last executing test programs: 11m3.809809101s ago: executing program 4 (id=319): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000010f40)='5\a', 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 11m3.704032841s ago: executing program 4 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 11m3.659453124s ago: executing program 4 (id=323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)="00214717a707001d0000030640710a069d317ebbaaa6b6eb35cc265143ba38207d9590ff0003", 0x26}], 0x1, 0x807, 0x0) 11m3.434594519s ago: executing program 4 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x9c}}, 0x24040084) 11m3.314438556s ago: executing program 4 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 11m3.240399136s ago: executing program 4 (id=334): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) 10m48.155464687s ago: executing program 32 (id=334): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) 11.207880387s ago: executing program 1 (id=3326): mkdir(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) chdir(0x0) open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8900, 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x30c4052, &(0x7f0000000840)=ANY=[@ANYBLOB="fc31714e78ecd026fe19210ca538b5b1d1cb22b9f67a97cf5b6341e0dfd3fca6a1c6cf4883395ab29dca19f82b03885ed640122dd58dadd52ecf225fefe26eef0a8028e963e59c5cc0e88de4d6363ff18952426e97b454123c6dd9e1064c6a15ce1779c4ad2c4d1ce8bc0b1c776697a6304eb40de6ada37a98c62167d5c46d44dfdf2f819cebb4", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8=r4, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRES8=r1]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x4, 0x3}}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0xa, 0x2, 0x0) syz_io_uring_setup(0x15f, &(0x7f0000000ac0)={0x0, 0xbc36, 0x4000, 0x2, 0x400013c}, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0xf5ff) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 10.362373252s ago: executing program 2 (id=3330): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xfff1, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 9.391535265s ago: executing program 2 (id=3331): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841", @ANYBLOB="32d33cd83c2d77d1707ce4209c2fc5d7cb970d7f1bc99f978df937f145404f9669"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r3}, 0x20) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1402, 0x1, 0x70bd25, 0x25cfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040045}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r6, 0x25, 0x6, @void}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x87, 0xf, @vifc_lcl_ifindex=r6, @rand_addr=0x64010102}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) close_range(r10, r11, 0x0) 9.353262258s ago: executing program 3 (id=3333): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000540)={&(0x7f0000000440)=[{0xe9be, 0x200, 0x5c, &(0x7f00000004c0)="12ac5083867f4fd0ff50c74e8102ca9239105b01845076565a909ad8480ce4330f26987d7f98664237fcf151ddec132730faf77fe870ce616c04f438efb04881e2de8d6165e7d0d4e1864210f2dfcb746897d012a4fd82485a94e016"}], 0x1}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d828292e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc775a75bef5e5d40b68672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97bab2daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29fdd61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a95518812cac9cf2c089d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c75c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e6a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xe0000000, {0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x200, 0x6f, {0x5, 0xfffffffffffffffc, 0x4, 0x1000007, 0x3, 0x4, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r2, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) 9.248315788s ago: executing program 1 (id=3334): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000540)={&(0x7f0000000440)=[{0xe9be, 0x200, 0x5c, &(0x7f00000004c0)="12ac5083867f4fd0ff50c74e8102ca9239105b01845076565a909ad8480ce4330f26987d7f98664237fcf151ddec132730faf77fe870ce616c04f438efb04881e2de8d6165e7d0d4e1864210f2dfcb746897d012a4fd82485a94e016"}], 0x1}) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xe0000000, {0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x200, 0x6f, {0x5, 0xfffffffffffffffc, 0x4, 0x1000007, 0x3, 0x4, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r2, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.896676581s ago: executing program 0 (id=3335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x2d, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000ffff"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r6, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) io_uring_enter(r5, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.253905073s ago: executing program 5 (id=3336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x280c0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x40, @loopback, 0x6}}, 0x3, 0x6}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4211, r2) socket$nl_route(0x10, 0x3, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sched_getattr(0x0, &(0x7f0000000140)={0x38}, 0x38, 0x0) sendmmsg$inet6(r5, &(0x7f0000000000)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7.953025033s ago: executing program 0 (id=3337): timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000038c0), &(0x7f0000003900)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(0x0, 0x145142, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x5, 0x2, 0x0, 0xb, 0x0, 0x6}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x3e8, 0x4d8, 0x4d8, 0x168, 0x248, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) 7.583585089s ago: executing program 5 (id=3338): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @tick=0xf27, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x23}], 0x1) 7.279811604s ago: executing program 5 (id=3339): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046f17720fd0b2001adf90102030109021b0001000010000904"], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e65cff3b46575a37f92000008000300020000000800ce9a850b004000000006001100060000000c"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x0, 0x0, {{0x10, 0x4, 0x3, 0x36, 0x40, 0x66, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xc4, [@private=0xa010100, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x11, 0x0, [{0x5, 0xb, "d98094c22b1a4be092"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x1, 0x9}, {0xffe0, 0xa}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc061) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'lblcr\x00', 0x25, 0x5, 0x72}, 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) 7.098167421s ago: executing program 3 (id=3340): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae", 0x12c, r5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043eae0f"], 0xd) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 6.344327385s ago: executing program 0 (id=3341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40, 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3", 0x11) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0xf00, @rand_addr=0x64010101, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x860}, 0x80, 0x0}}], 0x2, 0x480d4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r9, 0x4b4b, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) 6.183851625s ago: executing program 1 (id=3342): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sync() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200447bd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0xfffffffffffffd58) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000340)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000180)={0x60, 0x3, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x1, &(0x7f00000002c0)=[{0x1, 0x0, 0xffffffff}, {0x1000, 0x7a6e, 0x9}, {0x5, 0x10001, 0x3dea}, {0x6, 0x3ff, 0x3}, {0x10, 0x3, 0xffffffffffff0000}], 0x5, 0x4, 0x5, 0x0, 0x3b, 0x12}) syz_emit_ethernet(0x46, &(0x7f0000002bc0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00%\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0xfe, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xe0, 0x36, 0x7, 0x4}}}}}}, 0x0) timer_delete(r3) socket$kcm(0x29, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.551618843s ago: executing program 3 (id=3343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff1}, {0x1, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400e7a2b91db08d9e85d510a51f8fee719b682c5c004dc5c03a262adadd4f372c847f709c65692f596c73b5bc22703bb2f67918fa7cbfa2db8d5575bf99cd6d2cb0f576217ceb54341579d97076a5d5c67942bea2d6c676ec0984ed17365afe36d041f02b51fea201000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e001f0000000c00900000000000000000000c00900000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x40090) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x22008010) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}, [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.308086433s ago: executing program 0 (id=3344): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) 5.197956681s ago: executing program 0 (id=3345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000006020000ff10181100000000000000ff00", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.171446824s ago: executing program 3 (id=3346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a0000000500040000000000090002"], 0x50}}, 0x20040000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r6, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r5, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10af9cd970fa80895a0ab6cabf63e8c52104572f16d388de2d4fe7c4809b5dcab54b1bcb5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d7"}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 5.153194196s ago: executing program 2 (id=3347): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x34, 0x0, &(0x7f0000000080)) 3.795607806s ago: executing program 1 (id=3348): creat(&(0x7f00000001c0)='./bus\x00', 0x77) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) finit_module(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) creat(&(0x7f00000001c0)='./bus\x00', 0x77) (async) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) (async) finit_module(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) 3.787091885s ago: executing program 0 (id=3349): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @tick=0xf27, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x23}], 0x1) 3.710535863s ago: executing program 1 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = socket(0x2, 0x1, 0xfffffffe) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000f4ffffff00000000000010000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYRES16=r0, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57d62ec}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {r3}}, './file0\x00'}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) r8 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) ioctl$TIOCGRS485(r6, 0x542e, &(0x7f0000000080)) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.706518889s ago: executing program 5 (id=3351): r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00\x00', 0x2, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x9, 0x8, 0x2, 0x5506, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x23a7cc6f5f77383c) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x1}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r12, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r12, &(0x7f0000005b80)={0x2020}, 0x2020) sendmsg$kcm(r12, &(0x7f0000000a40)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x4, 0x2}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)="8ef2e71f07f18d1d445964d0974502f06b64e552d42956a245647d7f2ee0e6ee7a6624ea36a3bd5a03cc21b3e223c4762e260e13544e300c26010685055d7bd0c7b16ec311abad2d00dda3d227015d112e3161b4494e10d71ec738499abc062827ee76a77888dcbc2bcf29ba9ac9f64f3bb4bd61fdbf128c44d6693bd33dea7573d4b4a9c1e129258e2e31564d7ec7f321653f6ce2ff179c458af2d86b", 0x9d}, {&(0x7f0000000500)="8f3b3264993ab6654887b1dc8effbf3d731be52d462b9214220c013284c1457b61f44b9d32c2cb478d50febbff57124918034127463b86ed059394ad9d8709668c4e8a03cf02443ef3642173cd3880a9cbb46df80bc5721a2f843f6937a3867044296fd16a67b4ef6775149059cc16aed395baab000d152949d6892c06b3c2852e1e59b9", 0x84}, {&(0x7f0000000400)="cf002a3c0ba854c2753c2510974b623afb10e3bb383d19f6c34f12bb548dcc265bd73a79da2c0b4d141e8a31e5b04d1049c64f89c6d5f125c23a5495829f1471c69178d8a9fa6aa9425711062d526ae9885f5cc2c185138b667aa001f4", 0x5d}, {&(0x7f0000000180)="29c3e25eeb1a75b215c07b06827805a9", 0x10}, {&(0x7f00000005c0)="367e6efaebe51f669cd8e457523edc4d6495cd944e2d960baa6b920b93c5637a9c8844bcd9870df678ad5efb9e061aa796ae69b2658123c1b8366d43fea000c2930d62e1da04338976ba4c2a120a93c4416d8f421c76809f3836c29871f0d355fede0f9a8eb534c69affa9882313e28b12bf62e87aead015f2eba5010defc4180fe9a0c688d689e1dc9ec2a1af55e98ecb5303a8efe43b2be7735450a93337fa4e74af21d2b2f058c1624dcbc7de4cb1ac7145e03c250cf344ffd80e0c13d3a19e9c22aea9db0706a939d63d6a54a32a1f210bd8e190271fa769acf5b6b62a0ff70789e05823a87bfb3cd010c4ec5481", 0xf0}, {&(0x7f0000000ac0)="a102e82423154d8d3eb61959e28836f292f4ad3f0ccb24306a953c476715ac654430d8b3daf90fbb855fa81384ce91eab167703abddaab2bcf7e5f5b67dd40e65f6a4e6ac798ddd554204b89f98ccc66a33ed74421f95c4ce3a06097ca7e7b509591bfae414ea3055fbf08a8009f95e3741c5879d89484bc3f7b3fd5d7ce41e6373dcfadb97368304ceb814294c8576778a3cafe152127995c6278bb0f10ad6577edacb66b557d2568bac20f", 0xac}, {&(0x7f0000000700)="8d88b456424614372aca676448964679c72e3f182d2633aa5536c25e80cc0c1a16801ae626f42f70061496ff52d4bc761c0cb223f46ec8bf958c3536513b0c143bcb57756c7087e3dd83e269ec5327d856d86b791796688ccf3218e18c2ad4fc6a72f558b963c65895859daddb44c7abb1b303d27178feba7785328cdecfd702d11af4e12b3b9d4620e4bd9780a763dbdf1bb225ae70499b3fc3d30f41b210a0dacb0922da498eb4e87e3b68da0d0f7b33c62eb775998f9c9859", 0xba}, {&(0x7f00000007c0)="2fca9e665d50cd28c0e6f6628b1ae414cb50804f7bc4ae668cfd7388e832f868395c7c71c1b1aa46ec67b42a2d5726d4ce5d10af81d8b8970ac4b7e1661ba05b4c569449b813479f0a0bd4cf10b94dbedb0dd9cc48dd412369a2eb71a3a4946f96ab6404f914ef653d6ff9f9dffd984fa68f466fab03bafa98bac0e8dfbe906afb161487223a058dddf7271b584eba49dda287b53dbf6d7d7c994bc53b6efddf9e69e8545c5ae47fc10efc7d05", 0xad}], 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x110}, 0x20040000) ioctl$GIO_SCRNMAP(r11, 0x4b40, &(0x7f0000000100)=""/54) r13 = fsmount(r11, 0x1, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000140)={r9}) splice(r8, 0x0, r11, 0x0, 0x39000, 0x0) splice(r10, 0x0, r8, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r9, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x1f, 0x0, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x60d3, 0x2}) 2.660424918s ago: executing program 2 (id=3352): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0xab20c409bcd497dd, &(0x7f0000000040)=0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000028c0)='asymmetric\x00', &(0x7f0000002980)=@keyring={'key_or_keyring:', r5}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) sync() 1.98024782s ago: executing program 3 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20010800) 1.927191032s ago: executing program 2 (id=3354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20010800) (fail_nth: 1) 1.8669172s ago: executing program 1 (id=3355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000a00)={@dev, 0x0}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'syztnl2\x00', r7, 0x4, 0x5, 0xf, 0xcf9, 0x54dab378c8703fb6, @remote, @local, 0x8000, 0x1, 0xe6, 0xff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250400000068000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626174616476001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468725f746f5f7465616d0000000800030002000000140001800800030001000000080003000200000038000180080003000000000008000100", @ANYRESOCT=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000300020000003000018008000300020000001400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003400018008000100", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r7, @ANYBLOB="080003000000000028000180080003000100000008000300030000001400020073797a6b616c6c65723000000000000060000180140002006d6163766c616e3000000000000000001400020067656e65766531000000000000000000140002006d616376746170300000000000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="340001800800030001000000140002006970365f767469300000000000000000140002006d6163766c616e300000000000000000"], 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x4004010) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000080000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x610, 0x60bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20010800) 1.699969697s ago: executing program 5 (id=3356): syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, 0x0}, 0x78) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x400c800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = io_uring_setup(0x785a, &(0x7f0000000580)={0x0, 0xddf4, 0x200, 0x3, 0x183}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r4, r4, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x6, 0x5) timer_create(0x1, &(0x7f00000000c0)={0x0, 0xa, 0x1, @tid=r1}, &(0x7f0000000280)=0x0) timer_getoverrun(r5) 1.360583427s ago: executing program 2 (id=3357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd29, 0x1000002, {0x0, 0x0, 0x12, 0x0, {}, {0xfff3, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x47, [0x5, 0x8, 0x0, 0x6, 0x3, 0xd, 0x9, 0x6, 0x6, 0x5, 0xc, 0xd, 0x9, 0x4, 0x3, 0xd], 0x1, [0x9, 0xd, 0x101, 0x7, 0x688, 0x8001, 0x4, 0x5, 0x7, 0x0, 0xb, 0x3, 0x6c9a, 0x9, 0x6, 0xbd], [0xc, 0x9, 0xf9a9, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x7, 0x4b7e, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x5, 0x6, 0x5, 0x0, 0x40000000000000}, {0x9, 0x100009, 0x53e5, 0xb}, 0x0, 0x1, 0x1, 0x1, 0x3, 0x3}, {{@in=@loopback, 0xffffeffd, 0x32}, 0xa, @in=@multicast1, 0x1502, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@overlay={0x23d6, 0x6, 0x4, 0x10000, 0x9, {}, {0x4, 0x1, 0x9, 0x2, 0x4, 0x7}, 0x1ff, 0x3, {}, 0xff}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000400)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000106000000000000000000551b000000"], 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) 1.037734685s ago: executing program 3 (id=3358): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value=0x7000000}, 0x50) 0s ago: executing program 5 (id=3359): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x0, 0x1, 0x3}) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000768a8993101020301090201120001000810000904cd000001738c00000000000000"], 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000240)={0x1fd, 0x3}) chown(&(0x7f00000003c0)='./file0\x00', r6, 0xee01) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@uname={'uname', 0x3d, 'syz1\x00'}}, {@cache_none}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@noextend}, {@cache_loose}, {@fscache}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r6}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@flag='dirsync'}, {@smackfsroot={'smackfsroot', 0x3d, 'syz1\x00'}}]}}) kernel console output (not intermixed with test programs): :sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 621.163324][ T30] audit: type=1400 audit(2000000094.680:2037): avc: denied { bind } for pid=14732 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 621.290587][ T30] audit: type=1400 audit(2000000094.680:2038): avc: denied { getopt } for pid=14732 comm="syz.0.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 621.360785][T14545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.377757][T14545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.389186][T14545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.408515][T14545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.548042][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.576486][T14545] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.625966][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.633047][ T7498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.657338][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.664531][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.723401][T14752] netlink: 'syz.5.2876': attribute type 10 has an invalid length. [ 621.743930][T14751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.773599][T14756] syzkaller0: entered promiscuous mode [ 621.779173][T14756] syzkaller0: entered allmulticast mode [ 621.964471][ T30] audit: type=1400 audit(2000000095.490:2039): avc: denied { ioctl } for pid=14762 comm="syz.3.2880" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 621.972355][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 622.001623][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.184789][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 622.234945][T14764] Device name not specified. [ 622.234945][T14764] [ 622.249683][ T30] audit: type=1400 audit(2000000095.740:2040): avc: denied { read } for pid=14762 comm="syz.3.2880" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 622.282416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.348971][ T24] usb 3-1: Product: syz [ 622.363878][ T24] usb 3-1: Manufacturer: syz [ 622.378175][T14545] veth0_vlan: entered promiscuous mode [ 622.379989][ T24] usb 3-1: SerialNumber: syz [ 622.396493][T14545] veth1_vlan: entered promiscuous mode [ 622.404401][ T24] usb 3-1: config 0 descriptor?? [ 622.555798][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 622.574860][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 622.614843][ T24] f81232 3-1:0.0: f81534a converter detected [ 623.496133][T14545] veth0_macvtap: entered promiscuous mode [ 623.533098][T14545] veth1_macvtap: entered promiscuous mode [ 623.621173][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.637723][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.657595][ T3550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.678654][ T3550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.866144][ T3550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.941957][ T3550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.942250][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.048909][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.173241][ T9134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.187795][ T9134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.234854][ T7498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.243489][ T7498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.258647][ T30] audit: type=1400 audit(2000000097.780:2041): avc: denied { mounton } for pid=14545 comm="syz-executor" path="/root/syzkaller.P7xAWr/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 624.406585][ T30] audit: type=1400 audit(2000000097.810:2042): avc: denied { mount } for pid=14545 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 624.431254][ T30] audit: type=1400 audit(2000000097.820:2043): avc: denied { mounton } for pid=14545 comm="syz-executor" path="/root/syzkaller.P7xAWr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 624.471451][ T24] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 624.478609][ T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 624.975110][ T24] usb 3-1: USB disconnect, device number 35 [ 624.989699][ T24] f81232 3-1:0.0: device disconnected [ 625.598732][ T5931] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 625.781417][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 625.797109][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.813463][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.825384][ T5931] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 625.845681][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.933180][ T5931] usb 4-1: config 0 descriptor?? [ 626.124820][T14808] syzkaller0: entered promiscuous mode [ 626.130408][T14808] syzkaller0: entered allmulticast mode [ 626.153274][T14806] xt_TCPMSS: Only works on TCP SYN packets [ 627.155731][ T5931] kye 0003:0458:5016.000D: control desc unexpectedly large [ 627.179357][ T5931] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000D/input/input17 [ 627.264277][ T5931] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000D/input/input18 [ 627.337932][ T5931] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 627.861226][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 627.861293][ T30] audit: type=1400 audit(2000000101.370:2046): avc: denied { associate } for pid=14829 comm="syz.5.2894" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 628.007352][ T5931] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 628.095729][ T30] audit: type=1400 audit(2000000101.620:2047): avc: denied { map } for pid=14836 comm="syz.1.2899" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.126816][ T30] audit: type=1400 audit(2000000101.650:2048): avc: denied { append } for pid=14836 comm="syz.1.2899" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.132415][T14837] loop6: detected capacity change from 0 to 2640 [ 628.160140][T14837] buffer_io_error: 4 callbacks suppressed [ 628.160151][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.173965][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 628.179138][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.188066][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.196905][ T5931] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 628.201082][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.207095][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.219829][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.223638][ T5931] usb 3-1: config 0 has no interface number 0 [ 628.232349][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.237797][ T5931] usb 3-1: config 0 interface 184 altsetting 0 endpoint 0x9 has invalid maxpacket 7331, setting to 64 [ 628.246497][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.257307][ T5931] usb 3-1: config 0 interface 184 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 628.274991][ T5931] usb 3-1: config 0 interface 184 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 628.285106][ T5931] usb 3-1: config 0 interface 184 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 628.298603][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.307018][T14837] ldm_validate_partition_table(): Disk read failed. [ 628.313764][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.322101][T14837] Buffer I/O error on dev loop6, logical block 0, async page read [ 628.330058][T14837] Dev loop6: unable to read RDB block 0 [ 628.336134][T14837] loop6: unable to read partition table [ 628.371737][T14837] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 628.413679][ T5931] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 628.420991][T14785] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 628.423847][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.438625][ T5931] usb 3-1: Product: syz [ 628.443460][ T5931] usb 3-1: Manufacturer: syz [ 628.448056][ T5931] usb 3-1: SerialNumber: syz [ 628.468008][ T5931] usb 3-1: config 0 descriptor?? [ 628.474077][T14820] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 628.484834][ T5931] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.698406][ T5931] usb 3-1: USB disconnect, device number 36 [ 629.424439][ T9605] usb 4-1: USB disconnect, device number 26 [ 629.570759][T14849] lo speed is unknown, defaulting to 1000 [ 630.154285][T14849] lo speed is unknown, defaulting to 1000 [ 631.253316][ T5923] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 631.364026][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.374368][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.382986][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.390697][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.401265][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.433945][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 631.445452][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.472087][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.522403][ T5923] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 631.548743][T14877] netlink: 'syz.5.2910': attribute type 10 has an invalid length. [ 631.559671][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.582944][ T5814] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 631.616212][ T5923] usb 4-1: config 0 descriptor?? [ 631.693671][T14872] lo speed is unknown, defaulting to 1000 [ 631.861689][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.884078][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.924812][T14891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.935226][T14891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.503320][ T5814] Bluetooth: hci2: command tx timeout [ 634.050571][T14872] lo speed is unknown, defaulting to 1000 [ 634.143610][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 634.149551][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 634.171675][ T5923] usb 4-1: USB disconnect, device number 27 [ 635.332434][T14872] chnl_net:caif_netlink_parms(): no params data found [ 635.621215][ T5814] Bluetooth: hci2: command tx timeout [ 636.097535][T14919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2920'. [ 636.111850][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2920'. [ 636.181809][T14872] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.203329][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.278917][T14872] bridge_slave_0: entered allmulticast mode [ 636.312195][T14872] bridge_slave_0: entered promiscuous mode [ 636.345920][T14872] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.391354][T14872] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.401131][T14872] bridge_slave_1: entered allmulticast mode [ 636.411095][T14872] bridge_slave_1: entered promiscuous mode [ 636.479480][T14872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.522465][T14872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.965124][T14872] team0: Port device team_slave_0 added [ 636.973729][T14872] team0: Port device team_slave_1 added [ 637.016441][T14872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.031590][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.072995][T14872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.101381][T14935] lo speed is unknown, defaulting to 1000 [ 637.102550][T14872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.124622][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.180696][T14872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.751187][ T5814] Bluetooth: hci2: command tx timeout [ 637.899076][T14935] lo speed is unknown, defaulting to 1000 [ 638.260345][T14872] hsr_slave_0: entered promiscuous mode [ 638.287963][T14872] hsr_slave_1: entered promiscuous mode [ 638.307057][T14872] debugfs: 'hsr0' already exists in 'hsr' [ 638.322400][T14872] Cannot create hsr debugfs directory [ 638.559716][T14950] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2926'. [ 638.744010][T14872] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.763489][T14872] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.138112][T14872] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.148464][T14872] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.214835][ T5931] libceph: connect (1)[c::]:6789 error -22 [ 639.220886][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 639.247065][T14872] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.298709][T14872] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.368959][T14961] ceph: No mds server is up or the cluster is laggy [ 639.386606][T14872] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.409749][T14970] rdma_rxe: rxe_newlink: failed to add syz_tun [ 639.440830][T14872] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.834567][ T5814] Bluetooth: hci2: command tx timeout [ 640.038345][T14872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 640.074195][T14872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 640.094329][T14872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 640.108369][T14872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 640.284244][T14872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.575209][T14872] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.603629][ T7528] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.610806][ T7528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.628898][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.636096][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.293194][T15013] loop6: detected capacity change from 0 to 524287487 [ 641.303853][T15013] buffer_io_error: 6 callbacks suppressed [ 641.303890][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.331201][ T30] audit: type=1400 audit(2000000114.810:2049): avc: denied { write } for pid=15003 comm="syz.3.2942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 641.351070][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.358973][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.397207][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.423801][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.482679][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.490709][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.541569][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.554662][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.592607][T15013] ldm_validate_partition_table(): Disk read failed. [ 641.620398][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.628638][T15013] Buffer I/O error on dev loop6, logical block 0, async page read [ 641.637057][T15013] Dev loop6: unable to read RDB block 0 [ 641.642894][T15013] loop6: unable to read partition table [ 641.648836][T15013] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 641.761860][T14872] veth0_vlan: entered promiscuous mode [ 641.796108][T14872] veth1_vlan: entered promiscuous mode [ 641.851069][ T5931] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 641.868101][T14872] veth0_macvtap: entered promiscuous mode [ 641.890207][T14872] veth1_macvtap: entered promiscuous mode [ 641.938547][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.953007][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.981670][ T7508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.991234][ T5931] usb 6-1: device descriptor read/64, error -71 [ 642.001440][ T7508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.015858][T15026] rdma_rxe: rxe_newlink: failed to add syz_tun [ 642.054122][ T7508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.093764][ T7508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.130355][ T7508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.164082][ T7508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.224440][ T7508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.231271][ T5931] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 642.249976][ T7508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.263205][T15030] 8021q: VLANs not supported on ip_vti0 [ 642.423120][ T5931] usb 6-1: device descriptor read/64, error -71 [ 642.562695][ T5931] usb usb6-port1: attempt power cycle [ 642.848962][T15044] overlayfs: failed to resolve './file0': -2 [ 642.885505][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 642.904617][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 643.025754][ T5931] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 643.036483][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 643.059654][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 643.068548][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 643.076551][ T5931] usb 6-1: device descriptor read/8, error -71 [ 643.321031][ T5931] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 643.371989][ T5931] usb 6-1: device descriptor read/8, error -71 [ 643.490533][ T5924] syz1: Port: 1 Link DOWN [ 643.515083][ T5931] usb usb6-port1: unable to enumerate USB device [ 643.539245][T15045] lo speed is unknown, defaulting to 1000 [ 643.793377][T15055] FAULT_INJECTION: forcing a failure. [ 643.793377][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 643.826805][T15055] CPU: 0 UID: 0 PID: 15055 Comm: syz.1.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.826833][T15055] Tainted: [L]=SOFTLOCKUP [ 643.826838][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.826847][T15055] Call Trace: [ 643.826852][T15055] [ 643.826858][T15055] dump_stack_lvl+0x16c/0x1f0 [ 643.826884][T15055] should_fail_ex+0x512/0x640 [ 643.826906][T15055] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 643.826923][T15055] should_failslab+0xc2/0x120 [ 643.826944][T15055] kmem_cache_alloc_noprof+0x83/0x770 [ 643.826960][T15055] ? skb_clone+0x190/0x3f0 [ 643.826982][T15055] ? skb_clone+0x190/0x3f0 [ 643.826997][T15055] skb_clone+0x190/0x3f0 [ 643.827014][T15055] netlink_deliver_tap+0xabd/0xd30 [ 643.827037][T15055] netlink_unicast+0x64c/0x870 [ 643.827059][T15055] ? __pfx_netlink_unicast+0x10/0x10 [ 643.827088][T15055] netlink_sendmsg+0x8c8/0xdd0 [ 643.827113][T15055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.827145][T15055] ____sys_sendmsg+0xa5d/0xc30 [ 643.827169][T15055] ? copy_msghdr_from_user+0x10a/0x160 [ 643.827187][T15055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.827221][T15055] ___sys_sendmsg+0x134/0x1d0 [ 643.827241][T15055] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.827292][T15055] __sys_sendmsg+0x16d/0x220 [ 643.827311][T15055] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.827347][T15055] do_syscall_64+0xcd/0xf80 [ 643.827371][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.827387][T15055] RIP: 0033:0x7f035978f749 [ 643.827400][T15055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.827416][T15055] RSP: 002b:00007f03579cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.827432][T15055] RAX: ffffffffffffffda RBX: 00007f03599e6090 RCX: 00007f035978f749 [ 643.827442][T15055] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 643.827452][T15055] RBP: 00007f03579cd090 R08: 0000000000000000 R09: 0000000000000000 [ 643.827461][T15055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.827471][T15055] R13: 00007f03599e6128 R14: 00007f03599e6090 R15: 00007fffd4231578 [ 643.827495][T15055] [ 644.157232][T15045] lo speed is unknown, defaulting to 1000 [ 644.163514][ T7545] smc: removing ib device syz1 [ 644.306060][ T30] audit: type=1400 audit(2000000117.830:2050): avc: denied { read } for pid=15059 comm="syz.1.2956" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 644.349245][ T30] audit: type=1400 audit(2000000117.850:2051): avc: denied { open } for pid=15059 comm="syz.1.2956" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 644.698206][T15045] chnl_net:caif_netlink_parms(): no params data found [ 645.143835][T15061] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.172889][ T5814] Bluetooth: hci0: command tx timeout [ 645.206268][T15061] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 645.244851][T15061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 645.276324][T15061] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 645.407339][T15061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.471265][T15061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 645.498618][T15061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 645.638948][T15061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 645.689712][T15088] rdma_rxe: rxe_newlink: failed to add syz_tun [ 645.701183][T15061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 645.839559][T15045] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.846887][T15061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 645.861451][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.899899][T15061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 645.939810][T15045] bridge_slave_0: entered allmulticast mode [ 645.945986][T15061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 646.028537][T15061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.022279][T15045] bridge_slave_0: entered promiscuous mode [ 647.026844][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 647.047048][T15045] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.081067][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.088281][T15045] bridge_slave_1: entered allmulticast mode [ 647.161798][T15045] bridge_slave_1: entered promiscuous mode [ 647.277998][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 647.420984][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.606035][ T5814] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 647.641007][ T5931] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 647.654352][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 647.657728][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.693546][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.793973][T15045] team0: Port device team_slave_0 added [ 647.803548][T15045] team0: Port device team_slave_1 added [ 647.838886][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.846763][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.874120][T15110] delete_channel: no stack [ 647.876029][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.915992][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.929001][T15114] FAULT_INJECTION: forcing a failure. [ 647.929001][T15114] name failslab, interval 1, probability 0, space 0, times 0 [ 647.942618][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.972831][T15114] CPU: 0 UID: 0 PID: 15114 Comm: syz.2.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.972848][T15114] Tainted: [L]=SOFTLOCKUP [ 647.972851][T15114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.972871][T15114] Call Trace: [ 647.972875][T15114] [ 647.972879][T15114] dump_stack_lvl+0x16c/0x1f0 [ 647.972897][T15114] should_fail_ex+0x512/0x640 [ 647.972914][T15114] ? __kmalloc_cache_noprof+0x5f/0x800 [ 647.972926][T15114] should_failslab+0xc2/0x120 [ 647.972940][T15114] __kmalloc_cache_noprof+0x80/0x800 [ 647.972950][T15114] ? rdma_join_multicast+0x1fc/0x1c00 [ 647.972967][T15114] ? rdma_join_multicast+0x1fc/0x1c00 [ 647.972979][T15114] rdma_join_multicast+0x1fc/0x1c00 [ 647.972992][T15114] ? rcu_is_watching+0x12/0xc0 [ 647.973002][T15114] ? trace_contention_end+0x38/0x110 [ 647.973019][T15114] ? __pfx_rdma_join_multicast+0x10/0x10 [ 647.973038][T15114] ? xas_clear_mark+0x16c/0x3d0 [ 647.973056][T15114] ? ucma_process_join+0x548/0xa30 [ 647.973076][T15114] ? __xas_nomem+0x1b4/0x670 [ 647.973096][T15114] ? __pfx___mutex_lock+0x10/0x10 [ 647.973118][T15114] ? __pfx___xa_alloc+0x10/0x10 [ 647.973141][T15114] ? find_held_lock+0x2b/0x80 [ 647.973163][T15114] ? ucma_process_join+0x531/0xa30 [ 647.973191][T15114] ? ucma_process_join+0x57b/0xa30 [ 647.973212][T15114] ucma_process_join+0x57b/0xa30 [ 647.973237][T15114] ? __might_fault+0x51/0x190 [ 647.973254][T15114] ? __pfx_ucma_process_join+0x10/0x10 [ 647.973281][T15114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 647.973302][T15114] ucma_join_multicast+0xe8/0x160 [ 647.973325][T15114] ? __pfx_ucma_join_multicast+0x10/0x10 [ 647.973368][T15114] ? __pfx_ucma_join_multicast+0x10/0x10 [ 647.973392][T15114] ucma_write+0x1fb/0x330 [ 647.973416][T15114] ? __pfx_ucma_write+0x10/0x10 [ 647.973437][T15114] ? bpf_lsm_file_permission+0x9/0x10 [ 647.973452][T15114] ? security_file_permission+0x71/0x210 [ 647.973475][T15114] ? rw_verify_area+0xcf/0x6c0 [ 647.973494][T15114] ? __pfx_ucma_write+0x10/0x10 [ 647.973515][T15114] vfs_write+0x2a0/0x11d0 [ 647.973540][T15114] ? __pfx_vfs_write+0x10/0x10 [ 647.973557][T15114] ? find_held_lock+0x2b/0x80 [ 647.973580][T15114] ? __fget_files+0x204/0x3c0 [ 647.973605][T15114] ? __fget_files+0x20e/0x3c0 [ 647.973632][T15114] ksys_write+0x1f8/0x250 [ 647.973651][T15114] ? __pfx_ksys_write+0x10/0x10 [ 647.973677][T15114] do_syscall_64+0xcd/0xf80 [ 647.973700][T15114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.973716][T15114] RIP: 0033:0x7f3ff258f749 [ 647.973729][T15114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.973744][T15114] RSP: 002b:00007f3ff3374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 647.973760][T15114] RAX: ffffffffffffffda RBX: 00007f3ff27e5fa0 RCX: 00007f3ff258f749 [ 647.973771][T15114] RDX: 00000000000000a0 RSI: 0000200000000d40 RDI: 0000000000000003 [ 647.973780][T15114] RBP: 00007f3ff3374090 R08: 0000000000000000 R09: 0000000000000000 [ 647.973789][T15114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.973797][T15114] R13: 00007f3ff27e6038 R14: 00007f3ff27e5fa0 R15: 00007ffe81ed8778 [ 647.973821][T15114] [ 648.314073][ T5814] Bluetooth: hci0: command 0x040f tx timeout [ 648.355495][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.412914][T15123] netlink: 'syz.1.2971': attribute type 3 has an invalid length. [ 648.420770][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'. [ 648.873926][T15045] hsr_slave_0: entered promiscuous mode [ 648.884907][T15045] hsr_slave_1: entered promiscuous mode [ 648.899728][T15045] debugfs: 'hsr0' already exists in 'hsr' [ 648.954406][T15130] FAULT_INJECTION: forcing a failure. [ 648.954406][T15130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.972074][T15045] Cannot create hsr debugfs directory [ 649.061782][T15130] CPU: 0 UID: 0 PID: 15130 Comm: syz.5.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.061810][T15130] Tainted: [L]=SOFTLOCKUP [ 649.061816][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.061825][T15130] Call Trace: [ 649.061830][T15130] [ 649.061835][T15130] dump_stack_lvl+0x16c/0x1f0 [ 649.061861][T15130] should_fail_ex+0x512/0x640 [ 649.061895][T15130] _copy_to_user+0x32/0xd0 [ 649.061919][T15130] simple_read_from_buffer+0xcb/0x170 [ 649.061942][T15130] proc_fail_nth_read+0x197/0x240 [ 649.061960][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.061978][T15130] ? rw_verify_area+0xcf/0x6c0 [ 649.061995][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.062011][T15130] vfs_read+0x1e4/0xcf0 [ 649.062032][T15130] ? __pfx___mutex_lock+0x10/0x10 [ 649.062056][T15130] ? __pfx_vfs_read+0x10/0x10 [ 649.062079][T15130] ? __fget_files+0x20e/0x3c0 [ 649.062106][T15130] ksys_read+0x12a/0x250 [ 649.062124][T15130] ? __pfx_ksys_read+0x10/0x10 [ 649.062149][T15130] do_syscall_64+0xcd/0xf80 [ 649.062170][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.062185][T15130] RIP: 0033:0x7f2b88d8e15c [ 649.062198][T15130] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 649.062211][T15130] RSP: 002b:00007f2b89c43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.062226][T15130] RAX: ffffffffffffffda RBX: 00007f2b88fe5fa0 RCX: 00007f2b88d8e15c [ 649.062236][T15130] RDX: 000000000000000f RSI: 00007f2b89c430a0 RDI: 0000000000000004 [ 649.062244][T15130] RBP: 00007f2b89c43090 R08: 0000000000000000 R09: 0000000000000000 [ 649.062252][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.062260][T15130] R13: 00007f2b88fe6038 R14: 00007f2b88fe5fa0 R15: 00007fff4bf848a8 [ 649.062283][T15130] [ 649.311669][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 649.331147][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 649.491733][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.731809][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.377429][ T5814] Bluetooth: hci0: command 0x040f tx timeout [ 650.575852][ T9483] dummy0: left allmulticast mode [ 650.582805][ T9483] bridge0: port 3(dummy0) entered disabled state [ 650.593815][ T9483] bridge_slave_1: left allmulticast mode [ 650.599490][ T9483] bridge_slave_1: left promiscuous mode [ 650.606273][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.616123][ T9483] bridge_slave_0: left allmulticast mode [ 650.621927][ T9483] bridge_slave_0: left promiscuous mode [ 650.627738][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.987989][T15157] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 650.991750][ T30] audit: type=1400 audit(2000000124.510:2052): avc: denied { getopt } for pid=15156 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 651.001845][T15157] qnx6: wrong signature (magic) in superblock #1. [ 651.048497][T15157] qnx6: unable to read the first superblock [ 651.152015][T15161] netlink: 'syz.5.2984': attribute type 30 has an invalid length. [ 651.237004][T15162] netlink: 'syz.5.2984': attribute type 30 has an invalid length. [ 651.247330][T15163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2985'. [ 651.300797][T15166] 9pnet_virtio: no channels available for device syz [ 651.574191][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 651.609003][ T30] audit: type=1400 audit(2000000125.130:2053): avc: denied { setopt } for pid=15169 comm="syz.2.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.675655][ T30] audit: type=1400 audit(2000000125.200:2054): avc: denied { ioctl } for pid=15169 comm="syz.2.2986" path="socket:[45718]" dev="sockfs" ino=45718 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.831572][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.419983][ T9483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.432616][ T9483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.441923][ T9483] bond0 (unregistering): Released all slaves [ 652.451417][ T5814] Bluetooth: hci0: command 0x040f tx timeout [ 652.528917][ T9483] bond1 (unregistering): (slave veth1): Releasing active interface [ 652.538697][ T9483] bond1 (unregistering): Released all slaves [ 652.686468][ T9483] tipc: Left network mode [ 654.394038][T15209] FAULT_INJECTION: forcing a failure. [ 654.394038][T15209] name failslab, interval 1, probability 0, space 0, times 0 [ 654.406809][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.1.2995 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.406827][T15209] Tainted: [L]=SOFTLOCKUP [ 654.406830][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.406836][T15209] Call Trace: [ 654.406842][T15209] [ 654.406847][T15209] dump_stack_lvl+0x16c/0x1f0 [ 654.406865][T15209] should_fail_ex+0x512/0x640 [ 654.406881][T15209] ? __kmalloc_cache_noprof+0x5f/0x800 [ 654.406893][T15209] should_failslab+0xc2/0x120 [ 654.406907][T15209] __kmalloc_cache_noprof+0x80/0x800 [ 654.406917][T15209] ? dev_ingress_queue_create+0x11e/0x1f0 [ 654.406933][T15209] ? dev_ingress_queue_create+0x11e/0x1f0 [ 654.406945][T15209] ? lockdep_rtnl_is_held+0x26/0x40 [ 654.406959][T15209] dev_ingress_queue_create+0x11e/0x1f0 [ 654.406972][T15209] tc_modify_qdisc+0xace/0x2230 [ 654.406990][T15209] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 654.407016][T15209] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 654.407030][T15209] rtnetlink_rcv_msg+0x3c9/0xe90 [ 654.407044][T15209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 654.407056][T15209] ? __lock_acquire+0x436/0x2890 [ 654.407071][T15209] ? ref_tracker_free+0x37c/0x830 [ 654.407083][T15209] netlink_rcv_skb+0x158/0x420 [ 654.407097][T15209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 654.407109][T15209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.407131][T15209] netlink_unicast+0x5aa/0x870 [ 654.407146][T15209] ? __pfx_netlink_unicast+0x10/0x10 [ 654.407164][T15209] netlink_sendmsg+0x8c8/0xdd0 [ 654.407179][T15209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.407197][T15209] ____sys_sendmsg+0xa5d/0xc30 [ 654.407212][T15209] ? copy_msghdr_from_user+0x10a/0x160 [ 654.407223][T15209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.407243][T15209] ___sys_sendmsg+0x134/0x1d0 [ 654.407254][T15209] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.407265][T15209] ? lock_acquire+0x179/0x330 [ 654.407292][T15209] __sys_sendmsg+0x16d/0x220 [ 654.407303][T15209] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.407313][T15209] ? __pfx___schedule+0x10/0x10 [ 654.407329][T15209] ? rcu_is_watching+0x12/0xc0 [ 654.407343][T15209] do_syscall_64+0xcd/0xf80 [ 654.407358][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.407368][T15209] RIP: 0033:0x7f035978f749 [ 654.407376][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.407386][T15209] RSP: 002b:00007f03579ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.407396][T15209] RAX: ffffffffffffffda RBX: 00007f03599e6180 RCX: 00007f035978f749 [ 654.407402][T15209] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000c [ 654.407408][T15209] RBP: 00007f03579ac090 R08: 0000000000000000 R09: 0000000000000000 [ 654.407414][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.407419][T15209] R13: 00007f03599e6218 R14: 00007f03599e6180 R15: 00007fffd4231578 [ 654.407433][T15209] [ 654.703270][ T5814] Bluetooth: hci0: command 0x040f tx timeout [ 654.744375][T15045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 655.061044][T15045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 655.332312][ T5931] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 655.354645][T15045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 655.395278][T15045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 655.506411][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 655.525358][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.532374][T15045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.579504][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.669231][ T5931] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 655.672789][T15045] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.713700][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.720869][ T7515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.871026][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.339535][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.346696][ T7515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.352693][ T5814] Bluetooth: hci0: command 0x040f tx timeout [ 657.412932][ T5931] usb 3-1: config 0 descriptor?? [ 657.475593][ T5931] usbhid 3-1:0.0: can't add hid device: -71 [ 657.580972][T15045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.615036][ T5931] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 658.080046][ T5931] usb 3-1: USB disconnect, device number 37 [ 658.143670][ T9483] hsr_slave_0: left promiscuous mode [ 658.182401][ T9483] hsr_slave_1: left promiscuous mode [ 658.194912][ T9483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.210871][ T9483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.593677][ T7525] smc: removing ib device  [ 659.064967][T15264] tmpfs: Bad value for 'mpol' [ 659.109548][ T9483] team0 (unregistering): Port device team_slave_1 removed [ 659.178159][ T9483] team0 (unregistering): Port device team_slave_0 removed [ 660.167425][ T9605] lo speed is unknown, defaulting to 1000 [ 660.179084][ T9605] syz0: Port: 1 Link DOWN [ 661.824616][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.836381][T15289] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 661.887637][ T30] audit: type=1326 audit(2000000135.410:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b88d8f749 code=0x7ffc0000 [ 662.025846][ T30] audit: type=1326 audit(2000000135.410:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15286 comm="syz.5.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b88d8f749 code=0x7ffc0000 [ 662.156336][T15045] veth0_vlan: entered promiscuous mode [ 662.191577][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'. [ 662.199620][T15045] veth1_vlan: entered promiscuous mode [ 662.340222][T15045] veth0_macvtap: entered promiscuous mode [ 662.406414][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'. [ 662.685655][T15045] veth1_macvtap: entered promiscuous mode [ 662.764745][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.823629][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.910651][ T7539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.962074][ T7539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.993275][ T7539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.022143][ T7539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.190994][ T5924] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 663.332966][T15290] lo speed is unknown, defaulting to 1000 [ 663.361960][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 663.470958][T15307] FAULT_INJECTION: forcing a failure. [ 663.470958][T15307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.485032][T15307] CPU: 1 UID: 0 PID: 15307 Comm: syz.1.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.485060][T15307] Tainted: [L]=SOFTLOCKUP [ 663.485066][T15307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.485075][T15307] Call Trace: [ 663.485081][T15307] [ 663.485088][T15307] dump_stack_lvl+0x16c/0x1f0 [ 663.485116][T15307] should_fail_ex+0x512/0x640 [ 663.485144][T15307] _copy_from_user+0x2e/0xd0 [ 663.485169][T15307] copy_msghdr_from_user+0x98/0x160 [ 663.485190][T15307] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 663.485215][T15307] ? find_held_lock+0x2b/0x80 [ 663.485244][T15307] ___sys_sendmsg+0xfe/0x1d0 [ 663.485263][T15307] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.485304][T15307] ? __pfx___might_resched+0x10/0x10 [ 663.485326][T15307] __sys_sendmmsg+0x200/0x420 [ 663.485346][T15307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 663.485360][T15307] ? __schedule+0x10b9/0x6150 [ 663.485403][T15307] ? rcu_is_watching+0x12/0xc0 [ 663.485423][T15307] __x64_sys_sendmmsg+0x9c/0x100 [ 663.485440][T15307] ? lockdep_hardirqs_on+0x7c/0x110 [ 663.485460][T15307] do_syscall_64+0xcd/0xf80 [ 663.485483][T15307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.485499][T15307] RIP: 0033:0x7f035978f749 [ 663.485512][T15307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.485527][T15307] RSP: 002b:00007f03579cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 663.485544][T15307] RAX: ffffffffffffffda RBX: 00007f03599e6090 RCX: 00007f035978f749 [ 663.485554][T15307] RDX: 1e1730a30afb6559 RSI: 0000200000000c40 RDI: 0000000000000008 [ 663.485564][T15307] RBP: 00007f03579cd090 R08: 0000000000000000 R09: 0000000000000000 [ 663.485574][T15307] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 663.485583][T15307] R13: 00007f03599e6128 R14: 00007f03599e6090 R15: 00007fffd4231578 [ 663.485607][T15307] [ 664.153059][ T5924] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 664.167163][ T5924] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 1 [ 664.189561][ T5924] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 664.203085][ T9483] IPVS: stop unused estimator thread 0... [ 664.261409][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.280416][ T7545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.284401][ T5924] usb 3-1: Product: syz [ 664.309326][ T5924] usb 3-1: Manufacturer: syz [ 664.328915][ T5924] usb 3-1: SerialNumber: syz [ 664.341411][ T7545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.451177][ T7511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.475785][ T7511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.563399][ T5924] usb 3-1: USB disconnect, device number 38 [ 665.672631][ T974] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 665.840239][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 665.856677][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.931600][ T974] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 665.954653][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.981078][ T974] usb 1-1: Product: syz [ 665.985889][ T974] usb 1-1: Manufacturer: syz [ 665.990580][ T974] usb 1-1: SerialNumber: syz [ 665.997950][ T974] usb 1-1: config 0 descriptor?? [ 666.005320][ T974] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 666.013569][T15321] netlink: 'syz.1.3023': attribute type 30 has an invalid length. [ 666.064362][T15320] netlink: 'syz.1.3023': attribute type 30 has an invalid length. [ 666.182051][T15323] 9pnet_virtio: no channels available for device syz [ 666.440363][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.452279][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.464395][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.474634][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.483321][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.650173][T15332] netlink: 'syz.5.3028': attribute type 4 has an invalid length. [ 666.726126][T15333] netlink: 'syz.5.3028': attribute type 4 has an invalid length. [ 666.985976][T15331] netlink: 'syz.5.3028': attribute type 4 has an invalid length. [ 667.035436][T15311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3024'. [ 667.130307][ T9605] IPVS: starting estimator thread 0... [ 667.143485][T15311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 667.233950][T15337] IPVS: using max 46 ests per chain, 110400 per kthread [ 667.319714][ T30] audit: type=1400 audit(2000000140.840:2057): avc: denied { read } for pid=15338 comm="syz.1.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 667.322597][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 667.402525][T15341] netlink: 'syz.3.3026': attribute type 178 has an invalid length. [ 667.418144][T15327] lo speed is unknown, defaulting to 1000 [ 667.512500][ T30] audit: type=1400 audit(2000000141.040:2058): avc: denied { ioctl } for pid=15338 comm="syz.1.3029" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 667.877217][T15350] syzkaller0: entered promiscuous mode [ 667.891978][T15350] syzkaller0: entered allmulticast mode [ 667.918992][T15353] syzkaller0: entered promiscuous mode [ 667.925828][T15353] syzkaller0: entered allmulticast mode [ 667.942527][T15327] chnl_net:caif_netlink_parms(): no params data found [ 668.099734][ T30] audit: type=1400 audit(2000000141.620:2059): avc: denied { execute } for pid=15355 comm="syz.1.3033" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.560400][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.582816][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.590025][T15327] bridge_slave_0: entered allmulticast mode [ 668.610817][ T115] usb 1-1: USB disconnect, device number 18 [ 668.692159][ T5830] Bluetooth: hci1: command tx timeout [ 668.778126][T15327] bridge_slave_0: entered promiscuous mode [ 668.794195][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.802174][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.805003][ T974] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 668.810635][T15327] bridge_slave_1: entered allmulticast mode [ 668.833463][T15327] bridge_slave_1: entered promiscuous mode [ 669.321235][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 669.333838][ T974] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 669.351459][ T974] usb 4-1: config 0 has no interface number 0 [ 669.369746][ T974] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 669.388714][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.402516][ T974] usb 4-1: Product: syz [ 669.410445][ T974] usb 4-1: Manufacturer: syz [ 669.589989][ T30] audit: type=1400 audit(2000000143.010:2060): avc: denied { execute } for pid=15370 comm="syz.1.3037" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 669.617132][ T974] usb 4-1: SerialNumber: syz [ 669.623117][ T974] usb 4-1: config 0 descriptor?? [ 669.632839][ T974] smsc95xx v2.0.0 [ 669.636489][ T974] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 669.659301][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.670495][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.680319][ T974] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 669.784953][T15327] team0: Port device team_slave_0 added [ 669.820095][T15327] team0: Port device team_slave_1 added [ 669.840629][ T974] usb 4-1: USB disconnect, device number 28 [ 670.496371][T15327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.514667][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.671949][T15327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.687941][T15327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.703863][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.760974][T15327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.770984][ T5830] Bluetooth: hci1: command tx timeout [ 670.847882][T15327] hsr_slave_0: entered promiscuous mode [ 670.856264][T15327] hsr_slave_1: entered promiscuous mode [ 670.862519][T15327] debugfs: 'hsr0' already exists in 'hsr' [ 670.868258][T15327] Cannot create hsr debugfs directory [ 671.474065][T15393] syzkaller0: entered promiscuous mode [ 671.479558][T15393] syzkaller0: entered allmulticast mode [ 671.794785][T15416] overlayfs: failed to resolve './file1': -2 [ 672.258032][T15421] evm: overlay not supported [ 672.731247][T15426] netlink: 'syz.1.3052': attribute type 4 has an invalid length. [ 672.815727][T15327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.826882][T15327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.846387][T15327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.853794][ T5830] Bluetooth: hci1: command tx timeout [ 672.869525][T15327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.095171][T15439] FAULT_INJECTION: forcing a failure. [ 673.095171][T15439] name failslab, interval 1, probability 0, space 0, times 0 [ 673.106349][T15327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.121220][T15439] CPU: 0 UID: 0 PID: 15439 Comm: syz.1.3054 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.121251][T15439] Tainted: [L]=SOFTLOCKUP [ 673.121257][T15439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.121267][T15439] Call Trace: [ 673.121272][T15439] [ 673.121279][T15439] dump_stack_lvl+0x16c/0x1f0 [ 673.121304][T15439] should_fail_ex+0x512/0x640 [ 673.121324][T15439] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 673.121344][T15439] should_failslab+0xc2/0x120 [ 673.121367][T15439] kmem_cache_alloc_node_noprof+0x86/0x800 [ 673.121382][T15439] ? __alloc_skb+0x156/0x410 [ 673.121402][T15439] ? __alloc_skb+0x156/0x410 [ 673.121414][T15439] __alloc_skb+0x156/0x410 [ 673.121427][T15439] ? __alloc_skb+0x35d/0x410 [ 673.121440][T15439] ? __pfx___alloc_skb+0x10/0x10 [ 673.121455][T15439] ? netlink_autobind.isra.0+0x158/0x370 [ 673.121483][T15439] netlink_alloc_large_skb+0x69/0x140 [ 673.121503][T15439] netlink_sendmsg+0x698/0xdd0 [ 673.121529][T15439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.121562][T15439] ____sys_sendmsg+0xa5d/0xc30 [ 673.121585][T15439] ? copy_msghdr_from_user+0x10a/0x160 [ 673.121607][T15439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.121637][T15439] ___sys_sendmsg+0x134/0x1d0 [ 673.121655][T15439] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.121706][T15439] __sys_sendmsg+0x16d/0x220 [ 673.121724][T15439] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.121753][T15439] do_syscall_64+0xcd/0xf80 [ 673.121776][T15439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.121792][T15439] RIP: 0033:0x7f035978f749 [ 673.121806][T15439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.121823][T15439] RSP: 002b:00007f03579ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.121840][T15439] RAX: ffffffffffffffda RBX: 00007f03599e5fa0 RCX: 00007f035978f749 [ 673.121850][T15439] RDX: 0000000000004000 RSI: 0000200000004440 RDI: 0000000000000003 [ 673.121860][T15439] RBP: 00007f03579ee090 R08: 0000000000000000 R09: 0000000000000000 [ 673.121870][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.121879][T15439] R13: 00007f03599e6038 R14: 00007f03599e5fa0 R15: 00007fffd4231578 [ 673.121903][T15439] [ 673.147316][T15327] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.376693][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.383895][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.433386][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.440519][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.707019][T15453] syzkaller0: entered promiscuous mode [ 673.754861][T15453] syzkaller0: entered allmulticast mode [ 674.070459][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 675.043286][ T5830] Bluetooth: hci1: command tx timeout [ 675.113872][T15327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.285862][T15327] veth0_vlan: entered promiscuous mode [ 675.299021][T15327] veth1_vlan: entered promiscuous mode [ 675.329935][T15327] veth0_macvtap: entered promiscuous mode [ 675.344794][T15327] veth1_macvtap: entered promiscuous mode [ 675.395671][T15327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.433642][T15327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.488041][ T2986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.516057][ T2986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.541701][ T2986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.550439][ T2986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.695694][T15449] lo speed is unknown, defaulting to 1000 [ 675.902943][ T30] audit: type=1400 audit(2000000149.250:2061): avc: denied { read } for pid=15481 comm="syz.1.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 676.327673][ T7517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.341199][ T7517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.414787][ T9134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.423325][ T9134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.649254][ T30] audit: type=1400 audit(2000000150.160:2062): avc: denied { ioctl } for pid=15488 comm="syz.5.3063" path="socket:[48950]" dev="sockfs" ino=48950 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 676.851371][ T5923] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 677.029946][ T5923] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 677.043159][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.101670][T14785] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 677.113968][ T5923] usb 1-1: config 0 descriptor?? [ 677.291050][T14785] usb 3-1: Using ep0 maxpacket: 8 [ 677.298121][T14785] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 677.308676][T14785] usb 3-1: config 179 has no interface number 0 [ 677.315225][T14785] usb 3-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 677.327709][T14785] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 677.340684][T14785] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 677.353442][ T5923] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 677.360659][ T5923] hackrf 1-1:0.0: Could not detect board [ 677.366461][T14785] usb 3-1: config 179 interface 65 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.378408][ T5923] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 677.386361][T14785] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.400723][ T5923] usb 1-1: USB disconnect, device number 19 [ 677.411145][T14785] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.423539][T14785] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 677.437339][T14785] usb 3-1: New USB device found, idVendor=12ab, idProduct=0000, bcdDevice=1e.eb [ 677.447477][T14785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.459466][T15498] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 677.489973][T15506] netlink: 'syz.3.3070': attribute type 30 has an invalid length. [ 677.541719][T15507] netlink: 'syz.3.3070': attribute type 30 has an invalid length. [ 677.594681][T15506] 9pnet_virtio: no channels available for device syz [ 677.674393][ T5924] usb 3-1: USB disconnect, device number 39 [ 677.688059][T15509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3071'. [ 677.918540][T15512] comedi comedi3: board detection failed [ 677.975698][ T974] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 678.111423][ T974] usb 4-1: device descriptor read/64, error -71 [ 678.435588][ T974] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 678.661732][ T974] usb 4-1: device descriptor read/64, error -71 [ 678.903860][ T974] usb usb4-port1: attempt power cycle [ 679.161249][ T5931] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 679.189540][T15540] netlink: 'syz.5.3080': attribute type 1 has an invalid length. [ 679.253600][ T974] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 679.301637][ T974] usb 4-1: device descriptor read/8, error -71 [ 679.321733][ T5931] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 679.342102][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 679.349729][ T5931] usb 3-1: can't read configurations, error -61 [ 679.460572][T15540] lo speed is unknown, defaulting to 1000 [ 679.521257][ T5931] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 679.541138][ T974] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 679.577986][ T974] usb 4-1: device descriptor read/8, error -71 [ 679.702483][ T5931] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 679.710415][ T974] usb usb4-port1: unable to enumerate USB device [ 679.724118][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 679.732340][ T5931] usb 3-1: can't read configurations, error -61 [ 679.740765][ T5931] usb usb3-port1: attempt power cycle [ 680.177439][ T5931] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 680.203996][ T5931] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 680.239648][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 680.663592][ T5931] usb 3-1: can't read configurations, error -61 [ 680.814436][ T5931] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 680.905491][ T5931] usb 3-1: too many configurations: 133, using maximum allowed: 8 [ 680.935018][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 680.946689][ T5931] usb 3-1: can't read configurations, error -61 [ 680.960425][ T5931] usb usb3-port1: unable to enumerate USB device [ 680.965458][ T30] audit: type=1400 audit(2000000154.480:2063): avc: denied { shutdown } for pid=15553 comm="syz.5.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.005504][T14785] libceph: connect (1)[c::]:6789 error -101 [ 681.015630][T14785] libceph: mon0 (1)[c::]:6789 connect error [ 681.125955][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3084'. [ 681.291613][T14785] libceph: connect (1)[c::]:6789 error -101 [ 681.300987][T15561] ceph: No mds server is up or the cluster is laggy [ 681.308110][T14785] libceph: mon0 (1)[c::]:6789 connect error [ 681.593189][T15577] netlink: 54759 bytes leftover after parsing attributes in process `syz.3.3089'. [ 681.794505][T15580] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3090'. [ 682.551919][T15596] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3096'. [ 684.105772][T15618] loop6: detected capacity change from 0 to 524288000 [ 684.161083][T15618] support for the xor transformation has been removed. [ 685.011445][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 685.019699][T15597] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 685.335361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.341710][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.531700][T15597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.537937][T15597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 685.544205][T15597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.550447][T15597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 685.556694][T15597] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 685.563361][T15597] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 685.665030][T15636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3106'. [ 685.738715][T15641] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3104'. [ 686.824969][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 687.724909][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout [ 687.724944][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 687.733383][ T5830] Bluetooth: hci0: command 0x040f tx timeout [ 687.736934][ T5814] Bluetooth: hci2: command 0x0c1a tx timeout [ 688.142225][ T30] audit: type=1400 audit(2000000161.670:2064): avc: denied { read write } for pid=15663 comm="syz.3.3114" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 688.184483][ T30] audit: type=1400 audit(2000000161.690:2065): avc: denied { open } for pid=15663 comm="syz.3.3114" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 688.220588][T15665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.291253][ T30] audit: type=1400 audit(2000000161.820:2066): avc: denied { connect } for pid=15666 comm="syz.5.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 688.315811][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.393650][T15662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.461037][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3116'. [ 688.805016][T15673] syzkaller0: entered promiscuous mode [ 688.820031][T15673] syzkaller0: entered allmulticast mode [ 690.006990][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 690.866171][ T30] audit: type=1400 audit(2000000164.390:2067): avc: denied { getopt } for pid=15693 comm="syz.0.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 690.899011][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3123'. [ 690.998070][T15697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3123'. [ 691.421053][T14785] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 691.691015][T14785] usb 4-1: Using ep0 maxpacket: 32 [ 691.802532][T14785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.855488][T14785] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 691.874655][T14785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.901045][T14785] usb 4-1: Product: syz [ 691.905538][T14785] usb 4-1: Manufacturer: syz [ 691.910140][T14785] usb 4-1: SerialNumber: syz [ 691.932996][T14785] usb 4-1: config 0 descriptor?? [ 691.949613][T14785] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 692.051589][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.472714][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3124'. [ 692.487438][ T5924] IPVS: starting estimator thread 0... [ 692.561412][T15717] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 692.631014][T15718] IPVS: using max 44 ests per chain, 105600 per kthread [ 692.712039][ T5923] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 692.746902][ T5924] usb 4-1: USB disconnect, device number 33 [ 692.761749][T15720] syzkaller0: entered promiscuous mode [ 692.770821][T15720] syzkaller0: entered allmulticast mode [ 692.825246][T15722] overlayfs: cannot append lower layer [ 692.870966][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 692.948850][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.979542][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.998709][ T5923] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 693.009214][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.020801][ T5923] usb 3-1: config 0 descriptor?? [ 693.359790][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.373904][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.680744][T15735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.691366][T15735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.232861][T15318] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 695.351414][T15759] netlink: 'syz.0.3141': attribute type 30 has an invalid length. [ 695.381724][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 695.387834][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 695.449542][T15756] ceph: No mds server is up or the cluster is laggy [ 695.725750][T15318] usb 4-1: no configurations [ 695.730416][T15318] usb 4-1: can't read configurations, error -22 [ 695.768430][T15762] netlink: 'syz.0.3141': attribute type 30 has an invalid length. [ 695.776874][ T974] libceph: connect (1)[c::]:6789 error -101 [ 695.777762][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 695.784435][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 695.868895][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 695.878384][ T5923] usb 3-1: USB disconnect, device number 44 [ 695.901949][T15759] 9pnet_virtio: no channels available for device syz [ 695.959014][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 695.986307][T15766] syzkaller0: entered promiscuous mode [ 695.991758][T15318] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 696.003285][T15766] syzkaller0: entered allmulticast mode [ 696.151580][T15318] usb 4-1: no configurations [ 696.156266][T15318] usb 4-1: can't read configurations, error -22 [ 696.171299][T15318] usb usb4-port1: attempt power cycle [ 696.661092][T15318] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 696.694038][T15318] usb 4-1: no configurations [ 696.698796][T15318] usb 4-1: can't read configurations, error -22 [ 696.871067][T15318] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 696.912787][T15318] usb 4-1: no configurations [ 696.913856][T15792] FAULT_INJECTION: forcing a failure. [ 696.913856][T15792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.930116][T15318] usb 4-1: can't read configurations, error -22 [ 696.930694][T15792] CPU: 0 UID: 0 PID: 15792 Comm: syz.5.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.930716][T15792] Tainted: [L]=SOFTLOCKUP [ 696.930722][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 696.930730][T15792] Call Trace: [ 696.930735][T15792] [ 696.930740][T15792] dump_stack_lvl+0x16c/0x1f0 [ 696.930764][T15792] should_fail_ex+0x512/0x640 [ 696.930792][T15792] _copy_from_iter+0x2a4/0x16c0 [ 696.930818][T15792] ? __pfx__copy_from_iter+0x10/0x10 [ 696.930838][T15792] ? rcu_is_watching+0x12/0xc0 [ 696.930853][T15792] ? trace_kmalloc+0x2b/0xb0 [ 696.930887][T15792] ? __kmalloc_noprof.cold+0x5d/0x62 [ 696.930906][T15792] ? selinux_file_permission+0x126/0x660 [ 696.930925][T15792] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 696.930944][T15792] qrtr_tun_write_iter+0xe7/0x1b0 [ 696.930963][T15792] aio_write+0x3b9/0x910 [ 696.930987][T15792] ? __pfx_aio_write+0x10/0x10 [ 696.931008][T15792] ? __lock_acquire+0x436/0x2890 [ 696.931038][T15792] ? __might_fault+0xe3/0x190 [ 696.931050][T15792] ? __might_fault+0x13b/0x190 [ 696.931067][T15792] ? io_submit_one+0x1243/0x1e70 [ 696.931080][T15792] io_submit_one+0x1243/0x1e70 [ 696.931096][T15792] ? __lock_acquire+0x436/0x2890 [ 696.931115][T15792] ? __pfx_io_submit_one+0x10/0x10 [ 696.931136][T15792] ? __might_fault+0xe3/0x190 [ 696.931147][T15792] ? __might_fault+0x13b/0x190 [ 696.931165][T15792] ? __x64_sys_io_submit+0x1a9/0x370 [ 696.931179][T15792] __x64_sys_io_submit+0x1a9/0x370 [ 696.931195][T15792] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 696.931208][T15792] ? fput+0x70/0xf0 [ 696.931229][T15792] do_syscall_64+0xcd/0xf80 [ 696.931249][T15792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.931262][T15792] RIP: 0033:0x7f2b88d8f749 [ 696.931274][T15792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.931287][T15792] RSP: 002b:00007f2b89c43038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 696.931301][T15792] RAX: ffffffffffffffda RBX: 00007f2b88fe5fa0 RCX: 00007f2b88d8f749 [ 696.931310][T15792] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f2b89c1f000 [ 696.931319][T15792] RBP: 00007f2b89c43090 R08: 0000000000000000 R09: 0000000000000000 [ 696.931327][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.931335][T15792] R13: 00007f2b88fe6038 R14: 00007f2b88fe5fa0 R15: 00007fff4bf848a8 [ 696.931355][T15792] [ 697.234246][ T30] audit: type=1400 audit(2000000170.760:2068): avc: denied { map } for pid=15793 comm="syz.2.3154" path="/proc/47/fdinfo/4" dev="proc" ino=49675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 697.311262][T15318] usb usb4-port1: unable to enumerate USB device [ 697.312860][ T30] audit: type=1400 audit(2000000170.800:2069): avc: denied { ioctl } for pid=15793 comm="syz.2.3154" path="socket:[49673]" dev="sockfs" ino=49673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 697.447446][T15801] netlink: 'syz.5.3157': attribute type 30 has an invalid length. [ 697.505760][T15804] netlink: 'syz.5.3157': attribute type 30 has an invalid length. [ 697.629535][T15807] 9pnet_virtio: no channels available for device syz [ 699.026038][T15832] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 699.066219][T15832] bond1: entered promiscuous mode [ 699.071694][ T974] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 699.092636][T15832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.125721][T15834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.146727][T15834] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 699.166187][T15834] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 699.179858][T15834] bond1: (slave gre1): making interface the new active one [ 699.187556][T15834] gre1: entered promiscuous mode [ 699.194460][T15834] bond1: (slave gre1): Enslaving as an active interface with an up link [ 699.211988][ T5924] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 699.221193][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 699.232590][ T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.264982][ T974] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 699.281219][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.294409][ T974] usb 3-1: Product: syz [ 699.298589][ T974] usb 3-1: Manufacturer: syz [ 699.303985][ T974] usb 3-1: SerialNumber: syz [ 699.382214][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 699.402663][ T5924] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 699.430262][ T5924] usb 1-1: config 251 has no interface number 0 [ 699.449438][ T5924] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 699.462070][ T5924] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 699.477438][ T5924] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 699.647194][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'. [ 699.800938][ T5924] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 699.811407][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3163'. [ 699.841361][ T5924] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 699.907114][ T5924] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 699.929547][ T5924] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.988534][ T5924] usb 1-1: config 251 interface 202 has no altsetting 0 [ 700.009794][ T5924] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 700.035310][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.046775][ T5924] usb 1-1: Product: syz [ 700.067923][ T5924] usb 1-1: Manufacturer: syz [ 700.073320][ T5924] usb 1-1: SerialNumber: syz [ 700.086003][T15830] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 700.098457][T15830] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 700.130075][ T974] usb 3-1: USB disconnect, device number 45 [ 700.493437][ T5924] cxacru 1-1:251.202: send of cm 0x90 failed (-71) [ 700.505041][ T5924] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 700.522866][ T5924] cxacru 1-1:251.202: probe with driver cxacru failed with error -22 [ 700.542204][ T5924] usb 1-1: USB disconnect, device number 20 [ 702.694794][T15893] FAULT_INJECTION: forcing a failure. [ 702.694794][T15893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.709780][T15893] CPU: 0 UID: 0 PID: 15893 Comm: syz.2.3187 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.709813][T15893] Tainted: [L]=SOFTLOCKUP [ 702.709818][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 702.709828][T15893] Call Trace: [ 702.709840][T15893] [ 702.709845][T15893] dump_stack_lvl+0x16c/0x1f0 [ 702.709873][T15893] should_fail_ex+0x512/0x640 [ 702.709898][T15893] _copy_to_user+0x32/0xd0 [ 702.709923][T15893] bpf_prog_test_run_raw_tp+0x53f/0x710 [ 702.709946][T15893] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 702.709967][T15893] ? fput+0x70/0xf0 [ 702.709981][T15893] ? __bpf_prog_get+0x97/0x2a0 [ 702.709998][T15893] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 702.710015][T15893] __sys_bpf+0x1035/0x4980 [ 702.710040][T15893] ? __pfx___sys_bpf+0x10/0x10 [ 702.710059][T15893] ? find_held_lock+0x2b/0x80 [ 702.710088][T15893] ? find_held_lock+0x2b/0x80 [ 702.710117][T15893] ? __mutex_unlock_slowpath+0x161/0x790 [ 702.710154][T15893] ? fput+0x70/0xf0 [ 702.710168][T15893] ? ksys_write+0x1ac/0x250 [ 702.710187][T15893] ? __pfx_ksys_write+0x10/0x10 [ 702.710210][T15893] __x64_sys_bpf+0x78/0xc0 [ 702.710229][T15893] ? lockdep_hardirqs_on+0x7c/0x110 [ 702.710250][T15893] do_syscall_64+0xcd/0xf80 [ 702.710273][T15893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.710290][T15893] RIP: 0033:0x7f4dffd8f749 [ 702.710303][T15893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.710318][T15893] RSP: 002b:00007f4e00ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 702.710334][T15893] RAX: ffffffffffffffda RBX: 00007f4dfffe5fa0 RCX: 00007f4dffd8f749 [ 702.710344][T15893] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 702.710353][T15893] RBP: 00007f4e00ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 702.710362][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.710371][T15893] R13: 00007f4dfffe6038 R14: 00007f4dfffe5fa0 R15: 00007fff02c62de8 [ 702.710395][T15893] [ 703.075259][T15899] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 703.124953][ T30] audit: type=1400 audit(2000000176.610:2070): avc: denied { read } for pid=15897 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 703.533976][T15907] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3190'. [ 703.561571][T15909] FAULT_INJECTION: forcing a failure. [ 703.561571][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 703.664262][T15909] CPU: 1 UID: 0 PID: 15909 Comm: syz.2.3192 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.664290][T15909] Tainted: [L]=SOFTLOCKUP [ 703.664298][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.664307][T15909] Call Trace: [ 703.664312][T15909] [ 703.664318][T15909] dump_stack_lvl+0x16c/0x1f0 [ 703.664340][T15909] should_fail_ex+0x512/0x640 [ 703.664359][T15909] should_failslab+0xc2/0x120 [ 703.664374][T15909] kmem_cache_alloc_node_noprof+0x86/0x800 [ 703.664385][T15909] ? __alloc_skb+0x156/0x410 [ 703.664398][T15909] ? __alloc_skb+0x156/0x410 [ 703.664406][T15909] __alloc_skb+0x156/0x410 [ 703.664414][T15909] ? __alloc_skb+0x35d/0x410 [ 703.664422][T15909] ? __pfx___alloc_skb+0x10/0x10 [ 703.664436][T15909] hci_sock_sendmsg+0x1b0c/0x26b0 [ 703.664453][T15909] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 703.664469][T15909] sock_write_iter+0x566/0x610 [ 703.664484][T15909] ? __pfx_sock_write_iter+0x10/0x10 [ 703.664503][T15909] ? bpf_lsm_file_permission+0x9/0x10 [ 703.664514][T15909] ? security_file_permission+0x71/0x210 [ 703.664529][T15909] ? rw_verify_area+0xcf/0x6c0 [ 703.664542][T15909] vfs_write+0x7d3/0x11d0 [ 703.664555][T15909] ? __pfx_sock_write_iter+0x10/0x10 [ 703.664570][T15909] ? __pfx_vfs_write+0x10/0x10 [ 703.664582][T15909] ? find_held_lock+0x2b/0x80 [ 703.664607][T15909] ksys_write+0x1f8/0x250 [ 703.664620][T15909] ? __pfx_ksys_write+0x10/0x10 [ 703.664636][T15909] do_syscall_64+0xcd/0xf80 [ 703.664652][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.664662][T15909] RIP: 0033:0x7f4dffd8f749 [ 703.664671][T15909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.664682][T15909] RSP: 002b:00007f4e00ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.664692][T15909] RAX: ffffffffffffffda RBX: 00007f4dfffe5fa0 RCX: 00007f4dffd8f749 [ 703.664698][T15909] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000017 [ 703.664704][T15909] RBP: 00007f4e00ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 703.664710][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.664715][T15909] R13: 00007f4dfffe6038 R14: 00007f4dfffe5fa0 R15: 00007fff02c62de8 [ 703.664729][T15909] [ 703.664826][T15909] Bluetooth: MGMT ver 1.23 [ 704.173323][T15911] infiniband pyz1: RDMA CMA: cma_listen_on_dev, error -98 [ 704.209405][T15908] delete_channel: no stack [ 706.060929][T15924] 0x000000002f70-0x000000020000 : "" [ 706.479006][T15924] ftl_cs: FTL header corrupt! [ 708.837574][T15947] netlink: 'syz.2.3198': attribute type 3 has an invalid length. [ 709.402842][T15950] input: syz0 as /devices/virtual/input/input19 [ 709.910983][ T115] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 710.040282][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3208'. [ 710.064654][ T115] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 710.077351][ T115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.088896][ T115] usb 3-1: config 0 descriptor?? [ 710.096436][ T115] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 710.104858][T15486] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 710.225380][T15974] tipc: Enabled bearer , priority 10 [ 710.283221][T15486] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.303857][ T115] gp8psk: usb in 128 operation failed. [ 710.313138][T15486] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 710.328069][ T115] gp8psk: usb in 137 operation failed. [ 710.339389][ T115] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 710.352777][T15486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 710.366172][T14785] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 710.394713][T15986] syzkaller0: entered promiscuous mode [ 710.394721][ T115] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 710.410513][T15986] syzkaller0: entered allmulticast mode [ 710.411280][ T115] usb 3-1: USB disconnect, device number 46 [ 710.425167][T15486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 710.449990][T15486] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 710.484745][T15486] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 710.504908][T15486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 710.527194][T15486] usb 1-1: Product: syz [ 710.537045][T15486] usb 1-1: Manufacturer: syz [ 710.546423][T15486] usb 1-1: SerialNumber: syz [ 710.553162][T15486] usb 1-1: config 0 descriptor?? [ 710.583292][T14785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.601521][T14785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.634166][T14785] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 710.648956][T14785] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 710.661403][T14785] usb 4-1: Manufacturer: syz [ 710.669871][T14785] usb 4-1: config 0 descriptor?? [ 710.712358][T15991] gre1: entered promiscuous mode [ 710.883776][ T30] audit: type=1400 audit(2000000184.410:2071): avc: denied { setopt } for pid=15977 comm="syz.3.3210" lport=58764 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 710.944329][ T30] audit: type=1400 audit(2000000184.410:2072): avc: denied { write } for pid=15977 comm="syz.3.3210" lport=58764 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 711.019402][T15998] FAULT_INJECTION: forcing a failure. [ 711.019402][T15998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.044798][T15998] CPU: 0 UID: 0 PID: 15998 Comm: syz.5.3215 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.044826][T15998] Tainted: [L]=SOFTLOCKUP [ 711.044830][T15998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.044838][T15998] Call Trace: [ 711.044842][T15998] [ 711.044846][T15998] dump_stack_lvl+0x16c/0x1f0 [ 711.044864][T15998] should_fail_ex+0x512/0x640 [ 711.044881][T15998] _copy_to_user+0x32/0xd0 [ 711.044900][T15998] simple_read_from_buffer+0xcb/0x170 [ 711.044924][T15998] proc_fail_nth_read+0x197/0x240 [ 711.044941][T15998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.044958][T15998] ? rw_verify_area+0xcf/0x6c0 [ 711.044975][T15998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 711.044987][T15998] vfs_read+0x1e4/0xcf0 [ 711.045001][T15998] ? __pfx___mutex_lock+0x10/0x10 [ 711.045017][T15998] ? __pfx_vfs_read+0x10/0x10 [ 711.045033][T15998] ? __fget_files+0x20e/0x3c0 [ 711.045059][T15998] ksys_read+0x12a/0x250 [ 711.045078][T15998] ? __pfx_ksys_read+0x10/0x10 [ 711.045100][T15998] ? rcu_is_watching+0x12/0xc0 [ 711.045118][T15998] do_syscall_64+0xcd/0xf80 [ 711.045138][T15998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.045154][T15998] RIP: 0033:0x7f2b88d8e15c [ 711.045167][T15998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 711.045181][T15998] RSP: 002b:00007f2b89c43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.045196][T15998] RAX: ffffffffffffffda RBX: 00007f2b88fe5fa0 RCX: 00007f2b88d8e15c [ 711.045207][T15998] RDX: 000000000000000f RSI: 00007f2b89c430a0 RDI: 0000000000000004 [ 711.045215][T15998] RBP: 00007f2b89c43090 R08: 0000000000000000 R09: 0000000000000000 [ 711.045225][T15998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.045234][T15998] R13: 00007f2b88fe6038 R14: 00007f2b88fe5fa0 R15: 00007fff4bf848a8 [ 711.045257][T15998] [ 711.071234][T15486] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 711.381080][T15992] infiniband syz1: set active [ 711.386293][T15992] infiniband syz1: added syz_tun [ 711.453953][T15486] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 711.525978][ T5945] tipc: Node number set to 4033411297 [ 711.640870][T15992] RDS/IB: syz1: added [ 711.645503][T15992] smc: adding ib device syz1 with port count 1 [ 711.652718][T15992] smc: ib device syz1 port 1 has no pnetid [ 711.821205][T14785] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000E/input/input20 [ 711.977174][T14785] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000E/input/input21 [ 712.002492][T14785] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000E/input/input22 [ 712.011236][ T30] audit: type=1400 audit(2000000185.530:2073): avc: denied { setopt } for pid=15977 comm="syz.3.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 712.065008][T14785] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000E/input/input23 [ 712.097665][T14785] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 712.791110][T15969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.847440][T14785] usb 1-1: USB disconnect, device number 21 [ 713.020985][T15486] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 713.386058][T16021] netlink: 'syz.5.3220': attribute type 30 has an invalid length. [ 713.693234][T16023] netlink: 'syz.5.3220': attribute type 30 has an invalid length. [ 713.763424][T16021] 9pnet_virtio: no channels available for device syz [ 714.581713][ T115] usb 4-1: USB disconnect, device number 38 [ 714.916127][T16048] FAULT_INJECTION: forcing a failure. [ 714.916127][T16048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.960123][T16048] CPU: 0 UID: 0 PID: 16048 Comm: syz.0.3227 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.960152][T16048] Tainted: [L]=SOFTLOCKUP [ 714.960159][T16048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.960169][T16048] Call Trace: [ 714.960174][T16048] [ 714.960181][T16048] dump_stack_lvl+0x16c/0x1f0 [ 714.960208][T16048] should_fail_ex+0x512/0x640 [ 714.960237][T16048] _copy_from_iter+0x2a4/0x16c0 [ 714.960268][T16048] ? __pfx__copy_from_iter+0x10/0x10 [ 714.960293][T16048] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 714.960325][T16048] copy_page_from_iter+0xde/0x180 [ 714.960353][T16048] tun_build_skb.constprop.0+0x2e8/0x1560 [ 714.960388][T16048] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 714.960413][T16048] ? arch_stack_walk+0xa6/0x100 [ 714.960450][T16048] ? _kstrtoull+0x145/0x200 [ 714.960471][T16048] tun_get_user+0x149c/0x3cc0 [ 714.960507][T16048] ? __pfx_tun_get_user+0x10/0x10 [ 714.960534][T16048] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 714.960558][T16048] ? find_held_lock+0x2b/0x80 [ 714.960585][T16048] ? tun_get+0x191/0x370 [ 714.960613][T16048] tun_chr_write_iter+0xdc/0x210 [ 714.960639][T16048] vfs_write+0x7d3/0x11d0 [ 714.960660][T16048] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 714.960688][T16048] ? __pfx_vfs_write+0x10/0x10 [ 714.960707][T16048] ? find_held_lock+0x2b/0x80 [ 714.960746][T16048] ksys_write+0x12a/0x250 [ 714.960767][T16048] ? __pfx_ksys_write+0x10/0x10 [ 714.960794][T16048] do_syscall_64+0xcd/0xf80 [ 714.960818][T16048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.960835][T16048] RIP: 0033:0x7f6a0c58e1ff [ 714.960849][T16048] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 714.960874][T16048] RSP: 002b:00007f6a0d382000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 714.960890][T16048] RAX: ffffffffffffffda RBX: 00007f6a0c7e5fa0 RCX: 00007f6a0c58e1ff [ 714.960900][T16048] RDX: 000000000000007e RSI: 0000200000000040 RDI: 00000000000000c8 [ 714.960908][T16048] RBP: 00007f6a0d382090 R08: 0000000000000000 R09: 0000000000000000 [ 714.960917][T16048] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 714.960925][T16048] R13: 00007f6a0c7e6038 R14: 00007f6a0c7e5fa0 R15: 00007ffef5c01f58 [ 714.960945][T16048] [ 715.379716][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3226'. [ 715.532369][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 715.541427][T16056] netlink: 'syz.1.3228': attribute type 5 has an invalid length. [ 715.549213][T16056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3228'. [ 715.588013][T16056] geneve2: entered promiscuous mode [ 715.593388][T16056] geneve2: entered allmulticast mode [ 715.606075][ T30] audit: type=1400 audit(2000000189.050:2074): avc: denied { watch } for pid=16050 comm="syz.1.3228" path="/71/file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 715.795193][ T7528] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 715.814244][ T7528] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 715.823597][ T30] audit: type=1400 audit(2000000189.050:2075): avc: denied { watch_sb } for pid=16050 comm="syz.1.3228" path="/71/file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 715.856403][ T7528] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 715.869442][ T7528] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 716.102042][T16064] tipc: Enabled bearer , priority 0 [ 716.474014][T16064] syzkaller0: entered promiscuous mode [ 716.507388][T16064] syzkaller0: entered allmulticast mode [ 716.664058][T16064] tipc: Resetting bearer [ 716.697293][T16062] tipc: Resetting bearer [ 716.972360][ T5945] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 717.197395][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.216350][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 717.228413][ T5945] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 717.289576][T16083] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 717.392155][ T30] audit: type=1400 audit(2000000190.830:2076): avc: denied { relabelto } for pid=16077 comm="syz.2.3237" name="34" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 717.565597][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.578268][ T30] audit: type=1400 audit(2000000190.830:2077): avc: denied { associate } for pid=16077 comm="syz.2.3237" name="34" dev="tmpfs" ino=188 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 717.607471][ T5945] usb 4-1: config 0 descriptor?? [ 717.631637][ T30] audit: type=1400 audit(2000000190.830:2078): avc: denied { mounton } for pid=16077 comm="syz.2.3237" path="/34" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 717.733720][ T5945] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 717.769296][ T5945] dvb-usb: bulk message failed: -22 (3/0) [ 717.793187][ T5945] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 717.802224][ T5945] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 717.810508][ T5945] usb 4-1: media controller created [ 717.829861][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.887027][ T5945] dvb-usb: bulk message failed: -22 (6/0) [ 717.893738][ T5945] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 717.902969][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 717.925448][ T5945] dvb-usb: schedule remote query interval to 150 msecs. [ 717.932791][ T5945] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 718.053728][ T30] audit: type=1400 audit(2000000191.580:2079): avc: denied { remove_name } for pid=15327 comm="syz-executor" name="binderfs" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 718.092859][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 718.098623][ T5945] dvb-usb: error while querying for an remote control event. [ 718.119205][ T30] audit: type=1400 audit(2000000191.610:2080): avc: denied { rmdir } for pid=15327 comm="syz-executor" name="34" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 718.274725][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 718.286073][ T5945] dvb-usb: error while querying for an remote control event. [ 718.453580][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 718.459342][ T5945] dvb-usb: error while querying for an remote control event. [ 718.634971][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 718.640820][ T5945] dvb-usb: error while querying for an remote control event. [ 718.813931][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 718.819697][ T5945] dvb-usb: error while querying for an remote control event. [ 718.993198][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.006907][ T5945] dvb-usb: error while querying for an remote control event. [ 719.188943][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.197552][ T5945] dvb-usb: error while querying for an remote control event. [ 719.374319][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.380303][ T5945] dvb-usb: error while querying for an remote control event. [ 719.568208][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.574206][ T5945] dvb-usb: error while querying for an remote control event. [ 719.745771][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.751969][ T5945] dvb-usb: error while querying for an remote control event. [ 719.813289][T16062] tipc: Disabling bearer [ 719.921660][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 719.929021][ T30] audit: type=1400 audit(2000000193.450:2081): avc: denied { getopt } for pid=16100 comm="syz.0.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 719.934027][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3241'. [ 719.960932][ T5945] dvb-usb: error while querying for an remote control event. [ 720.058256][ T5945] usb 4-1: USB disconnect, device number 39 [ 720.105507][ T5945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 720.379272][ T5924] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 720.402385][T16113] rdma_rxe: rxe_newlink: failed to add syz_tun [ 720.531608][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 720.538171][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.580352][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.707396][ T5924] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 720.767584][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.815329][ T5924] usb 6-1: config 0 descriptor?? [ 721.113128][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.167029][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.703355][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.713296][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.793325][ T30] audit: type=1400 audit(2000000195.320:2082): avc: denied { add_name } for pid=16104 comm="syz.1.3243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 722.045427][ T30] audit: type=1400 audit(2000000195.430:2083): avc: denied { create } for pid=16104 comm="syz.1.3243" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 722.107847][ T30] audit: type=1400 audit(2000000195.430:2084): avc: denied { associate } for pid=16104 comm="syz.1.3243" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 722.282144][ T115] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 722.318499][ T30] audit: type=1400 audit(2000000195.840:2085): avc: denied { setopt } for pid=16137 comm="syz.1.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 722.442338][ T115] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.454814][ T115] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 722.482900][ T115] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 722.493769][ T115] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 722.503073][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.511021][T12647] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 722.516261][ T115] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 722.526636][ T115] usb 4-1: invalid MIDI out EP 0 [ 722.570499][ T115] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 722.778040][T12647] usb 1-1: Using ep0 maxpacket: 32 [ 722.945425][T12647] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 722.954592][ T974] usb 4-1: USB disconnect, device number 40 [ 722.966786][T12647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.978031][T12647] usb 1-1: Product: syz [ 723.005620][T12647] usb 1-1: Manufacturer: syz [ 723.037545][T12647] usb 1-1: SerialNumber: syz [ 723.064850][T12647] usb 1-1: config 0 descriptor?? [ 723.084229][T12647] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 723.123163][ T5924] usbhid 6-1:0.0: can't add hid device: -71 [ 723.129278][ T5924] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 723.153051][ T5924] usb 6-1: USB disconnect, device number 33 [ 723.373668][T16158] FAULT_INJECTION: forcing a failure. [ 723.373668][T16158] name failslab, interval 1, probability 0, space 0, times 0 [ 723.446549][T16158] CPU: 0 UID: 0 PID: 16158 Comm: syz.1.3256 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.446583][T16158] Tainted: [L]=SOFTLOCKUP [ 723.446589][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.446600][T16158] Call Trace: [ 723.446606][T16158] [ 723.446613][T16158] dump_stack_lvl+0x16c/0x1f0 [ 723.446640][T16158] should_fail_ex+0x512/0x640 [ 723.446665][T16158] ? kmem_cache_alloc_noprof+0x62/0x770 [ 723.446685][T16158] should_failslab+0xc2/0x120 [ 723.446708][T16158] kmem_cache_alloc_noprof+0x83/0x770 [ 723.446723][T16158] ? getname_flags.part.0+0x4c/0x550 [ 723.446751][T16158] ? getname_flags.part.0+0x4c/0x550 [ 723.446767][T16158] getname_flags.part.0+0x4c/0x550 [ 723.446787][T16158] getname_flags+0x93/0xf0 [ 723.446806][T16158] user_path_at+0x24/0x60 [ 723.446827][T16158] __x64_sys_mount+0x1fb/0x310 [ 723.446844][T16158] ? __pfx___x64_sys_mount+0x10/0x10 [ 723.446862][T16158] ? rcu_is_watching+0x12/0xc0 [ 723.446882][T16158] do_syscall_64+0xcd/0xf80 [ 723.446905][T16158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.446921][T16158] RIP: 0033:0x7f035978f749 [ 723.446935][T16158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.446951][T16158] RSP: 002b:00007f03579ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 723.446968][T16158] RAX: ffffffffffffffda RBX: 00007f03599e5fa0 RCX: 00007f035978f749 [ 723.446979][T16158] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 0000000000000000 [ 723.446989][T16158] RBP: 00007f03579ee090 R08: 0000200000000100 R09: 0000000000000000 [ 723.446999][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.447008][T16158] R13: 00007f03599e6038 R14: 00007f03599e5fa0 R15: 00007fffd4231578 [ 723.447032][T16158] [ 723.923347][T16167] overlay: ./file0 is not a directory [ 724.072244][T16170] netlink: 'syz.3.3260': attribute type 13 has an invalid length. [ 725.201810][T12647] gspca_topro: Sensor cx0342 [ 725.221928][T16170] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.229281][T16170] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.305029][ T30] audit: type=1400 audit(2000000198.830:2086): avc: denied { unmount } for pid=7215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 725.350457][T16179] rdma_rxe: rxe_newlink: failed to add syz_tun [ 725.489009][T16170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.513520][T16170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.697659][ T30] audit: type=1400 audit(2000000199.220:2087): avc: denied { create } for pid=16184 comm="syz.5.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 725.796213][ T7526] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.806018][ T9514] pyz1: Port: 1 Link DOWN [ 725.811303][ T7526] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.828005][ T7526] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.843523][ T7526] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.539380][ T974] usb 1-1: USB disconnect, device number 22 [ 727.924548][ T30] audit: type=1400 audit(2000000201.080:2088): avc: denied { getopt } for pid=16206 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 728.006906][ T30] audit: type=1400 audit(2000000201.090:2089): avc: denied { connect } for pid=16206 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 728.111758][ T9514] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 728.127238][T16203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3267'. [ 728.374353][ T9514] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.391341][ T9514] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 728.405353][ T9514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 728.670561][ T30] audit: type=1400 audit(2000000202.050:2090): avc: denied { write } for pid=16217 comm="syz.0.3272" name="mouse0" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 728.695437][ T9514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 728.706427][ T9514] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 728.716262][ T5924] hid_parser_main: 87 callbacks suppressed [ 728.716278][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.722389][ T9514] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 728.742096][ T9514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 728.743861][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.750247][ T9514] usb 6-1: Product: syz [ 728.750263][ T9514] usb 6-1: Manufacturer: syz [ 728.768339][ T9514] usb 6-1: SerialNumber: syz [ 728.778498][ T9514] usb 6-1: config 0 descriptor?? [ 728.815754][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.847482][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.866739][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.932656][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.945959][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.968168][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 728.983378][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 729.022747][ T5924] hid-generic 0006:0004:0009.000F: unknown main item tag 0x0 [ 729.031879][ T5924] hid-generic 0006:0004:0009.000F: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 729.269029][ T9514] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 729.293220][ T9514] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 729.316887][ T9514] usb 6-1: USB disconnect, device number 34 [ 729.345066][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3277'. [ 730.131261][ T115] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 730.315121][ T115] usb 3-1: Using ep0 maxpacket: 16 [ 730.323052][ T115] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 730.357142][ T115] usb 3-1: config 0 has no interface number 0 [ 730.363484][ T115] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.393328][ T115] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.403927][ T115] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 730.438610][ T115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.490002][ T115] usb 3-1: config 0 descriptor?? [ 731.235765][ T115] uclogic 0003:28BD:0071.0010: pen parameters not found [ 731.270263][ T5814] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 731.288260][ T115] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 732.131097][ T115] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 732.138733][ T5814] Bluetooth: hci3: command 0x1003 tx timeout [ 732.146500][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 732.395712][ T974] usb 3-1: USB disconnect, device number 47 [ 733.200977][ T115] usb 6-1: Using ep0 maxpacket: 32 [ 733.414435][ T115] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 733.434058][ T115] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 733.443447][ T115] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 733.454601][ T115] usb 6-1: Product: syz [ 733.459001][ T115] usb 6-1: Manufacturer: syz [ 733.492335][ T115] usb 6-1: SerialNumber: syz [ 733.499133][ T115] usb 6-1: config 0 descriptor?? [ 733.505161][T16297] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 733.513570][ T115] hub 6-1:0.0: bad descriptor, ignoring hub [ 733.519918][ T115] hub 6-1:0.0: probe with driver hub failed with error -5 [ 733.531559][T16308] siw: device registration error -23 [ 733.837131][ T30] audit: type=1400 audit(2000000207.360:2091): avc: denied { map } for pid=16296 comm="syz.5.3292" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 733.865911][T16311] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 733.875919][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.885439][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.659315][T15486] usb 6-1: USB disconnect, device number 35 [ 735.231019][T15486] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 735.501518][T15486] usb 3-1: Using ep0 maxpacket: 32 [ 735.546691][T15486] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.653930][ T30] audit: type=1326 audit(2000000209.170:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035978f749 code=0x7ffc0000 [ 735.707556][T15486] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 735.722939][T15486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.737444][T15486] usb 3-1: Product: syz [ 735.741859][ T30] audit: type=1326 audit(2000000209.230:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16334 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035978f749 code=0x7ffc0000 [ 735.765476][T15486] usb 3-1: Manufacturer: syz [ 735.770207][T15486] usb 3-1: SerialNumber: syz [ 735.781762][T15486] usb 3-1: config 0 descriptor?? [ 735.793759][T15486] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 735.864834][T16330] lo speed is unknown, defaulting to 1000 [ 736.186432][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3304'. [ 736.301043][ T974] IPVS: starting estimator thread 0... [ 736.421977][T16352] IPVS: using max 49 ests per chain, 117600 per kthread [ 736.471532][ T30] audit: type=1400 audit(2000000210.000:2094): avc: denied { getopt } for pid=16329 comm="syz.0.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 736.499099][T16336] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 736.590851][ T974] usb 3-1: USB disconnect, device number 48 [ 736.599694][T16341] siw: device registration error -23 [ 736.694324][T15104] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 737.070577][T15104] usb 4-1: Using ep0 maxpacket: 32 [ 737.483599][T15104] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.502753][T15104] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 737.531268][T15104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.539362][T16343] lo speed is unknown, defaulting to 1000 [ 737.540784][T15104] usb 4-1: Product: syz [ 737.549664][T15104] usb 4-1: Manufacturer: syz [ 737.561216][T15104] usb 4-1: SerialNumber: syz [ 737.575053][T15104] usb 4-1: config 0 descriptor?? [ 737.591986][T15104] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 737.883647][ T974] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 737.925554][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3308'. [ 737.929290][ T30] audit: type=1400 audit(2000000211.450:2095): avc: denied { read } for pid=16368 comm="syz.2.3312" path="socket:[53394]" dev="sockfs" ino=53394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 737.939323][T16370] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 738.211023][ T974] usb 6-1: Using ep0 maxpacket: 32 [ 738.217722][ T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.230080][ T974] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 738.236259][T15486] usb 4-1: USB disconnect, device number 41 [ 738.240503][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.263942][ T974] usb 6-1: Product: syz [ 738.268219][ T974] usb 6-1: Manufacturer: syz [ 738.278350][ T974] usb 6-1: SerialNumber: syz [ 738.349474][ T974] usb 6-1: config 0 descriptor?? [ 738.366560][ T974] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 738.801743][ T9514] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 738.812904][T16380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3310'. [ 739.170999][ T9514] usb 1-1: Using ep0 maxpacket: 16 [ 739.183906][ T9514] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 739.200502][T16364] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 739.219982][ T974] usb 6-1: USB disconnect, device number 36 [ 739.241484][ T9514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.255317][ T9514] usb 1-1: Product: syz [ 739.280845][ T9514] usb 1-1: Manufacturer: syz [ 739.290070][ T9514] usb 1-1: SerialNumber: syz [ 739.304634][ T9514] usb 1-1: config 0 descriptor?? [ 740.723388][ T30] audit: type=1400 audit(2000000214.220:2096): avc: denied { setopt } for pid=16397 comm="syz.1.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 741.313447][T16406] binder: 16403:16406 ioctl 4018620d 0 returned -22 [ 741.547417][ T974] usb 1-1: USB disconnect, device number 23 [ 742.460951][ T974] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 742.611193][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 742.647956][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.670690][ T974] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 743.020101][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.131846][ T974] usb 1-1: Product: syz [ 743.206363][ T974] usb 1-1: Manufacturer: syz [ 743.229964][ T974] usb 1-1: SerialNumber: syz [ 743.236989][ T974] usb 1-1: config 0 descriptor?? [ 743.261386][ T974] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 743.597855][T16436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3325'. [ 743.648355][T16436] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 743.816896][ T974] usb 1-1: USB disconnect, device number 24 [ 744.281230][ T974] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 744.465573][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.476155][ T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 744.488967][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 744.500097][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 744.510049][ T974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 744.951243][ T974] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 744.960307][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 744.969007][ T974] usb 4-1: Product: syz [ 744.973240][ T974] usb 4-1: Manufacturer: syz [ 744.977892][ T974] usb 4-1: SerialNumber: syz [ 744.989826][ T974] usb 4-1: config 0 descriptor?? [ 745.101173][ T9514] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 745.291309][ T9514] usb 3-1: Using ep0 maxpacket: 16 [ 745.320243][ T9514] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 745.328662][ T9514] usb 3-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 745.346295][ T9514] usb 3-1: config 0 has no interface number 0 [ 745.388650][ T9514] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 745.398084][ T9514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.407345][ T9514] usb 3-1: Product: syz [ 745.411849][ T9514] usb 3-1: Manufacturer: syz [ 745.416520][ T9514] usb 3-1: SerialNumber: syz [ 745.433848][ T9514] usb 3-1: config 0 descriptor?? [ 745.457107][ T9514] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 745.464966][ T9514] uvcvideo 3-1:0.105: No valid video chain found. [ 745.507374][ T974] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 745.536388][ T974] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 745.648335][ T974] usb 4-1: USB disconnect, device number 42 [ 745.750280][T16467] Cannot find add_set index 0 as target [ 746.183449][ T9514] usb 3-1: USB disconnect, device number 49 [ 746.860402][T15104] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 746.890005][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.901022][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.140995][T15104] usb 6-1: Using ep0 maxpacket: 32 [ 747.151965][T15104] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.532686][T15104] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 747.547894][T16480] loop6: detected capacity change from 0 to 524288000 [ 747.665334][T15104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.674336][T15104] usb 6-1: Product: syz [ 747.678626][T15104] usb 6-1: Manufacturer: syz [ 747.683369][T15104] usb 6-1: SerialNumber: syz [ 747.787308][T15104] usb 6-1: config 0 descriptor?? [ 747.911883][T15104] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 747.926809][T16481] support for the xor transformation has been removed. [ 748.202895][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3339'. [ 748.280457][T16493] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 748.403344][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 749.432867][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 749.472397][T16495] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3346'. [ 749.495587][T16492] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3346'. [ 749.512953][ T5923] usb 6-1: USB disconnect, device number 37 [ 751.393077][T16525] syzkaller0: entered promiscuous mode [ 751.398577][T16525] syzkaller0: entered allmulticast mode [ 751.415012][T16524] syzkaller0: entered promiscuous mode [ 751.421175][T16524] syzkaller0: entered allmulticast mode [ 751.498628][T16527] syzkaller0: entered promiscuous mode [ 751.505498][T16525] FAULT_INJECTION: forcing a failure. [ 751.505498][T16525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.518637][T16525] CPU: 0 UID: 0 PID: 16525 Comm: syz.2.3354 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.518662][T16525] Tainted: [L]=SOFTLOCKUP [ 751.518667][T16525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.518675][T16525] Call Trace: [ 751.518681][T16525] [ 751.518686][T16525] dump_stack_lvl+0x16c/0x1f0 [ 751.518711][T16525] should_fail_ex+0x512/0x640 [ 751.518736][T16525] _copy_from_user+0x2e/0xd0 [ 751.518759][T16525] copy_msghdr_from_user+0x98/0x160 [ 751.518776][T16525] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 751.518805][T16525] ___sys_sendmsg+0xfe/0x1d0 [ 751.518824][T16525] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.518871][T16525] __sys_sendmsg+0x16d/0x220 [ 751.518890][T16525] ? __pfx___sys_sendmsg+0x10/0x10 [ 751.518917][T16525] ? rcu_is_watching+0x12/0xc0 [ 751.518935][T16525] do_syscall_64+0xcd/0xf80 [ 751.518957][T16525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.518972][T16525] RIP: 0033:0x7f4dffd8f749 [ 751.518985][T16525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.519000][T16525] RSP: 002b:00007f4e00ca4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.519015][T16525] RAX: ffffffffffffffda RBX: 00007f4dfffe5fa0 RCX: 00007f4dffd8f749 [ 751.519025][T16525] RDX: 0000000020010800 RSI: 00002000000002c0 RDI: 0000000000000006 [ 751.519035][T16525] RBP: 00007f4e00ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 751.519044][T16525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.519053][T16525] R13: 00007f4dfffe6038 R14: 00007f4dfffe5fa0 R15: 00007fff02c62de8 [ 751.519082][T16525] [ 751.519802][T16527] syzkaller0: entered allmulticast mode [ 751.717197][ T30] audit: type=1400 audit(2000000225.200:2097): avc: denied { kexec_image_load } for pid=16526 comm="syz.1.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 751.776161][T16524] tipc: Started in network mode [ 751.781270][T16524] tipc: Node identity 8e6ab1e4ea9, cluster identity 4711 [ 751.824658][T16524] tipc: Enabled bearer , priority 0 [ 751.857156][T16522] tipc: Resetting bearer [ 752.010784][T16522] tipc: Disabling bearer [ 808.213070][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.220792][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 858.370860][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 858.377825][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15045/1:b..l P15486/1:b..l [ 858.387539][ C1] rcu: (detected by 1, t=10502 jiffies, g=72769, q=250 ncpus=2) [ 858.395253][ C1] task:kworker/1:6 state:R running task stack:23272 pid:15486 tgid:15486 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 858.410025][ C1] Workqueue: events_power_efficient gc_worker [ 858.416111][ C1] Call Trace: [ 858.419384][ C1] [ 858.422309][ C1] ? __schedule+0x10b9/0x6150 [ 858.426983][ C1] __schedule+0x1139/0x6150 [ 858.431522][ C1] ? __pfx___schedule+0x10/0x10 [ 858.436497][ C1] ? mark_held_locks+0x49/0x80 [ 858.441266][ C1] preempt_schedule_irq+0x51/0x90 [ 858.446291][ C1] irqentry_exit+0x1d8/0x8c0 [ 858.450887][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 858.456886][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 858.462265][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 4b 1d b0 f5 cc [ 858.481876][ C1] RSP: 0018:ffffc90003407a58 EFLAGS: 00000202 [ 858.487943][ C1] RAX: 0000000000000001 RBX: ffffffff8e3c96a0 RCX: 0000000000000002 [ 858.495913][ C1] RDX: 0000000000000000 RSI: ffffffff89944491 RDI: fffffbfff1c792d4 [ 858.503881][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 858.511876][ C1] R10: 0000000000040000 R11: ffff888032d554b0 R12: 0000000000000000 [ 858.519849][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.527827][ C1] ? gc_worker+0x241/0x16e0 [ 858.532345][ C1] lock_acquire+0xfc/0x330 [ 858.536761][ C1] ? __pfx___might_resched+0x10/0x10 [ 858.542041][ C1] ? gc_worker+0x999/0x16e0 [ 858.546548][ C1] gc_worker+0x241/0x16e0 [ 858.550879][ C1] ? gc_worker+0x230/0x16e0 [ 858.555380][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 858.561016][ C1] ? __pfx_gc_worker+0x10/0x10 [ 858.565780][ C1] ? rcu_is_watching+0x12/0xc0 [ 858.570545][ C1] process_one_work+0x9ba/0x1b20 [ 858.575489][ C1] ? __pfx_gc_worker+0x10/0x10 [ 858.580251][ C1] ? __pfx_process_one_work+0x10/0x10 [ 858.585624][ C1] ? assign_work+0x1a0/0x250 [ 858.590212][ C1] worker_thread+0x6c8/0xf10 [ 858.594811][ C1] ? __kthread_parkme+0x19e/0x250 [ 858.599830][ C1] ? __pfx_worker_thread+0x10/0x10 [ 858.605111][ C1] kthread+0x3c5/0x780 [ 858.609176][ C1] ? __pfx_kthread+0x10/0x10 [ 858.613767][ C1] ? rcu_is_watching+0x12/0xc0 [ 858.618524][ C1] ? __pfx_kthread+0x10/0x10 [ 858.623109][ C1] ret_from_fork+0x983/0xb10 [ 858.627695][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 858.632799][ C1] ? __switch_to+0x7af/0x10d0 [ 858.637474][ C1] ? __pfx_kthread+0x10/0x10 [ 858.642057][ C1] ret_from_fork_asm+0x1a/0x30 [ 858.646829][ C1] [ 858.649844][ C1] task:syz-executor state:R running task stack:23864 pid:15045 tgid:15045 ppid:15038 task_flags:0x400140 flags:0x00080000 [ 858.663326][ C1] Call Trace: [ 858.666602][ C1] [ 858.669555][ C1] ? __schedule+0x10b9/0x6150 [ 858.674230][ C1] __schedule+0x1139/0x6150 [ 858.678758][ C1] ? __pfx___schedule+0x10/0x10 [ 858.683612][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 858.688981][ C1] preempt_schedule_common+0x44/0xc0 [ 858.694273][ C1] preempt_schedule_thunk+0x16/0x30 [ 858.699484][ C1] _raw_spin_unlock+0x3e/0x50 [ 858.704167][ C1] copy_page_range+0x22d0/0x6780 [ 858.709143][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 858.714442][ C1] ? __pfx___might_resched+0x10/0x10 [ 858.719727][ C1] ? __pfx_mas_store+0x10/0x10 [ 858.724497][ C1] ? dup_mmap+0xba4/0x20e0 [ 858.728916][ C1] ? down_write+0x14d/0x200 [ 858.733420][ C1] ? up_write+0x282/0x4e0 [ 858.737748][ C1] dup_mmap+0xbea/0x20e0 [ 858.741995][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 858.746681][ C1] copy_process+0x3b9f/0x7430 [ 858.751347][ C1] ? do_wp_page+0x1c04/0x5010 [ 858.756051][ C1] ? __pfx_copy_process+0x10/0x10 [ 858.761085][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 858.766113][ C1] kernel_clone+0xfc/0x910 [ 858.770526][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 858.775550][ C1] ? __lock_acquire+0x436/0x2890 [ 858.780487][ C1] __do_sys_clone+0xce/0x120 [ 858.785070][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 858.790285][ C1] ? rcu_is_watching+0x12/0xc0 [ 858.795055][ C1] do_syscall_64+0xcd/0xf80 [ 858.799567][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.805458][ C1] RIP: 0033:0x7ff48e585e93 [ 858.809888][ C1] RSP: 002b:00007fffb88edef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 858.818296][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff48e585e93 [ 858.826264][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 858.834227][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 858.842190][ C1] R10: 000055555a7b87d0 R11: 0000000000000246 R12: 0000000000000000 [ 858.850154][ C1] R13: 00000000000927c0 R14: 00000000000b78ce R15: 00007fffb88ee090 [ 858.858140][ C1] [ 858.861151][ C1] rcu: rcu_preempt kthread starved for 10512 jiffies! g72769 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 858.872334][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 858.882298][ C1] rcu: RCU grace-period kthread stack dump: [ 858.888180][ C1] task:rcu_preempt state:R running task stack:27584 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 858.901665][ C1] Call Trace: [ 858.904942][ C1] [ 858.907872][ C1] ? __schedule+0x10b9/0x6150 [ 858.912541][ C1] __schedule+0x1139/0x6150 [ 858.917055][ C1] ? __pfx___schedule+0x10/0x10 [ 858.921927][ C1] ? find_held_lock+0x2b/0x80 [ 858.926606][ C1] ? schedule+0x2d7/0x3a0 [ 858.930933][ C1] schedule+0xe7/0x3a0 [ 858.934998][ C1] schedule_timeout+0x123/0x290 [ 858.939843][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 858.945212][ C1] ? __pfx_process_timeout+0x10/0x10 [ 858.950595][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 858.956398][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 858.961853][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 858.966624][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 858.971913][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 858.977118][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 858.982056][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 858.986911][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 858.992729][ C1] rcu_gp_kthread+0x26d/0x380 [ 858.997406][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 859.002598][ C1] ? rcu_is_watching+0x12/0xc0 [ 859.007355][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.012589][ C1] ? __kthread_parkme+0x19e/0x250 [ 859.017697][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 859.022979][ C1] kthread+0x3c5/0x780 [ 859.027047][ C1] ? __pfx_kthread+0x10/0x10 [ 859.031633][ C1] ? rcu_is_watching+0x12/0xc0 [ 859.036394][ C1] ? __pfx_kthread+0x10/0x10 [ 859.040982][ C1] ret_from_fork+0x983/0xb10 [ 859.045565][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 859.050672][ C1] ? __switch_to+0x7af/0x10d0 [ 859.055348][ C1] ? __pfx_kthread+0x10/0x10 [ 859.059936][ C1] ret_from_fork_asm+0x1a/0x30 [ 859.064711][ C1] [ 859.067715][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 859.074050][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.084637][ C1] Tainted: [L]=SOFTLOCKUP [ 859.088950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.098995][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 859.104635][ C1] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 859.124247][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 859.130322][ C1] RAX: 00000000022e245d RBX: 0000000000000001 RCX: ffffffff8b7866d9 [ 859.138310][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480 [ 859.146283][ C1] RBP: ffffed1003b54498 R08: 0000000000000001 R09: ffffed10170a673d [ 859.154255][ C1] R10: ffff8880b85339eb R11: ffff88801daa2ff0 R12: 0000000000000001 [ 859.162229][ C1] R13: ffff88801daa24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 859.170200][ C1] FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 859.179133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.185717][ C1] CR2: 00007f8862f01359 CR3: 00000000754d9000 CR4: 00000000003526f0 [ 859.193688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 859.201663][ C1] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 859.209633][ C1] Call Trace: [ 859.212910][ C1] [ 859.215831][ C1] default_idle+0x13/0x20 [ 859.220166][ C1] default_idle_call+0x6c/0xb0 [ 859.224931][ C1] do_idle+0x38d/0x510 [ 859.229007][ C1] ? __pfx_do_idle+0x10/0x10 [ 859.233601][ C1] cpu_startup_entry+0x4f/0x60 [ 859.238368][ C1] start_secondary+0x21d/0x2d0 [ 859.243127][ C1] ? __pfx_start_secondary+0x10/0x10 [ 859.248424][ C1] common_startup_64+0x13e/0x148 [ 859.253368][ C1]