last executing test programs: 4m20.635045381s ago: executing program 2 (id=1109): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x0, 0x1, [0x2a3]}}) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @acquire={0x40046305, 0x1}, @exit_looper], 0xca, 0x0, &(0x7f0000000240)="e7e207df176113e08eb6063981719608c2e2bd5c45a30dafd1d840b3d7a11b7bfdbdf4f63e7895a6dc6dcd498e3122b654bcbd8a8712302e3daf7c0f8d808dc3c0fc0edd1dc249b5b4dc7c5057d3cfce7795f8ac2fc9c6d6d2d526c95cb6aff98e7d8c9968eb66f2e02cc59da8017f853e4b4ffd6675f05afcbcc3c6fb8db22235f37e91e3030d8dc1171809781002cb063c539edf204ad71f74495fe96667e37f3379af957568803837d5e141a8c998208516e61fa90c1b8c9427d01fd9ef42b7568f4ea83f1f4a4f4d"}) r1 = eventfd(0x9) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000380)={0x3, r1}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000b80)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/113, 0x71}, {0x0}, {&(0x7f00000006c0)=""/136, 0x88}, {&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000000940)=""/160, 0xa0}], 0xa, &(0x7f0000000ac0)=""/147, 0x93}, 0x10020) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000c00), 0x12) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = io_uring_setup(0x1ea4, &(0x7f0000000c80)={0x0, 0x1228, 0x100, 0x2, 0xeb}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r5, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000d00), 0x40001, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000e40)={0x7fff, 0x3, &(0x7f0000000d40)=[0x80, 0x1, 0x0], &(0x7f0000000d80)=[0x22, 0x8, 0x0, 0x8000, 0x9, 0x78c], &(0x7f0000000dc0)=[0x4, 0x8, 0x401, 0x8, 0xb000, 0x7], &(0x7f0000000e00)=[0x8, 0x7]}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000e80)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x9, 0x3cac17, 0x1f7f71}) r7 = dup3(r6, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000f00)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000f40)={0x0, r8, 0x57, 0xd9f, 0x5, 0xd79d, 0x40, 0x76, 0x7}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000f80)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000001000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003680)={0x0}, &(0x7f00000036c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f00000037c0), &(0x7f0000003800)=0x0, &(0x7f0000003840)) sendmmsg$unix(r7, &(0x7f000000e100)=[{{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000010c0)="5d5303f861405001718301e84e7ba33cc57cd4a4e9a0f7677a6c081b9fac2d4011d34b74817858e9d4094500b419bd385d", 0x31}, {&(0x7f0000001100)="7e7e0c032e41a5e1b7e50fa0158aa7b7472fb1dddae312855356053798ae9f305a6856df034d6a316daa1fa52d222c0fc67edb6339c66bbd277077298f8b9b91149fbcca654bbb8616c8c8177dcc9e3c9dc80debf5b11b1540bcc6826e399f2bc9b9bfdfb7194b20a710f1ea4be9295d5b2c17df65828a88a6f9667e801ede6ff1b6dd", 0x83}, {&(0x7f00000011c0)="8a279d9ade73d618f53a75d8f6106f276f2149e5996dce14d016e883b34efdd998c74112e104057758545441f1e9f92b08be7ad74dd712a5ea15aec2babcaad612d30641bf713e0a90f5e2cb52897850ed218e9b83c741742db5458b8cb5a9ca92f6b9f352227058b55fcfaa863f37392803231f4ff52eb488df952473470b582020a9f37a0ba214c597fc9f005427c99440606d043db035638880df16f6af1292af6db17bf854ef04dd321810ee4c4045a01c6ac8bf4ad94f7c99a33d2c985f38d333758e315bbdbd47f777fa08b5f4437882df96264a2f1e926e", 0xdb}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="d2af3991a6cb0e2c8fda1d95003a80e586bc0ac6cee958e07e081b2f08347a12f6ebe317787f9347a46e27d46fd120590b486bdf9242c0fe23fba666c80eb78df49cea763785", 0x46}, {&(0x7f0000002340)="c44d87b75a5309d4c93c8d723e078aa847f552ec8a851324a596756c687fc4e7028dd3e0c7ee0cf8d657954d560b76584addd6da07dd4ce3f1ade3e5ca4bbcb9224de2530f1c2890", 0x48}, {&(0x7f00000023c0)="984d26422c0da532dca44c9553c9eea9f9b7c14af6b4326bca30c98dd4fc1179356a80ec7a60dedcf0f0d9a0d0cd7a286834df72a11d8e91739730c6c9f57130b5f67bacde31d06a5905d46f7e176ebeb874", 0x52}, {&(0x7f0000002440)="e39724c13e2a2253a7788cdf7c6b933d029692b68db4cb384b521d2e3abd79e8f53e7b2ed5c3043abcb2887dd5119b22d62cff3a30008fd572e99c5e63fea94123a248b3a7a3a183bdd90da8c29109827bf97c4ca760c0661dc26a9903c61ae3d689332fd30f0a898fb4d761a8fd7ad84cd4e3c653f10c0e1b064fda5ba0c2aef957fd860dd09eee0f9e883938ecbec81dc63a3373a9e1834d5c2bfc7ed8020069f38c5f29fb29587dfcc50e7597371a0e964b08fd3f4b58052694765805c046c02953009ae0d535eefe7df08c0557062378d03835107ea826de1c924874b5e4", 0xe0}, {&(0x7f0000002540)="732490d7b89f1e33393e5f1847bed78a54a7b702f0947dd9a36afcee29a866e22a699e0018730e695f3372c92c2101abd5140a97409e517d1e1213ed871d0a8fd6312776ef3effe0cb9a3c512a49428d389898a55549933afd5a", 0x5a}, {&(0x7f00000025c0)="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", 0x1000}], 0xa, &(0x7f0000007b80)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xa0, 0x44}}, {{0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000007c40)="7291782a345cf95fd788659fecd4c54ddcbc02ef14fdbf67a89e359a4dcce8df", 0x20}, {&(0x7f0000007c80)="eeb736134397a9ad7cb1e4752f98f4b1e845355fe3e1f357a0ccf7d1815433513ac9f802251318aca03c0c19bcf38290c86cc3c5b9d02dea4284a4bd3159c1cade2b5dfc260393f8b5449c6270f96fdc5e01a097b651f55493bcb042be8c484439cb705707df46a29ed493a83128808115cb44c1994803d045e9ab28d9f6", 0x7e}], 0x2, &(0x7f0000007d40)=[@rights={{0x24, 0x1, 0x1, [r2, r5, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x28, 0x20000000}}, {{&(0x7f0000007d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000081c0)=[{&(0x7f0000007e00)="57f7a41bd474c63d216e1e72f06fad174422334ec0a0fba397e88a49002a7b23758d1a049cf9b66ade65787d6c1442bed383dcd4368ad82cd85610583c1a46aace151eb946c22647affc63e25cd8722947090cb1a2327de8cbfe5e014198d899046ed3078eb6b70206f4f3420442fbddd065c74182d0c1c3198ce169195fb99daf68de6f8d4da3622d8881a31ac6eed16ab85114f01588845c3fa1fa29b9c3f4a2c9bcd189e2fa4f593ab2bd040a74b70ae2f9b3ca0c831abc54f578f7c28c18f48ac5c4c75f57b20df1cf170a", 0xcd}, {&(0x7f0000007f00)='p', 0x1}, {&(0x7f0000007f40)="8e538f3985ed500dc6365b387289e1976b9e", 0x12}, {&(0x7f0000007f80)="dbced03a501e610c353cc95d32fdfecf3c26f362f9e03f5117ae686280243acc3ccae3eab5f895fd1fa043afbf02e8198c0294121bf916c112b45ccdfd3b7bd4d0ddb7cc0f1fea53e3e3987d4cf218769a21865a2c640ab69f06a4ce7087ecadd39afb6aca108fa56d9e3494df0b1f8c7dd2d8c1f9d8d31098be395475d2ca8f3a116fd57d892df9c584645910db03", 0x8f}, {&(0x7f0000008040)="01c8c0626e6f498ffb9d7c30984c7e2cce3ddeac965ab257f26c4db44c016223ce7002a6190be9a6094a04581f2e0abb53df9fe95be854b10107e8c6db42b0da7eb5d68cc8ea5b1dc2abcd32963368f43184107f809b845231878d1928e0f83454bcc7efc6c33b8092708a7a92cc7ea295aa29a654a84fe8e337025570e2e36f8a807d0faaaa516f083ab539dc4572dbfa870b2a08c0d22d7aac23196c3e9d81b48f128feef228efb824b0a0dbb7ad1ed3e646a51d68b5efc80f78da688330708ca88a94ae8789e39152922b1ce2588018e62e71e54b31ff78b7d17bd8185236817f0c97", 0xe4}, {&(0x7f0000008140)="8873a85b1d2d8dabf0c3476e111cf644e77eda501869b21a84119951a1febb14ca215d0f7ab969daa951150b7e36f14b1ec58676a808ef5dd768e884897bab786b9eb4939464486444", 0x49}], 0x6, &(0x7f000000a380)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, r5, r3]}}, @cred={{0x1c}}], 0x48, 0x10}}, {{&(0x7f000000a400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000a540)=[{&(0x7f000000a480)="e3c35341c44f91fb59084ce212c66ec3fcfa9962f9db0c4714e335203777a19587278c3832ab4436b98f4002df4185d22faaa0b47b15cbed398fd15120b93bf5e19fac486d4f28f1548b61047e791535d6f7f0ec350d6256db89594132f9132ee84aac007ec0b221e21b3d06797fb53d86e051efbd0e927c5f2ffce17a75e532b44d20b55094c24df8b538ba9f232023a6bdad3a1cc305ddcb4ee30fec3ed508e1", 0xa1}], 0x1, &(0x7f000000a800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r7, r7, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r6, r5, r2, r0, 0xffffffffffffffff]}}], 0xb0, 0x44045}}, {{&(0x7f000000a8c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000bbc0)=[{&(0x7f000000a940)="7eafe5bcdf6d5a63622635caec8aae0fa42693c2f9101fe64558decb5164d308ff80ebd0124af91d999476183033fdaf926b7d3898c5364a7139dc19bce17d1bedbb41ec8a8294a4175d18251e36ecd32cf9b58b8701f3b6b06b4bdeee2772755c05fe39f68ce14ac6f45c115a07c0e6115b61b42c1f4d495c3aa759992309c147c5f6edfaf5ec65d3fa4e049fbd6d68c79c0738d67adbdf94c0c1a21e54f940c8564b86d206f54f6b94c51396b7b60fa1b25c5b01376983caf8fb5edf32424fef60e9c104a9f0019fd1a7d00cd5bdc6fa5dcb562222da420cc4b1d46734614f6d115640f3c6dccceebda2b889a5", 0xee}, {&(0x7f000000aa40)="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", 0x1000}, {&(0x7f000000ba40)="da6bbb5071ad62a54a453b58951bd9ab760d713ae223a99da6957f0ed0e2214188fa9cb7e9a43081f5c6e3457523df281cc2573b5ae68b09ce3b99203bda4b262e2e2791fe612e14506e9b25f8cb6272c4ae091ef478ba566de0b47c2ea15de769e692e6262ce6228fcd41fbcf45a9905d0e38c8e3a5ea2839e678f4b0efb2ee8881000b627906fde8217033d49f277ea2af5f4b581ed857ffc2b7386a04f477733cf3395c5425330fd203c66a8c4eac5ad17c084e", 0xb5}, {&(0x7f000000bb00)="8b5fdcb2f52c177aa677094731f6df586390fe4bac", 0x15}, {&(0x7f000000bb40)="31b74b6e41259ef3cc99b96b3b2362ed0a5ecf958a09566c5e4c44f943e40cd8e6eca98b4120ceddc0aa3c93f6e707bd6870e431ff62457431263b8c8f595366ded9d59a9e7de4689396fdf4ca01abfa78b5a7e130fbf2c97e8ec59283f9b8e6b1d9a2abda4bec07382a9514683ad3be5c", 0x71}], 0x5, &(0x7f000000be00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x38, 0x40000}}, {{0x0, 0x0, &(0x7f000000bf00)=[{&(0x7f000000be40)="da37f7311f6ee51112c588e136e9d2d8d3c67ae94a02d79b1b926329b639d80ff4a99f00c82ca3de9679a0613bf398f155dbcee0d14cefec47116ef6261241ec42d2f4dcb1bc248943dbcabea8ae991660a97f72f9c14ef8579d961a5141d36b43583e7c0666a3f759552ee9eaad10f6", 0x70}, {&(0x7f000000bec0)}], 0x2, &(0x7f000000e040)=[@rights={{0x1c, 0x1, 0x1, [r1, r6, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x70, 0x20000000}}], 0x6, 0x2) 4m20.547428881s ago: executing program 2 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4m20.42614996s ago: executing program 2 (id=1112): r0 = socket(0x1f, 0x2, 0x11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) sync() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000000105"], 0x68}}, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x2e7c2f8c73d22014, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa}, 0x0}, 0x0) 4m17.389851794s ago: executing program 2 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = msgget$private(0x0, 0x504) msgsnd(r5, 0x0, 0x0, 0x0) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000003c0)=""/177) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0xffffffffffffff03, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x8455730f3caa559a) statfs(0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380"], 0xa8}}, 0x0) 4m16.519309279s ago: executing program 2 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 4m15.816353424s ago: executing program 2 (id=1124): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x1be) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], &(0x7f0000000300)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 4m0.359485746s ago: executing program 32 (id=1124): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x8008330e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x1be) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], &(0x7f0000000300)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 2m33.203577044s ago: executing program 5 (id=1424): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x4000000, 0xff92, 0x0, 0x1, 0x2}]}) 2m32.561048039s ago: executing program 5 (id=1425): brk(0x6) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06106b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000300)}], 0x2}}], 0x2, 0x4048884) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 2m31.588885183s ago: executing program 5 (id=1430): syz_open_dev$sndctrl(0x0, 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000200000000000119078ac1414bbac1014bb00004e21000c907801000000"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$qrtr(0x2a, 0x2, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x1) fchdir(r8) open(&(0x7f0000000080)='.\x00', 0x480, 0x0) 2m30.806562492s ago: executing program 5 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000480)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x85}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getpid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000040), 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x3, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x269, 0x0, 0x0, 0x1}) 2m29.279776419s ago: executing program 5 (id=1439): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) 2m28.729918848s ago: executing program 5 (id=1443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x3da3, &(0x7f0000000180)={0x0, 0x80001021, 0x8, 0x6, 0x20000110}, &(0x7f0000000340), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000580)={0x6e, r0, 0x13, {0x1, 0x9}, 0x5}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001140)='xen_mmu_pmd_clear\x00', r4, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0x8000000000000000, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f000066f000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000001080)={0x3, 0x6}, 0x0) write$6lowpan_control(r7, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x20004010) 2m28.432616889s ago: executing program 33 (id=1443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = syz_io_uring_setup(0x3da3, &(0x7f0000000180)={0x0, 0x80001021, 0x8, 0x6, 0x20000110}, &(0x7f0000000340), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000580)={0x6e, r0, 0x13, {0x1, 0x9}, 0x5}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001140)='xen_mmu_pmd_clear\x00', r4, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000010c0)={0x8000000000000000, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f000066f000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x6) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000001080)={0x3, 0x6}, 0x0) write$6lowpan_control(r7, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x20004010) 1m19.919644923s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 1m4.62076283s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 52.678604399s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 40.380920939s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 24.479540657s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 11.150036641s ago: executing program 6 (id=1444): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x2, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 7.926141373s ago: executing program 1 (id=1848): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0xc, 0x3, 0x80000007, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x9, 0x3, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x4, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642dfa32d5aa12d16735480878d2f5ecf26117b5d835"}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/204) 7.794551048s ago: executing program 1 (id=1850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40084) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x24108d51555a2b7f}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a00000800028004011080c8ba526dcf742319b7f815f27e1798e13100eb57facb85f9bc940f3b35a87c384d9625b686bfea71cd"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket(0x40000000015, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) 7.573713379s ago: executing program 4 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0xca0ccd0af36b6f46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) io_uring_setup(0x25f5, &(0x7f0000000380)={0x0, 0xc63e, 0x800, 0x0, 0x1}) 6.629046583s ago: executing program 1 (id=1855): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000005000000000000001c00000000000000"]) 5.997940222s ago: executing program 1 (id=1857): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) chdir(&(0x7f0000000100)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) io_uring_setup(0x1d34, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.777529702s ago: executing program 4 (id=1858): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) 3.993818707s ago: executing program 3 (id=1862): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB="1c002c80080000000800000008000000060000000800000009000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000044) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 3.255912849s ago: executing program 0 (id=1863): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40811) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x1800040, &(0x7f0000000500)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_socket_connect_nvme_tcp() recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x13, 0xffffffffffffffff, 0x100000) mq_notify(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20040, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000480)={0x1, 0x8, 0x0, 0xde, 0xffffffff, 0xb3, 0x40, 0x7, 0x80, 0x6, 0xffffffff, 0x1, 0x0, 0x0, 0x0}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x42}, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0xfff9, 0x4e20, 0x5, 0xa, 0x20, 0x80, 0x2e}, {0xffffffff969a8d58, 0x800006, 0x3, 0x2, 0x9, 0xa99, 0x745, 0x5}, {0x4aa, 0xf, 0x8}, 0x9, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x4, 0x3, 0x4, 0x8, 0x0, 0x8}}, 0xe8) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x6) ioctl$TUNSETOFFLOAD(r6, 0x40047451, 0xf0ff1f00000000) 3.209694899s ago: executing program 1 (id=1864): clock_settime(0x1ed5d7403, &(0x7f00000008c0)={0x0, 0x3938700}) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0xfed9, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x10) r1 = getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000005c0)) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000026c0)=0x3d) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/117, 0x75}, {0x0}], 0x2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x6, 0x8, 0xe, "9921ad6b5444906edf680000a6a900105700"}) 2.353775127s ago: executing program 3 (id=1865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') fchdir(r1) mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x11, r1, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000a40)='d'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_snmp6\x00') (async) fchdir(r1) (async) mmap$binder(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1, 0x11, r1, 0x9) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000180)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000240)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000a40)='d'}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 2.342277813s ago: executing program 1 (id=1866): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x49) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r3, r2, 0x0, r5}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000b80)={0x40, 0xd, 0xeb, {0xeb, 0x30, "3032a7765067d5c65f8004e90144f5d65a0386340961131727a3a071f40010e0927428ebda1e00143dba3728d049812b1eedb246fc0c2bd8d34267889fc892c16187f0bdf551306d6a7485a401ef661ac06fe9dab2d3f7d60a3bb9fa5a203e5f232716bae02066e493bcb0a4b292242070724fc46d54f933918d4eda54e4ddc8e2ca7c5efe5bf9ec8976b69853c63b006bd4e44eddc123759d955536bd62a93a28d1bc35d70c786fd5938eac59cc63ccdd4c01ccb9fbd3a3cf71a8fcff18c242f852516a635773f11a129a7a5aea814d66b16e9d8b0b31f1f9809c33085fecb60dc205a3c773a6e572"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000200)={0x0, 0x22, 0x11, {[@global=@item_4={0x3, 0x1, 0x1, "7dcc8ea3"}, @local=@item_4={0x3, 0x2, 0x8, "759dfa93"}, @main=@item_4={0x3, 0x0, 0x9, "074793f0"}, @global=@item_012={0x1, 0x1, 0x4, 'a'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x13, 0x1, {0x22, 0x839}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000440)={0x40, 0x14, 0xe5, "9d6bbf0216563406d6ed250dcdffd8d28aab09ebb3081a95eb093b49d079b244144cfffa92adc410e797da8ea92e4ab77aae9ed7acb1ec37efc9b3e6bb6d40091a4cba6ddba6e4c57c0f3f599af0a5327c7e8ea6faa36f2adcf8180ee4574f9dd1b11da5eb97fbd861273ee04ea6f5c3d63de4e5ab21ebebc95c5645004bda8f4a523cc36e10ba3d3376b35bddc24126920ea006b2208984165661bac8afbaa54df345d8a4e11a9800dff35cfb19a14dbb91b9b33b6c029bb9a17e2ffb1ff773e2f446457f2593d75bcda2b76463b5fb6c02d81166747eabeee98cb8bc2aed1ec7796ba79e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xd4}, &(0x7f00000000c0)={0x20, 0x1, 0x46, "18812e9ae2999ccf78a07407550489a3f8479d368befb798872ba9c1e15d986c8cf2687f274edf8a34b0de831ade7f42b474624ed519701719982a0bcc154c3db4ed77daec24"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x99}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000540)={0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="00220201000002048da95e5e656bfe6a62663b899a57e590f93371c037b05c3d966660000000006db1149d466132ca60eb90de501dd1ee8c2d34ce7022933a0173e946e35216bb1414b442a7dec48194b17d4c105829f68bc42c153d13878759e04e62431599666f1d455d501f871eee77623e33e5794e1275f35f0f5ecf942b04cb0132912eb0ec9ce0e839361ffd153b811c314736f2e5233f22bfe03eb512f6debeff91661a74a60e988567dedf7b2dec8313a71689008da808acae13dbc58061ffd893082ff62118dd1d26d1a653cb52e612a9377db0da4a76944cf3721e18af0e18088654ec2e4dfb78ffb0a151f6ec4e080fa8ff218b31005482d795858faacb7800000000"], &(0x7f0000000780)=ANY=[@ANYBLOB="0035d3463e2c359c1900"/21]}, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)={0x20, 0xc, 0x32, "b481468fb8b062705481bd23fb9ce8b7f8551130e7e1f5c2843dc70f6cfffa0e48c09614840647fae2c5cfd9527d95072856"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0xc0, 0x5, 0x6, "f30775a06c2a"}, &(0x7f0000000800)=ANY=[@ANYBLOB="4205a1b70022bf3d4aa6961c8e7999cf8456cce416c96ba59f4e58b011d34b"]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) 2.270480841s ago: executing program 0 (id=1867): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000081c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x1, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0xfffffffffffffffd, 0x1, 0x0, 0x5dc, 0x120, 0x2000, 0x0, r2, 0x0, 0x501, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r3, 0xc0304d18, &(0x7f00000002c0)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffe, 0x0, 0x4}}) (fail_nth: 2) 2.216725449s ago: executing program 4 (id=1868): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xde, 0xc8}}}, 0x6) getpid() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="f48e42f271dd084d13510478", 0xc}, {&(0x7f0000000100)="e0c6479406d6517d9360f105fb5c9db8b38829b028c072f3a7b78d0f8d2bee7589613a217760532240c9fd306e3b90f37a225c3a8ed83e65422ec31fc1d947c01ff91532ac5b07ed78378353", 0x4c}, {&(0x7f0000000180)="086f386e143cd73e8d106575aaa717ffd63ab1becb7ffeb1a54b704cf11df03fb6ec8c1ec6f71579c5078f", 0x2b}, {&(0x7f00000001c0)="f37f6c19cbd2a916725b8db8ba7a7f25fe099009751ad3fd9f4ee17a25f0f6bda62d64824c55ba13a8ada8e5a940e099c654a43d107131b39bd9e77bb80eebb73b9efc04d157bd42bb3a9fb3bd3386e45f7bf37387a16a349a1cffdde178d5e9ade20dd134f94a135b9183f5d6814dedd5105f38034d6644f88561afd25683fb8c56f7b7f00e53f35aba64334afdd1", 0x8f}, {&(0x7f0000000280)="303ed0ba4b7613d47cabf9352777c3854d326600ba13790c5a49895c6e65ce4430a0e9c5a12a6fb8093260bb5d7abfb86a4335fec28c19088cef65b25e58a7d872c72ec28a54394d692ce1f7df361ba1710dfa4e44d000742faa8aca29036c1fab2c991feec50da2bbab85b0d8438cc3afdfd2031ff1190fa653796ea016157efca15f18a969c2b0aff7f07a4bdedb7d57a29ffe0f4615d636fe11ed864080f87193c523619a8d66edd610ef70166170d3e65225dfca7719c3fc14745977e35a", 0xc0}], 0x5}, 0x4000041) ftruncate(r0, 0x6) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x9, 0x0) read$msr(r1, &(0x7f0000000440)=""/235, 0xeb) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x3e9, 0x800, 0x70bd2d, 0x25dfdbfe, {0x11, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4ad, 0x7, 0x0, 0xe}, ["", ""]}, 0x3c}}, 0x3b9ac0e38696833e) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000800)={0x4, 0x10000, 0x80, 0x2, 0x10000}) r2 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) socket$l2tp(0x2, 0x2, 0x73) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) capset(&(0x7f00000008c0)={0x20071026, r3}, &(0x7f0000000900)={0x940b, 0x5, 0x4, 0x5, 0xd58, 0x3}) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x2000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000009c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000a80)={{0xa, 0x4e20, 0x5a7, @remote, 0x720}, {0xa, 0x4e20, 0x6, @private1, 0xb8d}, 0x1, {[0xeb, 0x1, 0xa06, 0x4, 0x0, 0x8, 0x0, 0x5]}}, 0x5c) lsm_get_self_attr(0x67, &(0x7f0000000b00)={0x0, 0x0, 0xb2, 0x92, ""/146}, &(0x7f0000000bc0)=0xb2, 0x1) 2.08231879s ago: executing program 3 (id=1869): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000fb005000000002000000090000000000000e03000000010000000a0000000000000203000000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.050955921s ago: executing program 4 (id=1870): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r1, 0x5, 0x3, 0x0, 0x3, [], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.990867721s ago: executing program 4 (id=1871): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000845, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4040040) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="80010000100001000000000800000000fc020000000000000000000000000000fe8000000000000900000000000000aa000000004e2000040000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}}, 0x0) 1.962149903s ago: executing program 3 (id=1872): brk(0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) 775.15926ms ago: executing program 3 (id=1873): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000fb005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 774.792865ms ago: executing program 0 (id=1874): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) 664.909053ms ago: executing program 3 (id=1875): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB="1c002c80080000000800000008000000060000000800000009000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000044) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff7f}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 590.178284ms ago: executing program 0 (id=1876): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r0}, 0x38) mount$tmpfs(0x0, &(0x7f0000000000)='./file4\x00', &(0x7f0000000040), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind=']) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001580)={{'\x00', 0x2}, {0x7}, 0x60, 0x0, 0x0, &(0x7f0000000080)='./file4/../file0\x00', &(0x7f0000000100)='./file4\x00', &(0x7f0000000180)="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", 0x1f6, 0x0, &(0x7f0000000380)={0x2, 0x10d8, {0x1, 0xc, 0xcb, "edada4b7af61730d4baf51b6f33aa5e7f67e4707a8b49e24a72bd25d43823092de7c94b6454c2b59db751da0c3847e70c611a1556678e85e34295f60f8cffc92d1e8165c273b9f1a43a14e640ba9b94a403e8b28e28e14f8d842bab52f83beb2f9210aab5e0128f4ad59cd41135db681137d4a22562fafd937dc5d434583c5ee73028a33a0f8a555199fc9d484818f2a731a73427ffee948c4ad733780dae5809ea36d661486ffc9b9fcb2009730cd8c238afbd7dd525fe82cc47c640fa4514821f19177a57f0c9e978c83", 0x1000, "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"}, 0xeb, "49ff1f58da8f5b9b10af72ca863866dcaa9ac5d7aaf1cef275a7389e914aecc18566fc6543a0519a523491c634b2b8c97b0b3aa846f1b63bfd9669be0cbccf4b3ded80133d6702d0c828b487959b1243ab1da17efdb0cfdd188e8c4ad4d95eba46372c69605ed80759f752edabd3e38fd9217c16051dd2c4f839f2064b17daa8d90cf149fd87516a730aa5e0da91130398c4fef08259a21c9d3c67c4c1f8127338a80eaf5b5cc49c8fc21abcf086d2e147fdeb5eb9d1bea75dc365902b3c93ff4386303079e3a7493e113c000673b478dce98f781cf906eaa7190197c5748d9d09b15cadca7e7a5d8110b2"}, 0x11cf}) 491.792403ms ago: executing program 4 (id=1877): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = getpid() syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x400) 330.00314ms ago: executing program 0 (id=1878): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0x4810}, 0x24000040) (async) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20828}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0xfc}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x6c}}, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000340)={0xa8, 0x0, 0x2}) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x1}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x67, 0x37]}}]}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$sock_proto_private(r8, 0x89e0, &(0x7f0000001080)) 0s ago: executing program 0 (id=1879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x14}, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)="270502001c0014000600002f86dd", 0xe}], 0x1}, 0x20000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xc, 0x6]}, &(0x7f00000000c0)=0x8) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x9, [0x2, 0xffff, 0x6, 0x8e9b, 0x7, 0x2, 0x7765, 0x1, 0x7f]}, &(0x7f0000000280)=0x16) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r12, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (fail_nth: 2) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "b08e7ebafcafb752fae58ad8f82e91d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44000) kernel console output (not intermixed with test programs): stack_lvl+0x16c/0x1f0 [ 519.015621][T10892] should_fail_ex+0x512/0x640 [ 519.015637][T10892] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 519.015658][T10892] should_failslab+0xc2/0x120 [ 519.015680][T10892] kmem_cache_alloc_node_noprof+0x86/0x800 [ 519.015697][T10892] ? __alloc_skb+0x156/0x410 [ 519.015717][T10892] ? __alloc_skb+0x156/0x410 [ 519.015732][T10892] __alloc_skb+0x156/0x410 [ 519.015745][T10892] ? __alloc_skb+0x35d/0x410 [ 519.015760][T10892] ? __pfx___alloc_skb+0x10/0x10 [ 519.015784][T10892] netlink_alloc_large_skb+0x69/0x140 [ 519.015808][T10892] netlink_sendmsg+0x698/0xdd0 [ 519.015851][T10892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.015882][T10892] ____sys_sendmsg+0xa5d/0xc30 [ 519.015906][T10892] ? copy_msghdr_from_user+0x10a/0x160 [ 519.015924][T10892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.015950][T10892] ? __pfx___schedule+0x10/0x10 [ 519.015977][T10892] ___sys_sendmsg+0x134/0x1d0 [ 519.015997][T10892] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.016044][T10892] __sys_sendmsg+0x16d/0x220 [ 519.016064][T10892] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.016090][T10892] ? rcu_is_watching+0x12/0xc0 [ 519.016113][T10892] do_syscall_64+0xcd/0xf80 [ 519.016137][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.016154][T10892] RIP: 0033:0x7f0a60b8f749 [ 519.016167][T10892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.016182][T10892] RSP: 002b:00007f0a61a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.016199][T10892] RAX: ffffffffffffffda RBX: 00007f0a60de6180 RCX: 00007f0a60b8f749 [ 519.016210][T10892] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 519.016220][T10892] RBP: 00007f0a61a97090 R08: 0000000000000000 R09: 0000000000000000 [ 519.016229][T10892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.016239][T10892] R13: 00007f0a60de6218 R14: 00007f0a60de6180 R15: 00007ffef97420d8 [ 519.016262][T10892] [ 519.497080][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.544264][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.673518][ T9839] bigben 0003:146B:0902.0005: unexpected rdesc, please submit for review [ 519.707829][ T9839] bigben 0003:146B:0902.0005: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 519.751188][ T9839] bigben 0003:146B:0902.0005: not enough fields in HID_OUTPUT_REPORT 0 [ 519.769728][ T9839] bigben 0003:146B:0902.0005: no output report found [ 520.689651][ T6554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.730383][ T6554] bond0 (unregistering): (slave c@0): Releasing backup interface [ 520.760979][ T6554] bond0 (unregistering): Released all slaves [ 520.973995][ T90] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 522.558639][ T6554] bond1 (unregistering): Released all slaves [ 522.729106][T10869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 522.764197][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 523.122496][ T9] usb 2-1: USB disconnect, device number 20 [ 523.138883][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 523.152990][ T90] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 523.161253][ T90] usb 1-1: config 0 has no interface number 0 [ 523.172957][ T90] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 523.188772][ T90] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.197575][ T90] usb 1-1: Product: syz [ 523.202419][ T90] usb 1-1: Manufacturer: syz [ 523.207153][ T90] usb 1-1: SerialNumber: syz [ 523.213776][ T90] usb 1-1: config 0 descriptor?? [ 523.226179][ T90] gspca_main: spca500-2.14.0 probing 046d:0900 [ 524.038063][ T90] gspca_spca500: reg write: error -32 [ 524.044286][ T90] gspca_spca500: reg write: error -32 [ 524.050134][ T90] gspca_spca500: reg write: error -32 [ 524.055899][ T90] gspca_spca500: reg write: error -32 [ 524.064807][ T90] gspca_spca500: reg write: error -32 [ 524.072748][ T90] gspca_spca500: reg write: error -71 [ 524.078646][ T90] gspca_spca500: reg write: error -71 [ 524.105000][ T90] gspca_spca500: reg write: error -71 [ 524.113714][ T90] gspca_spca500: reg write: error -71 [ 524.155143][ T90] gspca_spca500: reg write: error -71 [ 524.190257][ T90] gspca_spca500: reg write: error -71 [ 524.255947][ T90] gspca_spca500: reg write: error -71 [ 524.283454][ T90] gspca_spca500: reg write: error -71 [ 524.328083][ T90] gspca_spca500: reg write: error -71 [ 524.525697][ T90] usb 1-1: USB disconnect, device number 19 [ 524.625131][ T6554] hsr_slave_0: left promiscuous mode [ 524.645150][ T6554] hsr_slave_1: left promiscuous mode [ 524.651723][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.685858][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.725416][ T6554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.732862][ T6554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.746896][T10942] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1318'. [ 524.852453][T10943] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1318'. [ 525.432494][ T6554] veth1_macvtap: left promiscuous mode [ 525.439661][ T6554] veth0_macvtap: left promiscuous mode [ 525.450241][ T6554] veth1_vlan: left promiscuous mode [ 525.463377][ T6554] veth0_vlan: left promiscuous mode [ 525.538161][T10945] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1313'. [ 529.103396][ T30] audit: type=1400 audit(1768606492.513:497): avc: denied { bind } for pid=10961 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.053747][T10986] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1327'. [ 531.082617][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 531.139663][ T30] audit: type=1400 audit(1768606495.103:498): avc: denied { ioctl } for pid=10989 comm="syz.3.1332" path="socket:[31049]" dev="sockfs" ino=31049 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.408218][T10992] netlink: 'syz.3.1332': attribute type 13 has an invalid length. [ 532.165561][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 532.198498][ T6554] team0 (unregistering): Port device team_slave_0 removed [ 532.585140][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.592466][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.657990][T10992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.671924][T10992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.771821][ T60] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.814749][ T60] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.839364][ T60] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.870646][ T60] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.755404][T11013] overlayfs: missing 'lowerdir' [ 534.008190][T11015] tipc: Started in network mode [ 534.013201][T11015] tipc: Node identity 3aeb21bebd4a, cluster identity 4711 [ 534.020752][T11015] tipc: Enabled bearer , priority 0 [ 534.832763][T11017] tipc: Disabling bearer [ 534.987786][ T30] audit: type=1400 audit(1768606498.953:499): avc: denied { getopt } for pid=11018 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.011604][T11019] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 536.395872][ T30] audit: type=1800 audit(1768606500.363:500): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1345" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 536.734323][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 537.315868][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.336416][ T5924] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 537.348701][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.356926][ T5924] usb 5-1: Product: syz [ 537.361174][ T5924] usb 5-1: Manufacturer: syz [ 537.370355][ T5924] usb 5-1: SerialNumber: syz [ 537.382550][ T5924] usb 5-1: config 0 descriptor?? [ 537.399374][ T5924] cytherm 5-1:0.0: Cypress thermometer device now attached [ 537.536472][ T30] audit: type=1400 audit(1768606501.503:501): avc: denied { read } for pid=11067 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 537.601640][ T5924] usb 5-1: USB disconnect, device number 23 [ 537.612000][ T5924] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 537.768755][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 537.938053][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.950052][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 537.968837][ T5878] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.979041][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.013170][ T5878] usb 6-1: config 0 descriptor?? [ 538.058234][ T5878] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 538.144002][ T5893] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 538.324293][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 538.363150][ T5820] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 538.381965][ T5893] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 538.392920][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.406188][ T5893] usb 1-1: Product: syz [ 538.419658][ T5893] usb 1-1: Manufacturer: syz [ 538.447910][ T5893] usb 1-1: SerialNumber: syz [ 538.505894][ T5893] usb 1-1: config 0 descriptor?? [ 538.538554][ T5893] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 538.668581][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 538.698838][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.849764][ T5893] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 538.870753][ T5893] usb 1-1: media controller created [ 538.999139][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.220462][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 539.315590][ T5893] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 539.336468][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 539.353081][ T5893] dvb-usb: schedule remote query interval to 50 msecs. [ 539.360794][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 539.366657][ T5893] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 539.381608][ T5893] usb 1-1: USB disconnect, device number 20 [ 539.435729][ T5893] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 539.491570][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 539.506991][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.514599][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.851132][T11101] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1360'. [ 539.873145][ T30] audit: type=1400 audit(1768606503.833:502): avc: denied { append } for pid=11100 comm="syz.4.1360" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 540.806233][ T5893] usb 6-1: USB disconnect, device number 2 [ 541.141342][ T5820] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 541.391391][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 541.613982][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 541.736244][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 541.749094][ T5893] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 541.764522][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.772650][ T5893] usb 6-1: Product: syz [ 541.779293][ T5893] usb 6-1: Manufacturer: syz [ 541.784813][ T5893] usb 6-1: SerialNumber: syz [ 541.791474][ T5893] usb 6-1: config 0 descriptor?? [ 541.897895][T11149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1375'. [ 543.038047][ T5893] gs_usb 6-1:0.0: Configuring for 82 interfaces [ 543.495308][ T5893] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 544.074362][ T5893] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 544.092660][ T5893] usb 6-1: USB disconnect, device number 3 [ 544.103992][ T5871] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 544.273977][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 544.289865][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.300262][ T5871] usb 2-1: config 0 has no interfaces? [ 544.306820][ T5871] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 544.317234][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.330229][ T5871] usb 2-1: config 0 descriptor?? [ 544.409295][ T5820] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 544.454652][ T30] audit: type=1800 audit(1768606508.423:503): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1383" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 544.537146][ T30] audit: type=1400 audit(1768606508.503:504): avc: denied { open } for pid=11178 comm="syz.5.1386" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 544.588273][ T30] audit: type=1400 audit(1768606508.533:505): avc: denied { bind } for pid=11178 comm="syz.5.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 544.649318][ T30] audit: type=1400 audit(1768606508.533:506): avc: denied { ioctl } for pid=11178 comm="syz.5.1386" path="pid:[4026533806]" dev="nsfs" ino=4026533806 ioctlcmd=0x61e3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 544.959068][ T5820] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 546.148775][T11196] bridge_slave_1: invalid flags given to default FDB implementation [ 547.509332][ T5924] usb 2-1: USB disconnect, device number 21 [ 548.097583][ T30] audit: type=1800 audit(1768606512.063:507): pid=11230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1395" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 548.747904][ T30] audit: type=1400 audit(1768606512.703:508): avc: denied { ioctl } for pid=11225 comm="syz.3.1394" path="socket:[30705]" dev="sockfs" ino=30705 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 548.777280][T11233] netlink: 'syz.1.1393': attribute type 4 has an invalid length. [ 548.793671][T11236] FAULT_INJECTION: forcing a failure. [ 548.793671][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.806921][T11236] CPU: 0 UID: 0 PID: 11236 Comm: syz.0.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.806948][T11236] Tainted: [L]=SOFTLOCKUP [ 548.806954][T11236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.806964][T11236] Call Trace: [ 548.806970][T11236] [ 548.806977][T11236] dump_stack_lvl+0x16c/0x1f0 [ 548.807005][T11236] should_fail_ex+0x512/0x640 [ 548.807023][T11236] _copy_from_iter+0x2a4/0x16c0 [ 548.807050][T11236] ? __alloc_skb+0x220/0x410 [ 548.807063][T11236] ? __alloc_skb+0x35d/0x410 [ 548.807077][T11236] ? __pfx__copy_from_iter+0x10/0x10 [ 548.807101][T11236] ? netlink_autobind.isra.0+0x158/0x370 [ 548.807131][T11236] netlink_sendmsg+0x820/0xdd0 [ 548.807156][T11236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.807185][T11236] ____sys_sendmsg+0xa5d/0xc30 [ 548.807207][T11236] ? copy_msghdr_from_user+0x10a/0x160 [ 548.807224][T11236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.807257][T11236] ___sys_sendmsg+0x134/0x1d0 [ 548.807276][T11236] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.807322][T11236] __sys_sendmsg+0x16d/0x220 [ 548.807341][T11236] ? __pfx___sys_sendmsg+0x10/0x10 [ 548.807374][T11236] do_syscall_64+0xcd/0xf80 [ 548.807398][T11236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.807413][T11236] RIP: 0033:0x7f0a60b8f749 [ 548.807427][T11236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.807442][T11236] RSP: 002b:00007f0a61ad9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.807459][T11236] RAX: ffffffffffffffda RBX: 00007f0a60de5fa0 RCX: 00007f0a60b8f749 [ 548.807469][T11236] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 548.807478][T11236] RBP: 00007f0a61ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 548.807487][T11236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.807496][T11236] R13: 00007f0a60de6038 R14: 00007f0a60de5fa0 R15: 00007ffef97420d8 [ 548.807518][T11236] [ 549.869584][T11255] netlink: zone id is out of range [ 549.874847][T11255] netlink: zone id is out of range [ 549.879964][T11255] netlink: zone id is out of range [ 549.885875][T11255] nfs: Bad value for 'source' [ 549.990827][ T30] audit: type=1400 audit(1768606513.953:509): avc: denied { append } for pid=11257 comm="syz.5.1405" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 550.157858][ T5820] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 550.398871][ T30] audit: type=1800 audit(1768606514.353:510): pid=11261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1406" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 550.453993][ T5871] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 550.484594][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 550.548161][T11267] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1408'. [ 550.557248][T11267] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 550.565078][T11267] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1408'. [ 550.653717][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 550.661667][ T5871] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 550.671905][ T5871] usb 2-1: config 0 has no interface number 0 [ 550.681607][ T5871] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 550.691351][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.719294][ T5871] usb 2-1: Product: syz [ 550.723756][ T5871] usb 2-1: Manufacturer: syz [ 550.730151][ T5871] usb 2-1: SerialNumber: syz [ 550.738751][ T5871] usb 2-1: config 0 descriptor?? [ 551.448873][T11279] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1410'. [ 551.607568][ T5871] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 551.661472][ T5871] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 551.810157][ T5871] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 552.034828][ T5924] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 552.047313][ T5871] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 552.317712][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 552.343294][ T5924] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.877506][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.976512][ T5924] usb 1-1: Product: syz [ 552.990483][ T5924] usb 1-1: Manufacturer: syz [ 553.003670][ T5924] usb 1-1: SerialNumber: syz [ 553.021299][ T9839] usb 2-1: USB disconnect, device number 22 [ 553.028322][ T9839] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 553.970537][ T5924] usb 1-1: config 0 descriptor?? [ 554.184042][ T5924] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 556.886372][ T30] audit: type=1400 audit(1768606520.853:511): avc: denied { mount } for pid=11349 comm="syz.5.1430" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 556.944264][ T5924] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 556.982366][ T5924] usb 1-1: USB disconnect, device number 21 [ 557.394177][ T5924] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 557.559451][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.654199][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.664495][ T5924] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 557.673653][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.700109][ T5924] usb 1-1: config 0 descriptor?? [ 558.700756][T11377] netlink: 'syz.3.1440': attribute type 5 has an invalid length. [ 558.771129][ T5924] wacom 0003:056A:00B3.0006: unknown main item tag 0x0 [ 558.789621][ T5924] wacom 0003:056A:00B3.0006: unknown main item tag 0x0 [ 559.058452][ T5924] usb 1-1: USB disconnect, device number 22 [ 559.274147][ T6582] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.327996][ T5871] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 559.489535][ T6582] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.524511][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 559.532856][ T5871] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 559.542857][ T5871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.565084][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.600403][ T5871] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.617630][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.651005][ T30] audit: type=1400 audit(1768606523.613:512): avc: denied { accept } for pid=11391 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 559.672606][ T5871] usb 2-1: Product: syz [ 559.680676][ T5871] usb 2-1: Manufacturer: syz [ 559.688706][ T5871] usb 2-1: SerialNumber: syz [ 559.707675][ T6582] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.838340][ T6582] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.156108][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 560.166970][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 560.175079][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 560.182852][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 560.711705][ T5871] usb 2-1: 0:2 : does not exist [ 561.620188][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 561.676418][T11400] Failed to initialize the IGMP autojoin socket (err -2) [ 561.781704][ T6582] bridge_slave_1: left allmulticast mode [ 561.800970][ T6582] bridge_slave_1: left promiscuous mode [ 561.820524][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.850776][ T6582] bridge_slave_0: left allmulticast mode [ 561.867131][ T6582] bridge_slave_0: left promiscuous mode [ 561.886572][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.892173][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 562.567565][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.044240][ T5871] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 563.694533][ T5820] Bluetooth: hci1: command tx timeout [ 563.749612][ T5871] usb 2-1: USB disconnect, device number 23 [ 564.434054][ T5871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 565.184035][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 565.194930][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 565.204480][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.213718][ T5871] usb 4-1: Product: syz [ 565.218070][ T5871] usb 4-1: Manufacturer: syz [ 565.222859][ T5871] usb 4-1: SerialNumber: syz [ 565.238783][ T5871] usb 4-1: config 0 descriptor?? [ 565.394396][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.420113][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.534047][ T5871] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 565.552859][ T6582] bond0 (unregistering): Released all slaves [ 565.914267][ T5820] Bluetooth: hci1: command tx timeout [ 566.067221][T11443] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 566.093193][T11443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1459'. [ 566.199792][T11444] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1459'. [ 566.228912][ T30] audit: type=1400 audit(1768606530.193:513): avc: denied { module_request } for pid=11400 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 566.305501][T11444] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 566.312965][T11444] ALSA: mixer_oss: invalid index 1374389 [ 566.419603][T11400] chnl_net:caif_netlink_parms(): no params data found [ 566.557591][ T6582] hsr_slave_0: left promiscuous mode [ 566.675063][ T6582] hsr_slave_1: left promiscuous mode [ 566.687512][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.707171][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.734033][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.755664][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.880561][ T6582] veth1_macvtap: left promiscuous mode [ 566.902543][ T6582] veth0_macvtap: left promiscuous mode [ 566.939045][ T6582] veth1_vlan: left promiscuous mode [ 566.957447][ T6582] veth0_vlan: left promiscuous mode [ 567.260045][ T5871] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 567.287468][ T5871] usb 4-1: USB disconnect, device number 30 [ 568.004033][ T5820] Bluetooth: hci1: command tx timeout [ 568.145799][T11480] 9p: Bad value for 'rfdno' [ 568.246736][ T30] audit: type=1400 audit(1768606532.213:514): avc: denied { mount } for pid=11479 comm="syz.4.1468" name="/" dev="pstore" ino=3593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 569.077311][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 569.172173][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 569.259853][ T30] audit: type=1400 audit(1768606533.223:515): avc: denied { connect } for pid=11491 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 569.605735][T11493] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 569.609516][ T30] audit: type=1400 audit(1768606533.573:516): avc: denied { listen } for pid=11491 comm="syz.4.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 569.612276][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 569.691404][ T5878] hid-generic 0003:A7B9:FFFFFFFC.0007: unknown main item tag 0x0 [ 569.709905][ T5878] hid-generic 0003:A7B9:FFFFFFFC.0007: unknown main item tag 0x0 [ 569.721866][T11493] vhci_hcd vhci_hcd.0: Device attached [ 569.764896][ T5878] hid-generic 0003:A7B9:FFFFFFFC.0007: unknown main item tag 0x0 [ 569.815089][ T5878] hid-generic 0003:A7B9:FFFFFFFC.0007: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 569.894957][ T5924] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 569.904293][ T5871] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 569.974180][ T5871] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 570.124058][ T5924] usb 5-1: device descriptor read/64, error -71 [ 570.124272][ T5820] Bluetooth: hci1: command tx timeout [ 570.214669][T11494] vhci_hcd: connection reset by peer [ 570.221689][ T4284] vhci_hcd vhci_hcd.3: stop threads [ 570.226988][ T4284] vhci_hcd vhci_hcd.3: release socket [ 570.236377][ T4284] vhci_hcd vhci_hcd.3: disconnect device [ 570.374025][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 570.523950][ T5924] usb 5-1: device descriptor read/64, error -71 [ 570.538889][T11504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1473'. [ 570.622207][T11456] tipc: Enabled bearer , priority 0 [ 570.634353][ T5924] usb usb5-port1: attempt power cycle [ 570.650055][T11459] syzkaller0: entered promiscuous mode [ 570.669753][T11459] syzkaller0: entered allmulticast mode [ 570.693256][T11465] tipc: Resetting bearer [ 570.764007][T11465] tipc: Resetting bearer [ 570.827065][T11465] tipc: Disabling bearer [ 570.875992][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.913431][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.292000][T11400] bridge_slave_0: entered allmulticast mode [ 571.313049][T11400] bridge_slave_0: entered promiscuous mode [ 571.325407][ T5924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 571.344603][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.362392][ T5924] usb 5-1: device descriptor read/8, error -71 [ 571.377562][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.397753][T11400] bridge_slave_1: entered allmulticast mode [ 571.425582][T11400] bridge_slave_1: entered promiscuous mode [ 571.605655][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.624048][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 571.644901][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.665273][ T5924] usb 5-1: device descriptor read/8, error -71 [ 571.711563][T11400] team0: Port device team_slave_0 added [ 571.730296][T11400] team0: Port device team_slave_1 added [ 571.774224][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 571.787227][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.795547][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.795873][ T5924] usb usb5-port1: unable to enumerate USB device [ 571.822313][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.856950][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.864449][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.891374][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.945036][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 571.953365][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.970194][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.991147][T11400] hsr_slave_0: entered promiscuous mode [ 571.996841][ T10] usb 1-1: Product: syz [ 572.001162][ T10] usb 1-1: Manufacturer: syz [ 572.014754][T11400] hsr_slave_1: entered promiscuous mode [ 572.020736][ T10] usb 1-1: SerialNumber: syz [ 572.025987][T11400] debugfs: 'hsr0' already exists in 'hsr' [ 572.031713][T11400] Cannot create hsr debugfs directory [ 572.038502][ T10] usb 1-1: config 0 descriptor?? [ 572.247954][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 572.377621][T11400] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 572.390874][T11400] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 572.404181][T11400] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 572.415159][T11400] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 572.625951][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.653281][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.660446][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.683134][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.690331][T11219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.010679][T11534] all (unregistering): Released all slaves [ 573.371381][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.394656][T11542] bridge_slave_1: invalid flags given to default FDB implementation [ 573.586490][ T5820] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 573.595042][ T30] audit: type=1800 audit(1768606537.553:517): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1483" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 574.370385][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 574.424432][ T10] usb 1-1: USB disconnect, device number 23 [ 574.603481][T11400] veth0_vlan: entered promiscuous mode [ 574.612616][T11400] veth1_vlan: entered promiscuous mode [ 574.669093][T11400] veth0_macvtap: entered promiscuous mode [ 574.757237][T11400] veth1_macvtap: entered promiscuous mode [ 574.801498][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.818938][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.832955][T11400] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 574.896650][T11400] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 575.002665][T11400] wireguard: wg0: Could not create IPv4 socket [ 575.114495][ T5871] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 575.146741][T11400] wireguard: wg1: Could not create IPv4 socket [ 575.278208][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 575.278274][T11400] wireguard: wg2: Could not create IPv4 socket [ 575.434162][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 575.446818][ T10] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 575.457611][ T10] usb 2-1: config 2 has no interface number 0 [ 575.467524][ T10] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 575.507686][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.560569][ T10] usb 2-1: Product: syz [ 575.565627][ T10] usb 2-1: Manufacturer: syz [ 575.570309][ T10] usb 2-1: SerialNumber: syz [ 575.593428][ T10] imon 2-1:2.157: unable to register, err -19 [ 575.633553][ T30] audit: type=1800 audit(1768606539.593:518): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1493" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 575.797013][ T10] usb 2-1: USB disconnect, device number 24 [ 575.850484][ T30] audit: type=1400 audit(1768606539.813:519): avc: denied { map } for pid=11588 comm="syz.4.1496" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 575.932311][ T30] audit: type=1400 audit(1768606539.893:520): avc: denied { listen } for pid=11588 comm="syz.4.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 576.304147][ T5871] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 576.524025][ T5871] usb 4-1: device descriptor read/64, error -71 [ 576.559388][T11604] FAULT_INJECTION: forcing a failure. [ 576.559388][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 576.573235][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.4.1499 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.573265][T11604] Tainted: [L]=SOFTLOCKUP [ 576.573271][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.573281][T11604] Call Trace: [ 576.573287][T11604] [ 576.573293][T11604] dump_stack_lvl+0x16c/0x1f0 [ 576.573323][T11604] should_fail_ex+0x512/0x640 [ 576.573339][T11604] ? __kvmalloc_node_noprof+0x129/0xa40 [ 576.573362][T11604] should_failslab+0xc2/0x120 [ 576.573385][T11604] __kvmalloc_node_noprof+0x14a/0xa40 [ 576.573405][T11604] ? do_raw_spin_lock+0x12c/0x2b0 [ 576.573429][T11604] ? find_held_lock+0x2b/0x80 [ 576.573454][T11604] ? proc_sys_call_handler+0x2d6/0x5b0 [ 576.573478][T11604] ? proc_sys_call_handler+0x169/0x5b0 [ 576.573512][T11604] ? proc_sys_call_handler+0x2d6/0x5b0 [ 576.573534][T11604] proc_sys_call_handler+0x2d6/0x5b0 [ 576.573560][T11604] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 576.573586][T11604] ? __lock_acquire+0x436/0x2890 [ 576.573610][T11604] do_iter_readv_writev+0x662/0x9e0 [ 576.573633][T11604] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 576.573668][T11604] vfs_writev+0x35f/0xde0 [ 576.573688][T11604] ? rcu_is_watching+0x12/0xc0 [ 576.573711][T11604] ? __pfx_vfs_writev+0x10/0x10 [ 576.573730][T11604] ? fdget_pos+0x2a2/0x370 [ 576.573775][T11604] ? __fget_files+0x20e/0x3c0 [ 576.573796][T11604] ? __fget_files+0x200/0x3c0 [ 576.573825][T11604] ? do_writev+0x132/0x340 [ 576.573843][T11604] do_writev+0x132/0x340 [ 576.573862][T11604] ? __pfx_do_writev+0x10/0x10 [ 576.573890][T11604] do_syscall_64+0xcd/0xf80 [ 576.573912][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.573927][T11604] RIP: 0033:0x7f4f2858f749 [ 576.573942][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.573958][T11604] RSP: 002b:00007f4f294c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 576.573975][T11604] RAX: ffffffffffffffda RBX: 00007f4f287e6090 RCX: 00007f4f2858f749 [ 576.573986][T11604] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000009 [ 576.573996][T11604] RBP: 00007f4f294c2090 R08: 0000000000000000 R09: 0000000000000000 [ 576.574005][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.574014][T11604] R13: 00007f4f287e6128 R14: 00007f4f287e6090 R15: 00007ffea37dce08 [ 576.574040][T11604] [ 577.248741][ T5871] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 577.404132][ T5871] usb 4-1: device descriptor read/64, error -71 [ 577.515545][ T5871] usb usb4-port1: attempt power cycle [ 577.574449][ T5893] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 577.720284][ T30] audit: type=1326 audit(1768606541.653:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a60b8f749 code=0x7ffc0000 [ 577.746499][ T30] audit: type=1326 audit(1768606541.653:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11608 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a60b8f749 code=0x7ffc0000 [ 577.746516][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 577.809785][ T5893] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 577.819697][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.875944][ T5871] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 577.902983][ T5893] usb 5-1: Product: syz [ 577.907506][ T5871] usb 4-1: device descriptor read/8, error -71 [ 577.974011][ T5893] usb 5-1: Manufacturer: syz [ 577.982071][ T5893] usb 5-1: SerialNumber: syz [ 577.994151][ T5893] usb 5-1: config 0 descriptor?? [ 578.194014][ T5871] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 578.238295][ T5893] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 578.254560][ T5871] usb 4-1: device descriptor read/8, error -71 [ 578.367990][ T5871] usb usb4-port1: unable to enumerate USB device [ 579.098454][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1504'. [ 579.615722][ T5820] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 580.263221][ T5893] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 580.283981][ T5893] usb 5-1: USB disconnect, device number 28 [ 580.399217][T11636] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 581.468209][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 581.481476][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 581.490327][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.499252][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.506957][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 582.042567][T11645] Failed to initialize the IGMP autojoin socket (err -2) [ 582.124329][ T5871] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 582.355350][ T5871] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 582.370794][ T5871] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 582.382027][ T5871] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.400637][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.418304][T11650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.428828][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.647612][ T5871] usb 2-1: USB disconnect, device number 25 [ 582.694204][ T5893] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 582.859556][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.873552][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.130242][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.139492][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.231653][T11645] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 583.241720][T11645] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 583.251541][T11645] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 583.262518][T11645] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 583.355265][T11655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.364730][T11655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.383559][ T5893] usb 5-1: usb_control_msg returned -32 [ 583.398059][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 583.839400][T11645] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 583.861157][T11645] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 583.879587][T11645] wireguard: wg0: Could not create IPv4 socket [ 583.887537][T11645] wireguard: wg1: Could not create IPv4 socket [ 583.907321][T11645] wireguard: wg2: Could not create IPv4 socket [ 584.004344][ T5871] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 584.157816][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 584.167139][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.175221][ T5871] usb 4-1: Product: syz [ 584.179394][ T5871] usb 4-1: Manufacturer: syz [ 584.184065][ T5871] usb 4-1: SerialNumber: syz [ 584.190094][ T5871] usb 4-1: config 0 descriptor?? [ 584.397798][ T5871] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 584.558403][T11678] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1514'. [ 584.698693][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1515'. [ 584.725858][ T30] audit: type=1400 audit(1768606548.673:523): avc: denied { write } for pid=11682 comm="syz.1.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 584.835617][T11689] openvswitch: netlink: IP tunnel dst address not specified [ 585.889945][ T5894] usb 5-1: USB disconnect, device number 29 [ 585.904179][T11700] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 586.946018][ T30] audit: type=1400 audit(1768606550.833:524): avc: denied { execute } for pid=11701 comm="syz.0.1521" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 587.209414][ T5871] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 587.499350][ T30] audit: type=1400 audit(1768606551.463:525): avc: denied { create } for pid=11718 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 587.538599][ T30] audit: type=1400 audit(1768606551.483:526): avc: denied { sys_admin } for pid=11718 comm="syz.0.1526" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 587.982862][ T5871] usb 4-1: USB disconnect, device number 35 [ 589.001717][T11738] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 589.385079][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 589.484304][ T5871] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 589.858370][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.889421][ T5871] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 589.915159][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.925351][ T5871] usb 4-1: config 0 descriptor?? [ 590.633059][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 590.639317][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 590.649916][ T5871] usb 4-1: USB disconnect, device number 36 [ 591.084082][ T5871] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 591.201016][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.203498][ T30] audit: type=1400 audit(1768606555.163:527): avc: denied { listen } for pid=11767 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.211479][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.228809][ T30] audit: type=1400 audit(1768606555.193:528): avc: denied { accept } for pid=11767 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 591.257338][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.267948][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.274054][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 591.281335][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 591.285442][ T5871] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 591.298239][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.308524][ T5871] usb 1-1: Product: syz [ 591.322857][T11769] Failed to initialize the IGMP autojoin socket (err -2) [ 591.326253][ T5871] usb 1-1: Manufacturer: syz [ 591.334807][ T5871] usb 1-1: SerialNumber: syz [ 591.341696][ T5871] usb 1-1: config 0 descriptor?? [ 591.377774][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1542'. [ 591.551698][ T5871] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 592.192800][ T30] audit: type=1400 audit(1768606556.153:529): avc: denied { write } for pid=11780 comm="syz.1.1544" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 592.290759][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.418817][T11769] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 592.438073][T11769] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 592.456088][T11769] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 592.470229][T11769] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 593.323303][T11769] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 593.349535][T11769] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 593.366337][ T5822] Bluetooth: hci1: command tx timeout [ 593.385814][T11769] wireguard: wg0: Could not create IPv4 socket [ 593.393447][ T5871] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 593.405824][ T5871] usb 1-1: USB disconnect, device number 24 [ 593.417137][T11769] wireguard: wg1: Could not create IPv4 socket [ 593.427722][T11769] wireguard: wg2: Could not create IPv4 socket [ 593.507844][ T30] audit: type=1400 audit(1768606557.473:530): avc: denied { mount } for pid=11799 comm="syz.4.1546" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 593.560456][ T30] audit: type=1400 audit(1768606557.523:531): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 593.942741][T11815] input: syz0 as /devices/virtual/input/input17 [ 595.127522][T11825] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 595.138058][T11825] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 595.874318][ T5893] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 596.918579][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 596.955573][ T5893] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 596.981407][ T6247] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 596.987879][ T6247] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 597.073942][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.099091][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 597.104598][ T5893] usb 4-1: config 0 descriptor?? [ 597.138139][ T5893] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 597.236413][ T30] audit: type=1400 audit(1768606561.203:532): avc: denied { create } for pid=11843 comm="syz.4.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 597.381615][ T30] audit: type=1400 audit(1768606561.203:533): avc: denied { execute } for pid=11843 comm="syz.4.1558" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 597.500230][T11849] syzkaller1: entered promiscuous mode [ 597.511766][T11849] syzkaller1: entered allmulticast mode [ 597.617262][ T5893] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 598.024041][ T5893] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 598.938067][ T5893] usb 4-1: USB disconnect, device number 37 [ 599.044069][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 599.051771][ T6247] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 599.060505][ T6247] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 599.941627][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'. [ 599.977047][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1561'. [ 599.999531][T11870] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 600.014002][T11870] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1565'. [ 600.044071][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1563'. [ 600.198865][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1565'. [ 600.244148][T10234] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 600.289647][T11872] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 600.320024][T11872] ALSA: mixer_oss: invalid index 1374389 [ 600.394110][T10234] usb 2-1: Using ep0 maxpacket: 8 [ 600.403253][T10234] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.413734][T10234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.425156][T10234] usb 2-1: Product: syz [ 600.433855][T10234] usb 2-1: Manufacturer: syz [ 600.442817][T10234] usb 2-1: SerialNumber: syz [ 600.459023][T10234] usb 2-1: config 0 descriptor?? [ 600.602479][T11875] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 600.675606][T10234] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 600.944402][ T5894] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 601.135413][ T5894] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 601.143620][ T5894] usb 1-1: config 0 has no interface number 0 [ 601.234835][ T5894] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 601.247521][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.301030][ T5894] usb 1-1: config 0 descriptor?? [ 601.443481][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.458249][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.468505][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.476555][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.485886][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.497540][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.504927][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.512532][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.520434][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.528262][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.628656][T11881] Failed to initialize the IGMP autojoin socket (err -2) [ 601.800069][ T5894] usb-storage 1-1:0.168: USB Mass Storage device detected [ 601.857465][ T5894] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 602.628279][ T5894] usb 1-1: USB disconnect, device number 25 [ 602.806793][T10234] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 602.828175][T10234] usb 2-1: USB disconnect, device number 26 [ 603.073610][T11881] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 603.085066][T11881] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 603.095611][T11881] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 603.107281][T11881] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 603.294056][ T5893] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 603.414083][T10234] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 603.443945][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 603.462693][ T5893] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 603.477695][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 603.486471][ T5893] usb 5-1: Product: syz [ 603.490933][ T5893] usb 5-1: Manufacturer: syz [ 603.497789][ T5893] usb 5-1: SerialNumber: syz [ 603.505603][ T5893] usb 5-1: config 0 descriptor?? [ 603.532612][T11916] input: syz0 as /devices/virtual/input/input18 [ 603.574220][T10234] usb 4-1: Using ep0 maxpacket: 16 [ 603.587631][T10234] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 603.610102][ T5822] Bluetooth: hci1: command tx timeout [ 603.610155][T10234] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 603.624164][T11881] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 603.624535][T10234] usb 4-1: Product: syz [ 603.644751][T10234] usb 4-1: Manufacturer: syz [ 603.649555][T10234] usb 4-1: SerialNumber: syz [ 603.649556][T11881] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 603.651522][T10234] usb 4-1: config 0 descriptor?? [ 603.656448][T11881] wireguard: wg0: Could not create IPv4 socket [ 603.684663][T11881] wireguard: wg1: Could not create IPv4 socket [ 603.692318][T11881] wireguard: wg2: Could not create IPv4 socket [ 603.920883][T11918] FAULT_INJECTION: forcing a failure. [ 603.920883][T11918] name failslab, interval 1, probability 0, space 0, times 0 [ 603.933686][T11918] CPU: 1 UID: 0 PID: 11918 Comm: syz.4.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.933712][T11918] Tainted: [L]=SOFTLOCKUP [ 603.933718][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.933728][T11918] Call Trace: [ 603.933733][T11918] [ 603.933740][T11918] dump_stack_lvl+0x16c/0x1f0 [ 603.933766][T11918] should_fail_ex+0x512/0x640 [ 603.933781][T11918] ? fs_reclaim_acquire+0xae/0x150 [ 603.933805][T11918] should_failslab+0xc2/0x120 [ 603.933827][T11918] __kmalloc_noprof+0xeb/0x910 [ 603.933853][T11918] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 603.933883][T11918] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 603.933903][T11918] tomoyo_realpath_from_path+0xc2/0x6e0 [ 603.933928][T11918] ? tomoyo_profile+0x47/0x60 [ 603.933946][T11918] tomoyo_path_number_perm+0x245/0x580 [ 603.933965][T11918] ? tomoyo_path_number_perm+0x237/0x580 [ 603.933988][T11918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 603.934010][T11918] ? find_held_lock+0x2b/0x80 [ 603.934057][T11918] ? find_held_lock+0x2b/0x80 [ 603.934080][T11918] ? hook_file_ioctl_common+0x144/0x410 [ 603.934102][T11918] ? __fget_files+0x20e/0x3c0 [ 603.934130][T11918] security_file_ioctl+0x9b/0x240 [ 603.934154][T11918] __x64_sys_ioctl+0xb7/0x210 [ 603.934176][T11918] do_syscall_64+0xcd/0xf80 [ 603.934200][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.934217][T11918] RIP: 0033:0x7f4f2858f749 [ 603.934230][T11918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.934245][T11918] RSP: 002b:00007f4f294a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 603.934263][T11918] RAX: ffffffffffffffda RBX: 00007f4f287e6180 RCX: 00007f4f2858f749 [ 603.934273][T11918] RDX: 0000200000000000 RSI: 0000000080dc5521 RDI: 000000000000000b [ 603.934283][T11918] RBP: 00007f4f294a1090 R08: 0000000000000000 R09: 0000000000000000 [ 603.934292][T11918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.934302][T11918] R13: 00007f4f287e6218 R14: 00007f4f287e6180 R15: 00007ffea37dce08 [ 603.934329][T11918] [ 604.081573][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 604.091926][T11918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 604.255813][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 604.266627][ T9] usb 2-1: config 0 has no interface number 0 [ 604.272849][ T9] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 604.288740][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 604.298123][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.306766][ T9] usb 2-1: Product: syz [ 604.313815][ T9] usb 2-1: Manufacturer: syz [ 604.319379][ T9] usb 2-1: SerialNumber: syz [ 604.326414][ T9] usb 2-1: config 0 descriptor?? [ 604.331893][T11916] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.340548][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 604.454007][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 604.544606][T11916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.553326][T11916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.564115][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 604.573522][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 604.585635][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 604.624105][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 604.630787][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.641892][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.652419][ T5893] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 604.661695][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.671288][ T5893] usb 1-1: config 0 descriptor?? [ 604.803638][ T6247] usb 2-1: USB disconnect, device number 27 [ 604.821038][ T6247] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 604.835465][ T6247] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 604.847629][ T6247] quatech2 2-1:0.51: device disconnected [ 605.083827][ T5893] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 605.607961][ T30] audit: type=1400 audit(1768606569.573:534): avc: denied { create } for pid=11928 comm="syz.1.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 605.647922][T11929] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 605.672477][T11929] team0: Port device dummy0 added [ 606.093015][ T6247] usb 5-1: USB disconnect, device number 30 [ 606.795290][T11934] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 606.807367][ T5924] usb 4-1: USB disconnect, device number 38 [ 606.821268][T11934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1583'. [ 606.995235][T11938] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1583'. [ 607.251889][ T5924] usb 1-1: USB disconnect, device number 26 [ 607.633315][T11938] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 607.764199][T11938] ALSA: mixer_oss: invalid index 1374389 [ 608.063716][T11946] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 608.139738][T11946] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 608.150396][ T30] audit: type=1400 audit(1768606572.093:535): avc: denied { create } for pid=11945 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 608.194778][T11946] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 608.232868][ T30] audit: type=1400 audit(1768606572.093:536): avc: denied { write } for pid=11945 comm="syz.0.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 608.493403][T11957] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 609.115717][ T5924] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 609.123423][ T30] audit: type=1326 audit(1768606573.083:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11964 comm="syz.0.1595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a60b8f749 code=0x0 [ 609.358243][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 609.391112][T11975] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1586'. [ 609.409746][ T5924] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 609.420327][ T5924] usb 2-1: config 0 has no interface number 0 [ 609.427103][ T5924] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.438788][ T5924] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 609.694349][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.709931][ T5924] usb 2-1: config 0 descriptor?? [ 609.742392][ T5924] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 609.981845][T11959] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.989395][T11959] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.047333][ T5924] usb 2-1: USB disconnect, device number 28 [ 610.407107][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.416925][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.426049][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.436470][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.447313][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.471573][T11982] Failed to initialize the IGMP autojoin socket (err -2) [ 610.584110][ T5893] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 610.756020][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 610.765191][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.772938][T11989] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 610.783535][T11989] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1600'. [ 610.796592][T11986] overlayfs: upper fs does not support tmpfile. [ 610.804903][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.821760][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 610.864840][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 610.885204][ T5893] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 610.916999][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.944624][ T5893] hub 1-1:1.0: bad descriptor, ignoring hub [ 610.951248][ T5893] hub 1-1:1.0: probe with driver hub failed with error -5 [ 610.961170][T11991] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 610.979021][T11991] ALSA: mixer_oss: invalid index 1374389 [ 611.181340][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 611.188907][ T5893] cdc_wdm 1-1:1.0: skipping garbage [ 611.204997][ T5893] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 611.211308][ T5893] cdc_wdm 1-1:1.0: Unknown control protocol [ 612.307700][T11982] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 612.371186][T11982] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 612.440872][T11982] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 612.491199][T11982] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 612.494058][ T5822] Bluetooth: hci1: command tx timeout [ 614.304034][T10234] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 614.464083][T10234] usb 5-1: Using ep0 maxpacket: 32 [ 614.473615][T10234] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 614.584033][ T5822] Bluetooth: hci1: command tx timeout [ 614.609690][T10234] usb 5-1: config 0 has no interface number 0 [ 614.655879][T10234] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 614.734907][T10234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.769134][T10234] usb 5-1: Product: syz [ 614.790576][T10234] usb 5-1: Manufacturer: syz [ 614.804132][T10234] usb 5-1: SerialNumber: syz [ 614.836186][T10234] usb 5-1: config 0 descriptor?? [ 614.862731][T10234] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 615.067387][T10234] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 615.078929][T10234] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 615.232172][T12042] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1613'. [ 616.644833][ T5822] Bluetooth: hci1: command tx timeout [ 617.066025][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 617.075624][ T5816] usb 5-1: USB disconnect, device number 31 [ 617.132661][ T5816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 617.274011][T11982] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 617.831818][ T5816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 617.915955][ T5816] quatech2 5-1:0.51: device disconnected [ 617.916908][T12075] overlayfs: missing 'lowerdir' [ 617.964438][T11982] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 618.015127][T11982] wireguard: wg0: Could not create IPv4 socket [ 618.030239][T11982] wireguard: wg1: Could not create IPv4 socket [ 618.044718][T11982] wireguard: wg2: Could not create IPv4 socket [ 618.147180][ T30] audit: type=1400 audit(1768606582.103:538): avc: denied { read } for pid=12079 comm="syz.1.1624" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 618.227224][ T30] audit: type=1400 audit(1768606582.103:539): avc: denied { open } for pid=12079 comm="syz.1.1624" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 618.414270][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.469670][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.899462][T12093] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1628'. [ 620.275550][ T30] audit: type=1400 audit(1768606584.203:540): avc: denied { lock } for pid=12098 comm="syz.1.1630" path="socket:[37940]" dev="sockfs" ino=37940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 620.750416][ T5924] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 620.766971][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.778220][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.788191][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.798888][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.807102][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.827589][T12109] Failed to initialize the IGMP autojoin socket (err -2) [ 620.913946][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 620.946407][ T5924] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 620.971674][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.982613][T12114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12114 comm=syz.1.1634 [ 621.002602][ T5924] usb 4-1: Product: syz [ 621.013333][ T5924] usb 4-1: Manufacturer: syz [ 621.018103][ T5924] usb 4-1: SerialNumber: syz [ 621.024401][ T5871] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 621.064869][ T5924] usb 4-1: config 0 descriptor?? [ 621.244176][ T5894] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 621.252300][ T30] audit: type=1400 audit(1768606585.213:541): avc: denied { read } for pid=12095 comm="syz.0.1629" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.263924][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 621.386162][ T5871] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 621.391355][ T30] audit: type=1400 audit(1768606585.213:542): avc: denied { open } for pid=12095 comm="syz.0.1629" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.396859][ T5924] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 621.441468][ T5871] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 621.454545][ T5871] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.469054][ T5871] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 621.478749][ T30] audit: type=1400 audit(1768606585.213:543): avc: denied { ioctl } for pid=12095 comm="syz.0.1629" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 621.538680][ T5871] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 621.548019][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.556106][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 621.561434][ T5871] usb 5-1: Product: syz [ 621.565924][ T5871] usb 5-1: Manufacturer: syz [ 621.571029][ T5871] usb 5-1: SerialNumber: syz [ 621.576652][ T5894] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 621.585830][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.610218][ T5894] usb 2-1: config 0 descriptor?? [ 621.620249][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 621.631271][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 621.644115][ T5871] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 621.924044][ T5871] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 621.932626][ T5871] (id 0x00) [ 622.027030][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.036606][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.056201][ T30] audit: type=1400 audit(1768606586.013:544): avc: denied { append } for pid=12118 comm="syz.0.1635" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 622.508244][T12109] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 622.517229][ T30] audit: type=1400 audit(1768606586.013:545): avc: denied { ioctl } for pid=12118 comm="syz.0.1635" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 622.564075][ T5871] rc_core: IR keymap rc-imon-pad not found [ 622.574295][ T5871] Registered IR keymap rc-empty [ 622.582813][T12109] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 622.589860][ T5871] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 622.601696][ T5871] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 622.615633][T12109] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 622.625317][T12109] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 622.644597][ T5871] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 622.661167][ T5871] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 622.693077][ T5871] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:32> initialized [ 622.851507][ T5894] gspca_vc032x: reg_w err -71 [ 622.856844][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.866041][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.871641][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.877922][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.884002][ T5822] Bluetooth: hci1: command tx timeout [ 622.896369][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.909893][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.921342][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.929170][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.938789][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.951921][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.964010][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.974039][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 622.986501][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.000055][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.013643][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.021029][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.028212][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.030269][T12110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.042769][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 623.057630][ T5894] gspca_vc032x: Unknown sensor... [ 623.076400][ T5894] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 623.076567][T12110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.124273][ T5894] usb 2-1: USB disconnect, device number 29 [ 623.258634][ T5924] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 623.278634][ T5924] usb 4-1: USB disconnect, device number 39 [ 623.287144][T12138] FAULT_INJECTION: forcing a failure. [ 623.287144][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 623.300414][T12138] CPU: 1 UID: 0 PID: 12138 Comm: syz.1.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.300442][T12138] Tainted: [L]=SOFTLOCKUP [ 623.300447][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 623.300454][T12138] Call Trace: [ 623.300460][T12138] [ 623.300466][T12138] dump_stack_lvl+0x16c/0x1f0 [ 623.300491][T12138] should_fail_ex+0x512/0x640 [ 623.300504][T12138] ? __kmalloc_cache_noprof+0x5f/0x800 [ 623.300519][T12138] should_failslab+0xc2/0x120 [ 623.300539][T12138] __kmalloc_cache_noprof+0x80/0x800 [ 623.300553][T12138] ? __inet_diag_dump_start+0x8f/0x960 [ 623.300578][T12138] ? __inet_diag_dump_start+0x8f/0x960 [ 623.300598][T12138] __inet_diag_dump_start+0x8f/0x960 [ 623.300623][T12138] __netlink_dump_start+0x60e/0x990 [ 623.300646][T12138] inet_diag_handler_cmd+0x282/0x2e0 [ 623.300667][T12138] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 623.300688][T12138] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 623.300707][T12138] ? __pfx_inet_diag_dump+0x10/0x10 [ 623.300725][T12138] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 623.300747][T12138] ? sock_diag_lock_handler+0x10f/0x2e0 [ 623.300768][T12138] sock_diag_rcv_msg+0x438/0x790 [ 623.300785][T12138] netlink_rcv_skb+0x158/0x420 [ 623.300804][T12138] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 623.300821][T12138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 623.300848][T12138] ? netlink_deliver_tap+0x1ae/0xd30 [ 623.300870][T12138] netlink_unicast+0x5aa/0x870 [ 623.300892][T12138] ? __pfx_netlink_unicast+0x10/0x10 [ 623.300919][T12138] netlink_sendmsg+0x8c8/0xdd0 [ 623.300942][T12138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.300969][T12138] sock_write_iter+0x566/0x610 [ 623.300991][T12138] ? __pfx_sock_write_iter+0x10/0x10 [ 623.301021][T12138] ? __pfx_file_has_perm+0x10/0x10 [ 623.301041][T12138] do_iter_readv_writev+0x662/0x9e0 [ 623.301061][T12138] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 623.301077][T12138] ? selinux_file_permission+0x126/0x660 [ 623.301101][T12138] ? bpf_lsm_file_permission+0x9/0x10 [ 623.301116][T12138] ? security_file_permission+0x71/0x210 [ 623.301137][T12138] ? rw_verify_area+0xcf/0x6c0 [ 623.301155][T12138] vfs_writev+0x35f/0xde0 [ 623.301172][T12138] ? __lock_acquire+0x436/0x2890 [ 623.301190][T12138] ? __pfx_vfs_writev+0x10/0x10 [ 623.301220][T12138] ? __fget_files+0x20e/0x3c0 [ 623.301238][T12138] ? __fget_files+0x200/0x3c0 [ 623.301261][T12138] ? do_writev+0x28c/0x340 [ 623.301276][T12138] do_writev+0x28c/0x340 [ 623.301292][T12138] ? __pfx_do_writev+0x10/0x10 [ 623.301314][T12138] do_syscall_64+0xcd/0xf80 [ 623.301335][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.301350][T12138] RIP: 0033:0x7f0ac6d8f749 [ 623.301364][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.301376][T12138] RSP: 002b:00007f0ac7d08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 623.301399][T12138] RAX: ffffffffffffffda RBX: 00007f0ac6fe5fa0 RCX: 00007f0ac6d8f749 [ 623.301409][T12138] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 623.301417][T12138] RBP: 00007f0ac7d08090 R08: 0000000000000000 R09: 0000000000000000 [ 623.301425][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.301433][T12138] R13: 00007f0ac6fe6038 R14: 00007f0ac6fe5fa0 R15: 00007fff900a10e8 [ 623.301454][T12138] [ 624.009727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.027524][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 624.043503][T12109] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 624.078377][T12109] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 624.137587][T12109] wireguard: wg0: Could not create IPv4 socket [ 624.159987][T12109] wireguard: wg1: Could not create IPv4 socket [ 624.182671][T12109] wireguard: wg2: Could not create IPv4 socket [ 624.662657][ T5871] usb 5-1: USB disconnect, device number 32 [ 625.695206][ T5871] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 625.867212][ T30] audit: type=1400 audit(1768606589.833:546): avc: denied { validate_trans } for pid=12158 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 626.050584][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.137136][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.670727][T12170] syzkaller0: entered promiscuous mode [ 626.677006][T12170] syzkaller0: entered allmulticast mode [ 627.420790][ T30] audit: type=1400 audit(1768606591.383:547): avc: denied { bind } for pid=12172 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 627.455097][ T30] audit: type=1400 audit(1768606591.423:548): avc: denied { write } for pid=12172 comm="syz.3.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 627.913971][ T5894] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 628.074027][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 628.082303][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 628.091846][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.100200][ T5894] usb 2-1: Product: syz [ 628.104466][ T5894] usb 2-1: Manufacturer: syz [ 628.109053][ T5894] usb 2-1: SerialNumber: syz [ 628.115835][ T5894] usb 2-1: config 0 descriptor?? [ 628.325645][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 628.458761][ T5871] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 628.466568][ T5871] usb 5-1: can't read configurations, error -71 [ 629.130160][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.668173][ T5871] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 629.675096][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.686036][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.695569][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.704960][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 629.737199][T12193] Failed to initialize the IGMP autojoin socket (err -2) [ 629.846703][ T5871] usb 5-1: device descriptor read/64, error -71 [ 630.618774][ T5871] usb usb5-port1: attempt power cycle [ 630.720387][T12180] netlink: 'syz.1.1648': attribute type 4 has an invalid length. [ 630.784031][T12180] netlink: 'syz.1.1648': attribute type 8 has an invalid length. [ 630.802141][T12180] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1648'. [ 630.864820][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 630.891479][ T5894] usb 2-1: USB disconnect, device number 30 [ 630.994050][ T5871] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 631.695367][ T5871] usb 5-1: device descriptor read/8, error -71 [ 631.768740][ T5820] Bluetooth: hci1: command tx timeout [ 632.057970][T12224] lo speed is unknown, defaulting to 1000 [ 632.065986][T12224] lo speed is unknown, defaulting to 1000 [ 632.076405][T12224] lo speed is unknown, defaulting to 1000 [ 632.085289][T12224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 632.095225][T12224] infiniband syz: RDMA CMA: cma_listen_on_dev, error -2 [ 632.344094][T12224] lo speed is unknown, defaulting to 1000 [ 632.393064][T12224] lo speed is unknown, defaulting to 1000 [ 632.399786][T12224] lo speed is unknown, defaulting to 1000 [ 632.406378][T12224] lo speed is unknown, defaulting to 1000 [ 632.565859][T12235] FAULT_INJECTION: forcing a failure. [ 632.565859][T12235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.624030][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.4.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.624060][T12235] Tainted: [L]=SOFTLOCKUP [ 632.624065][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 632.624075][T12235] Call Trace: [ 632.624081][T12235] [ 632.624088][T12235] dump_stack_lvl+0x16c/0x1f0 [ 632.624118][T12235] should_fail_ex+0x512/0x640 [ 632.624138][T12235] _copy_from_user+0x2e/0xd0 [ 632.624165][T12235] kstrtouint_from_user+0xd6/0x1d0 [ 632.624185][T12235] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 632.624204][T12235] ? __lock_acquire+0x436/0x2890 [ 632.624236][T12235] proc_fail_nth_write+0x83/0x220 [ 632.624256][T12235] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 632.624280][T12235] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 632.624297][T12235] vfs_write+0x2a0/0x11d0 [ 632.624326][T12235] ? __pfx___mutex_lock+0x10/0x10 [ 632.624357][T12235] ? __pfx_vfs_write+0x10/0x10 [ 632.624385][T12235] ? __fget_files+0x20e/0x3c0 [ 632.624416][T12235] ksys_write+0x12a/0x250 [ 632.624437][T12235] ? __pfx_ksys_write+0x10/0x10 [ 632.624465][T12235] do_syscall_64+0xcd/0xf80 [ 632.624491][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.624508][T12235] RIP: 0033:0x7f4f2858e1ff [ 632.624523][T12235] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 632.624539][T12235] RSP: 002b:00007f4f294e3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 632.624557][T12235] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f2858e1ff [ 632.624567][T12235] RDX: 0000000000000001 RSI: 00007f4f294e30a0 RDI: 0000000000000003 [ 632.624577][T12235] RBP: 00007f4f294e3090 R08: 0000000000000000 R09: 0000000000000000 [ 632.624586][T12235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 632.624596][T12235] R13: 00007f4f287e6038 R14: 00007f4f287e5fa0 R15: 00007ffea37dce08 [ 632.624621][T12235] [ 633.108948][T12193] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 634.073988][ T5820] Bluetooth: hci1: command tx timeout [ 634.375132][T12193] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 634.402602][T12193] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 634.430833][T12193] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 634.798051][ T6687] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 635.028492][ T6687] usb 4-1: Using ep0 maxpacket: 8 [ 635.059981][ T6687] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 635.141896][ T6687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.179296][ T6687] pvrusb2: Hardware description: Terratec Grabster AV400 [ 635.194008][ T6687] pvrusb2: ********** [ 635.199381][ T6687] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 635.211787][ T6687] pvrusb2: Important functionality might not be entirely working. [ 635.245429][ T6687] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 635.367906][ T6687] pvrusb2: ********** [ 635.400144][ T2338] pvrusb2: Invalid write control endpoint [ 635.477943][ T2338] pvrusb2: Invalid write control endpoint [ 635.654546][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 635.674516][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 635.696003][ T5893] usb 4-1: USB disconnect, device number 40 [ 635.728843][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 635.769480][ T2338] pvrusb2: Device being rendered inoperable [ 635.794506][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 635.825977][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 635.868240][ T2338] pvrusb2: Attached sub-driver cx25840 [ 635.912152][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 635.948488][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 636.085329][ T5820] Bluetooth: hci1: command tx timeout [ 636.204409][T12193] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 636.294490][T12193] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 636.358568][T12193] wireguard: wg0: Could not create IPv4 socket [ 636.373019][T12193] wireguard: wg1: Could not create IPv4 socket [ 636.380563][T12193] wireguard: wg2: Could not create IPv4 socket [ 636.634905][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 636.980834][T12285] overlayfs: missing 'lowerdir' [ 637.284404][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 637.325263][ T30] audit: type=1400 audit(1768606601.293:549): avc: denied { getopt } for pid=12288 comm="syz.1.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 637.349693][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 637.397592][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.428044][ T9] usb 5-1: config 0 descriptor?? [ 637.456748][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 637.576148][T12296] can0: slcan on ttyS3. [ 637.609394][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 637.754153][T12299] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1674'. [ 637.798579][T12299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.875793][ T24] lo speed is unknown, defaulting to 1000 [ 638.735881][T12291] can0 (unregistered): slcan off ttyS3. [ 640.409285][T12313] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1679'. [ 640.422910][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1679'. [ 640.440279][ T9] usb 5-1: Detected FT232A [ 640.459629][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 640.631785][ T9] usb 5-1: USB disconnect, device number 37 [ 640.821385][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 640.896234][ T9] ftdi_sio 5-1:0.0: device disconnected [ 641.894249][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 642.044082][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 642.061042][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 642.069372][ T9] usb 5-1: config 0 has no interface number 0 [ 642.096175][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 642.106130][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.433023][ T9] usb 5-1: Product: syz [ 642.452482][ T9] usb 5-1: Manufacturer: syz [ 642.464856][ T9] usb 5-1: SerialNumber: syz [ 642.478967][ T9] usb 5-1: config 0 descriptor?? [ 642.752108][ T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 642.783550][ T9] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 642.816084][ T9] usb 5-1: USB disconnect, device number 38 [ 643.031939][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 643.253994][T10234] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 643.645976][T10234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 643.657445][T10234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.667226][T10234] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 643.676394][T10234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.686580][T10234] usb 2-1: config 0 descriptor?? [ 644.096547][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.104763][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.112830][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.120967][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.129122][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.137251][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.145492][T10234] aquacomputer_d5next 0003:0C70:F012.0009: unknown main item tag 0x0 [ 644.154880][T10234] aquacomputer_d5next 0003:0C70:F012.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.1-1/input0 [ 644.511403][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.520961][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.957034][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.967139][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.975910][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.991604][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.998997][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.024110][T12370] Failed to initialize the IGMP autojoin socket (err -2) [ 645.421978][ T5893] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 645.809656][ T30] audit: type=1400 audit(1768606609.773:550): avc: denied { read } for pid=12381 comm="syz.3.1698" name="file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 645.847298][ T30] audit: type=1400 audit(1768606609.803:551): avc: denied { open } for pid=12381 comm="syz.3.1698" path="/346/file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 646.711948][T12400] netlink: 337 bytes leftover after parsing attributes in process `syz.1.1703'. [ 646.906009][T12370] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 646.926367][T12370] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 646.956967][T12370] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 646.964021][ T5894] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 646.974975][T10234] usb 2-1: USB disconnect, device number 31 [ 646.993840][T12370] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 647.058894][ T5822] Bluetooth: hci1: command tx timeout [ 647.125535][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 647.133001][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.144742][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.154583][ T5894] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 647.163647][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.182785][ T5894] usb 5-1: config 0 descriptor?? [ 647.655667][ T5894] hid (null): invalid report_count 999017594 [ 647.661782][ T5894] hid (null): invalid report_size 47664 [ 647.671626][ T5894] hid (null): unknown global tag 0xc [ 647.935093][T12399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.943776][T12399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.990516][ T5894] usb 5-1: string descriptor 0 read error: -71 [ 648.007148][ T30] audit: type=1400 audit(1768606611.973:552): avc: denied { firmware_load } for pid=12412 comm="syz.0.1706" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 648.043310][ T5894] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 648.053826][T12416] syz.0.1706 (12416) used greatest stack depth: 19688 bytes left [ 648.078567][ T5894] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -32 [ 648.126208][ T5894] usb 5-1: USB disconnect, device number 39 [ 648.130709][ T30] audit: type=1400 audit(1768606612.083:553): avc: denied { bind } for pid=12410 comm="syz.3.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 648.856139][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 648.869489][T12370] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 649.046101][T12370] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 649.113031][T12429] loop6: detected capacity change from 0 to 2640 [ 649.121159][T12429] buffer_io_error: 6 callbacks suppressed [ 649.121187][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.135161][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.143216][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.151395][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.165889][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.174114][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.182141][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.190266][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.198170][T12429] ldm_validate_partition_table(): Disk read failed. [ 649.204940][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.212911][T12429] Buffer I/O error on dev loop6, logical block 0, async page read [ 649.226430][T12429] Dev loop6: unable to read RDB block 0 [ 649.232690][T12429] loop6: unable to read partition table [ 649.239225][T12429] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 649.248131][ T5822] Bluetooth: hci1: command tx timeout [ 649.381177][T12370] wireguard: wg0: Could not create IPv4 socket [ 649.391741][T12370] wireguard: wg1: Could not create IPv4 socket [ 649.485647][T12370] wireguard: wg2: Could not create IPv4 socket [ 650.922223][ T30] audit: type=1326 audit(1768606614.883:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.007496][ T30] audit: type=1326 audit(1768606614.923:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.086274][ T30] audit: type=1326 audit(1768606614.923:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.189093][ T30] audit: type=1326 audit(1768606614.923:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.292956][ T30] audit: type=1326 audit(1768606614.923:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.389438][ T30] audit: type=1326 audit(1768606614.923:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.453991][ T30] audit: type=1326 audit(1768606614.923:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.667273][T12463] FAULT_INJECTION: forcing a failure. [ 651.667273][T12463] name failslab, interval 1, probability 0, space 0, times 0 [ 651.668197][ T30] audit: type=1326 audit(1768606614.923:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.721950][T12463] CPU: 1 UID: 0 PID: 12463 Comm: syz.3.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.721979][T12463] Tainted: [L]=SOFTLOCKUP [ 651.721985][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.721994][T12463] Call Trace: [ 651.722002][T12463] [ 651.722011][T12463] dump_stack_lvl+0x16c/0x1f0 [ 651.722040][T12463] should_fail_ex+0x512/0x640 [ 651.722056][T12463] ? fs_reclaim_acquire+0xae/0x150 [ 651.722081][T12463] should_failslab+0xc2/0x120 [ 651.722109][T12463] __kmalloc_noprof+0xeb/0x910 [ 651.722135][T12463] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.722170][T12463] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.722193][T12463] tomoyo_realpath_from_path+0xc2/0x6e0 [ 651.722219][T12463] ? tomoyo_profile+0x47/0x60 [ 651.722237][T12463] tomoyo_path_number_perm+0x245/0x580 [ 651.722256][T12463] ? tomoyo_path_number_perm+0x237/0x580 [ 651.722279][T12463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.722301][T12463] ? find_held_lock+0x2b/0x80 [ 651.722345][T12463] ? find_held_lock+0x2b/0x80 [ 651.722368][T12463] ? hook_file_ioctl_common+0x144/0x410 [ 651.722390][T12463] ? __fget_files+0x20e/0x3c0 [ 651.722418][T12463] security_file_ioctl+0x9b/0x240 [ 651.722442][T12463] __x64_sys_ioctl+0xb7/0x210 [ 651.722464][T12463] do_syscall_64+0xcd/0xf80 [ 651.722489][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.722505][T12463] RIP: 0033:0x7f8478d8f749 [ 651.722519][T12463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.722534][T12463] RSP: 002b:00007f8479d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.722550][T12463] RAX: ffffffffffffffda RBX: 00007f8478fe5fa0 RCX: 00007f8478d8f749 [ 651.722561][T12463] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 651.722571][T12463] RBP: 00007f8479d14090 R08: 0000000000000000 R09: 0000000000000000 [ 651.722580][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.722589][T12463] R13: 00007f8478fe6038 R14: 00007f8478fe5fa0 R15: 00007ffca92cdfc8 [ 651.722614][T12463] [ 651.723001][T12463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.752075][ T30] audit: type=1326 audit(1768606614.923:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 651.979732][ T30] audit: type=1326 audit(1768606614.923:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.1.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac6d8f749 code=0x7ffc0000 [ 652.024009][T12463] comedi comedi0: dt2814: I/O port conflict (0x101,2) [ 652.960891][T12474] can: request_module (can-proto-5) failed. [ 653.536518][T10234] libceph: mon0 (1)[c::]:6789 connect error [ 653.560465][T10234] libceph: mon0 (1)[c::]:6789 connect error [ 653.733682][T12474] ceph: No mds server is up or the cluster is laggy [ 654.884194][T12500] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 657.903429][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.914186][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.923793][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.933245][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.940824][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.992223][T12518] Failed to initialize the IGMP autojoin socket (err -2) [ 659.049563][T12541] tipc: Cannot configure node identity twice [ 659.130128][T12518] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 659.167903][T12518] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 659.875603][T12558] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 660.019421][ T5822] Bluetooth: hci1: command tx timeout [ 660.120937][T12518] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 660.162082][T12518] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 662.089162][ T5822] Bluetooth: hci1: command tx timeout [ 662.636784][ T5878] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 662.705038][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 662.827388][T12601] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 662.849637][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 662.882308][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 662.898220][ T5878] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 662.904392][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 662.907506][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.954235][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 662.969387][ T5878] usb 5-1: Product: syz [ 662.973713][ T5878] usb 5-1: Manufacturer: syz [ 663.003175][ T5878] usb 5-1: SerialNumber: syz [ 663.016815][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 663.027434][ T5878] usb 5-1: config 0 descriptor?? [ 663.114133][T12597] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 663.177586][T12597] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 663.200988][T12518] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 663.618648][T12518] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 663.627900][ T5878] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 663.701800][T12518] wireguard: wg0: Could not create IPv4 socket [ 663.715686][T12518] wireguard: wg1: Could not create IPv4 socket [ 663.737135][T12618] netlink: 'syz.1.1755': attribute type 1 has an invalid length. [ 663.750634][T12618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1755'. [ 663.761213][T12518] wireguard: wg2: Could not create IPv4 socket [ 663.936986][T12619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1755'. [ 664.030658][T12621] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 664.038393][T12621] ALSA: mixer_oss: invalid index 1374389 [ 666.420980][ T5878] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 666.454061][ T5878] usb 5-1: USB disconnect, device number 40 [ 668.790498][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 668.802316][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 668.811020][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 669.000310][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 669.007902][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 669.014960][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 669.512439][T12666] Failed to initialize the IGMP autojoin socket (err -2) [ 669.623947][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 669.639768][ T24] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 669.649388][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.664052][ T24] usb 2-1: Product: syz [ 669.668250][ T24] usb 2-1: Manufacturer: syz [ 669.672851][ T24] usb 2-1: SerialNumber: syz [ 670.908310][ T24] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 670.930405][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 670.951451][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 670.961346][ T24] usb 2-1: media controller created [ 671.000475][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.259011][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 671.348991][ T24] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 671.389336][ T24] usb 2-1: USB disconnect, device number 32 [ 671.448873][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.457565][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.467393][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.489521][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.612886][ T5820] Bluetooth: hci1: command tx timeout [ 671.655979][T12666] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 671.748190][T12666] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 671.872238][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 672.040074][T12666] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 672.127236][T12666] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 672.215077][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 672.215087][ T30] audit: type=1400 audit(1768606636.183:566): avc: denied { ioctl } for pid=12708 comm="syz.1.1778" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 673.778483][ T5820] Bluetooth: hci1: command tx timeout [ 674.208962][T12733] netlink: 'syz.1.1782': attribute type 1 has an invalid length. [ 675.832839][T12754] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1786'. [ 675.844198][ T5820] Bluetooth: hci1: command tx timeout [ 675.882658][T12754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1786'. [ 675.895773][T12666] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 675.925191][T12666] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 676.251349][T12666] wireguard: wg0: Could not create IPv4 socket [ 676.265682][T12666] wireguard: wg1: Could not create IPv4 socket [ 676.274675][T12666] wireguard: wg2: Could not create IPv4 socket [ 677.162061][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 677.469814][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 677.597410][ T30] audit: type=1400 audit(1768606641.403:567): avc: denied { setopt } for pid=12770 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 680.522860][T12806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.548900][T12806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.816048][T12815] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 680.824119][T12815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1800'. [ 680.893186][T12816] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1800'. [ 680.916334][T12816] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 680.924035][T12816] ALSA: mixer_oss: invalid index 1374389 [ 681.000926][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'. [ 681.073647][T12819] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 681.081761][T12819] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1801'. [ 685.853598][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 685.952227][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.965308][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 685.975986][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.986248][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.993773][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.254372][T12855] Failed to initialize the IGMP autojoin socket (err -2) [ 686.529279][T12859] veth0_to_team: entered promiscuous mode [ 686.800598][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.811579][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.892517][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.924154][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.167080][T12873] overlayfs: missing 'lowerdir' [ 687.789070][T12874] overlayfs: missing 'lowerdir' [ 687.894454][T12881] netlink: 'syz.1.1817': attribute type 1 has an invalid length. [ 687.902235][T12881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1817'. [ 687.996371][T12882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1817'. [ 688.012420][T12882] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 688.020872][T12882] ALSA: mixer_oss: invalid index 1374389 [ 688.085597][ T5822] Bluetooth: hci1: command tx timeout [ 688.673096][T12855] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 688.796686][T12889] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1818'. [ 689.242751][T12855] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 689.272468][T12855] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 689.301451][T12855] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 690.232159][ T5822] Bluetooth: hci1: command tx timeout [ 690.827435][T12917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 691.212700][ T30] audit: type=1400 audit(1768606655.163:568): avc: denied { read } for pid=12911 comm="syz.0.1824" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 691.381900][T12855] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 691.428361][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 691.459285][T12855] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 691.532615][T12931] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1826'. [ 692.245782][ T5822] Bluetooth: hci1: command tx timeout [ 692.337575][T12855] wireguard: wg0: Could not create IPv4 socket [ 692.345951][T12855] wireguard: wg1: Could not create IPv4 socket [ 692.362596][T12855] wireguard: wg2: Could not create IPv4 socket [ 692.408336][ T30] audit: type=1400 audit(1768606656.373:569): avc: denied { read } for pid=12932 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 692.746571][T12943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1831'. [ 694.776263][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 696.790847][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 696.800295][ T30] audit: type=1400 audit(1768606660.663:570): avc: denied { read } for pid=12973 comm="syz.0.1837" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 696.904379][T12980] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1838'. [ 697.390596][ T30] audit: type=1400 audit(1768606660.663:571): avc: denied { open } for pid=12973 comm="syz.0.1837" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 697.693975][T10139] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 697.875166][T10139] usb 2-1: Using ep0 maxpacket: 16 [ 697.881599][T10139] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 697.903504][T10139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 697.925592][T10139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 697.944215][T10139] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 697.963505][T10139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.985511][T10139] usb 2-1: config 0 descriptor?? [ 697.994036][T12982] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 698.012255][T10139] pegasus_notetaker 2-1:0.0: packet size is too small (0) [ 698.030021][T10139] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 698.205355][T10234] usb 2-1: USB disconnect, device number 33 [ 698.698500][T12988] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 698.748001][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.765890][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.813115][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.822035][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.883035][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.898766][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.907710][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.928763][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.937247][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 699.026066][T12996] Failed to initialize the IGMP autojoin socket (err -2) [ 699.878428][T13012] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1847'. [ 699.904149][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 700.291372][T13025] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 700.882996][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 700.900017][T13028] loop8: detected capacity change from 0 to 8 [ 700.918445][T13028] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 700.923813][T13028] loop8: partition table partially beyond EOD, truncated [ 700.964029][ T5820] Bluetooth: hci1: command tx timeout [ 700.998891][T13032] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1852'. [ 701.024675][T13028] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 701.865688][T13035] overlayfs: missing 'lowerdir' [ 701.948184][T12996] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 702.007785][T12996] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 702.157539][T13047] macvtap0: entered allmulticast mode [ 702.173300][T13047] veth0_macvtap: entered allmulticast mode [ 702.190601][T12996] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 702.218423][T12996] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 703.043962][ T5820] Bluetooth: hci1: command tx timeout [ 703.955067][T12996] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 704.124013][T12996] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 704.181795][T12996] wireguard: wg0: Could not create IPv4 socket [ 704.218924][T12996] wireguard: wg1: Could not create IPv4 socket [ 704.238411][T12996] wireguard: wg2: Could not create IPv4 socket [ 705.552649][T13087] binder: BINDER_SET_CONTEXT_MGR already set [ 705.587445][T13087] binder: 13083:13087 ioctl 4018620d 2000000000c0 returned -16 [ 705.767351][T13092] FAULT_INJECTION: forcing a failure. [ 705.767351][T13092] name failslab, interval 1, probability 0, space 0, times 0 [ 705.781003][T13092] CPU: 1 UID: 0 PID: 13092 Comm: syz.0.1867 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.781031][T13092] Tainted: [L]=SOFTLOCKUP [ 705.781037][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.781047][T13092] Call Trace: [ 705.781053][T13092] [ 705.781060][T13092] dump_stack_lvl+0x16c/0x1f0 [ 705.781089][T13092] should_fail_ex+0x512/0x640 [ 705.781104][T13092] ? fs_reclaim_acquire+0xae/0x150 [ 705.781128][T13092] should_failslab+0xc2/0x120 [ 705.781150][T13092] __kmalloc_noprof+0xeb/0x910 [ 705.781176][T13092] ? tomoyo_encode2+0x100/0x3e0 [ 705.781201][T13092] ? tomoyo_encode2+0x100/0x3e0 [ 705.781220][T13092] tomoyo_encode2+0x100/0x3e0 [ 705.781244][T13092] tomoyo_encode+0x29/0x50 [ 705.781264][T13092] tomoyo_realpath_from_path+0x18f/0x6e0 [ 705.781294][T13092] tomoyo_path_number_perm+0x245/0x580 [ 705.781313][T13092] ? tomoyo_path_number_perm+0x237/0x580 [ 705.781336][T13092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 705.781358][T13092] ? find_held_lock+0x2b/0x80 [ 705.781405][T13092] ? find_held_lock+0x2b/0x80 [ 705.781427][T13092] ? hook_file_ioctl_common+0x144/0x410 [ 705.781449][T13092] ? __fget_files+0x20e/0x3c0 [ 705.781482][T13092] security_file_ioctl+0x9b/0x240 [ 705.781507][T13092] __x64_sys_ioctl+0xb7/0x210 [ 705.781528][T13092] do_syscall_64+0xcd/0xf80 [ 705.781553][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.781570][T13092] RIP: 0033:0x7f0a60b8f749 [ 705.781583][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.781598][T13092] RSP: 002b:00007f0a61ad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.781614][T13092] RAX: ffffffffffffffda RBX: 00007f0a60de5fa0 RCX: 00007f0a60b8f749 [ 705.781625][T13092] RDX: 00002000000002c0 RSI: 00000000c0304d18 RDI: 0000000000000004 [ 705.781635][T13092] RBP: 00007f0a61ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 705.781644][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.781653][T13092] R13: 00007f0a60de6038 R14: 00007f0a60de5fa0 R15: 00007ffef97420d8 [ 705.781678][T13092] [ 705.781694][T13092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 706.003589][ T5894] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 706.264482][ T5894] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 706.979911][T13099] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 706.994189][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.012520][ T5894] usb 2-1: Product: syz [ 707.016740][ T5894] usb 2-1: Manufacturer: syz [ 707.021351][ T5894] usb 2-1: SerialNumber: syz [ 707.030034][ T5894] usb 2-1: config 0 descriptor?? [ 707.255155][ T5894] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 707.349303][ T30] audit: type=1400 audit(1768606671.313:572): avc: denied { mounton } for pid=13117 comm="syz.0.1876" path="/407/file4" dev="tmpfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 707.372934][T13118] tmpfs: Bad value for 'mpol' [ 708.067181][T13131] FAULT_INJECTION: forcing a failure. [ 708.067181][T13131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.067929][T13131] [ 708.067937][T13131] ====================================================== [ 708.067943][T13131] WARNING: possible circular locking dependency detected [ 708.067952][T13131] syzkaller #0 Tainted: G L [ 708.067960][T13131] ------------------------------------------------------ [ 708.067965][T13131] syz.0.1879/13131 is trying to acquire lock: [ 708.067973][T13131] ffffffff8e2d6c40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 708.068021][T13131] [ 708.068021][T13131] but task is already holding lock: [ 708.068025][T13131] ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 708.068067][T13131] [ 708.068067][T13131] which lock already depends on the new lock. [ 708.068067][T13131] [ 708.068072][T13131] [ 708.068072][T13131] the existing dependency chain (in reverse order) is: [ 708.068077][T13131] [ 708.068077][T13131] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 708.068096][T13131] _raw_spin_lock_nested+0x31/0x40 [ 708.068116][T13131] raw_spin_rq_lock_nested+0x29/0x130 [ 708.068138][T13131] task_rq_lock+0xcf/0x490 [ 708.068150][T13131] cgroup_move_task+0x81/0x2a0 [ 708.068165][T13131] css_set_move_task+0x288/0x5f0 [ 708.068183][T13131] cgroup_post_fork+0x201/0x9e0 [ 708.068199][T13131] copy_process+0x56b6/0x7430 [ 708.068212][T13131] kernel_clone+0xfc/0x910 [ 708.068224][T13131] user_mode_thread+0xc8/0x110 [ 708.068236][T13131] rest_init+0x23/0x2b0 [ 708.068250][T13131] start_kernel+0x3ef/0x4d0 [ 708.068264][T13131] x86_64_start_reservations+0x18/0x30 [ 708.068280][T13131] x86_64_start_kernel+0x130/0x190 [ 708.068296][T13131] common_startup_64+0x13e/0x148 [ 708.068314][T13131] [ 708.068314][T13131] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 708.068333][T13131] _raw_spin_lock_irqsave+0x3a/0x60 [ 708.068351][T13131] try_to_wake_up+0xb7/0x1860 [ 708.068372][T13131] __wake_up_common+0x135/0x1f0 [ 708.068389][T13131] __wake_up+0x31/0x60 [ 708.068402][T13131] tty_port_default_wakeup+0x4d/0x60 [ 708.068421][T13131] serial8250_tx_chars+0x68e/0x860 [ 708.068440][T13131] serial8250_handle_irq+0x761/0xcb0 [ 708.068459][T13131] serial8250_default_handle_irq+0x9e/0x270 [ 708.068478][T13131] serial8250_interrupt+0xf8/0x1d0 [ 708.068500][T13131] __handle_irq_event_percpu+0x236/0x890 [ 708.068523][T13131] handle_irq_event+0xab/0x1e0 [ 708.068546][T13131] handle_edge_irq+0x3ca/0x9e0 [ 708.068567][T13131] __common_interrupt+0xd0/0x2f0 [ 708.068589][T13131] common_interrupt+0x61/0xe0 [ 708.068604][T13131] asm_common_interrupt+0x26/0x40 [ 708.068619][T13131] handle_softirqs+0x1dd/0x950 [ 708.068640][T13131] __irq_exit_rcu+0x109/0x170 [ 708.068660][T13131] irq_exit_rcu+0x9/0x30 [ 708.068681][T13131] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 708.068699][T13131] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.068721][T13131] console_flush_one_record+0x995/0xc60 [ 708.068743][T13131] console_unlock+0xef/0x240 [ 708.068763][T13131] vprintk_emit+0x407/0x6b0 [ 708.068775][T13131] _printk+0xc7/0x100 [ 708.068791][T13131] kauditd_hold_skb+0x205/0x250 [ 708.068813][T13131] kauditd_send_queue+0x239/0x290 [ 708.068833][T13131] kauditd_thread+0x621/0xb30 [ 708.068855][T13131] kthread+0x3c5/0x780 [ 708.068871][T13131] ret_from_fork+0x983/0xb10 [ 708.068886][T13131] ret_from_fork_asm+0x1a/0x30 [ 708.068908][T13131] [ 708.068908][T13131] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 708.068928][T13131] _raw_spin_lock_irqsave+0x3a/0x60 [ 708.068946][T13131] __wake_up+0x1c/0x60 [ 708.068959][T13131] tty_port_default_wakeup+0x4d/0x60 [ 708.068978][T13131] serial8250_tx_chars+0x68e/0x860 [ 708.068996][T13131] serial8250_handle_irq+0x761/0xcb0 [ 708.069015][T13131] serial8250_default_handle_irq+0x9e/0x270 [ 708.069036][T13131] serial8250_interrupt+0xf8/0x1d0 [ 708.069058][T13131] __handle_irq_event_percpu+0x236/0x890 [ 708.069080][T13131] handle_irq_event+0xab/0x1e0 [ 708.069101][T13131] handle_edge_irq+0x3ca/0x9e0 [ 708.069121][T13131] __common_interrupt+0xd0/0x2f0 [ 708.069142][T13131] common_interrupt+0xba/0xe0 [ 708.069156][T13131] asm_common_interrupt+0x26/0x40 [ 708.069170][T13131] pv_native_safe_halt+0xf/0x20 [ 708.069189][T13131] default_idle+0x13/0x20 [ 708.069200][T13131] default_idle_call+0x6c/0xb0 [ 708.069213][T13131] do_idle+0x38d/0x510 [ 708.069234][T13131] cpu_startup_entry+0x4f/0x60 [ 708.069255][T13131] start_secondary+0x21d/0x2d0 [ 708.069270][T13131] common_startup_64+0x13e/0x148 [ 708.069287][T13131] [ 708.069287][T13131] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 708.069306][T13131] _raw_spin_lock_irqsave+0x3a/0x60 [ 708.069323][T13131] serial8250_console_write+0x181/0x1890 [ 708.069344][T13131] console_flush_one_record+0x796/0xc60 [ 708.069366][T13131] console_unlock+0xef/0x240 [ 708.069387][T13131] vprintk_emit+0x407/0x6b0 [ 708.069399][T13131] _printk+0xc7/0x100 [ 708.069415][T13131] register_console+0x823/0x1210 [ 708.069427][T13131] univ8250_console_init+0x5f/0x90 [ 708.069447][T13131] console_init+0x152/0x600 [ 708.069463][T13131] start_kernel+0x298/0x4d0 [ 708.069474][T13131] x86_64_start_reservations+0x18/0x30 [ 708.069489][T13131] x86_64_start_kernel+0x130/0x190 [ 708.069505][T13131] common_startup_64+0x13e/0x148 [ 708.069522][T13131] [ 708.069522][T13131] -> #0 (console_owner){-.-.}-{0:0}: [ 708.069541][T13131] __lock_acquire+0x1669/0x2890 [ 708.069556][T13131] lock_acquire+0x179/0x330 [ 708.069572][T13131] console_lock_spinning_enable+0x72/0x80 [ 708.069593][T13131] console_flush_one_record+0x73f/0xc60 [ 708.069615][T13131] console_unlock+0xef/0x240 [ 708.069635][T13131] vprintk_emit+0x407/0x6b0 [ 708.069647][T13131] _printk+0xc7/0x100 [ 708.069663][T13131] should_fail_ex+0x4e7/0x640 [ 708.069676][T13131] strncpy_from_user+0x3b/0x2e0 [ 708.069696][T13131] strncpy_from_user_nofault+0x7f/0x180 [ 708.069717][T13131] bpf_probe_read_compat_str+0xe8/0x180 [ 708.069733][T13131] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 708.069745][T13131] bpf_trace_run4+0x252/0x5e0 [ 708.069760][T13131] __bpf_trace_sched_switch+0x145/0x190 [ 708.069782][T13131] __traceiter_sched_switch+0x6f/0xc0 [ 708.069803][T13131] __schedule+0x1a41/0x6150 [ 708.069820][T13131] preempt_schedule_irq+0x51/0x90 [ 708.069839][T13131] irqentry_exit+0x1d8/0x8c0 [ 708.069858][T13131] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 708.069873][T13131] fdget+0x4/0x210 [ 708.069892][T13131] __sys_sendmsg+0xc9/0x220 [ 708.069909][T13131] do_syscall_64+0xcd/0xf80 [ 708.069929][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.069943][T13131] [ 708.069943][T13131] other info that might help us debug this: [ 708.069943][T13131] [ 708.069948][T13131] Chain exists of: [ 708.069948][T13131] console_owner --> &p->pi_lock --> &rq->__lock [ 708.069948][T13131] [ 708.069970][T13131] Possible unsafe locking scenario: [ 708.069970][T13131] [ 708.069973][T13131] CPU0 CPU1 [ 708.069978][T13131] ---- ---- [ 708.069982][T13131] lock(&rq->__lock); [ 708.069991][T13131] lock(&p->pi_lock); [ 708.070001][T13131] lock(&rq->__lock); [ 708.070011][T13131] lock(console_owner); [ 708.070020][T13131] [ 708.070020][T13131] *** DEADLOCK *** [ 708.070020][T13131] [ 708.070024][T13131] 4 locks held by syz.0.1879/13131: [ 708.070032][T13131] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 708.070074][T13131] #1: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5e0 [ 708.070110][T13131] #2: ffffffff8e3b7080 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 708.070146][T13131] #3: ffffffff8e3b70f8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 708.070188][T13131] [ 708.070188][T13131] stack backtrace: [ 708.070198][T13131] CPU: 1 UID: 0 PID: 13131 Comm: syz.0.1879 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.070219][T13131] Tainted: [L]=SOFTLOCKUP [ 708.070225][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.070234][T13131] Call Trace: [ 708.070239][T13131] [ 708.070245][T13131] dump_stack_lvl+0x116/0x1f0 [ 708.070267][T13131] print_circular_bug+0x275/0x340 [ 708.070285][T13131] check_noncircular+0x146/0x160 [ 708.070306][T13131] __lock_acquire+0x1669/0x2890 [ 708.070327][T13131] lock_acquire+0x179/0x330 [ 708.070344][T13131] ? console_lock_spinning_enable+0x61/0x80 [ 708.070368][T13131] ? console_lock_spinning_enable+0x4a/0x80 [ 708.070393][T13131] console_lock_spinning_enable+0x72/0x80 [ 708.070415][T13131] ? console_lock_spinning_enable+0x61/0x80 [ 708.070437][T13131] console_flush_one_record+0x73f/0xc60 [ 708.070462][T13131] ? __pfx_console_flush_one_record+0x10/0x10 [ 708.070485][T13131] ? __lock_acquire+0x436/0x2890 [ 708.070504][T13131] ? is_printk_cpu_sync_owner+0x32/0x40 [ 708.070521][T13131] console_unlock+0xef/0x240 [ 708.070543][T13131] ? __pfx_console_unlock+0x10/0x10 [ 708.070566][T13131] ? do_raw_spin_unlock+0x80/0x230 [ 708.070588][T13131] ? _printk+0xc7/0x100 [ 708.070606][T13131] ? __down_trylock_console_sem+0xb0/0x140 [ 708.070627][T13131] vprintk_emit+0x407/0x6b0 [ 708.070640][T13131] ? __pfx_vprintk_emit+0x10/0x10 [ 708.070655][T13131] ? cmp_ex_search+0x8b/0xb0 [ 708.070677][T13131] _printk+0xc7/0x100 [ 708.070695][T13131] ? __pfx__printk+0x10/0x10 [ 708.070721][T13131] ? search_extable+0x82/0xb0 [ 708.070743][T13131] ? __pfx____ratelimit+0x10/0x10 [ 708.070761][T13131] ? __lock_acquire+0x436/0x2890 [ 708.070780][T13131] should_fail_ex+0x4e7/0x640 [ 708.070795][T13131] strncpy_from_user+0x3b/0x2e0 [ 708.070818][T13131] strncpy_from_user_nofault+0x7f/0x180 [ 708.070834][T13131] bpf_probe_read_compat_str+0xe8/0x180 [ 708.070852][T13131] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 708.070864][T13131] bpf_trace_run4+0x252/0x5e0 [ 708.070881][T13131] ? rcu_is_watching+0x12/0xc0 [ 708.070896][T13131] ? __pfx_bpf_trace_run4+0x10/0x10 [ 708.070915][T13131] ? __lock_acquire+0x436/0x2890 [ 708.070932][T13131] ? __lock_acquire+0x436/0x2890 [ 708.070951][T13131] __bpf_trace_sched_switch+0x145/0x190 [ 708.070974][T13131] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 708.070997][T13131] ? lock_acquire+0x179/0x330 [ 708.071017][T13131] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 708.071039][T13131] __traceiter_sched_switch+0x6f/0xc0 [ 708.071060][T13131] ? set_next_task_rt+0x403/0x6a0 [ 708.071076][T13131] __schedule+0x1a41/0x6150 [ 708.071101][T13131] ? __pfx___schedule+0x10/0x10 [ 708.071123][T13131] preempt_schedule_irq+0x51/0x90 [ 708.071144][T13131] irqentry_exit+0x1d8/0x8c0 [ 708.071164][T13131] ? rcu_is_watching+0x12/0xc0 [ 708.071179][T13131] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 708.071195][T13131] RIP: 0010:fdget+0x4/0x210 [ 708.071216][T13131] Code: 89 de 31 d2 5b 5d e9 8b fb ff ff e8 96 41 e3 ff eb e7 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 54 55 89 fd 53 65 48 8b 1d 76 49 6d 11 e8 29 65 79 ff 48 8d bb [ 708.071232][T13131] RSP: 0018:ffffc900045bfde8 EFLAGS: 00000293 [ 708.071244][T13131] RAX: 0000000000000000 RBX: 0000000000000009 RCX: ffffffff893c7034 [ 708.071254][T13131] RDX: ffff888027260000 RSI: ffffffff893c7042 RDI: 0000000000000009 [ 708.071263][T13131] RBP: 1ffff920008b7fc0 R08: 0000000000000005 R09: 0000000000000000 [ 708.071272][T13131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 708.071281][T13131] R13: 000000000000002e R14: 0000000000000001 R15: ffffc900045bfe30 [ 708.071294][T13131] ? __sys_sendmsg+0xb4/0x220 [ 708.071310][T13131] ? __sys_sendmsg+0xc2/0x220 [ 708.071329][T13131] __sys_sendmsg+0xc9/0x220 [ 708.071346][T13131] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.071362][T13131] ? __pfx___schedule+0x10/0x10 [ 708.071384][T13131] ? rcu_is_watching+0x12/0xc0 [ 708.071401][T13131] do_syscall_64+0xcd/0xf80 [ 708.071426][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.071441][T13131] RIP: 0033:0x7f0a60b8f749 [ 708.071454][T13131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.071467][T13131] RSP: 002b:00007f0a61a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.071481][T13131] RAX: ffffffffffffffda RBX: 00007f0a60de6180 RCX: 00007f0a60b8f749 [ 708.071491][T13131] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 708.071501][T13131] RBP: 00007f0a61a97090 R08: 0000000000000000 R09: 0000000000000000 [ 708.071510][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.071519][T13131] R13: 00007f0a60de6218 R14: 00007f0a60de6180 R15: 00007ffef97420d8 [ 708.071535][T13131] [ 709.322596][T13131] CPU: 1 UID: 0 PID: 13131 Comm: syz.0.1879 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.322613][T13131] Tainted: [L]=SOFTLOCKUP [ 709.322616][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.322622][T13131] Call Trace: [ 709.322628][T13131] [ 709.322635][T13131] dump_stack_lvl+0x116/0x1f0 [ 709.322655][T13131] should_fail_ex+0x512/0x640 [ 709.322666][T13131] strncpy_from_user+0x3b/0x2e0 [ 709.322681][T13131] strncpy_from_user_nofault+0x7f/0x180 [ 709.322693][T13131] bpf_probe_read_compat_str+0xe8/0x180 [ 709.322707][T13131] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 709.322716][T13131] bpf_trace_run4+0x252/0x5e0 [ 709.322727][T13131] ? rcu_is_watching+0x12/0xc0 [ 709.322737][T13131] ? __pfx_bpf_trace_run4+0x10/0x10 [ 709.322749][T13131] ? __lock_acquire+0x436/0x2890 [ 709.322761][T13131] ? __lock_acquire+0x436/0x2890 [ 709.322773][T13131] __bpf_trace_sched_switch+0x145/0x190 [ 709.322789][T13131] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 709.322804][T13131] ? lock_acquire+0x179/0x330 [ 709.322816][T13131] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 709.322830][T13131] __traceiter_sched_switch+0x6f/0xc0 [ 709.322845][T13131] ? set_next_task_rt+0x403/0x6a0 [ 709.322856][T13131] __schedule+0x1a41/0x6150 [ 709.322872][T13131] ? __pfx___schedule+0x10/0x10 [ 709.322886][T13131] preempt_schedule_irq+0x51/0x90 [ 709.322899][T13131] irqentry_exit+0x1d8/0x8c0 [ 709.322913][T13131] ? rcu_is_watching+0x12/0xc0 [ 709.322922][T13131] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 709.322933][T13131] RIP: 0010:fdget+0x4/0x210 [ 709.322949][T13131] Code: 89 de 31 d2 5b 5d e9 8b fb ff ff e8 96 41 e3 ff eb e7 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 54 55 89 fd 53 65 48 8b 1d 76 49 6d 11 e8 29 65 79 ff 48 8d bb [ 709.322959][T13131] RSP: 0018:ffffc900045bfde8 EFLAGS: 00000293 [ 709.322968][T13131] RAX: 0000000000000000 RBX: 0000000000000009 RCX: ffffffff893c7034 [ 709.322973][T13131] RDX: ffff888027260000 RSI: ffffffff893c7042 RDI: 0000000000000009 [ 709.322979][T13131] RBP: 1ffff920008b7fc0 R08: 0000000000000005 R09: 0000000000000000 [ 709.322985][T13131] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 709.322990][T13131] R13: 000000000000002e R14: 0000000000000001 R15: ffffc900045bfe30 [ 709.322998][T13131] ? __sys_sendmsg+0xb4/0x220 [ 709.323010][T13131] ? __sys_sendmsg+0xc2/0x220 [ 709.323022][T13131] __sys_sendmsg+0xc9/0x220 [ 709.323033][T13131] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.323043][T13131] ? __pfx___schedule+0x10/0x10 [ 709.323056][T13131] ? rcu_is_watching+0x12/0xc0 [ 709.323067][T13131] do_syscall_64+0xcd/0xf80 [ 709.323081][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.323091][T13131] RIP: 0033:0x7f0a60b8f749 [ 709.323099][T13131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.323108][T13131] RSP: 002b:00007f0a61a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.323117][T13131] RAX: ffffffffffffffda RBX: 00007f0a60de6180 RCX: 00007f0a60b8f749 [ 709.323123][T13131] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 709.323129][T13131] RBP: 00007f0a61a97090 R08: 0000000000000000 R09: 0000000000000000 [ 709.323134][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.323140][T13131] R13: 00007f0a60de6218 R14: 00007f0a60de6180 R15: 00007ffef97420d8 [ 709.323149][T13131] [ 709.704411][ T5894] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 710.954348][ T6687] usb 2-1: USB disconnect, device number 34 [ 711.024239][T10139] usb 1-1: USB disconnect, device number 27 [ 711.157380][ T6548] bridge_slave_1: left allmulticast mode [ 711.163026][ T6548] bridge_slave_1: left promiscuous mode [ 711.168877][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.176660][ T6548] bridge_slave_0: left allmulticast mode [ 711.182290][ T6548] bridge_slave_0: left promiscuous mode [ 711.188130][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.438373][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.447547][ T6548] bond0 (unregistering): (slave c@0): Releasing backup interface [ 711.456489][ T6548] bond0 (unregistering): Released all slaves [ 711.464439][ T6548] bond1 (unregistering): Released all slaves [ 711.634240][ T6548] hsr_slave_0: left promiscuous mode [ 711.640097][ T6548] hsr_slave_1: left promiscuous mode [ 711.645915][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.653471][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.877640][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 711.907889][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 712.418578][ T6548] IPVS: stop unused estimator thread 0... [ 712.499196][ T6548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.538246][ T6548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.577404][ T6548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.617208][ T6548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.669008][ T6548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.679394][ T6548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.716537][ T6548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.726987][ T6548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.776570][ T6548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.787007][ T6548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.840742][ T6548] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.850422][ T6548] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.908819][ T6548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.936996][ T6548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.977162][ T6548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.021470][ T6548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.107494][ T6548] bridge_slave_1: left allmulticast mode [ 713.113132][ T6548] bridge_slave_1: left promiscuous mode [ 713.118888][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.126651][ T6548] bridge_slave_0: left allmulticast mode [ 713.132264][ T6548] bridge_slave_0: left promiscuous mode [ 713.138517][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.146928][ T6548] bridge_slave_1: left allmulticast mode [ 713.152557][ T6548] bridge_slave_1: left promiscuous mode [ 713.158288][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.165977][ T6548] bridge_slave_0: left allmulticast mode [ 713.171605][ T6548] bridge_slave_0: left promiscuous mode [ 713.177354][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.185783][ T6548] bridge_slave_1: left allmulticast mode [ 713.191420][ T6548] bridge_slave_1: left promiscuous mode [ 713.197128][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.205602][ T6548] bridge_slave_0: left allmulticast mode [ 713.211363][ T6548] bridge_slave_0: left promiscuous mode [ 713.217070][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.357631][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.367044][ T6548] bond0 (unregistering): (slave c@0): Releasing backup interface [ 713.375729][ T6548] bond0 (unregistering): Released all slaves [ 713.465384][ T6548] bond1 (unregistering): Released all slaves [ 713.587216][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.597027][ T6548] bond0 (unregistering): (slave c@0): Releasing backup interface [ 713.605691][ T6548] bond0 (unregistering): Released all slaves [ 713.690990][ T6548] bond1 (unregistering): Released all slaves [ 713.698804][ T6548] bond2 (unregistering): Released all slaves [ 713.717671][ T6548] bond1 (unregistering): (slave geneve2): Releasing active interface [ 713.766804][ T6548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.776594][ T6548] bond0 (unregistering): (slave c@0): Releasing backup interface [ 713.785414][ T6548] bond0 (unregistering): Released all slaves [ 713.861710][ T6548] bond1 (unregistering): Released all slaves [ 713.869703][ T6548] bond2 (unregistering): Released all slaves [ 713.950441][ T6548] tipc: Left network mode [ 713.960496][ T6548] tipc: Disabling bearer [ 713.965922][ T6548] tipc: Left network mode [ 714.376529][ T6548] hsr_slave_0: left promiscuous mode [ 714.382134][ T6548] hsr_slave_1: left promiscuous mode [ 714.387745][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.395143][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.402658][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.410098][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.419294][ T6548] hsr_slave_0: left promiscuous mode [ 714.424837][ T6548] hsr_slave_1: left promiscuous mode [ 714.430331][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.437852][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.445438][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.452976][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.461519][ T6548] hsr_slave_0: left promiscuous mode [ 714.467407][ T6548] hsr_slave_1: left promiscuous mode [ 714.472881][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.480330][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.487911][ T6548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.495325][ T6548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.506863][ T6548] veth1_macvtap: left promiscuous mode [ 714.512343][ T6548] veth0_macvtap: left promiscuous mode [ 714.518337][ T6548] veth1_macvtap: left promiscuous mode [ 714.523784][ T6548] veth0_macvtap: left allmulticast mode [ 714.529365][ T6548] veth0_macvtap: left promiscuous mode [ 714.534904][ T6548] veth1_vlan: left promiscuous mode [ 714.540611][ T6548] veth1_vlan: left promiscuous mode [ 714.545870][ T6548] veth0_vlan: left promiscuous mode [ 714.678723][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 714.698839][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 714.841678][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 714.862460][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 714.926202][ T6548] team0 (unregistering): Port device dummy0 removed [ 715.003065][ T6548] team0 (unregistering): Port device team_slave_1 removed [ 715.021774][ T6548] team0 (unregistering): Port device team_slave_0 removed [ 715.074523][ T6548] team0 (unregistering): Port device dummy0 removed [ 715.092302][ T5816] lo speed is unknown, defaulting to 1000 [ 715.098128][ T5816] infiniband syz: ib_query_port failed (-19) [ 715.680591][ T6548] IPVS: stop unused estimator thread 0...