: config 0 has no interface number 2 [ 236.830838][ T5944] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 236.840265][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.865559][ T5944] usb 3-1: config 0 descriptor?? [ 237.550504][ T792] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 237.604286][ T7897] nfs: Unknown parameter 'ac˙˙˙˙' [ 237.912088][ T792] usb 4-1: config 0 has an invalid interface number: 3 but max is 2 [ 237.926585][ T792] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 237.953644][ T792] usb 4-1: config 0 has no interface number 1 [ 237.953978][ T7901] FAULT_INJECTION: forcing a failure. [ 237.953978][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.973570][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.0.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.973598][ T7901] Tainted: [L]=SOFTLOCKUP [ 237.973604][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.973615][ T7901] Call Trace: [ 237.973621][ T7901] [ 237.973631][ T7901] dump_stack_lvl+0x100/0x190 [ 237.973661][ T7901] should_fail_ex.cold+0x5/0xa [ 237.973680][ T7901] _copy_from_iter+0x1f4/0x1690 [ 237.973706][ T7901] ? __asan_memset+0x23/0x50 [ 237.973727][ T7901] ? __pfx__copy_from_iter+0x10/0x10 [ 237.973749][ T7901] ? __pfx___alloc_skb+0x10/0x10 [ 237.973783][ T7901] netlink_sendmsg+0x808/0xda0 [ 237.973809][ T7901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.973828][ T7901] ? __might_fault+0x40/0x140 [ 237.973859][ T7901] ____sys_sendmsg+0xa54/0xc30 [ 237.973885][ T7901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.973919][ T7901] ___sys_sendmsg+0x190/0x1e0 [ 237.973944][ T7901] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.974004][ T7901] __sys_sendmsg+0x170/0x220 [ 237.974022][ T7901] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.974055][ T7901] do_syscall_64+0x106/0xf80 [ 237.974074][ T7901] ? clear_bhb_loop+0x40/0x90 [ 237.974096][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.974113][ T7901] RIP: 0033:0x7fa8a059c799 [ 237.974129][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.974145][ T7901] RSP: 002b:00007fa8a1507028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.974162][ T7901] RAX: ffffffffffffffda RBX: 00007fa8a0815fa0 RCX: 00007fa8a059c799 [ 237.974173][ T7901] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 237.974183][ T7901] RBP: 00007fa8a1507090 R08: 0000000000000000 R09: 0000000000000000 [ 237.974193][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.974202][ T7901] R13: 00007fa8a0816038 R14: 00007fa8a0815fa0 R15: 00007ffe9d6a2b18 [ 237.974226][ T7901] [ 237.981829][ T792] usb 4-1: config 0 has no interface number 2 [ 238.097559][ T30] audit: type=1400 audit(1772469029.413:370): avc: denied { lock } for pid=7902 comm="syz.0.540" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 238.207948][ T30] audit: type=1400 audit(1772469029.423:371): avc: denied { map } for pid=7902 comm="syz.0.540" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 238.351481][ T792] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 238.382309][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.411821][ T792] usb 4-1: config 0 descriptor?? [ 238.536698][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 238.696955][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 238.810862][ T792] usb 4-1: Could not set interface, error -71 [ 239.288984][ T5807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.297901][ T5807] usb 1-1: config 0 has no interface number 0 [ 239.304072][ T5807] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 239.320624][ T5807] usb 1-1: config 0 interface 1 has no altsetting 0 [ 239.322597][ T792] usb 4-1: USB disconnect, device number 26 [ 239.351654][ T5807] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 239.361309][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.370342][ T5807] usb 1-1: Product: syz [ 239.374717][ T5807] usb 1-1: Manufacturer: syz [ 239.379753][ T5807] usb 1-1: SerialNumber: syz [ 239.390076][ T5807] usb 1-1: config 0 descriptor?? [ 239.411864][ T5944] usb 3-1: Could not set interface, error -71 [ 239.463304][ T5944] usb 3-1: USB disconnect, device number 15 [ 239.607130][ T30] audit: type=1400 audit(1772469030.903:372): avc: denied { read } for pid=7914 comm="syz.2.542" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.650532][ T5818] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 239.854707][ T5807] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 239.865851][ T5807] cx231xx 1-1:0.1: Not found matching IAD interface [ 239.879881][ T5807] usb 1-1: USB disconnect, device number 12 [ 241.878020][ T7937] nfs: Unknown parameter 'ac˙˙˙˙' [ 242.844343][ T5797] buffer_io_error: 22 callbacks suppressed [ 242.844354][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 242.910959][ T5860] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 242.978105][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.065996][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.079044][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.087862][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.095870][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.109838][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.118095][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.126622][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.138191][ T7953] audit_log_lost: 7 callbacks suppressed [ 243.138203][ T7953] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 243.151828][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 243.167665][ T7953] audit: out of memory in audit_log_start [ 243.268075][ T5860] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 243.276109][ T5860] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 243.284517][ T5860] usb 1-1: config 0 has no interface number 1 [ 243.292170][ T5860] usb 1-1: config 0 has no interface number 2 [ 243.571059][ T5860] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 243.590834][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.609995][ T5860] usb 1-1: config 0 descriptor?? [ 243.649232][ T7953] lo speed is unknown, defaulting to 1000 [ 243.659351][ T7953] lo speed is unknown, defaulting to 1000 [ 243.666225][ T7953] lo speed is unknown, defaulting to 1000 [ 244.180211][ T30] audit: type=1400 audit(1772469035.503:380): avc: denied { mount } for pid=7960 comm="syz.4.556" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 244.830703][ T792] lo speed is unknown, defaulting to 1000 [ 244.840782][ T7953] infiniband syU×: set active [ 244.873167][ T7953] infiniband syU×: added lo [ 244.964409][ T7953] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 245.048898][ T7953] infiniband syU×: Couldn't open port 1 [ 245.133547][ T7953] RDS/IB: syU×: added [ 245.143038][ T7953] smc: adding ib device syU× with port count 1 [ 245.149787][ T7953] smc: ib device syU× port 1 has no pnetid [ 245.157515][ T9] lo speed is unknown, defaulting to 1000 [ 245.168776][ T7953] lo speed is unknown, defaulting to 1000 [ 245.263098][ T792] IPVS: starting estimator thread 0... [ 245.419244][ T7977] IPVS: using max 40 ests per chain, 96000 per kthread [ 245.909079][ T30] audit: type=1804 audit(1772469037.223:381): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.560" name="/newroot/108/file0" dev="tmpfs" ino=595 res=1 errno=0 [ 246.095556][ T30] audit: type=1400 audit(1772469037.353:382): avc: denied { write } for pid=7989 comm="syz.3.562" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.633586][ T5860] usb 1-1: Could not set interface, error -71 [ 246.705888][ T5860] usb 1-1: USB disconnect, device number 13 [ 246.733878][ T30] audit: type=1400 audit(1772469038.063:383): avc: denied { getopt } for pid=7997 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 246.776152][ T7953] lo speed is unknown, defaulting to 1000 [ 248.158788][ T5797] buffer_io_error: 38 callbacks suppressed [ 248.158799][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.418325][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.711239][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.721161][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.730440][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.738883][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.747735][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.755959][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 248.764428][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 249.238141][ T5797] Buffer I/O error on dev loop3, logical block 0, async page read [ 250.297041][ T7953] lo speed is unknown, defaulting to 1000 [ 251.528865][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 251.541855][ T7953] lo speed is unknown, defaulting to 1000 [ 251.566617][ T5944] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 251.832912][ T5944] usb 5-1: config 0 has an invalid interface number: 3 but max is 2 [ 251.851818][ T5944] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 251.921717][ T5944] usb 5-1: config 0 has no interface number 1 [ 251.981366][ T5944] usb 5-1: config 0 has no interface number 2 [ 252.001344][ T5944] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 252.044787][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.059665][ T8034] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 262.788429][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.794894][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.667319][ T5944] usb 5-1: config 0 descriptor?? [ 263.697076][ T5944] usb 5-1: can't set config #0, error -71 [ 263.770815][ T5944] usb 5-1: USB disconnect, device number 9 [ 263.987070][ T8041] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 264.244696][ T8048] capability: warning: `syz.1.579' uses 32-bit capabilities (legacy support in use) [ 268.197757][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.212359][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.220632][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.228486][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.236175][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.381503][ T7953] lo speed is unknown, defaulting to 1000 [ 270.297386][ T5818] Bluetooth: hci5: command tx timeout [ 270.722597][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.831972][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.868960][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.881083][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.888732][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.933768][ T8045] NFSD: Failed to start, no listeners configured. [ 271.534350][ T8056] lo speed is unknown, defaulting to 1000 [ 271.586643][ T8072] binder: 8071:8072 ioctl c0306201 0 returned -14 [ 272.106665][ T8076] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 272.220230][ T8063] lo speed is unknown, defaulting to 1000 [ 272.384533][ T5818] Bluetooth: hci5: command tx timeout [ 273.016626][ T5818] Bluetooth: hci6: command tx timeout [ 273.031843][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 273.582028][ T8093] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 273.608531][ T30] audit: type=1326 audit(1772469064.933:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 273.659434][ T8096] syz.0.589 (8096): /proc/8080/oom_adj is deprecated, please use /proc/8080/oom_score_adj instead. [ 274.866398][ T8090] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 274.899190][ T5818] Bluetooth: hci5: command tx timeout [ 274.948973][ T30] audit: type=1326 audit(1772469064.933:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 276.357035][ T5818] Bluetooth: hci6: command tx timeout [ 276.388562][ T30] audit: type=1326 audit(1772469064.933:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 276.593118][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.955287][ T5818] Bluetooth: hci5: command tx timeout [ 276.995157][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.013430][ T8056] bridge_slave_0: entered allmulticast mode [ 277.029695][ T8056] bridge_slave_0: entered promiscuous mode [ 277.048992][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.066595][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.081743][ T8056] bridge_slave_1: entered allmulticast mode [ 277.091623][ T30] audit: type=1326 audit(1772469064.933:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 277.156180][ T8056] bridge_slave_1: entered promiscuous mode [ 277.226564][ T30] audit: type=1326 audit(1772469064.933:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 277.432796][ T30] audit: type=1326 audit(1772469064.933:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa8a059c799 code=0x7ffc0000 [ 277.592541][ T30] audit: type=1400 audit(1772469064.933:390): avc: denied { mounton } for pid=8080 comm="syz.0.589" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 277.642731][ T8107] binder: 8106:8107 ioctl c0306201 0 returned -14 [ 278.376790][ T5818] Bluetooth: hci6: command tx timeout [ 278.614204][ T8105] nfs: Unknown parameter 'ac˙˙˙˙' [ 279.122422][ T30] audit: type=1400 audit(1772469070.453:391): avc: denied { ioctl } for pid=8110 comm="syz.4.595" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x552c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 280.625536][ T5818] Bluetooth: hci6: command tx timeout [ 283.843427][ T8124] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 285.866969][ T5807] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 285.928841][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.974332][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.985243][ T5916] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 286.038815][ T8056] team0: Port device team_slave_0 added [ 286.052328][ T5807] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 286.062072][ T8056] team0: Port device team_slave_1 added [ 286.068895][ T5807] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 286.085186][ T5807] usb 1-1: config 0 has no interface number 1 [ 286.101184][ T5807] usb 1-1: config 0 has no interface number 2 [ 286.128277][ T5807] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 286.148747][ T5916] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 286.158481][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.177828][ T5916] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 286.186008][ T5916] usb 2-1: config 0 has no interface number 1 [ 286.216806][ T5807] usb 1-1: config 0 descriptor?? [ 286.236646][ T5916] usb 2-1: config 0 has no interface number 2 [ 286.242799][ T5916] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 286.265069][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.560635][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.673334][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.695740][ T5916] usb 2-1: config 0 descriptor?? [ 287.186747][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.199544][ T30] audit: type=1400 audit(1772469078.533:392): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 287.285746][ T8136] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 287.722316][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.729489][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.761214][ T5916] usb 2-1: Could not set interface, error -71 [ 287.780442][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.218556][ T5916] usb 2-1: USB disconnect, device number 9 [ 289.562730][ T5807] usb 1-1: Could not set interface, error -71 [ 289.591016][ T5807] usb 1-1: USB disconnect, device number 14 [ 295.219650][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.890935][ T8158] nfs: Unknown parameter 'ac˙˙˙˙' [ 298.478040][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.778741][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 298.963992][ T8056] hsr_slave_0: entered promiscuous mode [ 299.030530][ T8056] hsr_slave_1: entered promiscuous mode [ 299.119743][ T30] audit: type=1400 audit(1772469090.453:393): avc: denied { ioctl } for pid=8177 comm="syz.4.603" path="socket:[19823]" dev="sockfs" ino=19823 ioctlcmd=0x586c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.149717][ T8056] debugfs: 'hsr0' already exists in 'hsr' [ 299.155467][ T8056] Cannot create hsr debugfs directory [ 299.500329][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.619581][ T8181] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 299.716043][ T8183] netlink: 76 bytes leftover after parsing attributes in process `syz.4.603'. [ 302.062788][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.422721][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.452225][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.483555][ T8063] bridge_slave_0: entered allmulticast mode [ 303.509404][ T8063] bridge_slave_0: entered promiscuous mode [ 303.670412][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.759875][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.786849][ T8063] bridge_slave_1: entered allmulticast mode [ 303.804449][ T8063] bridge_slave_1: entered promiscuous mode [ 303.848068][ T8199] rtc_cmos 00:00: Alarms can be up to one day in the future [ 303.856537][ T30] audit: type=1400 audit(1772469095.183:394): avc: denied { ioctl } for pid=8198 comm="syz.4.609" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 304.191331][ T12] bridge_slave_1: left allmulticast mode [ 304.206603][ T12] bridge_slave_1: left promiscuous mode [ 304.228085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.321188][ T12] bridge_slave_0: left allmulticast mode [ 304.342281][ T12] bridge_slave_0: left promiscuous mode [ 304.361003][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.370469][ T30] audit: type=1400 audit(1772469095.703:395): avc: denied { read open } for pid=8204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.203959][ T30] audit: type=1400 audit(1772469095.743:396): avc: denied { getattr } for pid=8204 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.593027][ T30] audit: type=1400 audit(1772469096.263:397): avc: denied { write } for pid=8205 comm="syz.4.610" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 308.021019][ T30] audit: type=1800 audit(1772469099.353:398): pid=8220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.612" name="file0" dev="overlay" ino=740 res=0 errno=0 [ 310.951319][ T30] audit: type=1800 audit(1772469102.283:399): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.614" name="file0" dev="overlay" ino=841 res=0 errno=0 [ 316.700495][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.706908][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.446616][ T30] audit: type=1400 audit(1772469113.763:400): avc: denied { add_name } for pid=8203 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.666539][ T30] audit: type=1400 audit(1772469113.763:401): avc: denied { create } for pid=8203 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.790801][ T30] audit: type=1400 audit(1772469113.763:402): avc: denied { write } for pid=8203 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=4408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.090117][ T30] audit: type=1400 audit(1772469113.763:403): avc: denied { append } for pid=8203 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=4408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.156251][ T30] audit: type=1400 audit(1772469114.253:404): avc: denied { remove_name } for pid=8236 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.286676][ T5807] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 323.358804][ T30] audit: type=1400 audit(1772469114.253:405): avc: denied { unlink } for pid=8236 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.450956][ T30] audit: type=1400 audit(1772469114.403:406): avc: denied { create } for pid=8237 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.074792][ T30] audit: type=1400 audit(1772469114.553:407): avc: denied { ioctl } for pid=8237 comm="syz.0.616" path="socket:[17774]" dev="sockfs" ino=17774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.192854][ T5807] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 324.431530][ T5807] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 324.896657][ T5807] usb 2-1: config 0 has no interface number 1 [ 324.946694][ T30] audit: type=1400 audit(1772469114.563:408): avc: denied { bind } for pid=8237 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.977280][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.003666][ T5807] usb 2-1: config 0 has no interface number 2 [ 325.851765][ T5807] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 326.502178][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.563676][ T30] audit: type=1400 audit(1772469114.643:409): avc: denied { connect } for pid=8237 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 326.587042][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.692054][ T5807] usb 2-1: config 0 descriptor?? [ 326.727926][ T5807] usb 2-1: can't set config #0, error -71 [ 326.747729][ T5807] usb 2-1: USB disconnect, device number 10 [ 326.757764][ T12] bond0 (unregistering): Released all slaves [ 326.827879][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.876922][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.638595][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.796649][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 327.819122][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.836517][ T12] !: left promiscuous mode [ 327.961803][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.974497][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.191194][ T8253] lo speed is unknown, defaulting to 1000 [ 329.699671][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.709565][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.717526][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.725544][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.738330][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.188240][ T5132] Bluetooth: hci1: command tx timeout [ 331.977785][ T5132] Bluetooth: hci4: command tx timeout [ 332.270811][ T5132] Bluetooth: hci1: command tx timeout [ 332.726777][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 332.726792][ T30] audit: type=1400 audit(1772469124.063:413): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 333.097650][ T8264] lo speed is unknown, defaulting to 1000 [ 333.125129][ T30] audit: type=1400 audit(1772469124.443:414): avc: denied { setopt } for pid=8285 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.145588][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 333.212987][ T8278] nfs: Unknown parameter 'ac˙˙˙˙' [ 334.061543][ T5132] Bluetooth: hci4: command tx timeout [ 334.296572][ T5132] Bluetooth: hci1: command tx timeout [ 336.181883][ T5132] Bluetooth: hci4: command tx timeout [ 336.406604][ T5132] Bluetooth: hci1: command tx timeout [ 338.219565][ T5132] Bluetooth: hci4: command tx timeout [ 350.055364][ T8253] chnl_net:caif_netlink_parms(): no params data found [ 362.977047][ T8314] vlan2: entered promiscuous mode [ 363.016634][ T8314] bridge0: entered promiscuous mode [ 363.526497][ C1] sched: DL replenish lagged too much [ 374.601256][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.625634][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.634422][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.642631][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.654630][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.911866][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.920493][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.930182][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.942671][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.952375][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.490984][ T12] hsr_slave_0: left promiscuous mode [ 376.114273][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.123400][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.133720][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.141485][ T12] hsr_slave_1: left promiscuous mode [ 376.146910][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.155466][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.225802][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.234361][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.365559][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.380343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.474678][ T12] veth1_macvtap: left promiscuous mode [ 376.481147][ T12] veth0_macvtap: left promiscuous mode [ 376.490489][ T12] veth1_vlan: left promiscuous mode [ 376.495769][ T12] veth0_vlan: left promiscuous mode [ 376.786564][ T5818] Bluetooth: hci5: command tx timeout [ 376.827211][ T12] team0 (unregistering): Port device team_slave_1 removed [ 376.846657][ T12] team0 (unregistering): Port device team_slave_0 removed [ 376.972577][ T8235] smc: removing ib device syU× [ 377.016978][ T5818] Bluetooth: hci0: command tx timeout [ 378.149109][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.155468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.216849][ T5818] Bluetooth: hci3: command tx timeout [ 378.289950][ T9] lo speed is unknown, defaulting to 1000 [ 378.295703][ T9] syU×: Port: 1 Link DOWN [ 378.872094][ T5818] Bluetooth: hci5: command tx timeout [ 379.097138][ T5818] Bluetooth: hci0: command tx timeout [ 379.249691][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.266579][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.281780][ T8253] bridge_slave_0: entered allmulticast mode [ 379.327809][ T8253] bridge_slave_0: entered promiscuous mode [ 379.357971][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.365093][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.427047][ T8253] bridge_slave_1: entered allmulticast mode [ 379.490801][ T8253] bridge_slave_1: entered promiscuous mode [ 379.830963][ T30] audit: type=1400 audit(1772469171.163:415): avc: denied { module_request } for pid=8264 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 379.966901][ T8253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.986112][ T8264] chnl_net:caif_netlink_parms(): no params data found [ 380.111034][ T8253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.203180][ T8253] team0: Port device team_slave_0 added [ 380.299673][ T5818] Bluetooth: hci3: command tx timeout [ 380.313979][ T8253] team0: Port device team_slave_1 added [ 380.382617][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.393477][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.410379][ T8264] bridge_slave_0: entered allmulticast mode [ 380.419373][ T8264] bridge_slave_0: entered promiscuous mode [ 380.518843][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.538209][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.545413][ T8264] bridge_slave_1: entered allmulticast mode [ 380.570962][ T8264] bridge_slave_1: entered promiscuous mode [ 380.614290][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.629316][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.681188][ T8253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.743529][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.843110][ T8328] chnl_net:caif_netlink_parms(): no params data found [ 380.855810][ T8253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.863507][ T8253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.892751][ T8253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.936537][ T5818] Bluetooth: hci5: command tx timeout [ 380.960601][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.999821][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.089532][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.121687][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.175659][ T8253] hsr_slave_0: entered promiscuous mode [ 381.185433][ T5818] Bluetooth: hci0: command tx timeout [ 381.192446][ T8253] hsr_slave_1: entered promiscuous mode [ 381.199689][ T8253] debugfs: 'hsr0' already exists in 'hsr' [ 381.216978][ T8253] Cannot create hsr debugfs directory [ 381.280292][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.513350][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 381.623887][ T8264] team0: Port device team_slave_0 added [ 381.649504][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 381.691775][ T8264] team0: Port device team_slave_1 added [ 381.852085][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.859133][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.887945][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.903937][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.911826][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.939091][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.003387][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.018656][ T8328] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.025863][ T8328] bridge_slave_0: entered allmulticast mode [ 382.034207][ T8328] bridge_slave_0: entered promiscuous mode [ 382.079635][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.087048][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.094479][ T8318] bridge_slave_0: entered allmulticast mode [ 382.102419][ T8318] bridge_slave_0: entered promiscuous mode [ 382.146415][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.153880][ T8328] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.165078][ T8328] bridge_slave_1: entered allmulticast mode [ 382.173325][ T8328] bridge_slave_1: entered promiscuous mode [ 382.203247][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.211432][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.223880][ T8318] bridge_slave_1: entered allmulticast mode [ 382.235451][ T8318] bridge_slave_1: entered promiscuous mode [ 382.377146][ T5818] Bluetooth: hci3: command tx timeout [ 382.395351][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.410492][ T8264] hsr_slave_0: entered promiscuous mode [ 382.417440][ T8264] hsr_slave_1: entered promiscuous mode [ 382.425484][ T8264] debugfs: 'hsr0' already exists in 'hsr' [ 382.431566][ T8264] Cannot create hsr debugfs directory [ 382.438231][ T12] bridge_slave_1: left allmulticast mode [ 382.444615][ T12] bridge_slave_1: left promiscuous mode [ 382.453696][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.468418][ T12] bridge_slave_0: left allmulticast mode [ 382.474059][ T12] bridge_slave_0: left promiscuous mode [ 382.480836][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.499850][ T12] bridge_slave_1: left allmulticast mode [ 382.505503][ T12] bridge_slave_1: left promiscuous mode [ 382.511577][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.539854][ T12] bridge_slave_0: left allmulticast mode [ 382.545518][ T12] bridge_slave_0: left promiscuous mode [ 382.560657][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.578420][ T12] bridge_slave_1: left allmulticast mode [ 382.584078][ T12] bridge_slave_1: left promiscuous mode [ 382.591477][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.605849][ T12] bridge_slave_0: left allmulticast mode [ 382.611856][ T12] bridge_slave_0: left promiscuous mode [ 382.629127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.029222][ T5818] Bluetooth: hci5: command tx timeout [ 383.091353][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.122271][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.143449][ T12] bond0 (unregistering): Released all slaves [ 383.256796][ T5818] Bluetooth: hci0: command tx timeout [ 383.299916][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.318135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.333155][ T12] bond0 (unregistering): Released all slaves [ 383.450629][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.471581][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.488849][ T12] bond0 (unregistering): Released all slaves [ 383.508949][ T8328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.521074][ T8328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.613617][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.680441][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.717037][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.724288][ T8334] bridge_slave_0: entered allmulticast mode [ 383.735395][ T8334] bridge_slave_0: entered promiscuous mode [ 383.831279][ T8318] team0: Port device team_slave_0 added [ 383.848637][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.867337][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.874549][ T8334] bridge_slave_1: entered allmulticast mode [ 383.882455][ T8334] bridge_slave_1: entered promiscuous mode [ 384.023953][ T8328] team0: Port device team_slave_0 added [ 384.031729][ T8318] team0: Port device team_slave_1 added [ 384.146360][ T8328] team0: Port device team_slave_1 added [ 384.263044][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.343026][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.357882][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.390516][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.403243][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.411799][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.438082][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.467494][ T5818] Bluetooth: hci3: command tx timeout [ 384.951640][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 384.961074][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 384.969499][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.977350][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.985198][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.053290][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.089393][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.096356][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.123023][ T8328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.256755][ T12] hsr_slave_0: left promiscuous mode [ 385.270551][ T12] hsr_slave_1: left promiscuous mode [ 385.277258][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.284637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.299418][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.307090][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.331148][ T12] hsr_slave_0: left promiscuous mode [ 385.344597][ T12] hsr_slave_1: left promiscuous mode [ 385.354180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.363210][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.385119][ T12] veth1_macvtap: left promiscuous mode [ 385.391432][ T12] veth0_macvtap: left promiscuous mode [ 385.397298][ T12] veth1_vlan: left promiscuous mode [ 385.402538][ T12] veth0_vlan: left promiscuous mode [ 385.665003][ T12] team0 (unregistering): Port device team_slave_1 removed [ 385.695488][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.103431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 386.129759][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.265909][ T8328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.277483][ T8328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.333897][ T8328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.389613][ T8334] team0: Port device team_slave_0 added [ 386.488972][ T8334] team0: Port device team_slave_1 added [ 386.796109][ T8318] hsr_slave_0: entered promiscuous mode [ 386.826895][ T8318] hsr_slave_1: entered promiscuous mode [ 387.031207][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.046949][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.101571][ T5132] Bluetooth: hci2: command tx timeout [ 387.134951][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.347958][ T8328] hsr_slave_0: entered promiscuous mode [ 387.354797][ T8328] hsr_slave_1: entered promiscuous mode [ 387.361971][ T8328] debugfs: 'hsr0' already exists in 'hsr' [ 387.368689][ T8328] Cannot create hsr debugfs directory [ 387.387577][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.394579][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.434941][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.722306][ T8334] hsr_slave_0: entered promiscuous mode [ 387.730651][ T8334] hsr_slave_1: entered promiscuous mode [ 387.738338][ T8334] debugfs: 'hsr0' already exists in 'hsr' [ 387.744065][ T8334] Cannot create hsr debugfs directory [ 388.895126][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.905109][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.913618][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.921533][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.929428][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.014853][ T8421] chnl_net:caif_netlink_parms(): no params data found [ 389.177002][ T5818] Bluetooth: hci2: command tx timeout [ 389.713607][ T8421] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.734983][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.745505][ T8421] bridge_slave_0: entered allmulticast mode [ 389.753553][ T8421] bridge_slave_0: entered promiscuous mode [ 389.825277][ T8318] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.874088][ T8318] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 389.894844][ T8421] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.904424][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.915008][ T8421] bridge_slave_1: entered allmulticast mode [ 389.922668][ T8421] bridge_slave_1: entered promiscuous mode [ 389.933226][ T12] IPVS: stop unused estimator thread 0... [ 390.038076][ T8318] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.127510][ T8318] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.165926][ T8421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.240287][ T8421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.298374][ T8421] team0: Port device team_slave_0 added [ 390.312557][ T8328] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 390.355576][ T8421] team0: Port device team_slave_1 added [ 390.377249][ T8328] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 390.434751][ T8328] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 390.488392][ T8328] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 390.511396][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.527827][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.572765][ T8421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.016628][ T5818] Bluetooth: hci1: command tx timeout [ 391.168603][ T8421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.177845][ T8421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.204154][ T8421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.246957][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 391.256958][ T5818] Bluetooth: hci2: command tx timeout [ 391.396189][ T8421] hsr_slave_0: entered promiscuous mode [ 391.403132][ T8421] hsr_slave_1: entered promiscuous mode [ 391.410326][ T8421] debugfs: 'hsr0' already exists in 'hsr' [ 391.416059][ T8421] Cannot create hsr debugfs directory [ 391.435336][ T8334] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 391.486867][ T8334] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 391.550984][ T8334] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 391.572220][ T8334] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 391.735472][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.748314][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.755918][ T8457] bridge_slave_0: entered allmulticast mode [ 391.763931][ T8457] bridge_slave_0: entered promiscuous mode [ 391.797435][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.810607][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.821272][ T8457] bridge_slave_1: entered allmulticast mode [ 391.838888][ T8457] bridge_slave_1: entered promiscuous mode [ 391.899623][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.021894][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.036375][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.239914][ T8457] team0: Port device team_slave_0 added [ 392.258527][ T8457] team0: Port device team_slave_1 added [ 392.279685][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.445909][ T8328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.483852][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.491001][ T8235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.526853][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.533972][ T8235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.670769][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.682454][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.736861][ T8457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.773194][ T8457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.791343][ T8457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.857172][ T8457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.075628][ T8328] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.101110][ T5818] Bluetooth: hci1: command tx timeout [ 393.168269][ T8457] hsr_slave_0: entered promiscuous mode [ 393.175087][ T8457] hsr_slave_1: entered promiscuous mode [ 393.183265][ T8457] debugfs: 'hsr0' already exists in 'hsr' [ 393.189379][ T8457] Cannot create hsr debugfs directory [ 393.228354][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.235469][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.274862][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.282013][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.336912][ T5818] Bluetooth: hci2: command tx timeout [ 393.525896][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.680771][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.828608][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.835730][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.878216][ T3552] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.885332][ T3552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.066014][ T8318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.317532][ T12] bridge_slave_1: left allmulticast mode [ 394.323206][ T12] bridge_slave_1: left promiscuous mode [ 394.366274][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.444220][ T12] bridge_slave_0: left allmulticast mode [ 394.458594][ T12] bridge_slave_0: left promiscuous mode [ 394.464333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.511118][ T12] bridge_slave_1: left allmulticast mode [ 394.523680][ T12] bridge_slave_1: left promiscuous mode [ 394.551333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.572524][ T12] bridge_slave_0: left allmulticast mode [ 394.583067][ T12] bridge_slave_0: left promiscuous mode [ 394.589127][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.842486][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.874853][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.888574][ T12] bond0 (unregistering): Released all slaves [ 395.160138][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.176803][ T5818] Bluetooth: hci1: command tx timeout [ 395.198375][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.219485][ T12] bond0 (unregistering): Released all slaves [ 395.536564][ T12] hsr_slave_0: left promiscuous mode [ 395.593751][ T12] hsr_slave_1: left promiscuous mode [ 395.604689][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.660219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.715703][ T12] hsr_slave_0: left promiscuous mode [ 395.740976][ T12] hsr_slave_1: left promiscuous mode [ 395.776927][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.793073][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.128414][ T12] team0 (unregistering): Port device team_slave_1 removed [ 396.178615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.490515][ T12] team0 (unregistering): Port device team_slave_1 removed [ 396.505779][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.840994][ T8328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.203502][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.259863][ T5818] Bluetooth: hci1: command tx timeout [ 397.307609][ T8318] veth0_vlan: entered promiscuous mode [ 397.384323][ T8318] veth1_vlan: entered promiscuous mode [ 397.636351][ T8318] veth0_macvtap: entered promiscuous mode [ 397.886152][ T8318] veth1_macvtap: entered promiscuous mode [ 399.033615][ T8421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 399.086267][ T8421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 399.220104][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.292680][ T8421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 399.411804][ T8421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.450387][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.561357][ T3533] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.586872][ T3533] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.595602][ T3533] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.721037][ T3533] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.766246][ T8328] veth0_vlan: entered promiscuous mode [ 399.958123][ T8334] veth0_vlan: entered promiscuous mode [ 400.111721][ T8334] veth1_vlan: entered promiscuous mode [ 400.128372][ T8328] veth1_vlan: entered promiscuous mode [ 400.343281][ T8334] veth0_macvtap: entered promiscuous mode [ 400.354604][ T8328] veth0_macvtap: entered promiscuous mode [ 400.372247][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.407416][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.426130][ T8334] veth1_macvtap: entered promiscuous mode [ 400.464878][ T8328] veth1_macvtap: entered promiscuous mode [ 400.554417][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.572152][ T8457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.608080][ T8457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.653195][ T8421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.682568][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.705633][ T8457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.734973][ T8457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.764328][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.807997][ T3552] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.823119][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.907610][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.933949][ T3552] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.954033][ T3552] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.001674][ T30] audit: type=1400 audit(1772469192.333:416): avc: denied { mounton } for pid=8318 comm="syz-executor" path="/root/syzkaller.nwrC2D/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 401.048907][ T8421] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.086796][ T8328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.136916][ T3552] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.169126][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.176258][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.186931][ T30] audit: type=1400 audit(1772469192.363:417): avc: denied { mounton } for pid=8318 comm="syz-executor" path="/root/syzkaller.nwrC2D/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 401.252350][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.259508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.291608][ T30] audit: type=1400 audit(1772469192.393:418): avc: denied { mounton } for pid=8318 comm="syz-executor" path="/root/syzkaller.nwrC2D/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 401.444513][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.454215][ T30] audit: type=1400 audit(1772469192.453:419): avc: denied { mounton } for pid=8318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 401.498766][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.645447][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.206625][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.952832][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.835992][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.058967][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.092121][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.100677][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.239635][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.284442][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.321979][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.393846][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.409121][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.416277][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.567348][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.098599][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.105793][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.236942][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.028944][ T30] audit: type=1400 audit(1772469203.353:420): avc: denied { mounton } for pid=8658 comm="syz.9.630" path="cgroup:[4026534619]" dev="nsfs" ino=4026534619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 412.482364][ T30] audit: type=1400 audit(1772469203.413:421): avc: denied { setopt } for pid=8658 comm="syz.9.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 412.733132][ T30] audit: type=1400 audit(1772469204.063:422): avc: denied { write } for pid=8666 comm="syz.7.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.173531][ T8421] veth0_vlan: entered promiscuous mode [ 418.675998][ T8421] veth1_vlan: entered promiscuous mode [ 418.816145][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.006555][ T5916] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 419.194563][ T8421] veth0_macvtap: entered promiscuous mode [ 419.284103][ T5916] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 419.694494][ T5916] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.906642][ T5916] usb 8-1: Product: syz [ 419.910842][ T5916] usb 8-1: Manufacturer: syz [ 419.932160][ T5916] usb 8-1: SerialNumber: syz [ 419.944153][ T5916] usb 8-1: config 0 descriptor?? [ 419.969662][ T5916] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 002 [ 420.080020][ T8421] veth1_macvtap: entered promiscuous mode [ 420.155114][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.852296][ T8421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.967395][ T997] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.989797][ T997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.038735][ T997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.081781][ T5916] i2c i2c-1: failure reading functionality [ 421.113160][ T997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.136920][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 421.199048][ T5916] usb 8-1: USB disconnect, device number 2 [ 421.455267][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.498511][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.636231][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.669723][ T8457] veth0_vlan: entered promiscuous mode [ 421.688005][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.703763][ T8457] veth1_vlan: entered promiscuous mode [ 421.922601][ T8457] veth0_macvtap: entered promiscuous mode [ 421.955918][ T8457] veth1_macvtap: entered promiscuous mode [ 422.070358][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.382652][ T8457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.514513][ T5818] Bluetooth: Frame is too long (len 18, expected len 8) [ 423.377375][ T8235] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.488151][ T8235] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.054826][ T8235] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.120605][ T8235] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.686592][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.694430][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.733611][ T8639] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 426.848039][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.877511][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.918273][ T8639] usb 6-1: Using ep0 maxpacket: 16 [ 426.934634][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.972508][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.991748][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.010215][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.031181][ T8639] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 427.041406][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.049063][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.108605][ T8639] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 427.151381][ T8639] usb 6-1: Manufacturer: syz [ 427.189925][ T8639] usb 6-1: config 0 descriptor?? [ 429.096950][ T5132] Bluetooth: hci4: command tx timeout [ 429.202880][ T5132] Bluetooth: Frame is too long (len 18, expected len 8) [ 429.872614][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.881579][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.181726][ T5132] Bluetooth: hci4: command tx timeout [ 431.608792][ T8639] usbhid 6-1:0.0: can't add hid device: -71 [ 432.122019][ T8639] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 433.256561][ T5132] Bluetooth: hci4: command tx timeout [ 435.338744][ T5132] Bluetooth: hci4: command tx timeout [ 435.416555][ T8639] usb 6-1: USB disconnect, device number 2 [ 435.862569][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.645'. [ 437.169512][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 438.317421][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 439.278373][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.285553][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.293020][ T8737] bridge_slave_0: entered allmulticast mode [ 439.586937][ T8737] bridge_slave_0: entered promiscuous mode [ 439.605286][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.614016][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.659454][ T8767] nfs: Unknown parameter 'ac˙˙˙˙' [ 439.678957][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.738536][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.746329][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'. [ 439.813792][ T8737] bridge_slave_1: entered allmulticast mode [ 439.831506][ T8737] bridge_slave_1: entered promiscuous mode [ 440.153523][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.443135][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.462354][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.473271][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.481668][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.489876][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.497724][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.604393][ T5132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.613339][ T5132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.622615][ T5132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.633185][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.646812][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.735954][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 462.745321][ T5820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 462.754522][ T5820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 462.762475][ T5820] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 462.779686][ T5820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.841051][ T5820] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 462.849810][ T5820] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 462.858975][ T5820] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 462.866967][ T5820] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 462.887144][ T5820] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 464.539148][ T5132] Bluetooth: hci3: command tx timeout [ 464.724191][ T5132] Bluetooth: hci6: command tx timeout [ 466.252599][ T5820] Bluetooth: hci7: command tx timeout [ 466.253688][ T5132] Bluetooth: hci8: command tx timeout [ 466.639497][ T5820] Bluetooth: hci3: command tx timeout [ 468.877692][ T5820] Bluetooth: hci8: command tx timeout [ 468.883154][ T5132] Bluetooth: hci6: command tx timeout [ 468.888579][ T5818] Bluetooth: hci7: command tx timeout [ 468.893958][ T5818] Bluetooth: hci3: command tx timeout [ 471.158709][ T5820] Bluetooth: hci8: command tx timeout [ 471.164147][ T5820] Bluetooth: hci3: command tx timeout [ 471.171686][ T5818] Bluetooth: hci6: command tx timeout [ 471.177132][ T5132] Bluetooth: hci7: command tx timeout [ 473.778572][ T5820] Bluetooth: hci6: command tx timeout [ 473.784009][ T5820] Bluetooth: hci7: command tx timeout [ 473.790460][ T5818] Bluetooth: hci8: command tx timeout [ 474.588231][ T8737] team0: Port device team_slave_0 added [ 487.445570][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.454830][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.463038][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.470736][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.478730][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.576915][ T5814] Bluetooth: hci5: command tx timeout [ 492.336519][ T5814] Bluetooth: hci5: command tx timeout [ 494.460308][ T5814] Bluetooth: hci5: command tx timeout [ 496.536843][ T5820] Bluetooth: hci5: command tx timeout [ 498.456740][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 500.903768][ T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.939367][ T8737] team0: Port device team_slave_1 added [ 501.021903][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.028288][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.191215][ T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.695706][ T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.856827][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 522.039848][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 522.048862][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 522.058946][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 522.069022][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 522.082992][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.875182][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.884579][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.892552][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.900707][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.908270][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.998203][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.013708][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.026530][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.034321][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.066048][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 524.114775][ T5814] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 524.125940][ T5814] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 524.134072][ T5814] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 524.141241][ T5818] Bluetooth: hci0: command tx timeout [ 524.161601][ T5814] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 524.169165][ T5814] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 525.976610][ T5820] Bluetooth: hci1: command tx timeout [ 526.136677][ T5814] Bluetooth: hci4: command tx timeout [ 526.216805][ T5814] Bluetooth: hci9: command tx timeout [ 526.222944][ T5814] Bluetooth: hci0: command tx timeout [ 528.056578][ T5814] Bluetooth: hci1: command tx timeout [ 528.219705][ T5814] Bluetooth: hci4: command tx timeout [ 528.296553][ T5820] Bluetooth: hci9: command tx timeout [ 528.302782][ T5814] Bluetooth: hci0: command tx timeout [ 530.136730][ T5814] Bluetooth: hci1: command tx timeout [ 530.296542][ T5814] Bluetooth: hci4: command tx timeout [ 530.376618][ T5820] Bluetooth: hci9: command tx timeout [ 530.382302][ T5814] Bluetooth: hci0: command tx timeout [ 532.216556][ T5814] Bluetooth: hci1: command tx timeout [ 532.376705][ T5814] Bluetooth: hci4: command tx timeout [ 532.456613][ T5814] Bluetooth: hci9: command tx timeout [ 547.569618][ T5820] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 547.579917][ T5820] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 547.587922][ T5820] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 547.601041][ T5820] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 547.615501][ T5820] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 549.656851][ T5820] Bluetooth: hci10: command tx timeout [ 551.736880][ T5820] Bluetooth: hci10: command tx timeout [ 553.817124][ T5820] Bluetooth: hci10: command tx timeout [ 555.897046][ T5820] Bluetooth: hci10: command tx timeout [ 556.288044][ T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.462473][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.468911][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 582.824273][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 582.835958][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 582.844519][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 582.874514][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 582.882174][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 582.957727][ T5132] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 582.967637][ T5132] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 582.976699][ T5132] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 582.985229][ T5132] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 582.995091][ T5132] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 583.132187][ T5814] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 583.142173][ T5814] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 583.157665][ T5814] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 583.167017][ T5814] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 583.177862][ T5814] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 583.674361][ T5132] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 583.683676][ T5132] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 583.692343][ T5132] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 583.700253][ T5132] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 583.710143][ T5132] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 584.937034][ T5132] Bluetooth: hci3: command tx timeout [ 585.026831][ T5814] Bluetooth: hci7: command 0x0406 tx timeout [ 585.035083][ T5132] Bluetooth: hci6: command 0x0406 tx timeout [ 585.096872][ T5820] Bluetooth: hci8: command tx timeout [ 585.256572][ T5820] Bluetooth: hci11: command tx timeout [ 585.736501][ T5820] Bluetooth: hci12: command tx timeout [ 587.036794][ T5820] Bluetooth: hci3: command tx timeout [ 587.186421][ T5820] Bluetooth: hci8: command tx timeout [ 587.492225][ T5820] Bluetooth: hci11: command tx timeout [ 587.816643][ T5820] Bluetooth: hci12: command tx timeout [ 589.117207][ T5820] Bluetooth: hci3: command tx timeout [ 589.256924][ T5820] Bluetooth: hci8: command tx timeout [ 589.576561][ T5820] Bluetooth: hci11: command tx timeout [ 589.896694][ T5820] Bluetooth: hci12: command tx timeout [ 591.176860][ T5820] Bluetooth: hci3: command tx timeout [ 591.336858][ T5820] Bluetooth: hci8: command tx timeout [ 591.879865][ T5820] Bluetooth: hci11: command tx timeout [ 591.896940][ T31] INFO: task syz.5.648:8778 blocked for more than 144 seconds. [ 591.904521][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 591.948335][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.966961][ T31] task:syz.5.648 state:D stack:26872 pid:8778 tgid:8778 ppid:8421 task_flags:0x400040 flags:0x00080002 [ 591.979027][ T5820] Bluetooth: hci12: command tx timeout [ 591.992746][ T31] Call Trace: [ 591.996050][ T31] [ 592.066444][ T31] __schedule+0xfee/0x6120 [ 592.070912][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.075872][ T31] ? __pfx___schedule+0x10/0x10 [ 592.122187][ T31] ? find_held_lock+0x2b/0x80 [ 592.127586][ T31] ? schedule+0x2bf/0x390 [ 592.131937][ T31] schedule+0xdd/0x390 [ 592.136006][ T31] schedule_preempt_disabled+0x13/0x30 [ 592.152223][ T31] __mutex_lock+0xc9a/0x1b90 [ 592.161258][ T31] ? ima_check_last_writer+0x10e/0x3a0 [ 592.167018][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 592.172087][ T31] ? ima_check_last_writer+0x10e/0x3a0 [ 592.177848][ T31] ima_check_last_writer+0x10e/0x3a0 [ 592.183138][ T31] ? __pfx_ima_check_last_writer+0x10/0x10 [ 592.189272][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.194223][ T31] ? __lock_acquire+0x4a5/0x2630 [ 592.199454][ T31] ? locks_remove_file+0xd1/0x610 [ 592.204483][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 592.210456][ T31] ima_file_free+0xe9/0x120 [ 592.214965][ T31] security_file_release+0x10e/0x120 [ 592.220595][ T31] __fput+0x359/0xb40 [ 592.224583][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 592.230945][ T31] task_work_run+0x150/0x240 [ 592.235542][ T31] ? __pfx_task_work_run+0x10/0x10 [ 592.244007][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 592.251409][ T31] do_syscall_64+0x67c/0xf80 [ 592.256329][ T31] ? clear_bhb_loop+0x40/0x90 [ 592.267826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.274713][ T31] RIP: 0033:0x7f708a79c799 [ 592.279556][ T31] RSP: 002b:00007fffd0a8db38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 592.288212][ T31] RAX: 0000000000000000 RBX: 00007f708aa17da0 RCX: 00007f708a79c799 [ 592.296299][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 592.309136][ T31] RBP: 00007f708aa17da0 R08: 0000000000000006 R09: 0000000000000000 [ 592.317541][ T31] R10: 00007f708aa17cb0 R11: 0000000000000246 R12: 000000000006b8be [ 592.325571][ T31] R13: 00007f708aa1609c R14: 000000000006b74d R15: 00007fffd0a8dc40 [ 592.333961][ T31] [ 592.345919][ T31] [ 592.345919][ T31] Showing all locks held in the system: [ 592.355257][ T31] 3 locks held by kworker/u8:1/13: [ 592.374650][ T31] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 592.436881][ T31] #1: ffffc90000127d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 592.471285][ T31] #2: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 592.937082][ T31] 1 lock held by khungtaskd/31: [ 592.941962][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 594.040169][ T31] 3 locks held by kworker/u8:2/36: [ 594.045318][ T31] 6 locks held by kworker/u8:6/154: [ 594.070576][ T31] #0: ffff88801cac9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 594.081246][ T31] #1: ffffc90002df7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 594.103677][ T31] #2: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 594.113750][ T31] #3: ffff88805ccb30e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 594.124025][ T31] #4: ffff88805ccb4250 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330 [ 594.136626][ T31] #5: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 594.146054][ T31] 2 locks held by kworker/1:2/792: [ 594.151864][ T31] 2 locks held by dhcpcd/5475: [ 594.156808][ T31] #0: ffff88802bbe36f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 594.167454][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 594.176346][ T31] 2 locks held by getty/5569: [ 594.181302][ T31] #0: ffff8880343d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 594.194315][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 594.213524][ T31] 2 locks held by kworker/1:7/5936: [ 594.220425][ T31] 5 locks held by kworker/1:9/8727: [ 594.225620][ T31] 1 lock held by syz.5.648/8778: [ 594.230900][ T31] #0: ffff88807a0d2178 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: ima_check_last_writer+0x10e/0x3a0 [ 594.243022][ T31] 1 lock held by syz.5.648/8781: [ 594.248201][ T31] 4 locks held by syz-executor/8818: [ 594.253475][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.263169][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x60/0x3a0 [ 594.274937][ T31] #2: ffff88802ce4e880 (&caifn->caifdevs.lock){+.+.}-{4:4}, at: caif_exit_net+0x77/0x3a0 [ 594.285101][ T31] #3: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 594.298378][ T31] 2 locks held by syz-executor/8822: [ 594.303975][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.315341][ T31] #1: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 594.332425][ T31] 2 locks held by syz-executor/8830: [ 594.338799][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.349966][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 594.359583][ T31] 3 locks held by kworker/1:10/8859: [ 594.364859][ T31] 2 locks held by syz-executor/8861: [ 594.370470][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.380373][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 594.393059][ T31] 2 locks held by syz-executor/8876: [ 594.398634][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 594.410055][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 594.422106][ T31] 2 locks held by syz-executor/8878: [ 594.427760][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 595.576242][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 595.589165][ T31] 2 locks held by syz-executor/8884: [ 595.594461][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 595.613883][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 595.629333][ T31] 2 locks held by syz-executor/8888: [ 595.634627][ T31] #0: ffffffff905f82f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 595.644375][ T31] #1: ffffffff90610c28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 595.666575][ T31] [ 595.668914][ T31] ============================================= [ 595.668914][ T31] [ 595.740734][ T31] NMI backtrace for cpu 0 [ 595.740753][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 595.740778][ T31] Tainted: [L]=SOFTLOCKUP [ 595.740784][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.740794][ T31] Call Trace: [ 595.740800][ T31] [ 595.740807][ T31] dump_stack_lvl+0x100/0x190 [ 595.740838][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 595.740857][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 595.740885][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 595.740913][ T31] sys_info+0x141/0x190 [ 595.740934][ T31] watchdog+0xd25/0x1050 [ 595.740965][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.740988][ T31] ? __kthread_parkme+0x18c/0x230 [ 595.741015][ T31] ? kthread+0x13a/0x450 [ 595.741030][ T31] ? __pfx_watchdog+0x10/0x10 [ 595.741051][ T31] kthread+0x370/0x450 [ 595.741066][ T31] ? __pfx_kthread+0x10/0x10 [ 595.741083][ T31] ret_from_fork+0x754/0xd80 [ 595.741102][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 595.741121][ T31] ? __switch_to+0x7b4/0x1120 [ 595.741142][ T31] ? __pfx_kthread+0x10/0x10 [ 595.741159][ T31] ret_from_fork_asm+0x1a/0x30 [ 595.741192][ T31] [ 595.741198][ T31] Sending NMI from CPU 0 to CPUs 1: [ 595.869353][ C1] NMI backtrace for cpu 1 [ 595.869368][ C1] CPU: 1 UID: 0 PID: 5874 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.869388][ C1] Tainted: [L]=SOFTLOCKUP [ 595.869392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.869401][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 595.869423][ C1] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 595.869441][ C1] Code: 81 e8 e7 f4 87 00 e9 49 ff ff ff 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 d3 74 20 12 7e b9 a2 09 48 c7 c3 a8 ec 0e 94 89 c5 83 f8 07 0f 87 82 00 00 [ 595.869453][ C1] RSP: 0018:ffffc90000a08110 EFLAGS: 00000283 [ 595.869463][ C1] RAX: 0000000000000001 RBX: ffffffff8e7e93e0 RCX: ffffffff92093101 [ 595.869472][ C1] RDX: 0000000000000000 RSI: ffffffff81b7fdde RDI: ffffffff8e7e93e0 [ 595.869481][ C1] RBP: ffffffff81b7fdde R08: 0000000000000001 R09: 0000000000000007 [ 595.869490][ C1] R10: 0000000000000200 R11: 0000000000086262 R12: ffffc90000a08230 [ 595.869499][ C1] R13: ffffc90000a081e0 R14: ffffc90000a08c90 R15: ffffc90000a08214 [ 595.869508][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 595.869522][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.869530][ C1] CR2: 0000200000032000 CR3: 0000000033c60000 CR4: 00000000003526f0 [ 595.869539][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.869546][ C1] DR3: 00000000be70000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 595.869555][ C1] Call Trace: [ 595.869559][ C1] [ 595.869565][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 595.869581][ C1] lock_release+0x263/0x320 [ 595.869601][ C1] unwind_next_frame+0x3c3/0x1ea0 [ 595.869615][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 595.869635][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 595.869653][ C1] arch_stack_walk+0x94/0xf0 [ 595.869669][ C1] ? __netif_receive_skb+0x1f/0x120 [ 595.869686][ C1] ? kfree_skbmem+0x19a/0x210 [ 595.869703][ C1] stack_trace_save+0x8e/0xc0 [ 595.869718][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 595.869734][ C1] ? __lock_acquire+0x4a5/0x2630 [ 595.869753][ C1] ? nft_do_chain_inet+0xee/0x340 [ 595.869767][ C1] ? nf_hook_slow+0xbf/0x220 [ 595.869779][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 595.869796][ C1] kasan_save_stack+0x30/0x50 [ 595.869814][ C1] ? kasan_save_stack+0x30/0x50 [ 595.869830][ C1] ? kasan_save_track+0x14/0x30 [ 595.869846][ C1] ? kasan_save_free_info+0x3b/0x70 [ 595.869866][ C1] ? __kasan_slab_free+0x5f/0x80 [ 595.869883][ C1] ? kmem_cache_free+0x124/0x6a0 [ 595.869898][ C1] ? kfree_skbmem+0x19a/0x210 [ 595.869913][ C1] ? consume_skb+0xd1/0x110 [ 595.869926][ C1] ? nft_synproxy_do_eval+0x949/0xd50 [ 595.869942][ C1] ? nft_do_chain+0x2e8/0x1930 [ 595.869957][ C1] ? nft_do_chain_inet+0xee/0x340 [ 595.869971][ C1] ? nf_hook_slow+0xbf/0x220 [ 595.869983][ C1] ? nf_hook.constprop.0+0x2a6/0x750 [ 595.869999][ C1] ? ip6_input+0xe0/0x2f0 [ 595.870014][ C1] ? ipv6_rcv+0x261/0x610 [ 595.870029][ C1] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 595.870058][ C1] kasan_save_track+0x14/0x30 [ 595.870075][ C1] kasan_save_free_info+0x3b/0x70 [ 595.870089][ C1] __kasan_slab_free+0x5f/0x80 [ 595.870107][ C1] kmem_cache_free+0x124/0x6a0 [ 595.870122][ C1] ? skb_release_data+0x7a0/0x9d0 [ 595.870137][ C1] kfree_skbmem+0x19a/0x210 [ 595.870152][ C1] consume_skb+0xd1/0x110 [ 595.870166][ C1] nft_synproxy_do_eval+0x949/0xd50 [ 595.870184][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 595.870200][ C1] ? ip_vs_conn_in_get+0x85/0x1b0 [ 595.870220][ C1] ? ip_vs_service_find+0x1a1/0x1040 [ 595.870238][ C1] ? __queue_work+0x445/0x1150 [ 595.870253][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 595.870269][ C1] nft_do_chain+0x2e8/0x1930 [ 595.870286][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 595.870303][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 595.870327][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 595.870347][ C1] nft_do_chain_inet+0xee/0x340 [ 595.870362][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 595.870377][ C1] ? nf_nat_used_tuple_new+0x310/0x6f0 [ 595.870396][ C1] ? lock_acquire+0x1cf/0x380 [ 595.870416][ C1] nf_hook_slow+0xbf/0x220 [ 595.870430][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 595.870446][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 595.870463][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 595.870482][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 595.870501][ C1] ip6_input+0xe0/0x2f0 [ 595.870518][ C1] ipv6_rcv+0x261/0x610 [ 595.870534][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 595.870550][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 595.870568][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 595.870587][ C1] ? lock_acquire+0x1cf/0x380 [ 595.870607][ C1] ? process_backlog+0x32a/0x1580 [ 595.870625][ C1] ? process_backlog+0x32a/0x1580 [ 595.870642][ C1] __netif_receive_skb+0x1f/0x120 [ 595.870659][ C1] process_backlog+0x37a/0x1580 [ 595.870679][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 595.870697][ C1] net_rx_action+0xa40/0xf20 [ 595.870718][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 595.870735][ C1] ? find_held_lock+0x2b/0x80 [ 595.870750][ C1] ? try_to_wake_up+0x154/0x1a80 [ 595.870766][ C1] ? try_to_wake_up+0x154/0x1a80 [ 595.870781][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 595.870794][ C1] ? sched_clock+0x38/0x60 [ 595.870811][ C1] ? sched_clock_cpu+0x6c/0x570 [ 595.870834][ C1] ? mark_held_locks+0x40/0x70 [ 595.870859][ C1] handle_softirqs+0x1eb/0x9e0 [ 595.870875][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 595.870890][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 595.870908][ C1] ? wg_packet_decrypt_worker+0x141/0x540 [ 595.870926][ C1] do_softirq+0xac/0xe0 [ 595.870940][ C1] [ 595.870944][ C1] [ 595.870948][ C1] __local_bh_enable_ip+0xf8/0x120 [ 595.870964][ C1] wg_packet_decrypt_worker+0x141/0x540 [ 595.870983][ C1] process_one_work+0x9d7/0x1920 [ 595.871000][ C1] ? __pfx_process_one_work+0x10/0x10 [ 595.871016][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 595.871035][ C1] worker_thread+0x5da/0xe40 [ 595.871052][ C1] ? kthread+0x13a/0x450 [ 595.871063][ C1] ? __pfx_worker_thread+0x10/0x10 [ 595.871075][ C1] kthread+0x370/0x450 [ 595.871086][ C1] ? __pfx_kthread+0x10/0x10 [ 595.871099][ C1] ret_from_fork+0x754/0xd80 [ 595.871112][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 595.871125][ C1] ? __switch_to+0x7b4/0x1120 [ 595.871140][ C1] ? __pfx_kthread+0x10/0x10 [ 595.871153][ C1] ret_from_fork_asm+0x1a/0x30 [ 595.871172][ C1] [ 596.816424][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 596.823304][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 596.833986][ T31] Tainted: [L]=SOFTLOCKUP [ 596.838298][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.848347][ T31] Call Trace: [ 596.851618][ T31] [ 596.854542][ T31] dump_stack_lvl+0x100/0x190 [ 596.859229][ T31] vpanic+0x552/0x970 [ 596.863206][ T31] ? __pfx_vpanic+0x10/0x10 [ 596.867708][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 596.873866][ T31] panic+0xd1/0xe0 [ 596.877580][ T31] ? __pfx_panic+0x10/0x10 [ 596.881992][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 596.888146][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 596.894298][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 596.900452][ T31] ? watchdog.cold+0x198/0x1ca [ 596.905210][ T31] ? watchdog+0xd35/0x1050 [ 596.909628][ T31] watchdog.cold+0x1a9/0x1ca [ 596.914219][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.918899][ T31] ? __kthread_parkme+0x18c/0x230 [ 596.923928][ T31] ? kthread+0x13a/0x450 [ 596.928160][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.932833][ T31] kthread+0x370/0x450 [ 596.936895][ T31] ? __pfx_kthread+0x10/0x10 [ 596.941477][ T31] ret_from_fork+0x754/0xd80 [ 596.946060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.951168][ T31] ? __switch_to+0x7b4/0x1120 [ 596.955843][ T31] ? __pfx_kthread+0x10/0x10 [ 596.960429][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.965202][ T31] [ 596.968412][ T31] Kernel Offset: disabled [ 596.972713][ T31] Rebooting in 86400 seconds..