last executing test programs: 4m40.055590108s ago: executing program 32 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002c000000020011907800000400000bcd21221d7f557f189078040000000400000000000080ffffffff"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) read$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 2m50.824536384s ago: executing program 1 (id=723): socket(0x400000000010, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{&(0x7f0000000d80)=@ethernet={0x6, @remote}, 0x80, 0x0}}], 0x2, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m50.41180373s ago: executing program 1 (id=724): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@int=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r2, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000400)={0x38, 0x6, 0x10000028, 0x0, 0xd, 0x6, 0x3, 0x1, 0xfffffffd, 0x4}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000100021040000000000200000fe880000000000000000000000000001e00000020000000000000000f5ffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00fe8800000000000000000000000000011c001700002000"/216], 0x120}}, 0x0) r4 = msgget$private(0x0, 0x31) msgsnd(r4, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r6, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 2m49.878039268s ago: executing program 1 (id=725): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0xd3b4}}, @nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x2c9, 0xfffffffffffff000}}, @nested_load_code={0x12e, 0x6c, {0x1, "48b8d9000000000000000f23c80f21f835000010000f23f866ba2000ed0fba6a0035360f07c4e17b703c4ef8c4816171e309c4c1f8778f68e8a2a30020000084c442f99a3d73d0e0990f20c035020000000f22c0"}}, @nested_load_code={0x12e, 0x70, {0x1, "2e450f019c6b09000000c4a1dd5c3ed9bd04000000660f388003260f3265f30fd6d548b894000000000000000f23d80f21f835400000900f23f8c4217a12c966baf80cb82408048def66bafc0c66b8d83566ef8f2978e2ea"}}, @rdmsr={0x66, 0x18, {0xa1f}}, @cpuid={0x64, 0x18, {0x101, 0x3}}, @in_dx={0x69, 0x20, {0x1d8f, 0xc}}, @uexit={0x0, 0x18, 0xffffffffffffffff}], 0x1b4}) close(r0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2800) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r3, 0x3, "77c7db", "2fc83171517080ba3934784395c937c86aee539b94f33fc4f7e2765a68b4c53ae79a2637bfd107d6e40ea056ea6511bec1c662f6d0f1ef6bc327d060c45e3c4f8afd6be29478bd03b787cca210ef6ad6886226d2e4c727b815a697616b70f8f5d24c2e56cec352c97df5f0c633b508eacbd0594d029e1b7fd4194fb6edb402e78a90d70628cbef648d7b3986a79dcdd3b58067e656ff6ce6b12364fa2ce073e894ab4dd1220e1c7cf0ee3ab1e7dc208a3d76985e086ba21fe4af520d81dbce8f61320b11cf6aa09e6cdc69e58fff7058b2e91c47444c8cb55c64f1ee25fd849ea59706c36aeca03247b01dd66ebb2c1b73ff2f2262b7cde703edbef434892726"}}, 0x110) epoll_pwait(r1, &(0x7f0000000440)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000480)={[0x5]}, 0x8) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000004c0)={0x1, 0x2, 0xffffffffffffffc0, 0x9a9, 0x5, 0x5}) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000500)) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001580)=[{0x38, 0x103, 0x7fff, "41aaa8193e95dd09b7a83136b74c9d5807b08e2b17de0e99babf7eef6a8cc0c949ac03"}], 0x38}, 0x800) (async) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000001600)={r1, r4, 0xf81b0000}) shutdown(r2, 0x0) (async) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000001640)) fstatfs(r6, &(0x7f0000001680)=""/254) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001780)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2408b4c1, @mcast1, 0x688}, {0xa, 0x4e24, 0x5, @remote, 0x8b03}, r3, 0x6974}}, 0x48) (async) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000001800)={{0x6d, 0x0, 0x3, 0x2, 0x8}, [{0x3349db03, 0xffffffff, 0x5, 0x2}]}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r2) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x38, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x60}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcf51}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x944) (async) r8 = dup3(r0, r0, 0x0) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f00000019c0)={0x7, 0xa, 0x2, 0x1, 0xfffffffe, 0x3, "2ce4aaafad6adbaa145053feafd04dc8", 0x9, 0xf5, 0x6, 0x83, 0x8, 0x3, 0x8}) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000001d00), 0x410400, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d40)={&(0x7f0000001a00)="5374f6453c9f19608894bfc6a80d08f738e345939c1d6d63b72106671dd4624125effe0f670b46737e751716331e6eb1566adb1bb78e651d611ef6b1ad24e5e921b2bcb350c89b64b04dea209b0219db4b0969aaaa603f6cdb5d59cc143ee6a83dc3068ea6de91fbf58a6881dd7f4083f38b8918f6c44f56850a86d415563795780b51d2da48c646b6d612285067dbdf2aea131e5ee836721af5acc0785da535fea615d5841391f8b918ec254e24d74bb5a433b3b68ff0979b6053b5d38946255a693c3e49e0c5414227cc2e2f1dcd84d96be0235e3e4bbe57d33badf92521d66d43e2f2fa2691575c3d", &(0x7f0000001b00)=""/105, &(0x7f0000001b80)="24eff479469e0c91537918c390d96c7986e7e3180c92748f2d376dd8b7f7b7ffe4701b9138bfe1c6ffbc6cb715bc5202634a23a339b1e26269916fc768a6084621cfa385df56ccca25724855d3a764f2fbb88098e52aaa215dc014f46a", &(0x7f0000001c00)="57d8d1ebf6cfab88508301535e2c2ce1c07cd7a11b7423d10f5fba50f90eb0144e4315b8317af5a20711eb635dd964636c6b08c9f3a366287c54fccd7c574dcc2e8f5944dec82b8e5e5c00623519e96e0e742b0648466a9f70d444c458fd59be92730e5e8876517230043e1fc87910b345a28318f474593b9f800c1e2c9fb7a4731baad162b85070441e3a3fcbd8121e20b73a0b2a526cf66c944ab15e745e4247c9e81da0700a5ee7e6834bcafea47dd830b2a78073d7813a91e53893d8263d359696eb636fd1e0921bc8e3916dcf1ce21054c640e529bd71130cbfb6c58ca0cb408db4b7c5002adc3e00fd49", 0xacfa, r9, 0x4}, 0x38) (async) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) (async) syz_open_dev$dri(&(0x7f0000001d80), 0x0, 0x200102) (async) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001dc0), 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r10, 0x40086409, &(0x7f0000001e40)) 2m49.669032867s ago: executing program 1 (id=727): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0x404f444) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) connect$rxrpc(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x970a40, 0x6ab858183a7ef6ba) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x1, 0xfff5}}], 0x18, 0x4c00}, 0x0) 2m48.719745792s ago: executing program 1 (id=730): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) landlock_create_ruleset(&(0x7f0000000000)={0x2900, 0x2, 0x2}, 0x18, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2800042, &(0x7f0000000200)=ANY=[]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 2m47.381189348s ago: executing program 1 (id=734): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x180, &(0x7f0000000180)=[0x3, 0xb1, 0xff, 0x0, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x8, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0xfffffffffffffff4, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0x9, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0x1, 0x6, 0x85, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0x7fff, 0xe25, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x2004, 0x1, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x6, 0x27fffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf2, 0x4, 0x6, 0x204, 0x3, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x7, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0x8, 0x1000003]}) r5 = socket(0xa, 0x3, 0x3a) r6 = accept4$llc(r5, 0x0, &(0x7f0000000080), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19e1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xfffc}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) getsockname$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000380)={&(0x7f0000000280)=[{0x9, 0x8, 0xf, 0xffff, 0x3}, {0x4, 0x7, 0x9, 0x0, 0x80000000}, {0x4, 0x401, 0x6, 0x8, 0x3}, {0x156, 0x2, 0x5, 0x6, 0x8}, {0xfffffffffffffff7, 0x9, 0x5, 0xd, 0x10000}, {0x8, 0x2, 0x0, 0x185, 0x3}], 0x6, 0x28, 0x0, 0x7}) 2m38.151883365s ago: executing program 0 (id=772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1b02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9, 0x4734}}, 0x10) close_range(r8, r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2m36.711297051s ago: executing program 0 (id=777): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe800000000000000000000000000000ff0200000000000000000000000000010000883e001090780200000000000000739d00119ad5f7a71f4f5e1df5c6e2903321cb7777c21b356269aee35d539a7b6cdbcf9001c5c2129e3e06ed60b8b21a90d143564710a4b1457087eaa27e6d9b669f843b0f964ec7f50e2af1922c77dd3d36dbc131d3c78275f695294e50794d545a7570a696fe3772af829cf6fc52ab0ad4d46d80c60b7f1d00a3bdf18e523b4874b50c30d63fdd7eec"], 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) syz_emit_vhci(0x0, 0x1d) r1 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x2000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x120, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 2m36.233552312s ago: executing program 0 (id=778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000180)={0x0, 0x31, 0x2, "943a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x401, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}}}, 0x90) sendmmsg$unix(r2, &(0x7f0000020d40)=[{{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)="0ea879f3d7992ec7bcec5de41c74dbf2f71732fa991677400936c9ac58f702a510e797fa99cbcd8624a01bd97261f00cd87754b2cc29c28ff4089ae1b25cbab8b5f84f1802251eac6e04f0189d3afb182d334b228f78d8165e1c697a25dd6bb35e73a9865a1c572fa62c9a697542a28f72c2f5d32eb07248d1f55b0d7df9ab4086f83d374a97e614f302a9", 0x8b}, {&(0x7f0000000680)="35823e52c87cb0ea7c7c2ec9c6f7160520626fdde13c8f11eab206746a90a2b00285fa618e405896", 0x28}, {&(0x7f00000006c0)="f1db29f83c380cc92d442fc055f9887e7a50d1be86f24690104a738f259b51748a7982c5109cfcac826eb1d180ad3f144818aee816c1143f6deb2e3d57c8585dffaff7bb", 0x44}, {&(0x7f0000000740)="a81677352b1c721dde75074386b6c661336fc4d77e5bcb32ec61396b1be9ff9d316593d1894355d3b21a970fa19f8aab6c8f1b879522f9fff5ea7469ef26379eb74b059160dce79d158c6e2125c565ee6d348917a51cf2d9cde7708f6d7cccf10b4286bac869b9af55076cb305a2ef184067d6c70040951edbcfc5f8696eb5b66eba880f5dcb80e106b7ddc886e35d756737b93790c5a4ce872cd2657943df173739f93ab5728e1479f93913ac085429b4fbc044f3c7b8bac0b7", 0xba}, {&(0x7f0000000800)="8f9d6a74b5703ff2ee240c5a30bc930338c10fcc63b010d5e2889e1611", 0x1d}], 0x5, 0x0, 0x0, 0x60}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000001db80)=[{&(0x7f00000009c0)="6ccefec8d50866de4ac112c2e8f22c28afe37abb48938e6cbd0571b57a2155c0203877e5ee30788037f284a2d6d6e24f573286d8bf59c0888315ab3dc910a1", 0x3f}, {&(0x7f0000000a00)="de54e9b22840d995e057291572cc93c2bf908904ff7d7d51f3093fbe6404912149c3f04299507496e62861b1d3e3aec62bcb8d03486fc3093e3c20d040aac3e61fb4c5aa0747ffffd8627092cdc7b9bef7a83759597b8e2dc26c5539205b74eaa0989025409b126eb750bb5caf7212d377456fa0755b0d4b835b88b28e88ec30e3745ef118bb", 0x86}, {&(0x7f0000000ac0)="821b614bf75ee75a2003dcbf1f102c69899fef6436f601b63e3a8daf794807099bfba8bcf67ba1c0417568a4168cfd2f64c11600a30051178285ead7a4421b3315cd52ac7e45e1388f6b860aebd9ac4f531a7e405f6ca0bfa4b384cb9a", 0x5d}, {&(0x7f0000000b40)="a175d01ade3e9a8848a47523be11473cf732fb7234c4e1ab099dd0f6bd3406835d0e49bde079979f8c3cff733d7f47810f9481decb2a9272b64bda93ba2593c828345c3081e307298c4a", 0x4a}, {&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f000001aa40)="da4751bf9748434a8a1c50b95aec18bdc22841ed08863194880cd33856e8c0f0a7fe86fb4c66652067c974993b3267e17ea40f4894e644756a5e208f7c34bc6498db0f4926e272123136b3dfbac5490557a6ffc5ef70597fc9bbfd506ac6d10afb5b3070a68cf20e649d2f24fda862418149df2fd57de2b75023af28cad7e4ace3ee20a34f360ab307c6e530dd466fa404b9fd9398d07c9edb335f5df5ece3c630135507d1217f1da7bc9145006fea1c4649f29db6c0f7d8558d694e991d73af6c1a33a1ca18bb7fab3e994e70db97e057668ee271349603334ed35ab4923b305c4e4fcc555d197f7afdcf4b9dd1d57a9883e54f42221116cc5ace0be808cbfa9f8eb66b4ee424e84120162e6e49013f15757c3b0a38be1364685beb41a3918de18039892900b82d06bcd0b5e45f8690e664338c7faa75afdd48430b39c86e6654bb2356c9a37bc6543589b202338097f85301a2124e17cf43b31aba09460ff10f522ae220ad1616fccf8c0d5101ad480ee1fc590db652563478fa0ea22cfec77734fc6e4a357575441de0535b2b6f423ddb21fad6a2043cd4c537e6899f04c42f33c1458b66c653ed657259a1fc9fcf32977ba4d90e457289e59a86e297e9ebfc76460d0fdb4354cfbf6097faeca7e642e2a7fe5644ff26eff17b462def9fb5ca7c470ea2b2605750bdcd7bceda4ef478189c14c3bf764d248e1acad6c80062b999db232cba2ca7213499cb7bbbb5c71e13ee4587dd2a2c8b8edab38cc1f1ed85f0dc16d765af166b1e5dacb20a5aca50b0a632e1927a12fb00421f05742065331a7440d043ca513807f8bb6bad5d104413b9b55f32a53c6fe1e52e00bc7d5ade4a1298eb5598a2eb946c74a72104d119503f326851419f22d008e3f511f1544795dd48c072d6ba1fa8123640090d7d6b867c91558fabdfd464ad5d871890081e4c2447dc49b4367387a5f1acd3a45b6b2ef8b1b5e5e68f0febb6dd1f73079a2a63082130cb1daa0fb909972f44d96a34dca61b8af29393777ee72a6fde988ad46286f73461f706ecd421588d9d93a46ec810dfde1e513c8ab01bc368b2a07f08cd206e3642dd1e09b6d31b39c1e446acab3692e4249381348b8332e8ee6b22e151b5b85e435cd56b24dc4a8f23a1495413d24d4a6d69e2653f78113eee3ab7189f7cfc90fb12f510cb4bdff1dbeeb8e8186ab763e25997ab0712e0c437a8fd9ffb7e0899831ae75d8610537802fb93cf5b851dd1a969fd0a477fae1738afe55253d96932217e485cf385ec437ca1d8b97a215cf33622b30362b44bffae7062398fdd4535d055ff155d17af9108b0885b20ef3796f419f7e98d41ae37bcc4b3ae9510185ecbfbe25f9bf807dfccbb157b26bd15d7832151220ac7acc32e0b509f314bf150ff67d7b158d24356df21d666f55c5c9a399ecbcb23bbabf89161c3d7300d9c46a5723ea2fd0abcbf0781d3168372f97d7cb46603a33cb6b222ace1bdf2b9466d2878624095237d1f90d4ae0589500cfc5d6a4bc6e76b0a3a2fd96cc59b217400abc4baa032ba47ec8ce2b2d0b5b43fbc064837842a9522a8f13da751c43c96718f897bcb44d28d9c79fec6108d4106e5c4b0a576373a9c1569f08083ac715c8280bfd51b68f331b87202ff95f986bbfbad347a499e138b6063e1d5f32dbbf29fbd875bbafb1e20f85dbfb475f3453d78db0dc5e1fa8c186c0e628ed26eb8db8d2e96048b5502e8d03b8edd04eec87969a06b1db2677eee18d12102aa586f7d88ad3d40f9344107b5d0ab77d71bc3a080fbdf3b3c5fb65a5be6e73f238b3d39a64e6f11537015677e9dedcdf1cfe1c2812c34812958db2a30c7a1ac371fa5a3c49a26c4200d3a6cfb8b8de1bd630d443900bcefe128c0925cb71ba9118b80846df3645720e840f8a7ced34734d67a009351e74f6abbf523f98d0bea80f024ea82992452ed5846cee38c37ea53885621ba0411be074e77bb7c089ce018c6459f49429a1cca5282c9c0b7b3449455f9bccaeb632514947a311ff32a1b9f11f616b60da34445947e04664f1ccaee5de41ed5f9543263cddbe257a05a5eaff3fbdec092c26a4bf14e041a68a132ea588b8a85f62ca14b0b0419218021e131de57fb9ae8e9c7113853c16abaa9db7dccb563b3aa6140a2ae7f41b62532e407b461f871d5fbf499530e47620b6f435f13c2d32ebf46589f951f4c2442519b6201e8408e7c0f931d225fbaf6ebdd1dd3f4347d26e6eb48cfe8b9fe9a07dc2c1308555e44a0d86d48b36c16717e8e819f6ee81abe0cbf307bdb9338890991ab774173c0a5068f894c7478b52a7b60226df3eaa166370028f52a0ef9f1906df5dc0dcec449326752532acc964b51b6a16968d242fdb48e6103355cbcf8992378dfb6caf9678fa50357cfdc66be01a6fad15351b21cff44276fdab726f5a4f76e8e2af356ae5f752076355b785c56666bebf0f9e0a3713838a1868d646e0ae924de5cb50e0b45cb48093f3cbd8c247fb6dab79952a8ce63326624c3b4254c909c0839bf54203b061c3bc1ce789e75daa8d74cf1d9d47e9adcef266c7b55c49a42b118ee4f02c4c4d2aea17ef088b22055892a7b52e1f99ac1fa9b10788b18ee88764372bc2b6327e57d10f06fce457eb348d6a9d55a23dc14ccfe0ec8fc59beb20cdca78e692d1e13a1904312d676d6827b5904f4edda87b9e1279ea87ccc2897411396af3b8dfb2035309609857e722b59ea5107c50622497b13bc294e66fbc72ceaed4035610bae49432d048bcce0584f5ab65e4a4fde10be4cf2d5f3caeb26ebf53ed44b4151327fb5a99bb22d8e4bf6e54cae5bbf1e7c6fedf1d780f8367f31319043223d8d028b234f4d1b214e7d7ad7187ff96e6adfdd84705cb0b6401fc8d1cd50604b12a8c7e428290341167efaed57954e756d69e917a32619f8d4899bd22bb26c96e8e6cd3d2a86e3f7f7859b3da374452e6610deb3bb9f70a9945134e125153acac1abf94e5d7b3335f36c542ba626678ca4ca93fd51a695012a8668a9cf1aaa55187668db4570d46b9c1ec5cfafd54eb086bda8c0dd675527113984639a9271fc6da5db41e2959359e9fb8c7690bc9526d5ca09ef2e311061aa8634ae4895a89d746afde7292ea8dce89a351405ab4cf5918689dd7cb60d1c77589ac21a5c64dad82b8436011d5054ed5919d697a50b4c69475d8eae9a2b20236b58c5a996e0c21271a63b833d293699a0e703738df8b09e9137e8e048e63f9a2e3344d1800f9f71c1afb9ea2f5d56b112731983ea50a57381837e0a1ecdfaafa5a8ee4306f4c395e39f4490007c8063c07a95b3cf23a4cf8a6c5ba19991cc1cd5e1504baeb911776f4f1a7048c4f0606e09cd34cee49dfd27cfbd0282c7c3d2fca51480c7616ea8e08b6276ef1c6fa901d35982a3984531079cd4569b356ead4d37b41eb29a1283345f26b1651a757d9b64ffb57b8c0cbd6841ecba6dae82e1603ffe33bb20bd0c53dbf95efd768f15f25cdd83a3b885b240680baf2687668ef576dca36fd86a083316ccf0522ce39ff2b19eb70736ec94ba5223de7ee979ec2f6db085d232076c9f78f49833189e4c7c55a9cc6e9c020c8d856365d1a424fdc68ad444a9ef035ee8d464ec6b14c797ea88eaa21ccfedaf2f0ea28fdefa497d9d07b1edcf2ca2d8f3372d19bd4c5c45a68af59c9fc6123f04d1901c10f9b3ff95f10ad9d50cb1a65aadbca9bdbbe04996adfad0451c24f154f3c07620ff040f2840d71e941af746c40cf8e605c4de41cceafda9cf3cced792f72e888fe8f1f945d4fe0cee3a812cff44c75b39922cf4488bda2864e0002261e81bc6210faec7b17c8a15f0464db7b7b69e68eda3a1ee368ce5249b48c4879f502da0f3fea0167d9c2cf82ef8d0fc1a1cae7b8392238454c426b2f21f5f28b1f4f434457a3e1c24564b312904a4916ffc35b872d8d37478a5fd6c1bf908d1768ea725a994c324802a9e3f750c106d0974af910dae8cbf32db8f7f909f818ae8c6501bf9888b2032ada34706f7a818346610bfe032e7a397739f57f91b96ea3681e5c745de6fc79e6b348b7d61d884e64055ce46479253e6996598d286ab42dd428e0490fc560e7ddb7f7bdfe58ee5a00edeefd477b0168241c3c26e3a8d79ca431617b4007483eaba2e039e92d1b276d7872f050f4cb174db87cd2f930a0b985ae661ed06ae02d699d689e2755870727c58638b126f1dd17fb058fa8e43758774b92130b1759e944b0cac8509f0a41201c61cbd63a8a2e9d61fd0917429d898ef7349b0f24071bc08e3d84d04a39487d8a5594fbaf7da80230cc7bd35c10dd25cb6a267f5b933b476d9b88dd8055bad70eca49c38a9b6815eae41f8fabe51d61424d519733d81350f7efe58fba8b4a1b5b6a348dc287ed2d064aa7df38b636b57458ea9591e171047f97289008835622a1a19e0e42aeb1c4738a227806e650949a527726b4459ddbadd0f87d5e59317422ffa1857944097687d9b4acd95bdf4439dbdea1df44e1e342f92ee111280b0f75cd46310451a0ddf57cdc9b0d2d68407f49828b80fe1a37fb55ddae13964b95403a31ccd5045afd06a1ca50667ad6432f379629022975da89d4572f2d50881805bbee50ef2418891f4dbe954e1839c41895605ae5dee76e7e20e0a12a0281c604baddcdde788fc963148b94d27057ca29fc769fd82a9570a39fc0d0aec79c470c4a44508e3f0c09a9b74005160a5acda10e0a33d4f2752ae56dc39c9f6d96d8490a8683cf891465cc2701eb72359a895e9fb1d87f94cd41e018eaf2284fa5fa010b7667cce97bd0eb4156b92d2fec40a50c3aea408aa16bb87adaf38ed77dab9dbb2d6ff2a77346d3a6daf0860cd5a685d2883a477c6ed3aaf8492f3e6c92404027df0d2c18bc2be8b29ae85fb490296bfa2b2d3d7e386416bd42fa235b816d9d63adfbb0bf57a091787e3852317a7475993a072dcce202e4b4a0133ec07bb4321c7f013a7a5d9216a0c7f006b9f4b97980fbe5991ddfcb695926ebb06585a24708f665160d1c9feb512a1141e398303c138b38adfbd22d31f13be12bd9981d4062ad9d91a53290863338b517f74ee7d91f455bba7783bcc47207df1f672a773f7ce444cdf38fd717ee85063a18fc9e0cd419ba8aeb49a29350f75c14bab324def38b615617a6fe0e5bec370305657164377ad20b0820d96c741ee71ed7f6eb1aeedfc585a8a08c4fc7fa86d89c38cff8ff42613816087b36c936857bc0183100ba605ab224a9752e52d781d5651216992abd60fe9d2d3bb30152936bb5e731cb0a086dcbff32bbee493549d073e02bc0149a52414e9b058199e5dc9193b5ad64271eb34b373369eca961797f1e04a58000ce5e561c6d909b4591d92801c96a76bfb1f04739fbd53845f4341918a5f4fbc9947753303507f5b90f3da79d78d86a6de0603d08f8e8cf0c51a25bf22cc744e68bafc7178fcc74dd625605901f5493c770248fc2f0a30a830745e7593b331c9fc7ca13a5620e07f89fbf18cbeef148da91e8231aa4bcb72ef5d9dc6c84dd115583639bfb885a9ddf3c9b0eaf5c71bba89809110701ca80ac8934e17995a7f92522a4b7fad385fa136489f46f7481da7f7311ea5c8bc49248a4a8cb164976d0c282dfff7f66899e19450fc18b6f23221f928a4a6a6e087d19ba7fb347f68c4df5e448f86d5aeb26c93cb4114e2f8de6ed748d09b4956eac5c8a6bd9773a3b7ffc51563faa1ade5235d89fd6016e44dd6f0dea7712484653262df19db82b3554a1ecff6e8fae1", 0x1000}, {&(0x7f000001ba40)="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", 0x1000}, {&(0x7f000001ca40)="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", 0x1000}, {&(0x7f000001da40)="776ccdea9808a90accd6232f5f39c7c40a", 0x11}, {&(0x7f000001da80)="2f9e54917f45991411e8d27001a188d083a19f19ce84ef003ee1e508d1c01b812363bc089b599c09022ca0f443a95e35fad073e82b33d9cf1524a311281bf514e217dd06bdb6f88806f160f93ada7d1d12ef334d5025dbe95d799ff489fd3f11d6eba332a4e332292a381bc3188ff0f2d5af88b0215d0d118196bf1b231b0fe8a0b28eabb17b6e4ec357df54324098ca7a16f9427f33c8e7bae9a2e70a26e7ed0f53ad8f30d83019badb4ea939bb9cb21f787f59bb5e21ce20d25c7c8bf246ac88b83fe4ed542b7ae9da79539886e52194658859cd1a98aa5adb466e69c01d2dfc", 0xe1}], 0xa, &(0x7f0000020340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0xa0, 0x4000000}}, {{&(0x7f0000020400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000020580)=[{&(0x7f0000020480)="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", 0xfc}], 0x1, &(0x7f0000020780)=[@cred={{0x1c}}], 0x20, 0x44010}}, {{&(0x7f00000207c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000020940)=[{&(0x7f0000020840)="d09eccf141bc5190bc036b86c13e9b133b38044aeb4bbce2d21b4f33c6f37bbcaa2ede09502cc27e0f82d3c39b84def49cc1e3b4a2c783f83276f6f6973c53e8c1174d4f3ef0507c54186d5d65442cfc43ee868b6647b03b7d7c13e2c096e3812facfb203b4831351ae87429de96c0d57d136e691583dfebb1e7ec120e3a3c58f25f9e0eb92b67c614847238936b2d26843bd9e0ce61bb656db4728f31bf4e8b2216332940", 0xa5}, {&(0x7f0000020900)="827c1f415b52fd38", 0x8}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000366830e987338c291842ef5e1bd72f188abbae2ecc2d7426af547221fccf6a9586db438b9c3c17857b6474d48e77f1e9d2bca53cb62d3e05c57728700e4c2633784af6de1fdf0833f957e6333f0058c25aab6f377efbd6408541ccc671b1a9474d1067894f36b0adbb4fd24fe81e38fb02ca228b58c126d3ccd74245c1a2f0747169e348dc40cb168ec2f3bbd202d849f231e9d5806c1bc8f55025060b1236", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32], 0x60, 0x4000044}}, {{&(0x7f0000020b40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000020c40)=[{&(0x7f0000020bc0)="6683fff6c3131605748f56c0aa7f2973b201c08c3ad71657b6f0075af98e3e0e4d19bec4b1a57c9e2798122db95d61b2003609669f3724c64c27476c3f5059f15431f9942bca609d786eb8f6551d1d9517a84a38c90feaec8ef86e", 0x5b}], 0x1, &(0x7f0000020cc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}], 0x70, 0x810}}], 0x5, 0x48090) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000140)="41000200010006", 0x7) 2m34.009894797s ago: executing program 0 (id=784): r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x120, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 2m33.88767212s ago: executing program 0 (id=787): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x6, 0x6, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x20040804) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r7, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x19980330, r12}, &(0x7f00000000c0)={0x6, 0x6, 0xa, 0x7, 0x80000000, 0x8}) sched_getparam(r12, &(0x7f0000000480)) 2m32.259448298s ago: executing program 0 (id=792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) 2m32.15862063s ago: executing program 33 (id=734): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000140)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x180, &(0x7f0000000180)=[0x3, 0xb1, 0xff, 0x0, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x8, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0xfffffffffffffff4, 0x2, 0xffffffffffffffff, 0x6, 0x7f, 0x96, 0xffffffff, 0x9, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008892, 0x1, 0x8000000006, 0x43, 0x0, 0x3, 0xa3de, 0x2cc0000000000000, 0x8, 0x5, 0x400, 0x6, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0x1, 0x6, 0x85, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0xfffffffffffffc00, 0x2, 0x7, 0x7fff, 0xe25, 0x4000000007, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x2004, 0x1, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0x102, 0x6, 0x27fffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf2, 0x4, 0x6, 0x204, 0x3, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x7, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0x40000000000005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb68e, 0x0, 0x8, 0x1000003]}) r5 = socket(0xa, 0x3, 0x3a) r6 = accept4$llc(r5, 0x0, &(0x7f0000000080), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x19e1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xfffc}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) getsockname$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000380)={&(0x7f0000000280)=[{0x9, 0x8, 0xf, 0xffff, 0x3}, {0x4, 0x7, 0x9, 0x0, 0x80000000}, {0x4, 0x401, 0x6, 0x8, 0x3}, {0x156, 0x2, 0x5, 0x6, 0x8}, {0xfffffffffffffff7, 0x9, 0x5, 0xd, 0x10000}, {0x8, 0x2, 0x0, 0x185, 0x3}], 0x6, 0x28, 0x0, 0x7}) 2m19.067075026s ago: executing program 5 (id=822): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000000000ff, 0x0, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x40) inotify_rm_watch(r4, 0x0) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) epoll_create1(0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/address_bits', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb"], 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 2m15.869112538s ago: executing program 34 (id=792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) 2m15.814699641s ago: executing program 5 (id=829): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}}, 0x24}, 0x1, 0x0, 0x8100000000000000, 0x20041090}, 0x0) 2m15.703949827s ago: executing program 5 (id=831): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x18, 0x0, @opaque="a7a6f4fcbe3d7c051f333a221c5fce3e"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) read$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 2m13.726650972s ago: executing program 5 (id=834): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000040)={0xc9, 0x0, r1, 0x1, 0x8, 0x6, @multicast}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000340)="aa8172c6383716dd4f797556d33dcecb33e8f6d6ac0ee84f27b7859aa458afed79bda5b8cd67d9c53ebc17e59934c39431094f4b75b2e3087cb60f2d1faf3986ed6b94be06294ca5949310cb01502f4e24026707bef386a29876ea711603364f47bcfbe6240ab5735150cbaabb4055f3a33ec274fc83bb757ad6c1121078ca00ff301f6a53eb3b61f65ed1d1d25987fc667e1f518b5b12684a735c416b000000000000000000", 0xa6, 0x20008004, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc48}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x6d86) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) 2m12.786445563s ago: executing program 5 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) landlock_create_ruleset(&(0x7f0000000000)={0x2900, 0x2, 0x2}, 0x18, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2800042, &(0x7f0000000200)=ANY=[]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 2m11.037756756s ago: executing program 5 (id=841): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 2m8.456225784s ago: executing program 7 (id=827): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x121b00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x38}}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x200000) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000000080)={0x2}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80010}, 0x20014014) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2m7.731362531s ago: executing program 7 (id=852): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m5.386173891s ago: executing program 7 (id=855): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}], 0x20}}], 0x1, 0x40800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0xc001, 0x0, 0x2, 0x3, 0x8f6, 0xfa11, 0xffffffff}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109140, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x110) r7 = inotify_init1(0x0) r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x44000160) r9 = dup(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_rm_watch(r9, r8) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000001000)={0x80000000, &(0x7f0000000f40), &(0x7f0000000f80)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001040)={{0x80000000, 0x0, 0x0, [0x80000001, 0xfffffffb]}, {0x80000000, r10, 0x4, [0x2, 0x81c7]}, 0x2, [0xd80, 0x8]}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000280)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 1m55.571773573s ago: executing program 35 (id=841): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 1m54.62524036s ago: executing program 6 (id=878): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001294630a0000000000000000a0000003"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) socket$netlink(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1m54.495816833s ago: executing program 6 (id=880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x10, 0x0, @opaque="a7a6f4fcbe3d7c05"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 1m52.206924099s ago: executing program 6 (id=883): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c0002800c0001400000000000000002080003400000000608000440000000000c00024000000002000000350900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x1000}) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1m51.943214819s ago: executing program 6 (id=884): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000380), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c20000bbbb080045000078000000020011907800000000000000000000fffc00649078020000000200000002000000e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc0c17d7b032591c2a7eb609eb8d2d9d1528cbbe8b3bc8849d1e6124e7e59132830080200000002000d3000000000004000000000000"], 0x0) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="aa77f09e9dabab3fe278fe1da23114cb7f18a3b9adeb6b8f84ba665d85f9fdffb411182ce7e30ff6d8164fd857256e4c600a97843c572227b9574b82c2d1e12e655de2952973e5cb31e3ce75fb01c600f08d75433e2fe2af3a430b0926e43c45d80cf851cf74243395b4fe5cd63cc6a4cc1066f07bd318dc00425c47590321af92118a1e5e1525bb8f083400abc66a8942018e302b", 0x95}, {&(0x7f0000000500)="be8e4bfdbc7f492355f9bc0d203822eca3a4383a7b9ca2e0156f03ee01d8bc7cb303b73c726e881eb8e7bdb6379330b9f9eba1376d7ff5eed1ce3308153213625df766f2", 0x44}, {&(0x7f0000000580)="4d081d44dd8cd377aade706a15", 0xd}], 0x3, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{&(0x7f0000000840)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="65d2f0083613def7d10a33f5e4cd2c0a21071072ff42dd046492afbe44eee9c9fc0a04268c", 0x25}, {&(0x7f0000000600)="ff3edfc1b436a514d699d7ab452c8eb1fe5f6125d3d5fde846a26307724c60b312865699871c83fe8b045af73d6c8fe6fb15fcf542ec5a7d2c68fc737dbaeabce8ebd6f6acf69a26023a5288d0a314ef80ba70facbfa599836e2c4285bfc3766eeaed36ce135f2885cf7dacac35859bece06b74faa4decd1648afee54e702755b484c9ac1252e99be91b630aece4b98f0c05a86d30db457531f08e7ad0bdf72e0be5cad70164d50fa2f966cbbb63623c0470fa49f8ba7c267de1a159517424f40b472c9652835fad2446a9ebe8bcb954839603301b7c1a33eac81d8c94f35ab1bca367c3", 0xe4}, {&(0x7f0000000a00)="2d1fd1bdb87af9e204a947fc1833f8112b3db7d96b0c0446ed7d1e994cced9edb2b7cfc11d36ac3138519e4e516f5d2c9c073fa14957426e2b12ae76371a74da9e15993a4aa33d5d96faa39dc50aaf86cf14741eaf3edf8d1a262377a9154c25c959c0b93456ed1ba831ca1998c8d05998f92e12ea18bbf040658171763409fab0c8982608dd0854960f78686c2e153b46b93d43adb0b0413a4bcf4151ac57397c35a4ff13a620372d80244dc7c0d5b38925670ddd12b2b3e7fa156e873170c2e3fa12a5a5ae1395cfe62947edb53343e8e60e477522698955c92677e5e80f969f", 0xe1}, {&(0x7f0000000280)="de829ad430855415ef4cd91731cf8ec7ab44bd50a0e4976a95d5e61242377d7c2e195625b1622d9ac3d3018752e415a3cebaddc832acb02a9fc63ac733b47160c7adb62c26ba449b57193d985116f090dc90c2cf84cea6c9022c0724b742b6d2c1ba1d810bcf0f70d438949a407106a2705e82342fa12e99829337baa7d724e71ef21ce4f1acd5e1bb98ff1521d35ee745c5bed21be7108bcdce6ee53031d1d95817a66cef9fc7a7444b32f241532ba099543ebc671d6512f088b214c74b1335801a40963c4f48c5843d06d4", 0xcc}, {&(0x7f0000000c80)="177dce90dd1f18561bfabd5bfbb6c478efde8126a234a16b1039828b09f9c5be3a00a2e57a837db9952923a7bb9fe0c0d8", 0x31}], 0x5, 0x0, 0x0, 0x6000090}}, {{&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000dc0)="1a5c4433c6f84cec118430972c059b28a811294b4be05f311c1acca3a6fa23594360451555cab23bd1ab376ee7dbeddb78eabc97bfdc79994a17521ad2d6e57e473a0e80604267b514ce3dae36d35bd01ac2ba122ebf1d6a4187de769d47cd7aa463f85fb190f423380a61104622b09485", 0x71}, {&(0x7f0000000e40)="957b1df2f6f723b93562fb2bfa0aed6fd21a319a85d27f9e15fec2b926d108db8d7643d6b2d5b70aba2b1da00f82283b6ac37460a75abc60c6f2dad062cf2d279e656e6be9380ee932efe4cb17f3f5e5d6630899726608b613e145437d3bd191ecc61809f67c89fce626c43e5eee74dd236e89bb10b574289dd223786c51169e29ff2b3b86d870ae0215c1fdf6bf9b695911ab6543e448721413360c34fe5656d86ca65f81e06a5ade1abacf6b90f73893c102c9bb72e3f31a8ce232efe24ce5e1334d4c1001308c84d627c7f2a9ba4b5e6b2036eaeafbea8468accc918a728cfc8e5cbedac6316b49faa75c576ca7cfb5", 0xf1}, {&(0x7f0000000f40)="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", 0xfb}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="f1d2b48e3811e67f63a73bbd3e98d8cb2f2a1c30255ef6087d9d01c141ed45a24e795c9d9de65d15cf2b01b5c3a614330db51329f00275422afa36e0c552732fc63ac1521ed7521f30725901aad0de297524ea9ff00ea8f14d97b2000e7b60f39825d951a8a31f337028990ac82a3878a17e07869f8c4f06cff547cffa4f3c09842a4e8f8677df48cb8fdbc615d01fc5195c410abbac0b5bda182641c259875edb67d11665466a0483b67ef6e982e41376eaebaea5e0658ce7", 0xb9}, {&(0x7f00000022c0)="23142f24ac78abeccc11aa2d1829cc2c5070857d400d4c7cc137a78bca8ce7f1f62ac6967407b672e6aa9825e5c8c9320c5113b9", 0x34}, {&(0x7f0000002300)="d083d9c3c8e7e7a94912fb68eb3440193e2c7a356f7a1db4869e436b48ae5338fee37b0f2eea06977a25a90ed5cfe617253757face144723d8c26c7d2d788c404bad5e765b8d6a496ad4738ed8113845674cfe4a874548039e4739b6edeed3d90c470b75c760286c", 0x68}, {&(0x7f0000002380)="36a35dd3ad912ecf44726582af046b94de998172ad52051bb580a419a7fca5177423bf934b39a4c522f6912fabc4da4a334aa2862c05a82b329f65b87d40f02006c1194e6ea8351a980cdd4b42d18139eae49043948e37c32d62b4d5384b06c69d8b84a238df74eb1fba80dbebe7f8cde4bf5162e92ea5a65e0a5d", 0x7b}, {&(0x7f0000002400)="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", 0xfe}, {&(0x7f0000002500)="34d669ea9ff16fa685ef2a9a387349ce43913fea3eb4bda5145953a3386631d5cd5ac90b026fcd4233c31c3b20501ed84facccc0b6c833", 0x37}], 0xa, &(0x7f0000002600)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r1]}}], 0x20, 0x801}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000700)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '/proc/sys/fs/binmt_mi\xf7\xa0\xe8\xffj\xdb\xc7`ter\x00', 0x3a, '/pr\xc2`\\c/sys/\x89\x00/binfmb\x01\x00\x00\x00c/re!\xc8\f\xac\x9bKS.\"\xdd=\x0e\xe2\xdcgistKr\x00\xa1\xfb\xf7\xa1E\x8d-Hv\xdf\a\x15\vT\xe2\x13\x16L\xe5\x9e:*\xeb\xf3\xec\b3@\x06\\o\xde\xaf\xb9R*\xbc\xa9\xaf\xbe\xbe\xef\xf5\x10\xa3\xde1\x92[\xb9\x1d:\t:\x86\xa1L\x95\xf4fW\xaa\xcd;g\xcd_q VR\xc2\xab\x8c~\xf9\x1f\x00\x00\x00\x00\x00\x00\b\x00.\xfc\xbb\x9aY\xe7\xd7\x9b\xb7\x00'/156, 0x3a, './file0/../file0'}, 0xed) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r7, 0x1) poll(&(0x7f00000001c0)=[{r2, 0x4000}, {r7}, {r7, 0x3520}, {r7, 0x2}, {r3, 0x8240}, {0xffffffffffffffff, 0x84}], 0x1e, 0x3) sendto$inet(r7, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 1m51.001652358s ago: executing program 6 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) landlock_create_ruleset(&(0x7f0000000000)={0x2900, 0x2, 0x2}, 0x18, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2800042, &(0x7f0000000200)=ANY=[]) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 1m49.618073986s ago: executing program 36 (id=855): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}], 0x20}}], 0x1, 0x40800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xc, 0xc001, 0x0, 0x2, 0x3, 0x8f6, 0xfa11, 0xffffffff}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109140, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x110) r7 = inotify_init1(0x0) r8 = inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x44000160) r9 = dup(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) inotify_rm_watch(r9, r8) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000001000)={0x80000000, &(0x7f0000000f40), &(0x7f0000000f80)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001040)={{0x80000000, 0x0, 0x0, [0x80000001, 0xfffffffb]}, {0x80000000, r10, 0x4, [0x2, 0x81c7]}, 0x2, [0xd80, 0x8]}) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f0000000280)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 1m49.546116139s ago: executing program 6 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x200000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x0) 1m34.188855025s ago: executing program 37 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x200000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x0) 21.967610775s ago: executing program 3 (id=1150): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec0, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xfffffffffffffffd], 0x0, 0x41981}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 21.754768167s ago: executing program 3 (id=1152): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000e7ffffff0095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) signalfd(r0, &(0x7f0000000180)={[0x7ff]}, 0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 21.583264223s ago: executing program 3 (id=1154): openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) sendto(r1, &(0x7f0000000300)="6ac5c6", 0x3, 0x48000, 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000400)={0x38, 0x6, 0x10000028, 0x0, 0xd, 0x6, 0x3, 0x1, 0xfffffffd, 0x4}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000000002b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0x120}}, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd601d200000442c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3300000e"], 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r5, 0x7f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r5}, 0x20) 20.343522691s ago: executing program 3 (id=1155): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x8342, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x18b280, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xa000000, 0xa, 0x0, 0x0, 0x80000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, 0x0, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 18.942544652s ago: executing program 3 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) landlock_create_ruleset(&(0x7f0000000000)={0x2900, 0x2, 0x2}, 0x18, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') 17.442886722s ago: executing program 9 (id=1166): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f00000001c0)={0x2, 0x3, &(0x7f0000000180)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000180)=0x8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="81b60ff1f3843704b6", 0x9}], 0x1}, 0x404c081) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6, 0x3, {0x1, 0xf0, 0x2}, 0xff}, 0x18) listen(r1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd29, 0x25dddbfc, {0x0, 0x0, 0x74, r6, {0x10, 0xf}, {0xfff1, 0x9}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000054) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = accept(r7, 0x0, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000080), 0x0}, 0x20) recvmsg$can_bcm(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000007000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006fc0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x2000014) 16.733534331s ago: executing program 9 (id=1168): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100472, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x8424}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000380), 0x4) 16.609819254s ago: executing program 3 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="d000004e0fb2e51bbb66def62a0300", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f9ffffff080001007063690011000200303030303a30303a31302e300000000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4004005}, 0x20008890) 15.754496938s ago: executing program 9 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x30, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0xe, 0x0, @opaque="a7a6f4fcbe3d"}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') read$eventfd(r5, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 14.751958417s ago: executing program 9 (id=1178): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x202) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xf21d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000000101040000000000000000020000000c0018800800014000000004240001801400018008000100e000000108000200e0000001a80400000000000073000600badb4ae3f46e21bf94a163ba41c95585d870329b790c37ac7a2ea5833ed0a41ccbe9950d4a566013b71135816443a6008c05faa07a5cef8ce4f43358c72a0e9d87d7b8bb951be77da0e941d6c815d62ad7c2ea63d59e3f8f8f24283a5d674a020a5a06b863395235c9272a4a57b1c7701d0cc114be93225623f90a2ee274bdb0c6de0397c364633fc3937d4f6fad39"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20000) r7 = fsmount(r6, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000080)) fchdir(r7) mprotect(&(0x7f0000184000/0x3000)=nil, 0x3000, 0x1800000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x698242, 0x1d3) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) 11.71382172s ago: executing program 9 (id=1184): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec0, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xfffffffffffffffd], 0x0, 0x41981}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 11.582719386s ago: executing program 9 (id=1185): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080088ddff74717edf849e42ec459c001c0400000000029078000000007f"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544", 0x9}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/48, 0x30, 0x0, &(0x7f0000000100)=""/4, 0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x578, 0x318, 0x1b8, 0x460, 0x0, 0x460, 0x598, 0x598, 0x1b8, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x4}}}, {{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'macvtap0\x00', 'ip6erspan0\x00', {}, {}, 0x6, 0x0, 0x4, 0x51}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@srh={{0x30}, {0xff, 0x6, 0x5, 0xc, 0x2, 0x20, 0x200}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [0xffffff00, 0xffffffff, 0xff000000], 0x4e23, 0x4e20, 0x4e23, 0x4e21, 0x3, 0xb5, 0x7, 0x3, 0x30000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10.834247732s ago: executing program 4 (id=1187): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x8000, 0x0) r2 = creat(0x0, 0x12a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffb, 0xbd, 0xf, @buffer={0x0, 0x1, &(0x7f0000000000)=""/1}, &(0x7f0000000040)="e1a27426445c369802f60afc1d14f3415a890d752d5b56d169aebed9821e53e43064a1dc7590271af08eaf3d2614b37d3493b745f9b47ab5d9efbc78a75d58734c804851c844d6a403cf009a5adcf0b7c574d000350b2abc8653741b1110dd76692d139e8d017b57e7c956cfdc996ad724ae238d0c443c6bcbb02d2786b00d220939f58690d4f9cd627f2456df0d790e9586004c15ae0cbd62f7fe3518c16997a2e82c545c5481c5cc246fbdf734d74bb2a00bbd6fb386afe4f2ae3a9a", &(0x7f0000000100)=""/203, 0x10, 0x10022, 0x2, &(0x7f0000000200)}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod(0x0, 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 10.673703595s ago: executing program 8 (id=1188): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) unshare(0x8040480) signalfd4(r2, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x10, 0xa96c) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, 0x6, 0x1) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 10.150116822s ago: executing program 4 (id=1189): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x54, r1, 0x1, 0x70ad22, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3a}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x940) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) r5 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5c0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) 9.528654399s ago: executing program 8 (id=1190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0x0, 0xb4, 0x7da4}, {0x3, 0x5, 0x0, 0x5}, {0xffff, 0x5, 0xf8, 0x7}, {0x0, 0x4, 0x9, 0x9}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000101010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x5, @vbi={0x0, 0xfff, 0x9, 0x3432564e, [0x2e, 0x4], [0x4, 0x5], 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) getpeername$packet(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="fff0000000000000140012800b00010062617461647600000300028008000a00", @ANYRES32=0x0, @ANYRES64=0x0], 0x3c}}, 0x4008000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) openat$fb0(0xffffffffffffff9c, 0x0, 0x208001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x8924, 0x0) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f0000000180)={0x5, 0x3, 0x4, 0x4, 0xf}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) 8.478739661s ago: executing program 8 (id=1192): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(r1, 0xb, 0x0, &(0x7f0000000100)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) close(r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0x3}) syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905e80aff03f70709090587"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r7, &(0x7f0000000080), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x800) setrlimit(0x1, &(0x7f00000001c0)={0xfffffffffffffff9, 0x1}) 5.984101326s ago: executing program 4 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x109200, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket$kcm(0x21, 0x2, 0xa) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r8, 0x2000000, r9}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x6, 0x0, 0x1, 0x8, 'syz0\x00', &(0x7f0000000180)=['\xff\xd9\'\x00'], 0x4}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 4.938335238s ago: executing program 8 (id=1199): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r4, 0x9, &(0x7f0000000240)={0x8, 0x4}, 0x0) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, 0x0, &(0x7f0000000580)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x2, 0x0, 0x6, 0xf}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0xf2, 0x401, 0x0, 0x2c}) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x282600, 0x0) write$proc_mixer(r8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a1c1bc4de"], 0x5) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.812864538s ago: executing program 4 (id=1200): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x143042) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x6, {0x8, 0x7fff, 0x2, 0x1, 0x5, 0x2, 0x80, 0x6, 0xf, 0x8, 0xf, 0x9, 0xf4cc, 0x6, "ed2a672e9be51c634e0bdb6cc5212d9f9935544df2e6f554cd8a17e6d07f2782"}}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='no']) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="1400238008001f"], 0x30}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400100", @ANYBLOB="010000000000040000000100000024000300"/37], 0x140}}, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000200)={0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) socket$inet6_udp(0xa, 0x2, 0x0) 3.801720798s ago: executing program 4 (id=1201): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x832, 0x3, 0xffff, 0x6e, 0x9, 0x23, 0x4, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x7ff, 0xffffffff, 0x4, 0xf, 0xfffffffa}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={r0, 0x8}, 0x8) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905", @ANYRES64=r1], 0x0) 2.295219667s ago: executing program 2 (id=1204): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20004000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.207990631s ago: executing program 2 (id=1205): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0xfffc, 0x8, @mcast1, 0x2}}, {{0xa, 0x4624, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x300}}}}}}}}, 0x0) 2.094994672s ago: executing program 2 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec0, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1, 0xfffffffffffffffd], 0x0, 0x41981}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) 2.094554219s ago: executing program 4 (id=1207): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001700)=ANY=[@ANYRES64=r2, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="f748e122497720b1a93e159599343b53322e869c08a52a812913848b27947482af1f845d9fd576b2ff8e53ca0e14511a847916d44392061f35ed6fd2a7c54973626e0e0a293c960036a203e5c7bff6e296b58e2eeaccb6763648d84b22dc10ab2d7b67b2b41dcc9dae6b9184d8d267a37dcfb8a1c71cc42828c1f2f65a2357fbe964cabf32cc00003d43c55bccc53a9e8ac1eda42caac44509d535a6ea347368b60a04b999cc047adcf77ae747bf67dcbfc8372b3b72199018539c48859c013372863d2fc8ad2eb313c664f22e69cb3951a62d6943c683db2cc2e18a6bf746", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x7425}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40058a1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) 2.037584015s ago: executing program 2 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)) r3 = io_uring_setup(0x268a, &(0x7f0000000000)={0x0, 0x602, 0x0, 0x2, 0x1ee}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x1, r6, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) connect$vsock_stream(r5, 0x0, 0x0) r7 = accept(r4, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="000036f53ee06a8cfae27bbe27000000000000009c2ce5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000180)={{0x4, 0x7, 0x97, 0x4}, 'syz1\x00', 0x2b}) 1.30232641s ago: executing program 38 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="d000004e0fb2e51bbb66def62a0300", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f9ffffff080001007063690011000200303030303a30303a31302e300000000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4004005}, 0x20008890) 1.178164127s ago: executing program 8 (id=1210): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x1, 0x8000000000002, 0x1000, 0x0, 0x9, 0x5ebc, {0x3, 0x2f8, 0x57e, 0x6, 0x6, 0x7, 0x7ff, 0xdd, 0x400, 0x1d000, 0x2, 0x0, 0x0, 0x2, 0x5}}}, 0x90) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffb}) 1.088269184s ago: executing program 2 (id=1211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r4 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x90}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd38304ee3a6efcdf}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000803) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc020000000000000000000000000001000004d632000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd7000053500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x5, 0x2, 0xfffe, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000080}, 0x42) 922.76644ms ago: executing program 2 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_names='gretap0\x00'}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x300}) 0s ago: executing program 8 (id=1213): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getxattr(0x0, 0x0, 0x0, 0x0) getuid() r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000008000000811104000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x541b, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r2, 0x540b, 0x0) socket$netlink(0x10, 0x3, 0xa) kernel console output (not intermixed with test programs): 493][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.321409][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.326812][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 403.329352][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.409558][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.442490][ T5956] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 403.491255][ T9502] omfs: Invalid superblock (0) [ 403.503446][ T29] audit: type=1400 audit(1777073185.905:753): avc: denied { name_bind } for pid=9498 comm="syz.5.834" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 403.662380][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 403.669584][ T10] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 403.692009][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 403.700241][ T9482] hsr_slave_0: entered promiscuous mode [ 403.710151][ T9482] hsr_slave_1: entered promiscuous mode [ 403.716778][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 403.718257][ T9482] debugfs: 'hsr0' already exists in 'hsr' [ 403.738056][ T9482] Cannot create hsr debugfs directory [ 403.743043][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 403.750054][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 403.759238][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.773932][ T10] usb 3-1: config 0 descriptor?? [ 403.822750][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 403.830353][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.846167][ T5956] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 403.856003][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.864546][ T5956] usb 4-1: Product: syz [ 403.868794][ T5956] usb 4-1: Manufacturer: syz [ 403.873834][ T5956] usb 4-1: SerialNumber: syz [ 403.897125][ T5956] usb 4-1: config 0 descriptor?? [ 404.014778][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.113949][ T9487] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 404.455810][ T9476] xt_l2tp: v2 sid > 0xffff: 117440512 [ 404.717994][ T5825] Bluetooth: hci2: command tx timeout [ 404.730856][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 404.776419][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 404.839883][ T10] usb 3-1: USB disconnect, device number 36 [ 404.931046][ T29] audit: type=1400 audit(1777073187.345:754): avc: denied { create } for pid=9519 comm="syz.6.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.121625][ T29] audit: type=1400 audit(1777073187.345:755): avc: denied { write } for pid=9519 comm="syz.6.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.333496][ T11] block nbd0: Possible stuck request ffff888028b47000: control (read@0,4096B). Runtime 240 seconds [ 405.414633][ T9482] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.431039][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.439605][ T9482] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.456630][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.466368][ T9482] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.478118][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.486801][ T9482] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.499871][ T9482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.590997][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.100603][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.111064][ T10] usb 4-1: USB disconnect, device number 38 [ 406.136396][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.143589][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.181147][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.188367][ T6355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.369294][ T9482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.401827][ T9482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.743161][ T5914] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 406.776846][ T50] Bluetooth: hci2: command tx timeout [ 407.003848][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 407.012817][ T5914] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 407.028915][ T5914] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 407.042459][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.075578][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.084166][ T5914] usb 7-1: Product: syz [ 407.091330][ T5914] usb 7-1: Manufacturer: syz [ 407.097198][ T5914] usb 7-1: SerialNumber: syz [ 407.106823][ T5914] usb 7-1: config 0 descriptor?? [ 407.120891][ T5914] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 407.132088][ T5914] usb 7-1: Detected FT232R [ 407.488414][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 407.595919][ T9482] veth0_vlan: entered promiscuous mode [ 407.608002][ T9482] veth1_vlan: entered promiscuous mode [ 407.659763][ T9482] veth0_macvtap: entered promiscuous mode [ 407.684033][ T9482] veth1_macvtap: entered promiscuous mode [ 407.724030][ T5914] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 407.731790][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.753235][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.769577][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.793250][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.806510][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.820879][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.831370][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 407.952291][ T6484] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 408.013869][ T29] audit: type=1400 audit(1777073190.435:756): avc: denied { name_bind } for pid=9541 comm="syz.6.844" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 408.029333][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.058782][ T6353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.068491][ T6353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.074794][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.122208][ T6484] usb 3-1: Using ep0 maxpacket: 8 [ 408.140917][ T6484] usb 3-1: unable to get BOS descriptor or descriptor too short [ 408.182530][ T6484] usb 3-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 408.289408][ T6484] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.341521][ T6484] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 408.352905][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.361291][ T6484] usb 3-1: Product: syz [ 408.369166][ T6484] usb 3-1: Manufacturer: syz [ 408.405355][ T6484] usb 3-1: SerialNumber: syz [ 408.491144][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.502491][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.553994][ T9] usb 7-1: USB disconnect, device number 2 [ 408.595427][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 408.625067][ T9] ftdi_sio 7-1:0.0: device disconnected [ 408.960118][ T50] Bluetooth: hci2: command tx timeout [ 408.972687][ T29] audit: type=1400 audit(1777073191.395:757): avc: denied { write } for pid=9568 comm="syz.7.827" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.385355][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.851'. [ 410.138075][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.852'. [ 410.927206][ T6484] usb 3-1: 0:1 : does not exist [ 410.958460][ T6484] usb 3-1: 0:2 : does not exist [ 410.977799][ T6484] usb 3-1: unit 6 not found! [ 411.114288][ T50] Bluetooth: hci2: command tx timeout [ 411.154310][ T6484] usb 3-1: USB disconnect, device number 37 [ 411.737449][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.133075][ T6484] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 412.772067][ T6484] usb 3-1: Using ep0 maxpacket: 8 [ 412.793287][ T6484] usb 3-1: config 2 has an invalid interface number: 215 but max is 0 [ 412.847094][ T6484] usb 3-1: config 2 has an invalid interface descriptor of length 2, skipping [ 412.871988][ T6484] usb 3-1: config 2 has no interface number 0 [ 412.879672][ T6484] usb 3-1: config 2 interface 215 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.911971][ T6484] usb 3-1: config 2 interface 215 has no altsetting 0 [ 412.965538][ T6484] usb 3-1: New USB device found, idVendor=257a, idProduct=360f, bcdDevice=88.da [ 412.997035][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.029037][ T6484] usb 3-1: Product: syz [ 413.034818][ T6484] usb 3-1: Manufacturer: syz [ 413.040147][ T6484] usb 3-1: SerialNumber: syz [ 413.510103][ T6484] option 3-1:2.215: GSM modem (1-port) converter detected [ 413.560637][ T6484] usb 3-1: USB disconnect, device number 38 [ 413.590885][ T6484] option 3-1:2.215: device disconnected [ 413.827836][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 413.838364][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 413.838395][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.838420][ T50] Workqueue: hci1 hci_rx_work [ 413.838459][ T50] Call Trace: [ 413.838466][ T50] [ 413.838475][ T50] dump_stack_lvl+0x100/0x190 [ 413.838506][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 413.838539][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 413.838566][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 413.838590][ T50] ? find_held_lock+0x2b/0x80 [ 413.838611][ T50] ? kobject_add_internal+0x25f/0x930 [ 413.838634][ T50] ? kobject_add_internal+0x25f/0x930 [ 413.838659][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 413.838694][ T50] kobject_add_internal+0x2c8/0x930 [ 413.838723][ T50] kobject_add+0x16a/0x1e0 [ 413.838756][ T50] ? __pfx_kobject_add+0x10/0x10 [ 413.838778][ T50] ? preempt_schedule_thunk+0x16/0x30 [ 413.838807][ T50] ? kobject_put+0xb9/0x640 [ 413.838827][ T50] ? _raw_spin_unlock+0x3e/0x50 [ 413.838864][ T50] device_add+0x294/0x1950 [ 413.838899][ T50] ? __pfx_dev_set_name+0x10/0x10 [ 413.838924][ T50] ? __pfx_device_add+0x10/0x10 [ 413.838958][ T50] ? mgmt_send_event_skb+0x2fb/0x460 [ 413.838998][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 413.839022][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 413.839062][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 413.839103][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 413.839136][ T50] ? skb_pull_data+0x15f/0x1e0 [ 413.839165][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 413.839203][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 413.839241][ T50] hci_event_packet+0x51c/0xcd0 [ 413.839275][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 413.839310][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 413.839345][ T50] ? kcov_remote_start+0x374/0x660 [ 413.839371][ T50] ? lockdep_hardirqs_on+0x78/0x100 [ 413.839410][ T50] hci_rx_work+0x451/0xfc0 [ 413.839447][ T50] process_one_work+0xa0e/0x1980 [ 413.839491][ T50] ? __pfx_process_one_work+0x10/0x10 [ 413.839528][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 413.839563][ T50] worker_thread+0x5ef/0xe50 [ 413.839603][ T50] ? kthread+0x13a/0x450 [ 413.839627][ T50] ? __pfx_worker_thread+0x10/0x10 [ 413.839654][ T50] kthread+0x370/0x450 [ 413.839679][ T50] ? __pfx_kthread+0x10/0x10 [ 413.839707][ T50] ret_from_fork+0x72b/0xd50 [ 413.839737][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 413.839775][ T50] ? __switch_to+0x800/0x1100 [ 413.839810][ T50] ? __pfx_kthread+0x10/0x10 [ 413.839840][ T50] ret_from_fork_asm+0x1a/0x30 [ 413.839889][ T50] [ 413.840033][ T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 414.123404][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 414.176304][ T29] audit: type=1400 audit(1777073196.235:758): avc: denied { listen } for pid=9628 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 414.221656][ T50] Bluetooth: hci1: failed to register connection device [ 414.251542][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 414.613658][ T9638] nbd: socks must be embedded in a SOCK_ITEM attr [ 415.992695][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.192501][ T5898] usb 7-1: Using ep0 maxpacket: 8 [ 416.221125][ T5898] usb 7-1: unable to get BOS descriptor or descriptor too short [ 416.239044][ T5898] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 416.248590][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.257261][ T5898] usb 7-1: Product: syz [ 416.261845][ T5898] usb 7-1: Manufacturer: syz [ 416.266552][ T5898] usb 7-1: SerialNumber: syz [ 416.349969][ T6552] udevd[6552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 416.576169][ T29] audit: type=1400 audit(1777073198.995:759): avc: denied { write } for pid=9657 comm="syz.2.863" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 416.864012][ T6552] udevd[6552]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 417.762423][ T29] audit: type=1400 audit(1777073200.125:760): avc: denied { read } for pid=9679 comm="syz.3.868" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 417.786336][ T29] audit: type=1400 audit(1777073200.125:761): avc: denied { open } for pid=9679 comm="syz.3.868" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 418.926638][ T5898] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 418.954879][ T5898] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 418.980600][ T9681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.995895][ T9681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 419.069954][ T9637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.086480][ T9681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 419.126371][ T5898] usb 7-1: USB disconnect, device number 3 [ 419.139949][ T9681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 419.167099][ T9681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.188863][ T9681] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 419.216045][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.248844][ T9681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.259694][ T9681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 419.306023][ T9681] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 419.324174][ T9681] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 419.350220][ T9681] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 419.366687][ T9681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.378795][ T9681] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 419.399812][ T9681] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 419.421683][ T9681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.427813][ T9681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 419.439493][ T9681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 419.834238][ T9713] xt_hashlimit: size too large, truncated to 1048576 [ 419.948900][ T5914] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 420.113790][ T5914] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.125288][ T5914] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 420.138499][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.145251][ T5914] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 420.155936][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.268593][ T5914] usb 4-1: config 0 descriptor?? [ 420.564650][ T9723] netlink: 48 bytes leftover after parsing attributes in process `syz.6.873'. [ 420.891842][ T5914] greenasia 0003:0E8F:0012.0009: unknown main item tag 0x6 [ 420.926988][ T5914] greenasia 0003:0E8F:0012.0009: invalid report_size 26545 [ 420.951349][ T5914] greenasia 0003:0E8F:0012.0009: item 0 2 1 7 parsing failed [ 420.961200][ T5914] greenasia 0003:0E8F:0012.0009: parse failed [ 420.968173][ T5914] greenasia 0003:0E8F:0012.0009: probe with driver greenasia failed with error -22 [ 421.012943][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 421.301201][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 421.313121][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 421.382639][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 421.434901][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 421.487344][ T29] audit: type=1326 audit(1777073203.905:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 421.510831][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.621806][ T29] audit: type=1326 audit(1777073203.905:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 421.719808][ T29] audit: type=1326 audit(1777073203.905:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 421.802064][ T29] audit: type=1326 audit(1777073203.905:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 421.906828][ T29] audit: type=1326 audit(1777073203.945:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.019616][ T29] audit: type=1326 audit(1777073203.945:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.115365][ T29] audit: type=1326 audit(1777073203.945:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.164675][ T29] audit: type=1326 audit(1777073203.945:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.190523][ T29] audit: type=1326 audit(1777073203.945:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.222249][ T29] audit: type=1326 audit(1777073203.945:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9706 comm="syz.3.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8fdf99cdd9 code=0x7ffc0000 [ 422.270189][ T9735] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 422.363441][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.382704][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.393123][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.400871][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.413165][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.500356][ T9741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=9741 comm=syz.6.878 [ 422.738587][ T5942] usb 4-1: USB disconnect, device number 39 [ 423.110074][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 423.367888][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 423.451690][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 424.394256][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 424.400416][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 424.454270][ T5831] Bluetooth: hci5: command tx timeout [ 425.175079][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 425.316905][ T9766] xt_hashlimit: size too large, truncated to 1048576 [ 427.240513][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.246974][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 427.255543][ T50] Bluetooth: hci5: command tx timeout [ 427.269975][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 427.772523][ T9738] chnl_net:caif_netlink_parms(): no params data found [ 427.832798][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 427.851341][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 427.866604][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 427.881782][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 427.893041][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.132209][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.149957][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.159729][ T9738] bridge_slave_0: entered allmulticast mode [ 428.178931][ T9738] bridge_slave_0: entered promiscuous mode [ 428.206815][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.214323][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.221541][ T9738] bridge_slave_1: entered allmulticast mode [ 428.250280][ T9738] bridge_slave_1: entered promiscuous mode [ 428.396100][ T9738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.456612][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 428.456634][ T29] audit: type=1400 audit(1777073210.875:1049): avc: denied { create } for pid=9792 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 428.488302][ T9738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.507763][ T29] audit: type=1400 audit(1777073210.905:1050): avc: denied { ioctl } for pid=9792 comm="syz.2.891" path="socket:[27794]" dev="sockfs" ino=27794 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 428.658806][ T9797] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 428.669303][ T29] audit: type=1400 audit(1777073211.095:1051): avc: denied { relabelto } for pid=9796 comm="syz.2.892" name="205" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 428.723240][ T29] audit: type=1400 audit(1777073211.115:1052): avc: denied { associate } for pid=9796 comm="syz.2.892" name="205" dev="tmpfs" ino=1133 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 428.794494][ T29] audit: type=1400 audit(1777073211.195:1053): avc: denied { remove_name } for pid=5824 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 428.842965][ T9738] team0: Port device team_slave_0 added [ 428.866498][ T29] audit: type=1400 audit(1777073211.195:1054): avc: denied { rmdir } for pid=5824 comm="syz-executor" name="205" dev="tmpfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 428.899972][ T9738] team0: Port device team_slave_1 added [ 429.290263][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.301811][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.330704][ T9738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.332150][ T5831] Bluetooth: hci5: command tx timeout [ 429.357732][ T9738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.374108][ T9738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.440348][ T9738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.537033][ T9785] chnl_net:caif_netlink_parms(): no params data found [ 429.660842][ T9738] hsr_slave_0: entered promiscuous mode [ 429.678808][ T9738] hsr_slave_1: entered promiscuous mode [ 429.685317][ T9738] debugfs: 'hsr0' already exists in 'hsr' [ 429.691161][ T9738] Cannot create hsr debugfs directory [ 429.922910][ T1163] bridge_slave_1: left allmulticast mode [ 429.928591][ T1163] bridge_slave_1: left promiscuous mode [ 429.943912][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.953950][ T1163] bridge_slave_0: left allmulticast mode [ 429.954012][ T1163] bridge_slave_0: left promiscuous mode [ 429.954193][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.975491][ T5831] Bluetooth: hci6: command tx timeout [ 430.147900][ T9819] fuse: Unknown parameter '<0x0000000000000003' [ 430.601955][ T6484] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 430.627534][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.639648][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.649955][ T1163] bond0 (unregistering): Released all slaves [ 430.695416][ T9822] team0: entered promiscuous mode [ 430.700698][ T9822] team_slave_0: entered promiscuous mode [ 430.715872][ T9822] team_slave_1: entered promiscuous mode [ 430.763557][ T6484] usb 3-1: unable to get BOS descriptor or descriptor too short [ 430.778346][ T6484] usb 3-1: not running at top speed; connect to a high speed hub [ 430.803114][ T9785] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.823150][ T6484] usb 3-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 430.833652][ T9785] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.854706][ T6484] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.863869][ T9785] bridge_slave_0: entered allmulticast mode [ 430.871245][ T9785] bridge_slave_0: entered promiscuous mode [ 430.886595][ T6484] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 430.910535][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.923482][ T6484] usb 3-1: Product: syz [ 430.931671][ T6484] usb 3-1: Manufacturer: syz [ 430.942440][ T6484] usb 3-1: SerialNumber: syz [ 430.964750][ T9785] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.980957][ T9785] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.002476][ T9785] bridge_slave_1: entered allmulticast mode [ 431.023890][ T9785] bridge_slave_1: entered promiscuous mode [ 431.203627][ T9785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.270882][ T9785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.284965][ T6484] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 431.303134][ T6484] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 431.338065][ T6484] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 431.360948][ T1163] hsr_slave_0: left promiscuous mode [ 431.377137][ T6484] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 431.377187][ T1163] hsr_slave_1: left promiscuous mode [ 431.410298][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.414432][ T5831] Bluetooth: hci5: command tx timeout [ 431.444862][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.471983][ T6484] usb 3-1: USB disconnect, device number 39 [ 431.533924][ T6552] udevd[6552]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.843992][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 431.888707][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 431.990628][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 432.053611][ T5831] Bluetooth: hci6: command tx timeout [ 432.155498][ T5491] 8021q: adding VLAN 0 to HW filter on device eth9 [ 432.258467][ T9785] team0: Port device team_slave_0 added [ 432.415735][ T9785] team0: Port device team_slave_1 added [ 433.376207][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.431001][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.560865][ T9785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.962194][ T9785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.978495][ T9785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.093798][ T9785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.139399][ T5831] Bluetooth: hci6: command tx timeout [ 434.302564][ T5914] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 434.436036][ T9785] hsr_slave_0: entered promiscuous mode [ 434.445347][ T9785] hsr_slave_1: entered promiscuous mode [ 434.451560][ T9785] debugfs: 'hsr0' already exists in 'hsr' [ 434.452296][ T5914] usb 3-1: device descriptor read/64, error -71 [ 434.483829][ T9785] Cannot create hsr debugfs directory [ 434.595695][ T9738] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 434.608758][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.663029][ T9738] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.673303][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.674549][ T9738] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 434.677294][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.708330][ T9738] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 434.711172][ T9738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.714846][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 434.789554][ T5491] 8021q: adding VLAN 0 to HW filter on device eth10 [ 434.892414][ T5914] usb 3-1: device descriptor read/64, error -71 [ 435.006432][ T5914] usb usb3-port1: attempt power cycle [ 435.060951][ T9785] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 435.085421][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.107212][ T9785] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 435.124805][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.233248][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.905'. [ 435.249298][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.289406][ T9785] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 435.378563][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 435.413045][ T11] block nbd0: Possible stuck request ffff888028b47000: control (read@0,4096B). Runtime 270 seconds [ 435.417017][ T5914] usb 3-1: device descriptor read/8, error -71 [ 435.692232][ T5914] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 435.694251][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.716881][ T9785] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 435.722583][ T5914] usb 3-1: device descriptor read/8, error -71 [ 435.883476][ T5914] usb usb3-port1: unable to enumerate USB device [ 435.935320][ T9785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.977865][ T9738] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.026880][ T5491] 8021q: adding VLAN 0 to HW filter on device eth11 [ 436.067133][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.074259][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.084177][ T9910] xt_hashlimit: size too large, truncated to 1048576 [ 436.106453][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.113620][ T6349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.211960][ T5831] Bluetooth: hci6: command tx timeout [ 436.332676][ T9922] netlink: 188 bytes leftover after parsing attributes in process `syz.3.907'. [ 436.707163][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.747625][ T9785] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.777622][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.784785][ T5947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.814087][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.821251][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.911063][ T9738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.051524][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 437.475870][ T5491] 8021q: adding VLAN 0 to HW filter on device eth12 [ 437.483114][ T9962] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 437.494509][ T9738] veth0_vlan: entered promiscuous mode [ 437.636235][ T9738] veth1_vlan: entered promiscuous mode [ 437.680082][ T9785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.804558][ T9738] veth0_macvtap: entered promiscuous mode [ 437.850320][ T9738] veth1_macvtap: entered promiscuous mode [ 437.919074][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.950563][ T9738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.992293][ T1163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.023938][ T1163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.066502][ T1163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.133589][ T1163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.424995][ T9785] veth0_vlan: entered promiscuous mode [ 438.434415][ T6349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.455769][ T6349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.523524][ T9785] veth1_vlan: entered promiscuous mode [ 438.554988][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.587552][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.631212][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.641119][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.659549][ T9785] veth0_macvtap: entered promiscuous mode [ 438.668348][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.692434][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.700124][ T9785] veth1_macvtap: entered promiscuous mode [ 438.715225][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.750299][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.766120][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.789468][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.806841][ T9785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.816762][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.831615][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.850520][ T5947] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.859908][ T5914] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 438.867833][ T5947] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.879902][ T5914] hid-generic 0006:0004:0009.000A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 438.900614][ T1163] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.937186][ T1163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.220809][ T9985] fido_id[9985]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 439.249434][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.287849][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.396954][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.428415][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.572378][ T6484] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 439.905768][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.912992][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.175222][ T6484] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 440.184598][ T6484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.197531][ T6484] usb 4-1: Product: syz [ 440.220720][ T6484] usb 4-1: Manufacturer: syz [ 440.244560][ T6484] usb 4-1: SerialNumber: syz [ 440.594548][T10015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.920'. [ 440.885176][ T9992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.533182][T10033] dns_resolver: Unsupported content type (152) [ 441.591192][T10032] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 441.598140][T10032] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 441.666136][T10032] vhci_hcd vhci_hcd.0: Device attached [ 441.950878][T10044] netlink: 'syz.9.927': attribute type 10 has an invalid length. [ 441.973393][ T5942] usb 50-1: SetAddress Request (2) to port 0 [ 442.017918][ T5942] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 442.259667][T10044] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 442.278003][ T29] audit: type=1400 audit(1777073224.695:1055): avc: denied { connect } for pid=10046 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 442.358927][T10048] FAT-fs (nullb0): bogus number of reserved sectors [ 442.365796][T10048] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 442.722853][ T6484] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 442.751762][ T6484] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 442.766083][ T1163] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.778657][ T6484] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 442.807774][ T6484] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 442.858297][ T6484] usb 4-1: USB disconnect, device number 40 [ 443.008353][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.929'. [ 443.054648][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.9.929'. [ 443.064022][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.064561][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.105060][T10054] bridge0: entered allmulticast mode [ 443.255201][ T1163] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.336166][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.355982][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.364611][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.376930][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.381993][ T5956] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 443.398929][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.515584][ T1163] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.576497][T10072] xt_hashlimit: size too large, truncated to 1048576 [ 443.602114][ T5956] usb 10-1: Using ep0 maxpacket: 16 [ 443.611189][ T5956] usb 10-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 443.625626][ T1163] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.626676][ T5956] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 443.648900][ T5956] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 443.661405][ T5956] usb 10-1: config 0 interface 0 has no altsetting 0 [ 443.671413][ T5956] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 443.680675][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.707266][ T5956] usb 10-1: config 0 descriptor?? [ 443.946589][ T1163] bridge_slave_1: left allmulticast mode [ 443.952757][ T1163] bridge_slave_1: left promiscuous mode [ 443.958836][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.976032][ T1163] bridge_slave_0: left allmulticast mode [ 443.982987][ T1163] bridge_slave_0: left promiscuous mode [ 443.988687][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.231994][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.248963][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.259143][ T1163] bond0 (unregistering): Released all slaves [ 444.278655][T10064] chnl_net:caif_netlink_parms(): no params data found [ 444.346853][T10051] xt_l2tp: v2 sid > 0xffff: 117440512 [ 444.391068][ T5956] usbhid 10-1:0.0: can't add hid device: -71 [ 444.405526][ T5956] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 444.438391][T10034] vhci_hcd: connection reset by peer [ 444.474876][ T5956] usb 10-1: USB disconnect, device number 2 [ 444.582185][ T12] vhci_hcd vhci_hcd.8: stop threads [ 444.608885][ T12] vhci_hcd vhci_hcd.8: release socket [ 444.649047][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 444.669084][T10090] input: syz1 as /devices/virtual/input/input10 [ 444.822748][ T29] audit: type=1400 audit(1777073227.165:1056): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3637 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.895617][ T29] audit: type=1400 audit(1777073227.315:1057): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 445.196516][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.942'. [ 445.206627][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.942'. [ 445.281121][ T6484] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 445.491951][ T5832] Bluetooth: hci2: command tx timeout [ 445.596585][ T6484] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 445.820983][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.906829][ T6484] usb 3-1: Product: syz [ 445.966363][ T6484] usb 3-1: Manufacturer: syz [ 446.032516][ T6484] usb 3-1: SerialNumber: syz [ 446.490130][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.519097][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.563811][T10064] bridge_slave_0: entered allmulticast mode [ 446.571728][T10064] bridge_slave_0: entered promiscuous mode [ 446.999600][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.006947][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.029733][T10064] bridge_slave_1: entered allmulticast mode [ 447.067783][T10064] bridge_slave_1: entered promiscuous mode [ 447.092190][ T5942] usb 50-1: device descriptor read/8, error -110 [ 447.500090][ T29] audit: type=1400 audit(1777073229.895:1058): avc: denied { setopt } for pid=10124 comm="syz.3.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 447.572794][ T5832] Bluetooth: hci2: command tx timeout [ 447.597977][T10135] xt_hashlimit: size too large, truncated to 1048576 [ 447.726326][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.174876][ T5942] usb usb50-port1: attempt power cycle [ 448.184964][T10136] bridge_slave_0 (unregistering): left allmulticast mode [ 448.209504][ T6484] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 448.237165][T10136] bridge_slave_0 (unregistering): left promiscuous mode [ 448.261911][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.278946][ T6484] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 448.331103][ T6484] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 448.347058][T10143] hub 9-0:1.0: USB hub found [ 448.366742][ T5491] 8021q: adding VLAN 0 to HW filter on device eth13 [ 448.377047][ T6484] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 448.422030][T10143] hub 9-0:1.0: 1 port detected [ 448.491907][ T6484] usb 3-1: USB disconnect, device number 44 [ 448.547340][T10152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.950'. [ 448.611356][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.8.951'. [ 448.632729][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.8.951'. [ 448.784792][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.809835][ T5942] usb usb50-port1: unable to enumerate USB device [ 448.974660][T10155] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.982206][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.991139][T10155] bridge0: entered allmulticast mode [ 449.153877][ T1163] hsr_slave_0: left promiscuous mode [ 449.159621][ T1163] hsr_slave_1: left promiscuous mode [ 449.167046][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.175614][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.408555][T10163] Bluetooth: MGMT ver 1.23 [ 449.671074][ T5832] Bluetooth: hci2: command tx timeout [ 450.127481][ T9974] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 450.154647][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.166291][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.268192][ T29] audit: type=1400 audit(1777073232.685:1059): avc: denied { read } for pid=10159 comm="syz.3.953" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 450.362878][ T1163] veth1_macvtap: left promiscuous mode [ 450.363705][ T29] audit: type=1400 audit(1777073232.715:1060): avc: denied { open } for pid=10159 comm="syz.3.953" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 450.372948][ T1163] veth0_macvtap: left promiscuous mode [ 450.405682][ T1163] veth1_vlan: left promiscuous mode [ 450.430899][ T9974] usb 9-1: Using ep0 maxpacket: 16 [ 450.439973][ T1163] veth0_vlan: left promiscuous mode [ 450.456630][ T9974] usb 9-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 450.477300][ T9974] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 450.505580][ T9974] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 450.529550][ T9974] usb 9-1: config 0 interface 0 has no altsetting 0 [ 450.566154][ T9974] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 450.605681][ T9974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.636484][ T9974] usb 9-1: config 0 descriptor?? [ 450.753317][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 450.762941][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 450.771783][T10178] netlink: 'syz.2.957': attribute type 11 has an invalid length. [ 450.783958][T10178] netlink: 'syz.2.957': attribute type 13 has an invalid length. [ 450.885602][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 450.899407][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 451.031964][T10064] team0: Port device team_slave_0 added [ 451.046452][T10064] team0: Port device team_slave_1 added [ 451.053149][T10161] netlink: 172 bytes leftover after parsing attributes in process `syz.9.952'. [ 451.095271][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.102579][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.129531][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.150561][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.158369][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.186692][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.209610][ T5942] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 451.281435][T10151] xt_l2tp: v2 sid > 0xffff: 117440512 [ 451.298338][ T9974] usbhid 9-1:0.0: can't add hid device: -71 [ 451.324660][ T9974] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 451.379163][ T9974] usb 9-1: USB disconnect, device number 2 [ 451.389575][T10064] hsr_slave_0: entered promiscuous mode [ 451.404364][T10064] hsr_slave_1: entered promiscuous mode [ 451.410850][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 451.416228][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 451.420764][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.9.958'. [ 451.435972][T10064] Cannot create hsr debugfs directory [ 451.448403][ T5942] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 451.487877][ T5942] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 451.526741][T10193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10193 comm=syz.9.958 [ 451.529305][ T5942] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 451.554859][ T29] audit: type=1400 audit(1777073233.945:1061): avc: denied { sys_module } for pid=10185 comm="syz.3.959" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 451.578887][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.585631][ T5942] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 451.596148][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.615497][ T5942] usb 3-1: config 0 descriptor?? [ 451.738961][ T5832] Bluetooth: hci2: command tx timeout [ 451.772102][ T5914] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 451.949397][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 451.967433][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.979503][ T5914] usb 4-1: Product: syz [ 451.988738][ T5914] usb 4-1: Manufacturer: syz [ 451.995516][ T5914] usb 4-1: SerialNumber: syz [ 452.007830][ T29] audit: type=1400 audit(1777073234.425:1062): avc: denied { setopt } for pid=10204 comm="syz.8.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 452.041250][ T29] audit: type=1400 audit(1777073234.455:1063): avc: denied { ioctl } for pid=10204 comm="syz.8.960" path="socket:[30303]" dev="sockfs" ino=30303 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 452.105310][ T1163] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.253050][T10178] xt_l2tp: v2 sid > 0xffff: 117440512 [ 452.393499][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 452.425989][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.375442][T10191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.387957][ T29] audit: type=1400 audit(1777073234.905:1064): avc: denied { create } for pid=10207 comm="syz.8.961" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 453.905532][ T5942] usb 3-1: USB disconnect, device number 45 [ 454.010339][T10215] xt_hashlimit: size too large, truncated to 1048576 [ 454.062211][ T1163] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.276532][ T5491] 8021q: adding VLAN 0 to HW filter on device eth14 [ 454.495210][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 454.523005][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 454.561171][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 454.588830][ T5914] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 454.619782][ T5914] usb 4-1: USB disconnect, device number 41 [ 454.719071][ T1163] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.732573][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.968'. [ 454.890317][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 454.899887][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 455.436079][ T1163] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.643296][T10246] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 455.678134][ T6484] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 455.784773][ T29] audit: type=1400 audit(1777073238.205:1065): avc: denied { setopt } for pid=10255 comm="syz.3.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 455.858924][ T6484] usb 3-1: Using ep0 maxpacket: 16 [ 455.901679][ T6484] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 455.972208][ T3647] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 455.988551][ T6484] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 456.011235][T10064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.033947][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.067730][ T6484] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 456.068177][T10064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.129164][ T6484] usb 3-1: config 0 interface 0 has no altsetting 0 [ 456.136512][ T3647] usb 10-1: Using ep0 maxpacket: 32 [ 456.161592][ T6484] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 456.185990][ T3647] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.197256][ T6484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.200880][ T6484] usb 3-1: config 0 descriptor?? [ 456.237726][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.239920][ T3647] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.289173][ T3647] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 456.291345][T10064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.337144][ T3647] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 456.355526][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.370041][ T3647] usb 10-1: Product: syz [ 456.381325][ T3647] usb 10-1: Manufacturer: syz [ 456.412099][ T3647] hub 10-1:4.0: USB hub found [ 456.567455][T10064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.606252][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.666782][ T3647] hub 10-1:4.0: 2 ports detected [ 456.816425][ T5491] 8021q: adding VLAN 0 to HW filter on device eth15 [ 456.941634][ T3647] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 456.983065][T10240] xt_l2tp: v2 sid > 0xffff: 117440512 [ 456.997016][ T3647] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 457.027870][ T6484] usbhid 3-1:0.0: can't add hid device: -71 [ 457.039837][ T6484] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 457.068531][ T1163] bridge_slave_1: left allmulticast mode [ 457.087645][ T6484] usb 3-1: USB disconnect, device number 46 [ 457.098343][ T1163] bridge_slave_1: left promiscuous mode [ 457.136135][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.153655][ T3647] usb 10-1: USB disconnect, device number 3 [ 457.207311][ T1163] bridge_slave_0: left allmulticast mode [ 457.227908][ T1163] bridge_slave_0: left promiscuous mode [ 457.261037][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.743446][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 457.789617][T10304] xt_hashlimit: size too large, truncated to 1048576 [ 457.882335][ T3647] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 457.975189][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.003784][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.045219][ T1163] bond0 (unregistering): Released all slaves [ 458.069670][ T3647] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 458.089156][ T3647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.107167][ T3647] usb 9-1: Product: syz [ 458.115203][ T3647] usb 9-1: Manufacturer: syz [ 458.125781][ T3647] usb 9-1: SerialNumber: syz [ 458.318681][ T29] audit: type=1400 audit(1777073240.725:1066): avc: denied { set_context_mgr } for pid=10318 comm="syz.2.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 458.323995][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.984'. [ 458.548989][T10319] binder: 10318:10319 ioctl c0306201 200000000040 returned -14 [ 458.567247][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.739742][ T29] audit: type=1400 audit(1777073241.005:1067): avc: denied { append } for pid=10318 comm="syz.2.983" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 458.768433][T10327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.997265][ T29] audit: type=1400 audit(1777073241.415:1068): avc: denied { ioctl } for pid=10318 comm="syz.2.983" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31460 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.005224][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.268532][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.275809][ T6353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.340701][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.347928][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.453619][T10336] FAULT_INJECTION: forcing a failure. [ 459.453619][T10336] name failslab, interval 1, probability 0, space 0, times 0 [ 459.484453][T10336] CPU: 1 UID: 0 PID: 10336 Comm: syz.9.985 Not tainted syzkaller #0 PREEMPT(full) [ 459.484482][T10336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.484493][T10336] Call Trace: [ 459.484500][T10336] [ 459.484508][T10336] dump_stack_lvl+0x100/0x190 [ 459.484537][T10336] should_fail_ex.cold+0x5/0xa [ 459.484564][T10336] ? tomoyo_realpath_from_path+0xb6/0x690 [ 459.484589][T10336] should_failslab+0xc2/0x120 [ 459.484609][T10336] __kmalloc_noprof+0xe0/0x850 [ 459.484634][T10336] ? kfree+0x1dd/0x6c0 [ 459.484660][T10336] tomoyo_realpath_from_path+0xb6/0x690 [ 459.484690][T10336] tomoyo_path_number_perm+0x23c/0x580 [ 459.484708][T10336] ? tomoyo_path_number_perm+0x22e/0x580 [ 459.484730][T10336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.484776][T10336] ? find_held_lock+0x2b/0x80 [ 459.484796][T10336] ? __fget_files+0x215/0x3d0 [ 459.484816][T10336] ? hook_file_ioctl_common+0x149/0x410 [ 459.484841][T10336] ? __fget_files+0x215/0x3d0 [ 459.484867][T10336] ? __fget_files+0x21f/0x3d0 [ 459.484894][T10336] security_file_ioctl+0xd3/0x230 [ 459.484917][T10336] __x64_sys_ioctl+0xb7/0x210 [ 459.484940][T10336] do_syscall_64+0x10b/0xf80 [ 459.484966][T10336] ? clear_bhb_loop+0x40/0x90 [ 459.484989][T10336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.485007][T10336] RIP: 0033:0x7f7e1c79cdd9 [ 459.485024][T10336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.485043][T10336] RSP: 002b:00007f7e1d70e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.485062][T10336] RAX: ffffffffffffffda RBX: 00007f7e1ca16090 RCX: 00007f7e1c79cdd9 [ 459.485074][T10336] RDX: 00002000000000c0 RSI: 0000000080085504 RDI: 0000000000000004 [ 459.485087][T10336] RBP: 00007f7e1d70e090 R08: 0000000000000000 R09: 0000000000000000 [ 459.485099][T10336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.485108][T10336] R13: 00007f7e1ca16128 R14: 00007f7e1ca16090 R15: 00007fffb55e9698 [ 459.485129][T10336] [ 459.485135][T10336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 459.730433][T10336] usb usb2: usbfs: process 10336 (syz.9.985) did not claim interface 0 before use [ 460.108055][ T1163] hsr_slave_0: left promiscuous mode [ 460.155593][ T1163] hsr_slave_1: left promiscuous mode [ 460.169255][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.217624][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.266784][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.278589][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.291299][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 460.328837][ T1163] veth1_macvtap: left promiscuous mode [ 460.340511][ T1163] veth0_macvtap: left promiscuous mode [ 460.352017][ T1163] veth1_vlan: left promiscuous mode [ 460.360827][ T1163] veth0_vlan: left promiscuous mode [ 460.830488][ T29] audit: type=1400 audit(1777073243.245:1069): avc: denied { write } for pid=10354 comm="syz.9.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 461.358765][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 461.379253][ T3647] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 461.392550][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 461.403421][ T3647] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 461.436682][ T3647] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 461.455491][ T3647] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 461.475434][ T3647] usb 9-1: USB disconnect, device number 3 [ 461.622553][T10353] veth1_macvtap: left promiscuous mode [ 461.693082][ T29] audit: type=1400 audit(1777073244.105:1070): avc: denied { relabelfrom } for pid=10350 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 461.715851][ T29] audit: type=1400 audit(1777073244.105:1071): avc: denied { relabelto } for pid=10350 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 461.748430][ T5491] 8021q: adding VLAN 0 to HW filter on device eth16 [ 461.799191][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.9.992'. [ 462.922469][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.531246][ T29] audit: type=1804 audit(1777073245.945:1072): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.997" name="bus" dev="ramfs" ino=31531 res=1 errno=0 [ 463.617810][ T29] audit: type=1804 audit(1777073245.995:1073): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.997" name="bus" dev="ramfs" ino=31531 res=1 errno=0 [ 463.811760][T10430] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 463.818309][T10430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.913536][T10430] vhci_hcd vhci_hcd.0: Device attached [ 464.140701][ T29] audit: type=1400 audit(1777073246.515:1074): avc: denied { ioctl } for pid=10427 comm="syz.8.998" path="/dev/ttyr4" dev="devtmpfs" ino=395 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 464.242901][ T6484] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 464.978713][T10431] vhci_hcd: connection reset by peer [ 465.018893][ T6353] vhci_hcd vhci_hcd.8: stop threads [ 465.073185][ T6353] vhci_hcd vhci_hcd.8: release socket [ 465.119474][ T6353] vhci_hcd vhci_hcd.8: disconnect device [ 465.150477][T10064] veth0_vlan: entered promiscuous mode [ 465.171305][T10064] veth1_vlan: entered promiscuous mode [ 465.391265][T10064] veth0_macvtap: entered promiscuous mode [ 465.489534][T10064] veth1_macvtap: entered promiscuous mode [ 465.506876][ T11] block nbd0: Possible stuck request ffff888028b47000: control (read@0,4096B). Runtime 300 seconds [ 465.542754][ T5883] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 465.577280][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.727770][ T5883] usb 9-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 465.749957][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.784368][ T5883] usb 9-1: Product: syz [ 465.798427][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.804365][ T5883] usb 9-1: Manufacturer: syz [ 465.815575][ T5883] usb 9-1: SerialNumber: syz [ 465.836142][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.854889][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.935010][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.946238][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.005313][ T5956] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 466.181385][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.199353][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 466.244141][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 466.256260][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.315545][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 466.351317][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.390614][ T5956] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 466.411759][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.434710][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.459153][ T5956] usb 3-1: Product: syz [ 466.472151][ T9974] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 466.482756][ T5956] usb 3-1: Manufacturer: syz [ 466.495850][ T5956] usb 3-1: SerialNumber: syz [ 466.517197][ T5956] usb 3-1: config 0 descriptor?? [ 466.546650][ T5956] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 466.577433][ T5956] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 466.656906][ T9974] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 466.682522][ T9974] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 466.723798][ T9974] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 466.763681][ T9974] usb 10-1: config 220 has no interface number 2 [ 466.789259][ T9974] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 466.823033][ T9974] usb 10-1: config 220 interface 0 has no altsetting 0 [ 466.840202][ T9974] usb 10-1: config 220 interface 76 has no altsetting 0 [ 466.864143][ T9974] usb 10-1: config 220 interface 1 has no altsetting 0 [ 466.883725][ T9974] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 466.901622][ T9974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.924591][ T9974] usb 10-1: Product: syz [ 466.937255][ T9974] usb 10-1: Manufacturer: syz [ 466.947686][ T9974] usb 10-1: SerialNumber: syz [ 467.159101][ T5956] em28xx 3-1:0.0: chip ID is em2828X [ 467.388548][T10451] Bluetooth: MGMT ver 1.23 [ 467.397875][T10459] kvm: apic: phys broadcast and lowest prio [ 467.426027][ T5956] usb 3-1: USB disconnect, device number 47 [ 467.459946][ T5956] em28xx 3-1:0.0: Disconnecting em28xx [ 467.509005][ T5956] em28xx 3-1:0.0: Freeing device [ 468.396296][ T5883] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 468.456061][ T5883] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 468.495490][ T5883] usb 9-1: USB disconnect, device number 4 [ 468.878308][T10507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=10507 comm=syz.4.1008 [ 469.374125][ T9974] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 469.401433][ T9974] uvcvideo 10-1:220.0: No valid video chain found. [ 469.410775][ T29] audit: type=1400 audit(1777073251.835:1075): avc: denied { watch_reads } for pid=10518 comm="syz.3.1011" path="/223/file0" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 469.434150][ T9974] usb 10-1: selecting invalid altsetting 0 [ 469.542284][ T6484] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 469.808602][ T9974] usb 10-1: selecting invalid altsetting 0 [ 469.833755][T10517] netlink: 'syz.2.1010': attribute type 10 has an invalid length. [ 469.835418][ T9974] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 470.073612][T10517] bridge0: left allmulticast mode [ 470.183134][T10521] Attempt to restore checkpoint with obsolete wellknown handles [ 470.196769][T10529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=10529 comm=syz.9.1012 [ 470.235407][T10517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.294401][ T9974] usb 10-1: USB disconnect, device number 4 [ 470.329388][T10517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.789202][T10542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=10542 comm=syz.8.1015 [ 471.033502][T10546] netlink: 'syz.9.1018': attribute type 1 has an invalid length. [ 471.195373][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 471.428485][ T29] audit: type=1400 audit(1777073253.825:1076): avc: denied { map } for pid=10551 comm="syz.2.1019" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 471.447906][T10556] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 471.716164][ T29] audit: type=1400 audit(1777073253.855:1077): avc: denied { read write } for pid=10551 comm="syz.2.1019" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 471.820071][ T29] audit: type=1400 audit(1777073254.235:1078): avc: denied { read } for pid=10563 comm="syz.8.1023" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 472.150746][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1025'. [ 472.170108][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1025'. [ 472.332006][ T5956] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 472.452238][ T9974] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 472.491965][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 472.501787][ T5956] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 472.517439][ T5956] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 472.560738][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 472.581799][ T5956] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 472.612987][ T9974] usb 9-1: Using ep0 maxpacket: 16 [ 472.618722][ T5956] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 472.635843][ T9974] usb 9-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 472.661240][ T5956] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.677331][ T9974] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 472.703482][ T5956] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 472.714348][ T9974] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 472.735773][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.750410][ T9974] usb 9-1: config 0 interface 0 has no altsetting 0 [ 472.767130][ T9974] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 472.806163][ T9974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.816409][T10590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=10590 comm=syz.3.1026 [ 472.852267][ T9974] usb 9-1: config 0 descriptor?? [ 473.018102][ T5956] usb 3-1: usb_control_msg returned -32 [ 473.028947][ T5956] usbtmc 3-1:16.0: can't read capabilities [ 474.124236][T10574] xt_l2tp: v2 sid > 0xffff: 117440512 [ 474.151528][ T9974] usbhid 9-1:0.0: can't add hid device: -71 [ 474.652669][ T9974] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 474.990400][ T9974] usb 9-1: USB disconnect, device number 5 [ 475.277682][ T29] audit: type=1400 audit(1777073257.695:1079): avc: denied { write } for pid=10613 comm="syz.3.1030" laddr=fe80::13 lport=36627 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 475.372608][T10624] i2c i2c-0: dtv_property_process_set: SET cmd 0x00002d29 undefined [ 475.476741][ T5881] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 475.487354][T10630] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1033'. [ 475.694310][ T5881] usb 10-1: Using ep0 maxpacket: 8 [ 475.800028][ T5881] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.814658][ T29] audit: type=1800 audit(1777073258.235:1080): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.9.1032" name="/newroot/27" dev="tmpfs" ino=155 res=0 errno=0 [ 475.826589][ T5881] usb 10-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 475.902401][ T5881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.933639][ T5881] usb 10-1: config 0 descriptor?? [ 476.098591][ T5956] usb 3-1: USB disconnect, device number 48 [ 476.148250][ T6484] usb 10-1: USB disconnect, device number 5 [ 476.244497][ T5881] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 476.463987][ T5881] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 476.505565][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.583205][ T5881] usb 9-1: Product: syz [ 476.624335][ T5881] usb 9-1: Manufacturer: syz [ 476.688569][ T5881] usb 9-1: SerialNumber: syz [ 477.451604][T10646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.108031][T10661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37906 sclass=netlink_route_socket pid=10661 comm=syz.3.1037 [ 479.183811][ T5881] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 479.258638][ T5881] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 479.292237][ T5881] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 479.340198][ T5881] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 479.582917][ T5881] usb 9-1: USB disconnect, device number 6 [ 480.326097][T10686] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1044'. [ 480.604341][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 480.737370][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 481.134438][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.141630][T10700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.150794][T10700] bridge0: left allmulticast mode [ 481.311591][T10699] ceph: No mds server is up or the cluster is laggy [ 481.521536][T10700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.548754][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 481.626251][T10692] bridge0: entered allmulticast mode [ 481.643785][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 482.342788][T10712] QAT: Invalid ioctl 21531 [ 482.401648][ T29] audit: type=1400 audit(1777073264.805:1081): avc: denied { watch } for pid=10691 comm="syz.8.1046" path="/35/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 482.437977][ T5883] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 482.747787][ T29] audit: type=1400 audit(1777073264.805:1082): avc: denied { watch_sb } for pid=10691 comm="syz.8.1046" path="/35/file0" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 482.864427][ T29] audit: type=1400 audit(1777073265.275:1083): avc: denied { append } for pid=10711 comm="syz.9.1049" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 482.891999][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 483.430355][ T29] audit: type=1400 audit(1777073265.555:1084): avc: denied { create } for pid=10717 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.461983][ T5883] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 483.475395][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 483.489563][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 483.502616][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 483.521098][ T5883] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 483.548913][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.563419][ T6353] tipc: Subscription rejected, illegal request [ 483.566208][ T5883] usb 3-1: config 0 descriptor?? [ 483.580711][ T29] audit: type=1400 audit(1777073265.585:1085): avc: denied { write } for pid=10717 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.687012][ T5883] usb 3-1: can't set config #0, error -71 [ 483.696413][ T29] audit: type=1400 audit(1777073265.645:1086): avc: denied { read } for pid=10717 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 483.791143][ T5883] usb 3-1: USB disconnect, device number 49 [ 483.845100][ T29] audit: type=1400 audit(1777073266.265:1087): avc: denied { ioctl } for pid=10725 comm="syz.4.1051" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 485.026239][T10748] comedi comedi3: dmm32at: I/O port conflict (0xcff,16) [ 485.694879][T10758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1059'. [ 487.597472][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 487.617581][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 487.672128][ T5883] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 487.843716][ T5883] usb 4-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 487.862685][ T5883] usb 4-1: config 1 interface 0 has no altsetting 0 [ 487.871609][ T5883] usb 4-1: New USB device found, idVendor=f925, idProduct=ffff, bcdDevice=ff.ff [ 487.891375][ T5883] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 487.905575][ T5883] usb 4-1: Product: syz [ 487.913187][ T5883] usb 4-1: Manufacturer: syz [ 487.923000][ T5883] usb 4-1: SerialNumber: syz [ 487.954155][T10768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 487.991981][ T5881] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 488.226544][ T5883] usb 4-1: USB disconnect, device number 42 [ 488.236552][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 488.264447][ T5881] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 488.289242][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 488.311268][ T5881] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 488.334063][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.348453][ T5881] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 488.369873][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.406976][ T5881] usb 3-1: config 0 descriptor?? [ 489.093989][ T5883] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 489.106555][T10807] tipc: Enabled bearer , priority 0 [ 489.132808][T10772] xt_l2tp: v2 sid > 0xffff: 117440512 [ 489.149270][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 489.160980][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 489.190739][ T5881] usb 3-1: USB disconnect, device number 50 [ 489.208357][T10807] syzkaller0: entered promiscuous mode [ 489.224106][T10807] syzkaller0: entered allmulticast mode [ 489.257736][ T5883] usb 10-1: Using ep0 maxpacket: 8 [ 489.302190][ T5883] usb 10-1: unable to get BOS descriptor or descriptor too short [ 489.320072][ T5883] usb 10-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 489.333560][T10807] tipc: Resetting bearer [ 489.407138][T10816] dlm: non-version read from control device 0 [ 489.796610][ T5883] usb 10-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 489.810143][ T5883] usb 10-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 489.832465][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.841232][ T5883] usb 10-1: Product: syz [ 489.845861][ T5883] usb 10-1: Manufacturer: syz [ 489.856728][ T5883] usb 10-1: SerialNumber: syz [ 489.868762][T10806] tipc: Resetting bearer [ 490.036206][T10806] tipc: Disabling bearer [ 490.284208][T10461] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 490.335747][T10837] program syz.3.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.561019][T10461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.575853][T10461] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.589073][T10461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.607718][T10461] usb 3-1: config 0 descriptor?? [ 490.620426][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.641249][T10461] pwc: Askey VC010 type 2 USB webcam detected. [ 490.641718][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 490.728035][ T5883] usb 10-1: USB disconnect, device number 6 [ 490.785999][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1080'. [ 490.845511][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 490.866621][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.884893][ T10] usb 5-1: Product: syz [ 490.897112][ T10] usb 5-1: Manufacturer: syz [ 490.901751][ T10] usb 5-1: SerialNumber: syz [ 490.916174][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 490.997280][ T5956] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 491.052169][T10461] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.060044][T10461] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.068232][T10461] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.122137][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 491.284374][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 491.318497][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.335809][T10461] pwc: recv_control_msg error -71 req 04 val 1300 [ 491.355661][T10461] pwc: recv_control_msg error -71 req 04 val 1400 [ 491.363591][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.385296][T10461] pwc: recv_control_msg error -71 req 02 val 2000 [ 491.398023][T10461] pwc: recv_control_msg error -71 req 02 val 2100 [ 491.409228][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 491.423720][T10461] pwc: recv_control_msg error -71 req 04 val 1500 [ 491.434040][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.447048][T10461] pwc: recv_control_msg error -71 req 02 val 2500 [ 491.465231][ T24] usb 9-1: Product: syz [ 491.476198][T10461] pwc: recv_control_msg error -71 req 02 val 2400 [ 491.477613][ T9974] usb 5-1: USB disconnect, device number 13 [ 491.487340][ T24] usb 9-1: Manufacturer: syz [ 491.487366][ T24] usb 9-1: SerialNumber: syz [ 491.494212][ T24] usb 9-1: config 0 descriptor?? [ 491.524425][T10461] pwc: recv_control_msg error -71 req 02 val 2600 [ 491.687501][T10461] pwc: recv_control_msg error -71 req 02 val 2900 [ 491.696963][T10461] pwc: recv_control_msg error -71 req 02 val 2800 [ 491.705367][T10461] pwc: recv_control_msg error -71 req 04 val 1100 [ 491.712871][ T24] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 491.722341][ T24] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 491.729523][T10461] pwc: recv_control_msg error -71 req 04 val 1200 [ 491.742032][T10461] pwc: Registered as video103. [ 491.768586][T10461] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 492.163682][T10461] usb 3-1: USB disconnect, device number 51 [ 492.294281][ T5956] usb 5-1: Service connection timeout for: 256 [ 492.323997][ T5956] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 492.367245][ T5956] ath9k_htc: Failed to initialize the device [ 492.394072][ T9974] usb 5-1: ath9k_htc: USB layer deinitialized [ 492.402009][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 492.419411][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 492.429227][ T29] audit: type=1400 audit(1777073274.815:1088): avc: denied { getopt } for pid=10870 comm="syz.9.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.460279][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 492.463805][T10886] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.476803][T10886] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.502541][ T24] em28xx 9-1:0.0: chip ID is em2828X [ 492.554261][T10886] bridge0: entered allmulticast mode [ 492.709376][T10461] usb 9-1: USB disconnect, device number 7 [ 492.721315][T10461] em28xx 9-1:0.0: Disconnecting em28xx [ 492.816313][T10461] em28xx 9-1:0.0: Freeing device [ 493.091976][ T9974] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 493.262476][ T9974] usb 5-1: Using ep0 maxpacket: 16 [ 493.275750][ T9974] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 493.305707][ T9974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 493.350920][ T9974] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 493.362366][ T10] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 493.384065][T10908] syz.8.1088 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 493.389655][ T9974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.404235][ T9974] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 493.414309][ T9974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.417537][T10908] ubi31: attaching mtd0 [ 493.435118][ T9974] usb 5-1: config 0 descriptor?? [ 493.507798][T10908] ubi31: scanning is finished [ 493.523434][T10908] ubi31: empty MTD device detected [ 493.834852][ T29] audit: type=1400 audit(1777073276.255:1089): avc: denied { write } for pid=10899 comm="syz.2.1087" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 493.915684][ T29] audit: type=1400 audit(1777073276.335:1090): avc: denied { accept } for pid=10899 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 493.967883][ T29] audit: type=1400 audit(1777073276.385:1091): avc: denied { ioctl } for pid=10899 comm="syz.2.1087" path="socket:[33473]" dev="sockfs" ino=33473 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.069529][T10908] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 494.086726][T10883] xt_l2tp: v2 sid > 0xffff: 117440512 [ 494.091496][T10908] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 494.109449][T10908] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 494.116672][T10908] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 494.125038][T10908] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 494.132569][T10908] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 494.141452][T10908] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 220360094 [ 494.151740][ T9974] usbhid 5-1:0.0: can't add hid device: -71 [ 494.172919][T10908] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 494.183937][ T9974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 494.220366][T10928] ubi31: background thread "ubi_bgt31d" started, PID 10928 [ 494.236217][ T9974] usb 5-1: USB disconnect, device number 14 [ 495.575995][ T11] block nbd0: Possible stuck request ffff888028b47000: control (read@0,4096B). Runtime 330 seconds [ 496.570946][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 496.663625][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 496.837083][ T10] usb 3-1: can't read configurations, error -71 [ 496.917882][T10959] FAULT_INJECTION: forcing a failure. [ 496.917882][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.996697][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.9.1096 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.996730][T10959] Tainted: [L]=SOFTLOCKUP [ 496.996737][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.996755][T10959] Call Trace: [ 496.996761][T10959] [ 496.996767][T10959] dump_stack_lvl+0x100/0x190 [ 496.996795][T10959] should_fail_ex.cold+0x5/0xa [ 496.996823][T10959] _copy_from_user+0x2e/0xd0 [ 496.996846][T10959] copy_msghdr_from_user+0x9f/0x4f0 [ 496.996873][T10959] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 496.996907][T10959] ___sys_sendmsg+0x106/0x1e0 [ 496.996933][T10959] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.996990][T10959] __sys_sendmsg+0x170/0x220 [ 496.997020][T10959] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.997062][T10959] ? rcu_is_watching+0x12/0xc0 [ 496.997095][T10959] do_syscall_64+0x10b/0xf80 [ 496.997122][T10959] ? clear_bhb_loop+0x40/0x90 [ 496.997147][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.997168][T10959] RIP: 0033:0x7f7e1c79cdd9 [ 496.997185][T10959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.997205][T10959] RSP: 002b:00007f7e1d72f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.997228][T10959] RAX: ffffffffffffffda RBX: 00007f7e1ca15fa0 RCX: 00007f7e1c79cdd9 [ 496.997241][T10959] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 496.997254][T10959] RBP: 00007f7e1d72f090 R08: 0000000000000000 R09: 0000000000000000 [ 496.997266][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.997278][T10959] R13: 00007f7e1ca16038 R14: 00007f7e1ca15fa0 R15: 00007fffb55e9698 [ 496.997306][T10959] [ 497.183899][T10962] xt_hashlimit: size too large, truncated to 1048576 [ 497.235799][T10961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 497.396251][ T29] audit: type=1400 audit(1777073279.645:1092): avc: denied { mounton } for pid=10950 comm="syz.3.1095" path="/240/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 497.611945][T10461] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 497.772014][T10461] usb 5-1: Using ep0 maxpacket: 16 [ 497.781221][T10461] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 497.800295][T10461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.818527][ T29] audit: type=1400 audit(1777073280.235:1093): avc: denied { prog_load } for pid=10977 comm="syz.9.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.866325][T10461] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 497.882184][T10461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.895410][ T29] audit: type=1400 audit(1777073280.235:1094): avc: denied { bpf } for pid=10977 comm="syz.9.1102" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.917543][T10461] usb 5-1: Product: syz [ 497.924312][T10461] usb 5-1: Manufacturer: syz [ 497.929667][T10461] usb 5-1: SerialNumber: syz [ 498.095329][ T29] audit: type=1400 audit(1777073280.235:1095): avc: denied { perfmon } for pid=10977 comm="syz.9.1102" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.117375][T10461] usb 5-1: config 0 descriptor?? [ 498.125033][T10461] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 498.195146][T10461] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 498.696716][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 498.728000][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1104'. [ 498.768457][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 498.784464][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.784487][ T5832] Tainted: [L]=SOFTLOCKUP [ 498.784492][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.784502][ T5832] Workqueue: hci5 hci_rx_work [ 498.784524][ T5832] Call Trace: [ 498.784530][ T5832] [ 498.784536][ T5832] dump_stack_lvl+0x100/0x190 [ 498.784554][ T5832] sysfs_warn_dup.cold+0x1c/0x28 [ 498.784575][ T5832] sysfs_create_dir_ns+0x24b/0x2b0 [ 498.784591][ T5832] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 498.784604][ T5832] ? find_held_lock+0x2b/0x80 [ 498.784615][ T5832] ? kobject_add_internal+0x25f/0x930 [ 498.784628][ T5832] ? kobject_add_internal+0x25f/0x930 [ 498.784648][ T5832] ? do_raw_spin_unlock+0x145/0x1e0 [ 498.784667][ T5832] kobject_add_internal+0x2c8/0x930 [ 498.784683][ T5832] kobject_add+0x16a/0x1e0 [ 498.784697][ T5832] ? __pfx_kobject_add+0x10/0x10 [ 498.784709][ T5832] ? class_to_subsys+0x10f/0x150 [ 498.784724][ T5832] ? kobject_put+0xb9/0x640 [ 498.784734][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 498.784753][ T5832] device_add+0x294/0x1950 [ 498.784772][ T5832] ? __pfx_dev_set_name+0x10/0x10 [ 498.784787][ T5832] ? __pfx_device_add+0x10/0x10 [ 498.784805][ T5832] ? mgmt_send_event_skb+0x2fb/0x460 [ 498.784827][ T5832] hci_conn_add_sysfs+0x1a3/0x260 [ 498.784841][ T5832] le_conn_complete_evt+0x11eb/0x1f60 [ 498.784862][ T5832] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 498.784884][ T5832] hci_le_conn_complete_evt+0x23c/0x3a0 [ 498.784902][ T5832] ? skb_pull_data+0x15f/0x1e0 [ 498.784917][ T5832] hci_le_meta_evt+0x34a/0x5f0 [ 498.784936][ T5832] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 498.784955][ T5832] hci_event_packet+0x51c/0xcd0 [ 498.784972][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 498.784990][ T5832] ? __pfx_hci_event_packet+0x10/0x10 [ 498.785008][ T5832] ? kcov_remote_start+0x374/0x660 [ 498.785022][ T5832] ? lockdep_hardirqs_on+0x78/0x100 [ 498.785042][ T5832] hci_rx_work+0x451/0xfc0 [ 498.785062][ T5832] process_one_work+0xa0e/0x1980 [ 498.785084][ T5832] ? __pfx_process_one_work+0x10/0x10 [ 498.785104][ T5832] ? __pfx_hci_rx_work+0x10/0x10 [ 498.785122][ T5832] worker_thread+0x5ef/0xe50 [ 498.785143][ T5832] ? kthread+0x13a/0x450 [ 498.785156][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 498.785170][ T5832] kthread+0x370/0x450 [ 498.785187][ T5832] ? __pfx_kthread+0x10/0x10 [ 498.785214][ T5832] ret_from_fork+0x72b/0xd50 [ 498.785244][ T5832] ? __pfx_ret_from_fork+0x10/0x10 [ 498.785271][ T5832] ? __switch_to+0x800/0x1100 [ 498.785301][ T5832] ? __pfx_kthread+0x10/0x10 [ 498.785326][ T5832] ret_from_fork_asm+0x1a/0x30 [ 498.785371][ T5832] [ 498.785419][ T5832] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 499.061334][ T5832] Bluetooth: hci5: failed to register connection device [ 499.069436][ T29] audit: type=1400 audit(1777073281.485:1096): avc: denied { map_create } for pid=10991 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.092918][ T29] audit: type=1400 audit(1777073281.485:1097): avc: denied { map_read map_write } for pid=10991 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 499.401986][ T5263] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 499.437236][T10461] em28xx 5-1:0.0: chip ID is em2828X [ 499.490586][ T9974] usb 5-1: USB disconnect, device number 15 [ 500.461924][ T5263] usb 3-1: Using ep0 maxpacket: 16 [ 500.468816][ T5263] usb 3-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 500.482533][ T9974] em28xx 5-1:0.0: Disconnecting em28xx [ 500.506544][ T5263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 500.885204][ T29] audit: type=1400 audit(1777073283.305:1098): avc: denied { prog_run } for pid=11018 comm="syz.9.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 500.903015][ T9974] em28xx 5-1:0.0: Freeing device [ 501.389568][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.399407][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.449931][ T5263] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 501.518215][ T5263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 501.602001][ T5263] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 501.635821][ T5263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.685180][ T5263] usb 3-1: config 0 descriptor?? [ 501.757079][T10461] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 502.003146][ T29] audit: type=1400 audit(1777073284.425:1099): avc: denied { getopt } for pid=11024 comm="syz.4.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 502.061945][T10461] usb 9-1: device descriptor read/64, error -71 [ 502.071132][ T5263] usb 3-1: can't set config #0, error -71 [ 502.113960][ T5263] usb 3-1: USB disconnect, device number 54 [ 502.428398][T10461] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 502.572198][T10461] usb 9-1: device descriptor read/64, error -71 [ 502.714150][T10461] usb usb9-port1: attempt power cycle [ 502.886135][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 503.392688][T10461] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 503.433400][T10461] usb 9-1: device descriptor read/8, error -71 [ 503.691938][T10461] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 504.003751][T10461] usb 9-1: device not accepting address 11, error -71 [ 504.037306][T10461] usb usb9-port1: unable to enumerate USB device [ 504.130206][T11076] netlink: 'syz.2.1115': attribute type 1 has an invalid length. [ 504.310036][T11076] zonefs (nullb0) ERROR: Not a zoned block device [ 504.732250][ T9974] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 504.944997][ T9974] usb 10-1: Using ep0 maxpacket: 16 [ 504.983816][ T9974] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 505.036865][ T9974] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.065439][ T9974] usb 10-1: Product: syz [ 505.075789][T10461] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 505.136607][ T9974] usb 10-1: Manufacturer: syz [ 505.171313][ T9974] usb 10-1: SerialNumber: syz [ 505.245487][ T9974] usb 10-1: config 0 descriptor?? [ 505.262346][T10461] usb 5-1: Using ep0 maxpacket: 16 [ 505.290396][T10461] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 505.321015][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1122'. [ 505.348951][ T9974] visor 10-1:0.0: Sony Clie 3.5 converter detected [ 505.369635][T10461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.389890][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1122'. [ 505.433531][T10461] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 505.478375][T10461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.506007][T10461] usb 5-1: Product: syz [ 505.510474][T10461] usb 5-1: Manufacturer: syz [ 505.525653][ T9974] usb 10-1: clie_3_5_startup: get config number failed: -71 [ 505.541081][T10461] usb 5-1: SerialNumber: syz [ 505.556740][ T9974] visor 10-1:0.0: probe with driver visor failed with error -71 [ 505.628322][T10461] usb 5-1: config 0 descriptor?? [ 505.640643][ T9974] usb 10-1: USB disconnect, device number 7 [ 505.688567][T10461] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.698170][ T5883] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 505.730856][T10461] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 505.892360][ T5883] usb 9-1: Using ep0 maxpacket: 16 [ 506.160859][ T5883] usb 9-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 506.215965][ T5883] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 506.279450][ T5883] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 506.645495][ T5883] usb 9-1: config 0 interface 0 has no altsetting 0 [ 506.665257][ T5883] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 506.691548][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.734398][ T29] audit: type=1400 audit(1777073289.145:1100): avc: denied { setopt } for pid=11113 comm="syz.9.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.738355][ T5883] usb 9-1: config 0 descriptor?? [ 506.845739][T10461] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 506.846757][T10461] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 506.847110][T10461] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 506.847129][T10461] em28xx 5-1:0.0: No AC97 audio processor [ 506.870463][T10461] usb 5-1: USB disconnect, device number 16 [ 506.874582][T10461] em28xx 5-1:0.0: Disconnecting em28xx [ 506.922975][T10461] em28xx 5-1:0.0: Freeing device [ 507.450984][T11102] xt_l2tp: v2 sid > 0xffff: 117440512 [ 507.513859][ T5883] usbhid 9-1:0.0: can't add hid device: -71 [ 507.536744][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1127'. [ 507.552370][ T5883] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 507.586853][ T5883] usb 9-1: USB disconnect, device number 12 [ 508.032260][ T29] audit: type=1326 audit(1777073290.455:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.120321][ T29] audit: type=1326 audit(1777073290.455:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.276438][ T29] audit: type=1326 audit(1777073290.485:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.309217][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 508.359435][ T29] audit: type=1326 audit(1777073290.495:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.389005][ T29] audit: type=1326 audit(1777073290.495:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.619793][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 508.718327][ T29] audit: type=1326 audit(1777073290.495:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.767048][ T29] audit: type=1326 audit(1777073290.495:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.860566][ T29] audit: type=1326 audit(1777073290.585:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 508.938965][ T29] audit: type=1326 audit(1777073290.585:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11129 comm="syz.9.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1c79cdd9 code=0x7ffc0000 [ 511.624379][T11187] syz.3.1140 (11187): drop_caches: 2 [ 511.643391][ T3647] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 511.965568][ T3647] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.337566][T11202] vxfs: WRONG superblock magic 00000000 at 1 [ 512.346608][T11202] vxfs: WRONG superblock magic 00000000 at 8 [ 512.353249][T11202] vxfs: can't find superblock. [ 512.806786][ T3647] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.822267][ T3647] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.831661][ T3647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.840063][ T3647] usb 5-1: Product: syz [ 512.844562][ T3647] usb 5-1: Manufacturer: syz [ 512.849227][ T3647] usb 5-1: SerialNumber: syz [ 512.859449][ T3647] cdc_ncm 5-1:1.0: skipping garbage [ 512.865158][ T3647] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 512.872694][ T3647] cdc_ncm 5-1:1.0: bind() failure [ 513.241506][ T3647] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 513.248411][ T3647] cdc_ncm 5-1:1.1: bind() failure [ 513.258363][ T3647] usb 5-1: USB disconnect, device number 17 [ 515.066022][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 515.066040][ T29] audit: type=1400 audit(1777073297.485:1121): avc: denied { append } for pid=11218 comm="syz.8.1147" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 515.263889][T11228] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 515.301800][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1149'. [ 515.397976][T11234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.825449][T11245] hpfs: Bad magic ... probably not HPFS [ 517.492293][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 517.521983][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 517.725215][ T29] audit: type=1400 audit(1777073299.785:1122): avc: denied { create } for pid=11249 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 518.273263][ T29] audit: type=1400 audit(1777073299.795:1123): avc: denied { write } for pid=11249 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 518.524088][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 518.810629][T11287] xt_hashlimit: size too large, truncated to 1048576 [ 518.938757][T11289] bridge_slave_0 (unregistering): left allmulticast mode [ 518.957728][ T29] audit: type=1400 audit(1777073301.365:1124): avc: denied { block_suspend } for pid=11292 comm="syz.8.1160" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.996270][T11289] bridge_slave_0 (unregistering): left promiscuous mode [ 519.034434][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.412410][ T6484] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 519.510250][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1164'. [ 519.542964][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 519.571029][T11312] netlink: 'syz.4.1164': attribute type 11 has an invalid length. [ 519.620204][ T6484] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 519.632150][T11312] netlink: 'syz.4.1164': attribute type 13 has an invalid length. [ 519.657777][ T6484] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 519.686382][ T6484] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.752156][ T6484] usb 3-1: Product: syz [ 519.760254][ T6484] usb 3-1: Manufacturer: syz [ 519.763607][T11320] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1165'. [ 519.769790][ T6484] usb 3-1: SerialNumber: syz [ 519.927988][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 519.965626][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1166'. [ 520.056141][ T6484] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 520.254537][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 520.261647][ T10] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 520.282797][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 520.289205][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4 [ 520.332364][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 520.357456][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 520.382349][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 520.417383][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.446902][ T10] usb 5-1: config 0 descriptor?? [ 520.624416][ T6484] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 520.647067][T11300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.668487][T11300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.084665][T11312] xt_l2tp: v2 sid > 0xffff: 117440512 [ 521.088015][ T5491] veth1_macvtap: entered promiscuous mode [ 521.101822][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 521.114552][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 521.140756][ T10] usb 5-1: USB disconnect, device number 18 [ 521.302558][ T29] audit: type=1400 audit(1777073303.725:1125): avc: denied { wake_alarm } for pid=11351 comm="syz.8.1171" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.827875][T11373] xt_hashlimit: size too large, truncated to 1048576 [ 522.161024][T11386] binder: 11382:11386 ioctl 4018620d 0 returned -22 [ 522.711583][T11390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1177'. [ 522.877753][T11386] binder: 11382:11386 ioctl c0306201 200000000280 returned -11 [ 522.911186][ T6484] usb 3-1: USB disconnect, device number 55 [ 523.239230][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1178'. [ 523.277578][T11402] overlayfs: workdir and upperdir must reside under the same mount [ 525.677311][ T11] block nbd0: Possible stuck request ffff888028b47000: control (read@0,4096B). Runtime 360 seconds [ 526.350860][T11430] kvm: kvm [11429]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5100 [ 526.492428][ T5898] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 526.493295][ T29] audit: type=1400 audit(1777073308.905:1126): avc: denied { write } for pid=11441 comm="syz.8.1188" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 526.662006][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 526.691093][ T5898] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 526.712194][ T5898] usb 3-1: config 1 interface 0 has no altsetting 0 [ 526.728447][ T5898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 526.748341][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.765903][ T5898] usb 3-1: Product: ࿁⇘놹蘭婇〒伣萟ᯙ鷕翌甋眎땭蹫ꨲ빝홌꿵狌땢飶鯛泶ེ员햱찵쀃⯔擏㄁ᐵ䨾䄩穢筫⩺絏딪閔て퓗︇ࢩ牖䆹깏鏫伇霎둲괖䰋巖瀯䈯桫贏䨲緆꟨卫ઁ効踭詪浌ヒ㢽황䱂빱㪺与䗅Ặ濰뱜Ᏼꚣ飩ᚏᵪ짣蕔躰巒鄎邚鎈泖鋂䡉煸 [ 526.847397][ T5898] usb 3-1: Manufacturer: ⁎᳋䕏㕘鿏恣笹⨓Ӄ柍흆ጤধ臙ﳦＶ聩뿒筳画䂄ﾮ想읻쉈魏財睾ꍭ㮂쨑䞲뗧ㅓ꿀딳폶횠秗赼촂衚쓊弎멗쐴뷝㚨甥蟦閯䢱㵙攨餭괖ொꞱ੬㥡Û⋧㎔熉晇葄搻⢐䆔ꃤᙜ䡌购㹖鈪蘫撃Ż칞瓳㭂痗ぽ鉀泚䅂⛽筅堃慠ᙍൄ䙥㢥갎ḷ⛙ஃ [ 526.947969][ T5898] usb 3-1: SerialNumber: 䰴 [ 526.973111][T11435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.216148][ T5898] usb 3-1: USB disconnect, device number 56 [ 527.610532][T11455] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1190'. [ 527.619638][T11455] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1190'. [ 527.629678][T11455] netlink: 59 bytes leftover after parsing attributes in process `syz.8.1190'. [ 528.785937][T11462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1191'. [ 529.434784][ T10] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 529.664035][ T10] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 529.664053][ T10] usb 9-1: config 8 has no interface number 0 [ 529.664074][ T10] usb 9-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 529.664090][ T10] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 529.664107][ T10] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 529.664121][ T10] usb 9-1: config 8 interface 177 has no altsetting 0 [ 529.664139][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 529.664152][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.680370][T11471] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 529.895976][T11469] syz_tun: entered promiscuous mode [ 529.904467][T11469] macvtap1: entered promiscuous mode [ 529.912893][T11469] syz_tun: left promiscuous mode [ 530.664958][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 530.696894][T11493] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1194'. [ 531.001740][ T29] audit: type=1400 audit(1777073313.415:1127): avc: denied { create } for pid=11502 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.199398][ T29] audit: type=1400 audit(1777073313.615:1128): avc: denied { call } for pid=11508 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 531.246296][ T29] audit: type=1400 audit(1777073313.635:1129): avc: denied { transfer } for pid=11508 comm="syz.2.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 531.594081][T10461] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 531.624133][T11515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.662071][T11515] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 531.709837][ T29] audit: type=1400 audit(1777073314.115:1130): avc: denied { append } for pid=11510 comm="syz.4.1197" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 532.059456][ T10] usb 9-1: string descriptor 0 read error: -71 [ 532.068037][ T10] ir_toy 9-1:8.177: required endpoints not found [ 532.078294][ T10] usb 9-1: USB disconnect, device number 13 [ 532.086500][T10461] usb 3-1: device descriptor read/64, error -71 [ 532.361193][T11521] nfs4: Unknown parameter 'no' [ 532.482589][ T10] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 532.532505][T10461] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 532.662393][T10461] usb 3-1: device descriptor read/64, error -71 [ 532.695606][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1200'. [ 532.747948][ T29] audit: type=1400 audit(1777073315.145:1131): avc: denied { append } for pid=11520 comm="syz.4.1200" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 532.918470][T10461] usb usb3-port1: attempt power cycle [ 533.094001][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.105530][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 533.118083][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 533.129383][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 533.145857][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 533.162787][ T10] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 533.182058][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 533.200597][ T10] usb 9-1: Product: syz [ 533.211948][ T10] usb 9-1: Manufacturer: syz [ 533.222686][ T10] usb 9-1: SerialNumber: syz [ 533.259234][ T10] usb 9-1: config 0 descriptor?? [ 533.335703][T10461] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 533.376237][T10461] usb 3-1: device descriptor read/8, error -71 [ 533.641742][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 533.674182][T10461] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 533.678530][T11534] PKCS8: Unsupported PKCS#8 version [ 533.792737][T10461] usb 3-1: device descriptor read/8, error -71 [ 533.862008][T11534] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.1199'. [ 533.873468][T11534] openvswitch: netlink: Missing key (keys=40, expected=80) [ 533.916829][ T10] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 533.926512][ T5881] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 533.926660][ T10] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 533.963679][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 533.977401][T10461] usb usb3-port1: unable to enumerate USB device [ 534.010857][ T5881] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 534.043509][ T5881] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 534.076601][ T5881] usb 5-1: Manufacturer: syz [ 534.107498][ T5881] usb 5-1: config 0 descriptor?? [ 534.137437][ T5881] igorplugusb 5-1:0.0: endpoint incorrect [ 534.361513][ T5881] usb 5-1: USB disconnect, device number 19 [ 534.507947][T11539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1203'. [ 535.874268][ T10] usb 9-1: USB disconnect, device number 14 [ 537.174887][ T30] INFO: task syz.0.792:9260 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 537.280799][ T29] audit: type=1400 audit(1777073319.685:1132): avc: denied { write } for pid=5809 comm="syz-executor" path="pipe:[998]" dev="pipefs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 537.303384][ T30] Tainted: G L syzkaller #0 [ 537.345586][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.429143][ T30] task:syz.0.792 state:D stack:26936 pid:9260 tgid:9259 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 537.508883][ T30] Call Trace: [ 537.546360][ T30] [ 537.584554][ T30] __schedule+0x10e9/0x6820 [ 537.599413][ T29] audit: type=1400 audit(1777073320.015:1133): avc: denied { create } for pid=11569 comm="syz.8.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 537.632596][ T30] ? __pfx___schedule+0x10/0x10 [ 537.660196][ T30] ? find_held_lock+0x2b/0x80 [ 537.725868][ T30] ? schedule+0x2bf/0x390 [ 537.760072][ T30] schedule+0xdd/0x390 [ 537.795624][ T30] super_lock+0x283/0x3f0 [ 537.812880][ T30] ? __pfx_super_lock+0x10/0x10 [ 537.835223][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 537.852113][ T30] ? grab_super+0x9d/0x420 [ 537.859785][ T30] grab_super+0xaa/0x420 [ 537.874305][ T30] ? __pfx_grab_super+0x10/0x10 [ 537.894423][ T30] ? do_raw_spin_lock+0x128/0x260 [ 537.925136][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.942415][ T30] ? alloc_super+0x96c/0xd20 [ 537.947159][ T30] ? __pfx_super_s_dev_test+0x10/0x10 [ 537.957834][ T30] sget_fc+0x655/0xc70 [ 537.974379][ T30] ? __pfx_super_s_dev_set+0x10/0x10 [ 537.981590][ T30] get_tree_bdev_flags+0x1ba/0x620 [ 537.992224][ T30] ? __pfx_hfs_fill_super+0x10/0x10 [ 538.002801][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 538.017094][ T30] ? cap_capable+0x10b/0x440 [ 538.026489][ T30] ? bpf_lsm_capable+0x9/0x10 [ 538.042490][ T30] ? security_capable+0x80/0x260 [ 538.047557][ T30] vfs_get_tree+0x92/0x320 [ 538.059704][ T30] path_mount+0x7d0/0x23d0 [ 538.070006][ T30] ? __pfx_path_mount+0x10/0x10 [ 538.082587][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 538.094539][ T30] ? putname+0xb1/0x110 [ 538.102389][ T30] ? kmem_cache_free+0x127/0x6c0 [ 538.118506][ T30] ? __x64_sys_mount+0x293/0x310 [ 538.132077][ T30] __x64_sys_mount+0x293/0x310 [ 538.143541][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 538.157135][ T30] ? rcu_is_watching+0x12/0xc0 [ 538.168214][ T30] do_syscall_64+0x10b/0xf80 [ 538.178652][ T30] ? clear_bhb_loop+0x40/0x90 [ 538.202413][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.220377][ T30] RIP: 0033:0x7f486459cdd9 [ 538.236703][ T30] RSP: 002b:00007f4865502028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.262221][ T30] RAX: ffffffffffffffda RBX: 00007f4864815fa0 RCX: 00007f486459cdd9 [ 538.271022][ T30] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 538.288304][ T30] RBP: 00007f4864632d69 R08: 0000000000000000 R09: 0000000000000000 [ 538.308813][ T30] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 538.329378][ T30] R13: 00007f4864816038 R14: 00007f4864815fa0 R15: 00007ffc22a4efa8 [ 538.347921][ T30] [ 538.393910][ T30] INFO: task syz.0.792:9261 blocked for more than 144 seconds. [ 538.535891][ T30] Tainted: G L syzkaller #0 [ 538.570839][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.598078][ T30] task:syz.0.792 state:D stack:28144 pid:9261 tgid:9259 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 538.621198][ T30] Call Trace: [ 538.626322][ T30] [ 538.629299][ T30] __schedule+0x10e9/0x6820 [ 538.634513][ T30] ? __pfx___schedule+0x10/0x10 [ 538.639441][ T30] ? find_held_lock+0x2b/0x80 [ 538.645258][ T30] ? schedule+0x2bf/0x390 [ 538.649653][ T30] schedule+0xdd/0x390 [ 538.654401][ T30] schedule_preempt_disabled+0x13/0x30 [ 538.659944][ T30] __mutex_lock+0xced/0x1b10 [ 538.666287][ T30] ? bdev_open+0xa2/0xe40 [ 538.671314][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 538.677235][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 538.683147][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 538.688864][ T30] ? file_init_path+0x48e/0x670 [ 538.694789][ T30] ? bdev_open+0xa2/0xe40 [ 538.699182][ T30] bdev_open+0xa2/0xe40 [ 538.708903][ T30] ? iput+0x3a/0x40 [ 538.716280][ T30] bdev_file_open_by_dev+0x179/0x210 [ 538.721681][ T30] setup_bdev_super+0x385/0x730 [ 538.737213][ T30] get_tree_bdev_flags+0x363/0x620 [ 538.748984][ T30] ? __pfx_hfs_fill_super+0x10/0x10 [ 538.759139][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 538.773998][ T30] ? cap_capable+0x10b/0x440 [ 538.784776][ T30] ? bpf_lsm_capable+0x9/0x10 [ 538.799699][ T30] ? security_capable+0x80/0x260 [ 538.815498][ T30] vfs_get_tree+0x92/0x320 [ 538.830504][ T30] path_mount+0x7d0/0x23d0 [ 538.840964][ T30] ? __pfx_path_mount+0x10/0x10 [ 538.851470][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 538.864823][ T30] ? putname+0xb1/0x110 [ 538.874672][ T30] ? kmem_cache_free+0x127/0x6c0 [ 538.885291][ T30] ? __x64_sys_mount+0x293/0x310 [ 538.901974][ T30] __x64_sys_mount+0x293/0x310 [ 538.906862][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 538.917634][ T30] ? rcu_is_watching+0x12/0xc0 [ 538.933657][ T30] do_syscall_64+0x10b/0xf80 [ 538.941331][ T30] ? clear_bhb_loop+0x40/0x90 [ 538.949579][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.957233][ T30] RIP: 0033:0x7f486459cdd9 [ 538.961756][ T30] RSP: 002b:00007f48654e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.970621][ T30] RAX: ffffffffffffffda RBX: 00007f4864816090 RCX: 00007f486459cdd9 [ 538.978843][ T30] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 00002000000000c0 [ 538.991314][ T30] RBP: 00007f4864632d69 R08: 0000000000000000 R09: 0000000000000000 [ 539.000688][ T30] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 539.010139][ T30] R13: 00007f4864816128 R14: 00007f4864816090 R15: 00007ffc22a4efa8 [ 539.018887][ T30] [ 539.023712][ T30] [ 539.023712][ T30] Showing all locks held in the system: [ 539.031492][ T30] 3 locks held by kworker/0:1/10: [ 539.039668][ T30] #0: ffff88813feb3140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 539.087146][ T30] #1: ffffc900000f7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 539.132216][ T30] #2: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 539.150507][ T30] 1 lock held by khungtaskd/30: [ 539.163909][ T30] #0: ffffffff8e7e5460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 539.174464][ T30] 3 locks held by kworker/u8:9/1163: [ 539.179962][ T30] #0: ffff88813fe2c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 539.191239][ T30] #1: ffffc9000534fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 539.202077][ T30] #2: ffffffff9062f7a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 539.211339][ T30] 1 lock held by dhcpcd/5491: [ 539.216125][ T30] #0: ffffffff9062f7a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 539.225690][ T30] 2 locks held by getty/5585: [ 539.230384][ T30] #0: ffff88803ab3f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 539.240716][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 539.251182][ T30] 1 lock held by syz-executor/5822: [ 539.256843][ T30] #0: ffffffff9062f7a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 539.267368][ T30] 1 lock held by udevd/5842: [ 539.274644][ T30] #0: ffff888028a62350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 539.284571][ T30] 1 lock held by syz.0.792/9260: [ 539.289544][ T30] #0: ffff888063b900d8 (&type->s_umount_key#89/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 539.300546][ T30] 2 locks held by syz.0.792/9261: [ 539.305837][ T30] #0: ffff888039a900d8 (&type->s_umount_key#89/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 539.316603][ T30] #1: ffff888028a62350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 539.326793][ T30] 2 locks held by syz.9.1178/11403: [ 539.332757][ T30] #0: ffffffff9062f7a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 539.341793][ T30] #1: ffffffff8e7f0fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 539.353226][ T30] 3 locks held by syz.9.1185/11437: [ 539.358573][ T30] #0: ffff8880595a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 539.368711][ T30] #1: ffff8880595a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 539.379191][ T30] #2: ffffffff8e7f0fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 539.389907][ T30] 1 lock held by syz.2.1208/11553: [ 539.395330][ T30] #0: ffffffff9062f7a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 539.406429][ T30] 4 locks held by syz.8.1213/11570: [ 539.412667][ T30] #0: ffff88803434cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 539.426977][ T30] #1: ffff88803434c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 539.438171][ T30] #2: ffffffff908c6dc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 539.449374][ T30] #3: ffff8880772ca2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 539.460428][ T30] [ 539.463071][ T30] ============================================= [ 539.463071][ T30] [ 539.471579][ T30] NMI backtrace for cpu 0 [ 539.471601][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 539.471627][ T30] Tainted: [L]=SOFTLOCKUP [ 539.471634][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.471644][ T30] Call Trace: [ 539.471650][ T30] [ 539.471656][ T30] dump_stack_lvl+0x100/0x190 [ 539.471684][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 539.471707][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.471730][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 539.471753][ T30] sys_info+0x141/0x190 [ 539.471769][ T30] watchdog+0xcb1/0x1030 [ 539.471794][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 539.471818][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.471837][ T30] ? __kthread_parkme+0x18c/0x230 [ 539.471861][ T30] ? kthread+0x13a/0x450 [ 539.471879][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.471898][ T30] kthread+0x370/0x450 [ 539.471919][ T30] ? __pfx_kthread+0x10/0x10 [ 539.471944][ T30] ret_from_fork+0x72b/0xd50 [ 539.471971][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 539.471997][ T30] ? __switch_to+0x800/0x1100 [ 539.472028][ T30] ? __pfx_kthread+0x10/0x10 [ 539.472052][ T30] ret_from_fork_asm+0x1a/0x30 [ 539.472094][ T30] [ 539.598079][ T30] Sending NMI from CPU 0 to CPUs 1: [ 539.603597][ C1] NMI backtrace for cpu 1 [ 539.603620][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.603648][ C1] Tainted: [L]=SOFTLOCKUP [ 539.603654][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.603666][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 539.603703][ C1] Code: 26 86 02 e9 83 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 90 10 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 539.603722][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 539.603738][ C1] RAX: 0000000001cd47fb RBX: ffff88801e2ca500 RCX: ffffffff8b9b0045 [ 539.603751][ C1] RDX: 0000000000000000 RSI: ffffffff8df5a6ec RDI: ffffffff8c1c1d80 [ 539.603764][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 539.603775][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 539.603787][ C1] R13: ffffed1003c594a0 R14: 0000000000000001 R15: ffffffff90dc2450 [ 539.603799][ C1] FS: 0000000000000000(0000) GS:ffff8881243da000(0000) knlGS:0000000000000000 [ 539.603817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.603829][ C1] CR2: 000020000002d000 CR3: 0000000094859000 CR4: 00000000003526f0 [ 539.603841][ C1] Call Trace: [ 539.603847][ C1] [ 539.603853][ C1] default_idle+0x9/0x10 [ 539.603870][ C1] default_idle_call+0x6c/0xb0 [ 539.603887][ C1] do_idle+0x464/0x590 [ 539.603909][ C1] ? __pfx_do_idle+0x10/0x10 [ 539.603925][ C1] ? do_idle+0x30c/0x590 [ 539.603942][ C1] cpu_startup_entry+0x4f/0x60 [ 539.603960][ C1] start_secondary+0x21d/0x2d0 [ 539.603984][ C1] ? __pfx_start_secondary+0x10/0x10 [ 539.604008][ C1] common_startup_64+0x13e/0x148 [ 539.604043][ C1] [ 539.821141][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 539.828028][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 539.838713][ T30] Tainted: [L]=SOFTLOCKUP [ 539.843033][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.853088][ T30] Call Trace: [ 539.856360][ T30] [ 539.859284][ T30] dump_stack_lvl+0x100/0x190 [ 539.863970][ T30] vpanic+0x552/0x970 [ 539.867954][ T30] ? __pfx_vpanic+0x10/0x10 [ 539.872458][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 539.878637][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 539.884773][ T30] panic+0xd1/0xe0 [ 539.888470][ T30] ? __pfx_panic+0x10/0x10 [ 539.892859][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 539.898989][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 539.905118][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 539.911244][ T30] ? watchdog.cold+0x1ec/0x234 [ 539.915983][ T30] ? watchdog+0xcc1/0x1030 [ 539.920374][ T30] watchdog.cold+0x1fd/0x234 [ 539.924943][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 539.930727][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.935381][ T30] ? __kthread_parkme+0x18c/0x230 [ 539.940379][ T30] ? kthread+0x13a/0x450 [ 539.944607][ T30] ? __pfx_watchdog+0x10/0x10 [ 539.949270][ T30] kthread+0x370/0x450 [ 539.953346][ T30] ? __pfx_kthread+0x10/0x10 [ 539.957930][ T30] ret_from_fork+0x72b/0xd50 [ 539.962520][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 539.967634][ T30] ? __switch_to+0x800/0x1100 [ 539.972304][ T30] ? __pfx_kthread+0x10/0x10 [ 539.976901][ T30] ret_from_fork_asm+0x1a/0x30 [ 539.981679][ T30] [ 539.985067][ T30] Kernel Offset: disabled [ 539.989391][ T30] Rebooting in 86400 seconds..