last executing test programs: 15m21.968660558s ago: executing program 2 (id=2679): ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f00000000c0)={0x18, r0, 0x3, 0x0, &(0x7f0000000040)=[{}, {0x0, 0x1}, {0x6, 0x7fffffffffffffff}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0xe) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf24247bec6b34d77, 0x10, r4, 0x64904000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000001c0)={0xb0000009}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="c2aaaaaaaa0900ffffffffff86dd6000021000083a00fe8000000000000000000000000000bbff0200052dd679db8e31940000e5ffffff0000000000018f"], 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000180)={0x4, 0x4, 0x6685d994, 0x107, 0xa, "0062ba7d82070000000000efffffffff086304"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) 15m17.734028228s ago: executing program 2 (id=2683): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {0xffffffffffffffff}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x29}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d6f6165702068617368d27978e70bf1ca4126cfd63d6362636d61632d6165732d6e656f6e00"/78], &(0x7f0000000400), &(0x7f0000000480)=""/41) 15m16.412616475s ago: executing program 2 (id=2685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(r2, 0x0) r5 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/193, 0x95, 0x12040, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffab) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 15m16.257505541s ago: executing program 3 (id=2687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ufs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) poll(&(0x7f0000000100), 0x0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x63e3c1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x88282, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) add_key$user(&(0x7f0000000140), 0x0, &(0x7f0000000400), 0x0, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 15m14.99270789s ago: executing program 2 (id=2688): socket$key(0xf, 0x3, 0x2) getpgrp(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0xf}, 0x8) pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}], 0x1, 0xffffffe4) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x7}, 0x410) 15m14.105861416s ago: executing program 3 (id=2692): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x24) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xe9) syz_open_dev$video4linux(&(0x7f0000000280), 0x60000000000000, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x10, 0x2, 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x1f, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x50, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040029792a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 15m13.972956778s ago: executing program 2 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x52, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 15m12.177873939s ago: executing program 3 (id=2695): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000004", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000002c000880240007800800060079000000080005003d15432708000600420000000800050043618b1604000780"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000680)=0x84) 15m10.189651385s ago: executing program 3 (id=2699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(r2, 0x0) r5 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/193, 0x95, 0x12040, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffab) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 15m9.696756319s ago: executing program 2 (id=2701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket(0x10, 0x3, 0x4) sendto$inet6(r2, &(0x7f0000000300)="7800000018002507c9409b14ffff00000204be04020512050e0204094300090700000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250b6", 0x79, 0x800, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201f7020000004035120182400001020301090246000101189804090400000201030006076401080007000724030288004f0624020006800905a9b200250105"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xc, 0x53ab7d1c082fef58, 0x0, 0x4, 0x6, 0x328}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fbdbdf250af4c1000000000713000300140002"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vti={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') 15m8.198438465s ago: executing program 3 (id=2702): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000040)) (async) sched_setscheduler(r0, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) (async) r3 = accept$alg(r2, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000100)={0x38}, 0x38, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) (async) ioctl$UI_DEV_DESTROY(r4, 0x5502) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8020402}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x78, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "738e731e21d7829f9e"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "820e96b0c8515a67433607c402"}, @NL80211_KEY_SEQ={0x7, 0x4, 'v$$'}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "73d4defda7dc92176607e6ed25"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xe, 0x4, "c3d082cca248af5ab8bf"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2adc391d4e97290e329ff60bb"}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2040004}, 0x4048804) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x38}}, 0x4) sendmmsg$sock(r3, &(0x7f00000030c0)=[{{&(0x7f0000000440)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000004c0)="7860ed3389741a7f7fd0bd0aa9289b1ac6948a267e", 0x15}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="5b1966bf13e3eb99d618fa7b658878cf02596c451f7cd6c326b82280f662ec1fd518dcc5e1970ab972bfd284acb093be17466fd3d8f07c908d629b23e5c455495fc35663440a0d821f8d2a0b099b8f9394911b507a2fd8f25f93cd84813a9372460925bfe66b40cfb2a9a4d78e7f340a235df8e23e8fff14575781f02ec7c1eb023203f8d3bcc850fad2cafc60c46f7691e5fd194059dea063bdc508c0d945e447c1ea7791dc9ae2c6acaa82900929c342682536a038506d67b8b40ed9b8d7f0652fd0f24355572207b1c2c9b7", 0xcd}, {&(0x7f0000001600)="c6832286e6fdcd248df6ef6fa9922d1d2f1f878d1a9b82089474804eb5f2", 0x1e}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="c7da031ebd4c96af0c2140621a0d3ba9b4f102dddc0afa29412ed853cff02904d0dc49ae21a71757b0bd8a95752b17ee1dd39a6f7c7649ad505a08fa43dbb883eef7a0057eeb69d6f6c4bb3449724ce89048fffde114fda5536487521942affaa08772f5adbc15999df2c7d47c4c74193aa3c2778ac6a095a62da002", 0x7c}, {&(0x7f00000026c0)="47b2546ba11f0aae34cfeb6643650ec99138a08a6fe88f77f6ff96bbe8404dec203447cf4c6c0a3d5cf6311a56b29604c09677f846b34032a618bea9d398e22fd6c55c63949cc0bb245bd0114a6fcc", 0x4f}, {&(0x7f0000002740)="912a3104de1503f9ceeb1f2654ca8a237891acafb0ae9b13d09c16747a8616850410f6c481d03354a5250d785636efc3e5fcf4341e28f64146dfbee8e8bacd16c0e0b6a79272", 0x46}], 0x8, &(0x7f0000002840)=[@mark={{0x14, 0x1, 0x24, 0xc2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xfffff801}}, @txtime={{0x18, 0x1, 0x3d, 0xc9}}, @timestamping={{0x14, 0x1, 0x25, 0xc9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002940)="b5362093832ffc61150b538ab4d1330c7d73453f376393a9046a5b24893a933ec35685183486ed6010e102d609036d1f53d78c35ca824adbda42cb1728137b77aae20f994224088434b5be2deba86bb642390794c5e4fcd0917c833fcb9c84afe1441b6008eafbceb19e3590ce831605ec5f891313ce604ef85e526c124547cf5e3d5ed34d0a33763f757f2a2e6fd808db09b318b79b024e36a2af999b", 0x9d}], 0x1, &(0x7f0000002a40)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xecb}}], 0x30}}, {{&(0x7f0000002a80)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b00)="f3f8354b9b68506344e898ff1875082eaddc3330cb15a4efbddc6a7bf413db6d40bb7b2cb8a3a435bad6dd5cc6ba980d46aaf6941e05b103d9b0808d79bf07768df31582cbcd47fb70b80f9ff2bd8c6ea25f00cf445c3c3820fe3ef1154eb3f5000c5f4d646e44083fdc582512737b39f71dd439829d07515987d08d584c84595e761a97b244b9b979eae1592d35ed1fd836abf4545b82d36d078215c9bbd33f0df2095c7cb68e656b6ec63f3898d8688f4b845d908f79438ebd463c64d52574b0", 0xc1}, {&(0x7f0000002c00)="77d95bc622ccef186800a1e230ad12c44c286586aabee52804f7212d0693f01b579f39", 0x23}], 0x2}}, {{&(0x7f0000002c80)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002d00)="82f9215d62c1c51e69429a9688cb19910443a517c94596f46e199ddd2e7801fd99fb5a84959fc7684f88192ba2aeef3ddcd1f0a73eba293acbcca1dd97eeedb26cb86eea55f574e8d5a5b4aca1b549bc6cb2fe6a869b5dbb506fb73165e128be123724dd9246ce2d42b80bd4f0530e6d562ee4af877f961e8a3e9cfc6fbe66cedfc7800cf7dde6626dc0a066dd8a375ff2a50e62e7da6daa5b9009358fb60bbd8d6dcc87d78a7f348313d69f7d8d064b8b664f9bb319210f6fd92264c2d26ca753a20976c4", 0xc5}, {&(0x7f0000002e00)="9e9f48136ed99394048e9359425ba5a2fd0ebb2f91141c59db8f225e8e4d6d0ade73a456f09f8de448ccf8af1c8336bc744d1ee278897a41ae9b6594430807777547575d5187fd33b2e183357031221417c89407a9cd12e9f042a17865d4790c34e499c80c9e500ad8a3ae733c31a2169ef237b3c73dece3bf81ea3bba8b6b04530d9ee1f49ec7133be7ec59ea17fb22e6ab725c6a63a842f2b84d66bbe9df46545087", 0xa3}, {&(0x7f0000002ec0)="8f05f242023a818203aa98bdac1eb05e93c9e882e68853bd3a6dfbe60557957c0511c574e585bdfbb696e2fb395f6d53182b757471dca9e24b25bafb83c7c1fe596bbd5db228c410ab7e7374292453738d12abd9cbbde0bc59fd6795eb95e0fbca8a7b8c24a77d1670ee742bf89598c8370aae9b41d712fbd59083563cf01cb1ed5304d0e47de061bb758cf43d60292fad7feea5", 0x94}, {&(0x7f0000002f80)="82efa483b486b7bae019c6c50b2bf50e8696c4bdb1ac2c82c638b33ad6595c913753ee042f3195a88cfdc0fcb48ecadeeb7e38f25ce990ea3aa5e4faf4fa", 0x3e}, {&(0x7f0000002fc0)="1473b2419f24a9590a432df3bc0847644f15262091a3c82364490d5d444e1bb03564658041fa2784", 0x28}, {&(0x7f0000003000)}], 0x6}}], 0x4, 0xc800) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x38, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4400c815}, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000003300)='/dev/comedi1\x00', 0x82081, 0x0) syz_emit_vhci(&(0x7f0000003340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_rsp={{0xf, 0x6, 0x4}, {0x6, 0x6}}]}}, 0x11) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000003380)={0x5, [0x38974b43, 0x4], 0x4}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000003400), r5) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000003400), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000003440)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000003640)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003480)={0x148, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4880}, 0x8810) r11 = socket$inet(0x2, 0x0, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003700)={{r3, 0xffffffffffffffff}, &(0x7f0000003680), &(0x7f00000036c0)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000003940)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000039c0)={0x7fffffff, 0x0}, 0x8) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c80)={0x18, 0x18, &(0x7f0000003a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ldst={0x2, 0x2, 0x2, 0x3, 0x8, 0xc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ac0)='syzkaller\x00', 0x0, 0x8b, &(0x7f0000003b00)=""/139, 0x41000, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003bc0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003c00)=[0xffffffffffffffff], &(0x7f0000003c40)=[{0x1, 0x5, 0xa, 0xc}], 0x10, 0x8001}, 0x94) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d40)={0xffffffffffffffff, 0x686c, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003f80)={0x19, 0x21, &(0x7f0000003740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @alu={0x7, 0x1, 0x8, 0x4, 0xa, 0x40, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003880)='GPL\x00', 0x3, 0x43, &(0x7f00000038c0)=""/67, 0x41100, 0x53, '\x00', 0x0, @fallback=0x1f, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x7}, 0x10, r14, r15, 0x1, &(0x7f0000003f00)=[r16, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003f40)=[{0x1, 0x2, 0xf, 0x8}], 0x10, 0x1}, 0x94) 15m7.786811903s ago: executing program 3 (id=2705): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x40040) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f000000b3c0), &(0x7f000000b400)=@v1={0x1000000, [{0x0, 0xff}]}, 0x18, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0xc2) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x1e) 14m54.641713574s ago: executing program 32 (id=2701): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket(0x10, 0x3, 0x4) sendto$inet6(r2, &(0x7f0000000300)="7800000018002507c9409b14ffff00000204be04020512050e0204094300090700000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250b6", 0x79, 0x800, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201f7020000004035120182400001020301090246000101189804090400000201030006076401080007000724030288004f0624020006800905a9b200250105"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xc, 0x53ab7d1c082fef58, 0x0, 0x4, 0x6, 0x328}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000002000010000000000fbdbdf250af4c1000000000713000300140002"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vti={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') 14m52.588723431s ago: executing program 33 (id=2705): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x40040) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f000000b3c0), &(0x7f000000b400)=@v1={0x1000000, [{0x0, 0xff}]}, 0x18, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0xc2) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x1e) 16.651247186s ago: executing program 0 (id=5060): unshare(0x2c020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x737}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r2) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r0, 0x4, r0}, 0x7) 16.376964895s ago: executing program 0 (id=5063): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x800, 0x0, 0xfadf, 0x101}, 'syz1\x00', 0x12}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) (fail_nth: 4) 15.740243858s ago: executing program 0 (id=5066): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x159, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x0, 0x4, 0x14b, 0x65, 0x0, 0x3, 0x1, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xb, 0xd4, [@local, @multicast1]}, @ssrr={0x89, 0xb, 0x76, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0xf, 0xfa, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x2, 0x3, 0x0, {0x40, 0x4, 0x1, 0x5, 0x1000, 0x64, 0x6, 0x9, 0x89, 0xfc, @multicast2, @broadcast, {[@noop, @timestamp_addr={0x44, 0x34, 0x9f, 0x1, 0x9, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x4}, {@private=0xa010100, 0xee7}, {@remote, 0x1ff}]}, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x5, 0xe, "90b656eb2a34f68323cfb6ad"}, {0x2, 0x2}, {0x1, 0x7, "ce47049125"}, {0x2, 0xb, "4efd85a3415e523086"}]}, @generic={0x94, 0x12, "0003bced6953c5090e00ea6906cb8057"}, @noop, @generic={0x86, 0x4, "b7da"}, @rr={0x7, 0xb, 0x72, [@empty, @multicast1]}, @generic={0x88, 0x11, "7f1e9366368c22d28f3d6ec28acfb0"}, @rr={0x7, 0x17, 0x4b, [@local, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast]}, @ssrr={0x89, 0x17, 0x8b, [@loopback, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0xbc, 0x3, 0x9, [{@multicast1, 0x400}, {@broadcast, 0x8}, {@local, 0x80000000}, {@private=0xa010102, 0x9}, {@empty, 0x9af}]}]}}, "179e5d0cc845d0"}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}}], 0x1, 0x8014) listen(r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x20008004) 14.310506438s ago: executing program 0 (id=5069): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x20000800) 12.809452696s ago: executing program 0 (id=5072): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001c"], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000340)={0x6, @capture={0x1000, 0x0, {0x70b6, 0xfffff9f2}, 0xea, 0x4}}) 12.196910693s ago: executing program 0 (id=5075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) 11.249064827s ago: executing program 34 (id=5075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x110, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x110, 0x0, 0x0, 0x2, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0xd, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) 8.540950817s ago: executing program 5 (id=5087): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x40088c0}], 0x1, 0x40800) semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r5 = openat2(r3, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{r2}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="39005442b6ffb9", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000000000000000200"/28], 0x50) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000400)={0x0, 0xd6b7, 0x4, 0x3, 0x3b0, 0x0, r4}, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000480)) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) socket$inet6_tcp(0xa, 0x1, 0x0) 8.51482041s ago: executing program 6 (id=5088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000000000)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x1f, 0x3, 0x50, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xc000, 0x1, r5, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x2b42, 0xffffffff80831140, 0x0, 0xf, 0x0, 0xfdffffff, 0x0, 0x0, 0x10, 0x200000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r2, &(0x7f0000000300)="8471183824b68f6ce276f81cab611731afbc7e0015b3da810c7360da1642477d7f053fe9ab6a5f55e135863b0ad34c6a315c5e04e52dd025a78e20cd14d0398c21a177ea05a5c0cc35fd0b2df10162f00183c77ecb35297015077fd7a12efbce9bbe984de06e0b5c90f3aad3b3d8173987e9cdb14c435d893a75989fda14258964e3557fe18d01bd0d4544c6d3e23d792ba161465ec48aefa9bc994d4d25deeda2668fd52a1f92", 0xa7, 0x810, &(0x7f00000003c0)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000007d40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007d80)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000) shutdown(r0, 0x0) 7.683912071s ago: executing program 5 (id=5090): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) 7.523543914s ago: executing program 6 (id=5093): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./bus\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffef0, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfd12, 0xee, 0x0, 0x9, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40008000) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) 6.528798834s ago: executing program 6 (id=5095): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x104, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x28) 5.326474645s ago: executing program 5 (id=5096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x541040, 0x0) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000340)) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3800) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000280)={0x6, 'veth1_vlan\x00', {}, 0xb3}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r8, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000340)="2c5db18271fe054658fe1c586b1dc826d06eecc3a3d4bf8d4e96bee8fccc6fc6d9007e72cfd626690e4f7417b006c94270e430183086043c832a77bce4c65f222ab9bcf4150d0719ff224953c6973546b0addd455b442c5dee8d77a6a55944cb2abb20245833804f2fac736b3f4130cae1cf2e8662f906e3e706431a091b5643581cd7e8845df5c127be2f7e992acb", 0x8f}, {&(0x7f0000000400)="84b688ed1cbebf252bbc6aabd90fbe35fbafc537dcdd565ba8b411e8be2284808f99d80b6603fc4fe127c29d4bf85c6fc7c5e6dcffe44b0cb81b402d3b73de214c5f7908d656ac194ec399f8a555fbfdb15f23489f1a7e9a088f946d81d63c24b8f771a54832df29f2a291e65acb5411b08c4a576ab26bdf61eb05c1f6b7bb0af7", 0x81}, {&(0x7f00000004c0)="35bd6bc58bbb757381f14f85ceb73c410612334952c497a1835af1d0f20812b23b4cb2f765a28dcec1", 0x29}], 0x3}}], 0x1, 0x0) 5.261486323s ago: executing program 6 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) mprotect(&(0x7f000000c000/0x7000)=nil, 0x7000, 0x1000003) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) open$dir(&(0x7f0000000380)='./file0\x00', 0x42000, 0x180) openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x105700, 0x13a}, 0x18) (async) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x105700, 0x13a}, 0x18) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000280)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200), &(0x7f0000000400)={0x0, 0xfb, 0xc5, 0x1, 0xe1, "408983369cb1dd5e4c2911a19a8856a0", "9d2967020f3a843d6b8d9726a2ae241728480cfea1f8f44f4769261754e469ba3f73b06f31ecb98aaf1469df4cd6f4800eaf165e75691c01dc9b0d012f30431ce4f2a399a88230e7b4b57fde4c7f3906f19e52f204b4003897cbc8df8218be71302386c1e5beeac8f67d3609cac4cf687cf7fb89f7589ddc39870f631e1e8aaff716f3659450186122c420956b21043bb6b2831d34f4d3cbc852548b1284abf07bc1e151c2bf5f709a84e4dd6eb96fc5"}, 0xc5, 0x3) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x9e}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x9e}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/242, &(0x7f00000001c0)=0xf2) (async) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/242, &(0x7f00000001c0)=0xf2) 4.773473807s ago: executing program 6 (id=5098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_open_dev$video(&(0x7f0000000040), 0x80000001, 0x220082) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04020000000000cb71"], 0x9) r1 = socket$inet(0x2, 0x80000, 0x5) bind$inet(r1, &(0x7f0000000140)={0x2, 0xeffd, @loopback}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20081) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000016000000000000000000200000000008001b627c2d", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES8=r4, @ANYBLOB="0000080000000000b7080000c09ef5b51b3e667495ca2c02489bef0000000000000068e955df00000000800bd2fb8f7b60bfa200000ee0cc7fffffffffffffff48f50000"], 0x0, 0x0, 0x0, 0x0, 0x7162d7fa86420207, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', '', [{0x20, ':\'+[^\''}, {0x20, '\xe5]\xf0\\\x03\x00F\x84\xf4\a\xa4H\xd6D\t\x8a\xb2>\x02\xe79p7i\x16\xca\x0e#\xf0\x14\xea\xd8<\xa8\xfb^is\xb1\x89A\x11 \x05k\x17\x04\x7f\xe9\xcb\xe0,\xac\xa1\xc9\f}k\xa6\xffYF\a'}, {0x20, '\x00'}, {0x20, '@'}, {}]}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000340)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES64], 0x4}}, 0x0) sendfile(r7, r5, 0x0, 0x100000000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa42aaaa10004508002800780a010100ac14140000000000000000000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) fsetxattr$security_capability(r9, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x1}, {0x10000, 0xfff}]}, 0x14, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) 4.58430532s ago: executing program 1 (id=5099): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x40088c0}], 0x1, 0x40800) semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r5 = openat2(r3, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{r2}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="39005442b6ffb9", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000000000000000200"/28], 0x50) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000400)={0x0, 0xd6b7, 0x4, 0x3, 0x3b0, 0x0, r4}, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000480)) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) socket$inet6_tcp(0xa, 0x1, 0x0) 4.059596214s ago: executing program 6 (id=5100): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFT_BATCH(r1, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000002a80)=ANY=[@ANYBLOB="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"], 0x618}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000180)="7d9a8bae6f5cf4063670846cc8b6f68f952c9ed787b99e55068e32f3b3815efb", &(0x7f00000002c0)=""/104, &(0x7f0000000480)="df4030835dc0e7668275830c36fe2771e05bee331fc7c5c06d3ed58ec703d81a29", &(0x7f00000004c0)="04bb81c2b71a5ef53d505d1c07b0fbdf9af6a0e642fee0d23969e38e135cd5e3a2b057dc19a830f45d474caebb64c9fb0c96ea612002047348ac", 0x9, r1}, 0x38) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) r4 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001400000000"], 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, 0x0, 0x0, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x5c, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x10, 0x4, 0x3, 0x17, 0x507, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x7a, 0x3, 0x7, [{@multicast1, 0x1}, {@loopback, 0x1}, {@remote, 0x101}, {@multicast1, 0x2}, {@remote, 0x3}]}]}}}}}}}, 0x0) 4.00911177s ago: executing program 4 (id=5101): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, 0x0}}], 0x1, 0x40) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5}]}}}}}}}, 0x0) (fail_nth: 4) 3.949266073s ago: executing program 1 (id=5102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.867826867s ago: executing program 4 (id=5103): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, 0x0, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) 3.623661317s ago: executing program 1 (id=5104): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000040)='./bus\x00', 0x84242, 0x1df2a23c5997fad6) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffef0, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfd12, 0xee, 0x0, 0x9, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40008000) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r5}) 2.324852701s ago: executing program 4 (id=5105): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x121801, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r1, 0x0, 0xea, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0xfffffff7, 0x7, 0x0, 0x4, 0xffffffff9a296b0f, 0x48000000, 0x0, 0x800, 0x1, 0x4, 0x7ffffffd, 0x2, 0x6, 0xd30, 0x12, 0x2, {0x1, 0x100}, 0x3}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.251741509s ago: executing program 1 (id=5106): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) 2.120550756s ago: executing program 5 (id=5107): bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) 1.268751601s ago: executing program 4 (id=5108): r0 = io_uring_setup(0x68f7, &(0x7f00000002c0)={0x0, 0x48c7, 0x80, 0x0, 0x8100016b}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) sendmsg$inet(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000008c0)='G', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 772.327364ms ago: executing program 4 (id=5109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_open_dev$video(&(0x7f0000000040), 0x80000001, 0x220082) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04020000000000cb71"], 0x9) r1 = socket$inet(0x2, 0x80000, 0x5) bind$inet(r1, &(0x7f0000000140)={0x2, 0xeffd, @loopback}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20081) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000016000000000000000000200000000008001b627c2d", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES8=r4, @ANYBLOB="0000080000000000b7080000c09ef5b51b3e667495ca2c02489bef0000000000000068e955df00000000800bd2fb8f7b60bfa200000ee0cc7fffffffffffffff48f50000"], 0x0, 0x0, 0x0, 0x0, 0x7162d7fa86420207, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000380)={'#! ', '', [{0x20, ':\'+[^\''}, {0x20, '\xe5]\xf0\\\x03\x00F\x84\xf4\a\xa4H\xd6D\t\x8a\xb2>\x02\xe79p7i\x16\xca\x0e#\xf0\x14\xea\xd8<\xa8\xfb^is\xb1\x89A\x11 \x05k\x17\x04\x7f\xe9\xcb\xe0,\xac\xa1\xc9\f}k\xa6\xffYF\a'}, {0x20, '\x00'}, {0x20, '@'}, {}]}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000340)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES64], 0x4}}, 0x0) sendfile(r7, r5, 0x0, 0x100000000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa42aaaa10004508002800780a010100ac14140000000000000000000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) fsetxattr$security_capability(r9, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x1}, {0x10000, 0xfff}]}, 0x14, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) 705.369181ms ago: executing program 5 (id=5110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000002300)=ANY=[@ANYRES32=r5, @ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095", @ANYBLOB="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", @ANYRESOCT=r6, @ANYRES16=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r9, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x7ffffffe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1a, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r10, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r11 = syz_usb_connect$uac2(0x6, 0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="ceb5be115a6e52c83bc00f528cf5224319524f92bd61d65cc703f58b10db18d48e2c953515ca9119d7c04d07221cca6daf823b4072448fd638b967ce14a8d05a1bd2726f1568b9b6b39a260970e110576b22989ba5d61298a8c6505e32f61c2ee6862b0bf1dcfa0cee123f1b7c1b259157562d7c704a65078959a8c5a3bad58b0a70a22cb033369a657bdced5c5232697a7bc6f493ad0c2dc8b307aa7eb8b1b7186ca805f3b2123a8b93956306d1ac4af4e3c23b3cd92939af98584fc65e3e6d63c734347cb6160114816aad1feb90a9b393d7832d5eb9bdcc004b"], 0x0) syz_usb_control_io$uac2(r11, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0xfffffff3, 0x4) 608.781457ms ago: executing program 1 (id=5111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x40088c0}], 0x1, 0x40800) semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r5 = openat2(r3, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x80, 0x91, 0x14}, 0x18) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{r2}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="39005442b6ffb9", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000000000000000200"/28], 0x50) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000400)={0x0, 0xd6b7, 0x4, 0x3, 0x3b0, 0x0, r4}, &(0x7f00000003c0), &(0x7f00000004c0), &(0x7f0000000480)) mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0]) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) socket$inet6_tcp(0xa, 0x1, 0x0) 11.155346ms ago: executing program 4 (id=5112): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r1 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, r2, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r1, 0x0, 0x0, r2, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r6 = socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) close(r3) (fail_nth: 3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r6, @ANYRESDEC, @ANYRES32=r3, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00000006000000060000000600000003000000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r4, @ANYBLOB="01000000040000000000000000000000002000000000000000000000da60187f1eefd9f886b5d57504a74998c3327cab8ace30778e231fd32d8a5b068858c096d7248ede528e9ac25197eff5793cff3c60551e34031ec0bbb5ef499f039bf97d1049b089381a05a628c7e9f2d9b782c26949a54e7e743cdb2384acc043a58fa7905ebc86d226734e4f939c287102e9"], 0x50) 9.236231ms ago: executing program 1 (id=5113): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0x9, 0xffffffffffffffff, 'id1\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r7, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r9, &(0x7f0000000000), 0xfffffecc) splice(r8, 0x0, r10, 0x0, 0x200000000622c, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r11, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x10) r14 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r15}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r16 = socket(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 5 (id=5114): socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, 0x0, 0x0) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000540)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) kernel console output (not intermixed with test programs): ntext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1719.904668][T23049] SELinux: policydb version 14613 does not match my version range 15-35 [ 1719.913109][T23049] SELinux: failed to load policy [ 1719.919028][T23049] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1719.980768][T23048] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1720.491098][T23061] FAULT_INJECTION: forcing a failure. [ 1720.491098][T23061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.504561][T18412] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1720.514719][T23061] CPU: 0 UID: 0 PID: 23061 Comm: syz.0.4555 Tainted: G L syzkaller #0 PREEMPT(full) [ 1720.514752][T23061] Tainted: [L]=SOFTLOCKUP [ 1720.514760][T23061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1720.514773][T23061] Call Trace: [ 1720.514780][T23061] [ 1720.514789][T23061] dump_stack_lvl+0x100/0x190 [ 1720.514820][T23061] should_fail_ex.cold+0x5/0xa [ 1720.514848][T23061] _copy_from_user+0x2e/0xd0 [ 1720.514878][T23061] copy_msghdr_from_user+0x9f/0x4c0 [ 1720.514912][T23061] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1720.514959][T23061] ___sys_sendmsg+0x106/0x1e0 [ 1720.514999][T23061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1720.515028][T23061] ? __lock_acquire+0x49f/0x1a40 [ 1720.515058][T23061] ? get_pid_task+0x106/0x250 [ 1720.515123][T23061] __sys_sendmsg+0x160/0x210 [ 1720.515149][T23061] ? __pfx___sys_sendmsg+0x10/0x10 [ 1720.515191][T23061] do_syscall_64+0x115/0x870 [ 1720.515214][T23061] ? clear_bhb_loop+0x40/0x90 [ 1720.515241][T23061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.515263][T23061] RIP: 0033:0x7f090459de99 [ 1720.515280][T23061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.515301][T23061] RSP: 002b:00007f09054ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.515321][T23061] RAX: ffffffffffffffda RBX: 00007f0904825fa0 RCX: 00007f090459de99 [ 1720.515335][T23061] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 1720.515349][T23061] RBP: 00007f09054ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.515362][T23061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.515374][T23061] R13: 00007f0904826038 R14: 00007f0904825fa0 R15: 00007ffca8882298 [ 1720.515405][T23061] [ 1721.694336][T18412] usb 2-1: Using ep0 maxpacket: 16 [ 1721.716205][T18412] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1721.733725][T18412] usb 2-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1721.754356][T18412] usb 2-1: config 0 has no interface number 0 [ 1721.766284][T18412] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.789624][T18412] usb 2-1: string descriptor 0 read error: -71 [ 1722.913581][T18412] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1723.178257][T18412] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1723.206395][T18412] usb 2-1: config 0 descriptor?? [ 1723.245202][T18412] usb 2-1: can't set config #0, error -71 [ 1723.452341][T18412] usb 2-1: USB disconnect, device number 95 [ 1723.642126][T23088] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1724.825189][T15049] block nbd1: Receive control failed (result -107) [ 1724.934622][T23102] nbd1: detected capacity change from 0 to 8589934592 [ 1724.950195][ T9906] block nbd1: Dead connection, failed to find a fallback [ 1724.959375][ T9906] block nbd1: shutting down sockets [ 1724.964677][ T9906] blk_print_req_error: 24 callbacks suppressed [ 1724.964692][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1724.980399][ T9906] buffer_io_error: 23 callbacks suppressed [ 1724.980412][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1724.996125][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.005685][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.016450][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.029486][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.039401][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.049007][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.060480][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.070043][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.079383][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.090970][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.099003][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.111473][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.119411][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.129033][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.138688][T22999] ldm_validate_partition_table(): Disk read failed. [ 1725.145534][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.155043][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.181975][T15258] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1725.191590][T15258] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1725.204357][T22999] Dev nbd1: unable to read RDB block 0 [ 1725.212234][T22999] nbd1: unable to read partition table [ 1725.240573][T22999] ldm_validate_partition_table(): Disk read failed. [ 1725.256218][T22999] Dev nbd1: unable to read RDB block 0 [ 1725.282548][T22999] nbd1: unable to read partition table [ 1727.269404][T23130] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1728.559442][T18412] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1728.788889][T23136] Process accounting resumed [ 1728.924168][T18412] usb 6-1: Using ep0 maxpacket: 16 [ 1728.931206][T18412] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1728.939887][T18412] usb 6-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1728.951784][T18412] usb 6-1: config 0 has no interface number 0 [ 1728.959808][T18412] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1728.979603][T18412] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1728.989234][T18412] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1729.024227][T18412] usb 6-1: Product: syz [ 1729.032720][T18412] usb 6-1: SerialNumber: syz [ 1729.205182][T18412] usb 6-1: config 0 descriptor?? [ 1729.377344][T18412] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 1729.429296][T18412] usb 6-1: USB disconnect, device number 28 [ 1730.214906][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.221344][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.459812][T23190] 8021q: VLANs not supported on ip_vti0 [ 1732.156020][T23201] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1732.485168][T14216] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1732.568978][T23207] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4595'. [ 1732.655278][T14216] usb 7-1: Using ep0 maxpacket: 16 [ 1732.708587][T23211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1732.968441][T14216] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1732.976539][T14216] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1733.004476][T14216] usb 7-1: config 0 has no interface number 0 [ 1733.011882][T23207] overlayfs: failed to resolve './file2': -2 [ 1733.032499][T14216] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1733.096369][T14216] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1733.120205][T14216] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1733.424604][T14216] usb 7-1: Product: syz [ 1733.432609][T14216] usb 7-1: SerialNumber: syz [ 1733.442946][T14216] usb 7-1: config 0 descriptor?? [ 1733.472762][T23216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1733.517559][T14216] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1733.538796][T15049] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1733.560316][ T29] audit: type=1400 audit(1784997175.616:1229): avc: denied { setopt } for pid=23214 comm="syz.5.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1733.986817][T14216] usb 7-1: USB disconnect, device number 45 [ 1735.026661][T21156] block nbd5: Receive control failed (result -107) [ 1735.104983][T23239] nbd5: detected capacity change from 0 to 8589934592 [ 1735.125009][ T9906] block nbd5: Dead connection, failed to find a fallback [ 1735.132094][ T9906] block nbd5: shutting down sockets [ 1735.137336][ T9906] blk_print_req_error: 24 callbacks suppressed [ 1735.137352][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.153245][ T9906] buffer_io_error: 23 callbacks suppressed [ 1735.153255][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.174302][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.183787][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.191958][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.204555][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.212370][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.222717][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.231007][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.240865][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.250564][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.260065][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.268261][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.277911][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.285956][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.296309][ T5705] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1735.304300][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.312346][T23203] ldm_validate_partition_table(): Disk read failed. [ 1735.328265][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.339110][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.347566][ T9906] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.357432][ T9906] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1735.365969][T23203] Dev nbd5: unable to read RDB block 0 [ 1735.390878][T23203] nbd5: unable to read partition table [ 1735.413887][T23203] ldm_validate_partition_table(): Disk read failed. [ 1735.426130][T23203] Dev nbd5: unable to read RDB block 0 [ 1735.441828][T23203] nbd5: unable to read partition table [ 1735.501025][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1735.518133][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.533684][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.554006][ T5705] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1735.583295][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.628011][ T5705] usb 2-1: Product: syz [ 1735.918859][ T5705] usb 2-1: Manufacturer: syz [ 1735.926357][ T5705] usb 2-1: SerialNumber: syz [ 1735.950652][ T5705] usb 2-1: selecting invalid altsetting 1 [ 1736.015063][T23260] Cannot find add_set index 0 as target [ 1736.044245][T21156] Bluetooth: hci1: unexpected subevent 0x06 length: 18 > 10 [ 1736.059473][ T5705] usb 2-1: unit 6 not found! [ 1736.727556][T23273] FAULT_INJECTION: forcing a failure. [ 1736.727556][T23273] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.786347][T23273] CPU: 0 UID: 0 PID: 23273 Comm: syz.0.4616 Tainted: G L syzkaller #0 PREEMPT(full) [ 1736.786368][T23273] Tainted: [L]=SOFTLOCKUP [ 1736.786375][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1736.786383][T23273] Call Trace: [ 1736.786387][T23273] [ 1736.786393][T23273] dump_stack_lvl+0x100/0x190 [ 1736.786412][T23273] should_fail_ex.cold+0x5/0xa [ 1736.786427][T23273] should_failslab+0xc2/0x120 [ 1736.786443][T23273] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1736.786457][T23273] ? __alloc_skb+0x140/0x710 [ 1736.786474][T23273] __alloc_skb+0x140/0x710 [ 1736.786486][T23273] ? __pfx___alloc_skb+0x10/0x10 [ 1736.786503][T23273] tcp_stream_alloc_skb+0x34/0x660 [ 1736.786520][T23273] tcp_sendmsg_locked+0x13b2/0x44d0 [ 1736.786538][T23273] ? __lock_acquire+0x49f/0x1a40 [ 1736.786557][T23273] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1736.786573][T23273] ? do_raw_spin_lock+0x128/0x260 [ 1736.786589][T23273] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1736.786607][T23273] ? __local_bh_enable_ip+0x9e/0x120 [ 1736.786625][T23273] tcp_sendmsg+0x2e/0x50 [ 1736.786638][T23273] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1736.786652][T23273] inet_sendmsg+0xb9/0x140 [ 1736.786667][T23273] __sys_sendto+0x453/0x4e0 [ 1736.786678][T23273] ? __pfx_inet_sendmsg+0x10/0x10 [ 1736.786692][T23273] ? __pfx___sys_sendto+0x10/0x10 [ 1736.786709][T23273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1736.786729][T23273] ? ksys_write+0x1ac/0x250 [ 1736.786745][T23273] ? __pfx_ksys_write+0x10/0x10 [ 1736.786764][T23273] __x64_sys_sendto+0xe0/0x1c0 [ 1736.786776][T23273] ? do_syscall_64+0x90/0x870 [ 1736.786787][T23273] ? lockdep_hardirqs_on+0x78/0x100 [ 1736.786800][T23273] do_syscall_64+0x115/0x870 [ 1736.786827][T23273] ? clear_bhb_loop+0x40/0x90 [ 1736.786842][T23273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.786854][T23273] RIP: 0033:0x7f090459de99 [ 1736.786864][T23273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.786875][T23273] RSP: 002b:00007f09054ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1736.786887][T23273] RAX: ffffffffffffffda RBX: 00007f0904825fa0 RCX: 00007f090459de99 [ 1736.786895][T23273] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 1736.786902][T23273] RBP: 00007f09054ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.786909][T23273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.786916][T23273] R13: 00007f0904826038 R14: 00007f0904825fa0 R15: 00007ffca8882298 [ 1736.786933][T23273] [ 1738.020151][ T5705] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 1738.134617][T21156] Bluetooth: hci1: command 0x0406 tx timeout [ 1739.061150][ T5705] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1739.262595][ T5705] usb 2-1: USB disconnect, device number 96 [ 1739.362747][T23203] udevd[23203]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1739.484504][ T29] audit: type=1400 audit(1784997181.536:1230): avc: denied { setopt } for pid=23284 comm="syz.6.4621" lport=38502 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1739.515283][ T29] audit: type=1400 audit(1784997181.536:1231): avc: denied { getopt } for pid=23284 comm="syz.6.4621" lport=38502 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1739.648728][ T29] audit: type=1400 audit(1784997181.696:1232): avc: denied { read append } for pid=23294 comm="syz.6.4624" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1739.716811][ T29] audit: type=1400 audit(1784997181.696:1233): avc: denied { ioctl open } for pid=23294 comm="syz.6.4624" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1739.968879][T23300] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1740.711887][T23298] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1740.720514][T23298] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1740.729530][T23298] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1740.834769][T18412] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1740.957134][T23298] Process accounting resumed [ 1740.994219][T18412] usb 7-1: Using ep0 maxpacket: 16 [ 1741.001174][T18412] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.021311][T18412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1741.069909][T18412] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1741.113711][T18412] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1741.155964][T18412] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1741.190794][T18412] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1741.199981][T14216] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1741.235119][T18412] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1741.272930][T18412] usb 7-1: Manufacturer: syz [ 1741.332539][T18412] usb 7-1: config 0 descriptor?? [ 1741.404270][T14216] usb 2-1: Using ep0 maxpacket: 8 [ 1741.419863][T14216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1741.473207][T14216] usb 2-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 1741.488296][T14216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.507084][T14216] usb 2-1: Product: syz [ 1741.524734][T14216] usb 2-1: Manufacturer: syz [ 1741.533554][T14216] usb 2-1: SerialNumber: syz [ 1741.684315][T18412] rc_core: IR keymap rc-hauppauge not found [ 1741.690270][T18412] Registered IR keymap rc-empty [ 1741.709684][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1741.748454][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1741.847304][T14216] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.056590][T18412] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1742.172178][T14216] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1742.211190][T18412] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 1742.227435][T14216] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.252907][T14216] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1742.304329][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1742.306730][ T29] audit: type=1400 audit(1784997184.366:1234): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4567 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1742.333911][ C0] rc rc0: IR event FIFO is full! [ 1742.341479][ C0] rc rc0: IR event FIFO is full! [ 1742.368915][T14216] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1742.398964][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1743.099531][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1743.145920][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1743.190905][T14216] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1743.366907][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.361672][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.411899][T14216] usb 2-1: USB disconnect, device number 97 [ 1744.542721][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.568138][T23015] udevd[23015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1744.672412][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.744242][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.806109][T18412] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1744.870641][T18412] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1744.935744][T18412] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1745.015415][T18412] usb 7-1: USB disconnect, device number 46 [ 1745.021493][ T29] audit: type=1400 audit(1784997187.066:1235): avc: denied { getopt } for pid=23348 comm="syz.5.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1746.016649][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1022 jiffies old. [ 1746.044212][T23344] orangefs_mount: mount request failed with -4 [ 1746.581476][T23363] netlink: 'syz.4.4641': attribute type 10 has an invalid length. [ 1746.843725][T23368] SELinux: policydb version 14613 does not match my version range 15-35 [ 1746.852666][T23368] SELinux: failed to load policy [ 1746.862662][T23368] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1749.821323][T23401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4654'. [ 1750.386031][T23406] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1750.649868][T23412] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1750.724241][ T1221] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1750.731887][ T5726] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1750.756002][T23400] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1750.817984][ T29] audit: type=1400 audit(1784997192.876:1236): avc: denied { unmount } for pid=19786 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1750.894179][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 1750.899375][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 1750.992703][ T1221] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1751.002524][ T1221] usb 1-1: config 0 has no interface number 0 [ 1751.008667][ T5726] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1751.022043][ T1221] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1751.035183][ T5726] usb 2-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1751.996192][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.004374][ T1221] usb 1-1: Product: syz [ 1752.008535][ T1221] usb 1-1: Manufacturer: syz [ 1752.013130][ T1221] usb 1-1: SerialNumber: syz [ 1752.017835][ T5726] usb 2-1: config 0 has no interface number 0 [ 1752.024234][ T5726] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1752.038936][ T1221] usb 1-1: config 0 descriptor?? [ 1752.239914][ T5726] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1752.257708][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1752.266349][ T5726] usb 2-1: Product: syz [ 1752.270778][ T5726] usb 2-1: SerialNumber: syz [ 1752.279322][ T1221] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1752.294977][ T5726] usb 2-1: config 0 descriptor?? [ 1752.324399][ T5726] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1752.333911][ T1221] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1752.492139][ T1221] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1752.780314][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1752.789982][ T1221] usb 1-1: USB disconnect, device number 98 [ 1752.828903][ T1221] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1752.867590][ T5733] usb 2-1: USB disconnect, device number 98 [ 1752.890524][ T1221] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1752.946562][ T1221] quatech2 1-1:0.51: device disconnected [ 1756.378050][ T29] audit: type=1400 audit(1784997198.436:1237): avc: denied { create } for pid=23471 comm="syz.4.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1756.726977][T23472] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 1757.587796][ T29] audit: type=1400 audit(1784997199.636:1238): avc: denied { unlink } for pid=23483 comm="syz.5.4679" name="#33" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1757.703551][ T29] audit: type=1400 audit(1784997199.636:1239): avc: denied { mount } for pid=23483 comm="syz.5.4679" name="/" dev="overlay" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1758.350850][T23499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1758.457786][T21156] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1758.549967][T23501] SELinux: policydb version 14613 does not match my version range 15-35 [ 1758.559351][T23501] SELinux: failed to load policy [ 1758.565685][T23501] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1758.975461][T23517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1759.277804][ T29] audit: type=1400 audit(1784997201.336:1240): avc: denied { ioctl } for pid=23524 comm="syz.0.4694" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1759.392007][ T1221] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1759.574176][ T5726] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1759.604299][ T1221] usb 7-1: Using ep0 maxpacket: 32 [ 1759.962544][ T1221] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1759.974024][ T1221] usb 7-1: config 0 has no interface number 0 [ 1759.982423][ T1221] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1759.992436][ T1221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.000539][ T1221] usb 7-1: Product: syz [ 1760.005005][ T1221] usb 7-1: Manufacturer: syz [ 1760.009694][ T1221] usb 7-1: SerialNumber: syz [ 1760.034318][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 1760.057346][ T1221] usb 7-1: config 0 descriptor?? [ 1760.074722][T14216] IPVS: starting estimator thread 0... [ 1760.103948][ T5726] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1760.112523][ T5726] usb 6-1: config 0 has no interface number 0 [ 1760.155539][ T1221] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1760.175702][ T5726] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1760.195657][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.208903][ T5726] usb 6-1: Product: syz [ 1760.211113][T23533] IPVS: using max 39 ests per chain, 93600 per kthread [ 1760.220671][ T5726] usb 6-1: Manufacturer: syz [ 1760.287678][ T5726] usb 6-1: SerialNumber: syz [ 1760.536155][ T5726] usb 6-1: config 0 descriptor?? [ 1760.541670][ T1221] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1760.557119][ T5726] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1760.567230][ T1221] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1760.832978][T23539] overlayfs: failed to resolve './file1': -2 [ 1761.138749][ T5726] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 1761.172528][ T5726] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 1761.198993][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1761.199384][T14216] usb 7-1: USB disconnect, device number 47 [ 1761.329047][T14216] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1761.378287][T14216] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1761.398082][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1761.398459][T18412] usb 6-1: USB disconnect, device number 29 [ 1761.414860][T14216] quatech2 7-1:0.51: device disconnected [ 1761.455078][T18412] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 1761.482602][T18412] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 1761.498400][T18412] quatech2 6-1:0.51: device disconnected [ 1762.929753][T23561] overlayfs: failed to resolve './file1': -2 [ 1764.083520][T23570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1764.093875][T23572] SELinux: policydb version 14613 does not match my version range 15-35 [ 1764.102372][T23572] SELinux: failed to load policy [ 1764.108439][T23572] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1764.190349][T21156] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1766.418579][T23601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1766.448986][T21156] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1766.644591][ T29] audit: type=1400 audit(1784997208.696:1241): avc: denied { audit_write } for pid=23607 comm="syz.4.4718" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1766.648965][T23608] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4718'. [ 1766.757838][ T29] audit: type=1400 audit(1784997208.816:1242): avc: denied { create } for pid=23607 comm="syz.4.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1767.110878][T23621] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1767.120293][T23620] SELinux: policydb version 14613 does not match my version range 15-35 [ 1767.128738][T23620] SELinux: failed to load policy [ 1767.135702][T23620] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1767.166179][T23621] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1767.772019][T23623] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1768.184564][T23635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1768.242583][T21156] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1768.252556][T21156] CPU: 1 UID: 0 PID: 21156 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1768.252596][T21156] Tainted: [L]=SOFTLOCKUP [ 1768.252606][T21156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1768.252623][T21156] Workqueue: hci4 hci_rx_work [ 1768.252653][T21156] Call Trace: [ 1768.252661][T21156] [ 1768.252671][T21156] dump_stack_lvl+0x100/0x190 [ 1768.252704][T21156] sysfs_warn_dup.cold+0x1c/0x28 [ 1768.252740][T21156] sysfs_create_dir_ns+0x24b/0x2b0 [ 1768.252778][T21156] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1768.252814][T21156] ? find_held_lock+0x2b/0x80 [ 1768.252850][T21156] ? kobject_add_internal+0x25f/0x930 [ 1768.252882][T21156] ? kobject_add_internal+0x25f/0x930 [ 1768.252916][T21156] ? do_raw_spin_unlock+0x145/0x1e0 [ 1768.252952][T21156] kobject_add_internal+0x2c8/0x930 [ 1768.252988][T21156] kobject_add+0x16a/0x1e0 [ 1768.253020][T21156] ? __pfx_kobject_add+0x10/0x10 [ 1768.253050][T21156] ? class_to_subsys+0x10f/0x150 [ 1768.253089][T21156] ? kobject_put+0xb9/0x640 [ 1768.253117][T21156] ? _raw_spin_unlock+0x28/0x50 [ 1768.253168][T21156] device_add+0x294/0x1970 [ 1768.253203][T21156] ? __pfx_dev_set_name+0x10/0x10 [ 1768.253239][T21156] ? __pfx_device_add+0x10/0x10 [ 1768.253271][T21156] ? mgmt_send_event_skb+0x2fb/0x460 [ 1768.253306][T21156] hci_conn_add_sysfs+0x1a3/0x260 [ 1768.253336][T21156] le_conn_complete_evt+0x11eb/0x1f60 [ 1768.253370][T21156] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1768.253393][T21156] ? hci_event_packet+0x186/0xcd0 [ 1768.253424][T21156] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1768.253451][T21156] ? skb_pull_data+0x15f/0x1e0 [ 1768.253488][T21156] hci_le_meta_evt+0x34a/0x5f0 [ 1768.253514][T21156] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1768.253543][T21156] hci_event_packet+0x51c/0xcd0 [ 1768.253568][T21156] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1768.253607][T21156] ? __pfx_hci_event_packet+0x10/0x10 [ 1768.253636][T21156] ? kcov_remote_start+0x384/0x670 [ 1768.253664][T21156] ? lockdep_hardirqs_on+0x78/0x100 [ 1768.253697][T21156] hci_rx_work+0x451/0xfc0 [ 1768.253726][T21156] process_one_work+0xa23/0x1940 [ 1768.253766][T21156] ? __pfx_process_one_work+0x10/0x10 [ 1768.253804][T21156] ? __pfx_hci_rx_work+0x10/0x10 [ 1768.253830][T21156] worker_thread+0x5ef/0xe50 [ 1768.253865][T21156] ? __pfx_worker_thread+0x10/0x10 [ 1768.253892][T21156] ? kthread+0x13a/0x450 [ 1768.253914][T21156] ? __pfx_worker_thread+0x10/0x10 [ 1768.253937][T21156] kthread+0x370/0x450 [ 1768.253957][T21156] ? __pfx_kthread+0x10/0x10 [ 1768.253982][T21156] ret_from_fork+0x72b/0xd50 [ 1768.254015][T21156] ? __pfx_ret_from_fork+0x10/0x10 [ 1768.254048][T21156] ? rcu_is_watching+0x12/0xc0 [ 1768.254083][T21156] ? __switch_to+0x800/0x10f0 [ 1768.254104][T21156] ? __pfx_kthread+0x10/0x10 [ 1768.254126][T21156] ret_from_fork_asm+0x1a/0x30 [ 1768.254180][T21156] [ 1768.529272][T21156] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1768.543355][T21156] Bluetooth: hci4: failed to register connection device [ 1768.654268][ T1221] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1769.597480][ T1221] usb 1-1: Using ep0 maxpacket: 16 [ 1769.635115][ T1221] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1769.673092][ T1221] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1769.763997][ T1221] usb 1-1: config 0 has no interface number 0 [ 1769.777926][ T1221] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1769.817035][ T1221] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1769.839761][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1769.868020][ T1221] usb 1-1: Product: syz [ 1769.877148][ T1221] usb 1-1: SerialNumber: syz [ 1769.895825][ T1221] usb 1-1: config 0 descriptor?? [ 1769.911500][ T1221] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1770.024205][ T5705] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1770.173816][ T5733] usb 1-1: USB disconnect, device number 99 [ 1770.194454][ T5705] usb 6-1: Using ep0 maxpacket: 8 [ 1770.251349][ T5705] usb 6-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 1770.388015][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.482063][ T5705] usb 6-1: Product: syz [ 1770.594517][ T5705] usb 6-1: Manufacturer: syz [ 1770.652197][ T5705] usb 6-1: SerialNumber: syz [ 1771.590017][ T5705] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1771.697913][ T5705] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1772.000037][ T5705] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1772.130678][ T5705] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1772.361267][ T5705] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1772.617088][ T5705] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1772.644531][ T5705] usb 6-1: USB disconnect, device number 30 [ 1772.707103][T23332] udevd[23332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1772.834607][ T1221] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1773.064197][ T1221] usb 1-1: Using ep0 maxpacket: 16 [ 1773.071644][ T1221] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1773.082948][ T1221] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1773.560157][ T1221] usb 1-1: config 0 has no interface number 0 [ 1773.588734][ T1221] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1773.641195][ T1221] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1773.669720][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1773.692124][ T1221] usb 1-1: Product: syz [ 1773.704330][ T1221] usb 1-1: SerialNumber: syz [ 1773.724831][ T1221] usb 1-1: config 0 descriptor?? [ 1773.819327][ T1221] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1774.013938][ T5705] usb 1-1: USB disconnect, device number 100 [ 1774.884270][ T5705] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1775.074242][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 1775.106340][ T5705] usb 7-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 1775.309080][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.461424][ T5705] usb 7-1: Product: syz [ 1775.471272][ T5705] usb 7-1: Manufacturer: syz [ 1775.480597][ T5705] usb 7-1: SerialNumber: syz [ 1775.716072][ T5705] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1775.742117][ T5705] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1775.795530][ T5705] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1775.831463][ T5705] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1775.860879][ T5705] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1776.082167][T23714] SELinux: policydb version 14613 does not match my version range 15-35 [ 1776.090703][T23714] SELinux: failed to load policy [ 1776.096992][T23714] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1776.513496][ T5705] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1776.552685][ T5705] usb 7-1: USB disconnect, device number 48 [ 1776.952577][T23333] udevd[23333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1777.958156][T23726] Cannot find add_set index 0 as target [ 1778.014359][T21156] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10 [ 1778.212594][T23733] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4755'. [ 1779.727675][T23742] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1780.054319][T21156] Bluetooth: hci2: command 0x0406 tx timeout [ 1780.190449][T23750] SELinux: policydb version 14613 does not match my version range 15-35 [ 1780.199212][T23750] SELinux: failed to load policy [ 1780.209180][T23750] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1788.176410][T23831] FAULT_INJECTION: forcing a failure. [ 1788.176410][T23831] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.234475][T23831] CPU: 0 UID: 0 PID: 23831 Comm: syz.0.4775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1788.234496][T23831] Tainted: [L]=SOFTLOCKUP [ 1788.234501][T23831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1788.234508][T23831] Call Trace: [ 1788.234513][T23831] [ 1788.234518][T23831] dump_stack_lvl+0x100/0x190 [ 1788.234537][T23831] should_fail_ex.cold+0x5/0xa [ 1788.234552][T23831] should_failslab+0xc2/0x120 [ 1788.234568][T23831] __kmalloc_noprof+0xfc/0x820 [ 1788.234581][T23831] ? device_write+0x1a6/0x1c90 [ 1788.234598][T23831] device_write+0x1a6/0x1c90 [ 1788.234612][T23831] ? __pfx_device_write+0x10/0x10 [ 1788.234627][T23831] ? bpf_lsm_file_permission+0x9/0x10 [ 1788.234644][T23831] ? security_file_permission+0x76/0x210 [ 1788.234662][T23831] ? rw_verify_area+0xce/0x6d0 [ 1788.234680][T23831] vfs_write+0x2aa/0x1050 [ 1788.234697][T23831] ? __pfx_device_write+0x10/0x10 [ 1788.234712][T23831] ? __pfx_vfs_write+0x10/0x10 [ 1788.234727][T23831] ? find_held_lock+0x2b/0x80 [ 1788.234750][T23831] ? __fget_files+0x215/0x3d0 [ 1788.234761][T23831] ? __fget_files+0x215/0x3d0 [ 1788.234775][T23831] ? __fget_files+0x21f/0x3d0 [ 1788.234790][T23831] ksys_write+0x12a/0x250 [ 1788.234807][T23831] ? __pfx_ksys_write+0x10/0x10 [ 1788.234827][T23831] do_syscall_64+0x115/0x870 [ 1788.234840][T23831] ? clear_bhb_loop+0x40/0x90 [ 1788.234854][T23831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.234866][T23831] RIP: 0033:0x7f090459de99 [ 1788.234876][T23831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.234888][T23831] RSP: 002b:00007f09054ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1788.234902][T23831] RAX: ffffffffffffffda RBX: 00007f0904825fa0 RCX: 00007f090459de99 [ 1788.234909][T23831] RDX: 0000000000000070 RSI: 0000200000000600 RDI: 0000000000000003 [ 1788.234917][T23831] RBP: 00007f09054ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.234924][T23831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.234930][T23831] R13: 00007f0904826038 R14: 00007f0904825fa0 R15: 00007ffca8882298 [ 1788.234946][T23831] [ 1788.931804][T23843] overlayfs: failed to resolve './file1': -2 [ 1789.684254][ T1221] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1789.834365][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 1790.166220][ T1221] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1790.200100][ T1221] usb 1-1: config 0 has no interface number 0 [ 1790.220867][ T1221] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1790.432310][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.543566][T23835] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1790.588936][ T1221] usb 1-1: Product: syz [ 1790.597054][ T1221] usb 1-1: Manufacturer: syz [ 1790.603558][ T1221] usb 1-1: SerialNumber: syz [ 1790.722562][ T1221] usb 1-1: config 0 descriptor?? [ 1790.745501][ T1221] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1790.764838][T23866] netlink: 'syz.4.4791': attribute type 10 has an invalid length. [ 1790.793742][T23866] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 1790.808625][T23866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4791'. [ 1790.844285][T15983] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1791.064153][T15983] usb 2-1: Using ep0 maxpacket: 16 [ 1791.071809][ T1221] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1791.084509][T15983] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1791.105201][T15983] usb 2-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1791.116285][T15983] usb 2-1: config 0 has no interface number 0 [ 1791.116554][ T1221] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1791.131872][T15983] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1791.159260][T15983] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1791.169954][T15983] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1791.179622][T15983] usb 2-1: Product: syz [ 1791.191508][T15983] usb 2-1: SerialNumber: syz [ 1791.225557][T15983] usb 2-1: config 0 descriptor?? [ 1791.247948][T15983] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1791.740564][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1791.770161][ T5805] usb 1-1: USB disconnect, device number 101 [ 1791.775875][T15983] usb 2-1: USB disconnect, device number 99 [ 1791.776990][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.792236][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.835282][ T5805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1791.901638][ T5805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1791.963272][ T5805] quatech2 1-1:0.51: device disconnected [ 1793.463206][T23908] overlayfs: failed to resolve './file1': -2 [ 1794.403564][ T29] audit: type=1400 audit(1784997236.456:1243): avc: denied { setopt } for pid=23870 comm="syz.5.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1794.681104][ T29] audit: type=1400 audit(1784997236.456:1244): avc: denied { bind } for pid=23870 comm="syz.5.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1794.726883][ T29] audit: type=1400 audit(1784997236.456:1245): avc: denied { name_bind } for pid=23870 comm="syz.5.4794" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1794.865025][ T29] audit: type=1400 audit(1784997236.456:1246): avc: denied { node_bind } for pid=23870 comm="syz.5.4794" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1794.968428][ T29] audit: type=1400 audit(1784997236.456:1247): avc: denied { write } for pid=23870 comm="syz.5.4794" name="icmp" dev="proc" ino=4026533240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1795.434748][ T5805] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1795.597063][ T29] audit: type=1400 audit(1784997237.656:1248): avc: denied { read } for pid=23926 comm="syz.5.4807" path="socket:[93910]" dev="sockfs" ino=93910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1795.659269][ T5805] usb 2-1: device descriptor read/all, error -61 [ 1795.680759][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1795.807432][ T5805] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1795.926464][T23942] FAULT_INJECTION: forcing a failure. [ 1795.926464][T23942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.974213][ T5805] usb 2-1: device descriptor read/64, error -71 [ 1795.974721][T23942] CPU: 1 UID: 0 PID: 23942 Comm: syz.0.4812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.974753][T23942] Tainted: [L]=SOFTLOCKUP [ 1795.974764][T23942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1795.974778][T23942] Call Trace: [ 1795.974785][T23942] [ 1795.974793][T23942] dump_stack_lvl+0x100/0x190 [ 1795.974824][T23942] should_fail_ex.cold+0x5/0xa [ 1795.974851][T23942] _copy_from_user+0x2e/0xd0 [ 1795.974880][T23942] copy_msghdr_from_user+0x9f/0x4c0 [ 1795.974913][T23942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1795.974958][T23942] ___sys_sendmsg+0x106/0x1e0 [ 1795.974991][T23942] ? __pfx____sys_sendmsg+0x10/0x10 [ 1795.975019][T23942] ? __lock_acquire+0x49f/0x1a40 [ 1795.975045][T23942] ? get_pid_task+0x106/0x250 [ 1795.975107][T23942] __sys_sendmsg+0x160/0x210 [ 1795.975133][T23942] ? __pfx___sys_sendmsg+0x10/0x10 [ 1795.975172][T23942] do_syscall_64+0x115/0x870 [ 1795.975194][T23942] ? clear_bhb_loop+0x40/0x90 [ 1795.975220][T23942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.975242][T23942] RIP: 0033:0x7f090459de99 [ 1795.975259][T23942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.975281][T23942] RSP: 002b:00007f09054ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.975302][T23942] RAX: ffffffffffffffda RBX: 00007f0904825fa0 RCX: 00007f090459de99 [ 1795.975316][T23942] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1795.975330][T23942] RBP: 00007f09054ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.975343][T23942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.975356][T23942] R13: 00007f0904826038 R14: 00007f0904825fa0 R15: 00007ffca8882298 [ 1795.975385][T23942] [ 1796.446960][ T5805] usb usb2-port1: attempt power cycle [ 1796.814809][ T5805] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1797.257833][ T5805] usb 2-1: device descriptor read/8, error -71 [ 1797.573349][ T5805] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1798.135238][ T5805] usb 2-1: device descriptor read/8, error -71 [ 1798.365183][ T5805] usb usb2-port1: unable to enumerate USB device [ 1798.716717][T23984] netlink: 'syz.1.4824': attribute type 23 has an invalid length. [ 1798.842901][T23977] overlayfs: failed to resolve './file1': -2 [ 1799.561450][ T5805] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1799.644291][ T1221] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1799.734192][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 1799.807947][ T5805] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1799.829334][ T5805] usb 6-1: config 0 has no interface number 0 [ 1799.940326][ T1221] usb 1-1: Using ep0 maxpacket: 8 [ 1800.122509][ T1221] usb 1-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 1800.237298][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.328058][ T1221] usb 1-1: Product: syz [ 1800.377414][ T5805] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1800.381241][ T1221] usb 1-1: Manufacturer: syz [ 1800.405942][ T1221] usb 1-1: SerialNumber: syz [ 1800.437494][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.467425][ T5805] usb 6-1: Product: syz [ 1800.477903][ T5805] usb 6-1: Manufacturer: syz [ 1800.496820][ T5805] usb 6-1: SerialNumber: syz [ 1800.519225][ T5805] usb 6-1: config 0 descriptor?? [ 1800.551035][ T5805] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1800.678682][ T1221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.699102][ T1221] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1800.701459][T24004] syz_tun: entered allmulticast mode [ 1800.742794][ T1221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.745044][T24002] syz_tun: left allmulticast mode [ 1800.758083][ T1221] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1800.779046][ T5805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1800.779720][ T1221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.828342][ T5805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1800.895777][ T1221] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1800.952225][ T1221] usb 1-1: USB disconnect, device number 102 [ 1801.050323][T23203] udevd[23203]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1801.573326][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1801.581555][ T5805] usb 6-1: USB disconnect, device number 31 [ 1801.594895][ T5805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1801.639758][ T5805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1801.704052][ T5805] quatech2 6-1:0.51: device disconnected [ 1802.896414][T24020] FAULT_INJECTION: forcing a failure. [ 1802.896414][T24020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.963042][T24020] CPU: 1 UID: 0 PID: 24020 Comm: syz.6.4836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.963076][T24020] Tainted: [L]=SOFTLOCKUP [ 1802.963084][T24020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1802.963097][T24020] Call Trace: [ 1802.963105][T24020] [ 1802.963113][T24020] dump_stack_lvl+0x100/0x190 [ 1802.963143][T24020] should_fail_ex.cold+0x5/0xa [ 1802.963170][T24020] _copy_from_iter+0x1f4/0x1690 [ 1802.963199][T24020] ? __asan_memset+0x23/0x50 [ 1802.963221][T24020] ? __pfx__copy_from_iter+0x10/0x10 [ 1802.963249][T24020] ? __pfx___alloc_skb+0x10/0x10 [ 1802.963285][T24020] netlink_sendmsg+0x808/0xda0 [ 1802.963312][T24020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1802.963336][T24020] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1802.963372][T24020] ____sys_sendmsg+0xa4d/0xbe0 [ 1802.963401][T24020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1802.963424][T24020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1802.963470][T24020] ___sys_sendmsg+0x190/0x1e0 [ 1802.963504][T24020] ? __pfx____sys_sendmsg+0x10/0x10 [ 1802.963533][T24020] ? __lock_acquire+0x49f/0x1a40 [ 1802.963560][T24020] ? get_pid_task+0x106/0x250 [ 1802.963626][T24020] __sys_sendmsg+0x160/0x210 [ 1802.963653][T24020] ? __pfx___sys_sendmsg+0x10/0x10 [ 1802.963699][T24020] do_syscall_64+0x115/0x870 [ 1802.963722][T24020] ? clear_bhb_loop+0x40/0x90 [ 1802.963748][T24020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.963770][T24020] RIP: 0033:0x7f07feb9de99 [ 1802.963788][T24020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.963808][T24020] RSP: 002b:00007f07ff9e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1802.963829][T24020] RAX: ffffffffffffffda RBX: 00007f07fee25fa0 RCX: 00007f07feb9de99 [ 1802.963844][T24020] RDX: 0000000000000014 RSI: 0000200000000180 RDI: 0000000000000003 [ 1802.963858][T24020] RBP: 00007f07ff9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.963871][T24020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.963883][T24020] R13: 00007f07fee26038 R14: 00007f07fee25fa0 R15: 00007ffefd4ba208 [ 1802.963913][T24020] [ 1804.850197][T24042] Cannot find add_set index 0 as target [ 1805.088224][T24048] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1805.194386][T22269] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1805.554222][T22269] usb 7-1: Using ep0 maxpacket: 8 [ 1805.627346][T22269] usb 7-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 1805.680001][T22269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.708282][T22269] usb 7-1: Product: syz [ 1805.723492][T22269] usb 7-1: Manufacturer: syz [ 1805.760076][T22269] usb 7-1: SerialNumber: syz [ 1805.924264][T18412] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1806.059471][T22269] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1806.066862][T22269] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1806.080344][T22269] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1806.088788][T22269] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1806.101159][T22269] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1806.104549][T18412] usb 1-1: Using ep0 maxpacket: 16 [ 1806.117231][T18412] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1806.128183][T18412] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1806.161078][T22269] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1806.177642][T22269] usb 7-1: USB disconnect, device number 49 [ 1806.210015][T18412] usb 1-1: config 0 has no interface number 0 [ 1806.238563][T18412] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1806.245283][T23333] udevd[23333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1806.271819][T15983] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1806.431047][T18412] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1806.447264][T18412] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1806.463951][T18412] usb 1-1: Product: syz [ 1806.464492][T15983] usb 6-1: Using ep0 maxpacket: 32 [ 1806.483863][T15983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1806.502946][T18412] usb 1-1: SerialNumber: syz [ 1806.510255][T15983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1806.526749][T15983] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1806.537860][T15983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.555446][T18412] usb 1-1: config 0 descriptor?? [ 1806.559322][T15983] usb 6-1: config 0 descriptor?? [ 1806.591087][T15983] hub 6-1:0.0: USB hub found [ 1806.598597][T18412] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1806.984284][ T29] audit: type=1400 audit(1784997248.986:1249): avc: denied { lock } for pid=24065 comm="syz.1.4851" path="socket:[95400]" dev="sockfs" ino=95400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1807.198857][ T5726] usb 1-1: USB disconnect, device number 103 [ 1807.212479][T15983] hub 6-1:0.0: 1 port detected [ 1807.999225][T24078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1808.145302][ T29] audit: type=1400 audit(1784997250.206:1250): avc: denied { remount } for pid=24077 comm="syz.1.4854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1808.176924][ T29] audit: type=1400 audit(1784997250.226:1251): avc: denied { nlmsg_write } for pid=24077 comm="syz.1.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1809.510203][T15983] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 1810.217592][T21156] block nbd1: Receive control failed (result -107) [ 1810.884705][T24101] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4859'. [ 1810.904315][T15983] usb 6-1: USB disconnect, device number 32 [ 1810.988988][T24096] nbd1: detected capacity change from 0 to 8589934592 [ 1811.059384][ T9906] block nbd1: Dead connection, failed to find a fallback [ 1811.067549][ T9906] block nbd1: shutting down sockets [ 1811.074840][ T9906] blk_print_req_error: 24 callbacks suppressed [ 1811.074855][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.092835][ T9906] buffer_io_error: 23 callbacks suppressed [ 1811.092846][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.107079][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.117053][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.125146][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.135069][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.143337][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.152985][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.161199][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.164199][ T29] audit: type=1400 audit(1784997253.196:1252): avc: denied { connect } for pid=24105 comm="syz.4.4860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1811.171167][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.199999][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.209568][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.217922][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.227529][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.235868][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.245610][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.254229][T23203] ldm_validate_partition_table(): Disk read failed. [ 1811.263924][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.274543][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.284323][ T9906] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1811.294011][ T9906] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1811.302951][T23203] Dev nbd1: unable to read RDB block 0 [ 1811.309742][T23203] nbd1: unable to read partition table [ 1811.400961][T23203] ldm_validate_partition_table(): Disk read failed. [ 1811.524669][T23203] Dev nbd1: unable to read RDB block 0 [ 1811.550986][T23203] nbd1: unable to read partition table [ 1812.963021][ T29] audit: type=1400 audit(1784997255.016:1253): avc: denied { create } for pid=24126 comm="syz.4.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1813.039385][T24130] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4868'. [ 1813.395654][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4868'. [ 1814.076230][ T29] audit: type=1400 audit(1784997256.136:1254): avc: denied { ioctl } for pid=24141 comm="syz.6.4872" path="socket:[95697]" dev="sockfs" ino=95697 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1814.972775][T24155] xt_HMARK: proto mask must be zero with L3 mode [ 1817.574740][T24182] hfs: unable to load iocharset "io#harset" [ 1817.916841][T24197] netlink: 'syz.1.4884': attribute type 23 has an invalid length. [ 1818.021887][T24198] FAULT_INJECTION: forcing a failure. [ 1818.021887][T24198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.036482][T24198] CPU: 0 UID: 0 PID: 24198 Comm: syz.6.4886 Tainted: G L syzkaller #0 PREEMPT(full) [ 1818.036515][T24198] Tainted: [L]=SOFTLOCKUP [ 1818.036523][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1818.036536][T24198] Call Trace: [ 1818.036544][T24198] [ 1818.036553][T24198] dump_stack_lvl+0x100/0x190 [ 1818.036585][T24198] should_fail_ex.cold+0x5/0xa [ 1818.036615][T24198] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 1818.036667][T24198] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1818.036697][T24198] ? shmem_write_begin+0x1ba/0x420 [ 1818.036723][T24198] ? __pfx_shmem_write_begin+0x10/0x10 [ 1818.036748][T24198] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1818.036774][T24198] ? __mark_inode_dirty+0xf6b/0x16e0 [ 1818.036810][T24198] generic_perform_write+0x4cb/0xa40 [ 1818.036851][T24198] ? __pfx_generic_perform_write+0x10/0x10 [ 1818.036879][T24198] ? __mark_inode_dirty+0x55c/0x16e0 [ 1818.036913][T24198] ? mnt_put_write_access_file+0x4e/0x100 [ 1818.036939][T24198] ? file_update_time_flags+0x373/0x500 [ 1818.036971][T24198] shmem_file_write_iter+0x10e/0x140 [ 1818.037000][T24198] do_iter_readv_writev+0x6f7/0x930 [ 1818.037034][T24198] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1818.037072][T24198] ? preempt_schedule_thunk+0x16/0x40 [ 1818.037101][T24198] vfs_iter_write+0x1e2/0x990 [ 1818.037138][T24198] backing_file_write_iter+0x6de/0x8c0 [ 1818.037170][T24198] ? __pfx_ovl_file_end_write+0x10/0x10 [ 1818.037198][T24198] ovl_write_iter+0x34e/0x420 [ 1818.037223][T24198] ? __pfx_ovl_write_iter+0x10/0x10 [ 1818.037246][T24198] ? __pfx_ovl_file_end_write+0x10/0x10 [ 1818.037279][T24198] vfs_write+0x6ac/0x1050 [ 1818.037311][T24198] ? __pfx_ovl_write_iter+0x10/0x10 [ 1818.037337][T24198] ? __pfx_vfs_write+0x10/0x10 [ 1818.037391][T24198] ksys_write+0x12a/0x250 [ 1818.037423][T24198] ? __pfx_ksys_write+0x10/0x10 [ 1818.037464][T24198] do_syscall_64+0x115/0x870 [ 1818.037486][T24198] ? clear_bhb_loop+0x40/0x90 [ 1818.037513][T24198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.037535][T24198] RIP: 0033:0x7f07feb9de99 [ 1818.037553][T24198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.037573][T24198] RSP: 002b:00007f07ff9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1818.037594][T24198] RAX: ffffffffffffffda RBX: 00007f07fee26180 RCX: 00007f07feb9de99 [ 1818.037609][T24198] RDX: 00000000000000a0 RSI: 0000200000000180 RDI: 0000000000000007 [ 1818.037622][T24198] RBP: 00007f07ff9a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.037635][T24198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.037653][T24198] R13: 00007f07fee26218 R14: 00007f07fee26180 R15: 00007ffefd4ba208 [ 1818.037685][T24198] [ 1818.351363][ T29] audit: type=1800 audit(1784997260.076:1255): pid=24198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4886" name="file0" dev="overlay" ino=2208 res=0 errno=0 [ 1818.660943][T24202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1818.678721][T24202] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1819.027990][T24206] openvswitch: netlink: IP tunnel dst address not specified [ 1819.119358][T21156] block nbd6: Receive control failed (result -107) [ 1819.185608][T24208] nbd6: detected capacity change from 0 to 8589934592 [ 1819.198776][ T9906] block nbd6: Dead connection, failed to find a fallback [ 1819.206139][ T9906] block nbd6: shutting down sockets [ 1819.213183][ T9906] blk_print_req_error: 24 callbacks suppressed [ 1819.213198][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.229500][ T9906] buffer_io_error: 23 callbacks suppressed [ 1819.229514][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.244313][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.254318][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.263665][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.273246][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.281558][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.291149][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.299065][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.311321][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.320643][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.333675][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.342563][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.352312][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.360216][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.370801][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.379908][T23203] ldm_validate_partition_table(): Disk read failed. [ 1819.387766][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.397357][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.407042][ T9906] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1819.416783][ T9906] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1819.426646][T23203] Dev nbd6: unable to read RDB block 0 [ 1819.432600][T23203] nbd6: unable to read partition table [ 1819.448582][T23203] ldm_validate_partition_table(): Disk read failed. [ 1819.455587][T23203] Dev nbd6: unable to read RDB block 0 [ 1819.461587][T23203] nbd6: unable to read partition table [ 1819.759151][T24219] SELinux: policydb table sizes (0,14) do not match mine (8,7) [ 1819.767219][T24219] SELinux: failed to load policy [ 1819.778579][T24219] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1821.864530][ T29] audit: type=1400 audit(1784997263.916:1256): avc: denied { create } for pid=24231 comm="syz.1.4895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1822.040873][T24232] FAULT_INJECTION: forcing a failure. [ 1822.040873][T24232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.053951][T24232] CPU: 1 UID: 0 PID: 24232 Comm: syz.1.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1822.053970][T24232] Tainted: [L]=SOFTLOCKUP [ 1822.053974][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1822.053982][T24232] Call Trace: [ 1822.053986][T24232] [ 1822.053991][T24232] dump_stack_lvl+0x100/0x190 [ 1822.054011][T24232] should_fail_ex.cold+0x5/0xa [ 1822.054026][T24232] _copy_to_user+0x32/0xd0 [ 1822.054044][T24232] simple_read_from_buffer+0xcb/0x170 [ 1822.054057][T24232] proc_fail_nth_read+0x1af/0x230 [ 1822.054075][T24232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1822.054098][T24232] ? rw_verify_area+0xce/0x6d0 [ 1822.054124][T24232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1822.054152][T24232] vfs_read+0x1e4/0xb40 [ 1822.054183][T24232] ? __pfx_vfs_read+0x10/0x10 [ 1822.054212][T24232] ? __fget_files+0x215/0x3d0 [ 1822.054239][T24232] ? __fget_files+0x21f/0x3d0 [ 1822.054255][T24232] ksys_read+0x12a/0x250 [ 1822.054271][T24232] ? __pfx_ksys_read+0x10/0x10 [ 1822.054292][T24232] do_syscall_64+0x115/0x870 [ 1822.054304][T24232] ? clear_bhb_loop+0x40/0x90 [ 1822.054319][T24232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.054330][T24232] RIP: 0033:0x7f061875e6ce [ 1822.054341][T24232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1822.054356][T24232] RSP: 002b:00007f06196b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1822.054368][T24232] RAX: ffffffffffffffda RBX: 00007f06196b66c0 RCX: 00007f061875e6ce [ 1822.054376][T24232] RDX: 000000000000000f RSI: 00007f06196b60a0 RDI: 0000000000000009 [ 1822.054383][T24232] RBP: 00007f06196b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.054390][T24232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.054397][T24232] R13: 00007f0618a26038 R14: 00007f0618a25fa0 R15: 00007ffcabbdd1f8 [ 1822.054413][T24232] [ 1822.246785][ T29] audit: type=1400 audit(1784997264.096:1257): avc: denied { bind } for pid=24231 comm="syz.1.4895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1822.338706][ T29] audit: type=1400 audit(1784997264.396:1258): avc: denied { read } for pid=24233 comm="syz.5.4894" path="socket:[95973]" dev="sockfs" ino=95973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1822.635280][T24250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1822.796326][ T29] audit: type=1400 audit(1784997264.676:1259): avc: denied { accept } for pid=24245 comm="syz.1.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1823.695174][ T29] audit: type=1400 audit(1784997265.746:1260): avc: denied { listen } for pid=24233 comm="syz.5.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1824.744181][ T5705] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1824.998701][ T29] audit: type=1800 audit(1784997267.056:1261): pid=24280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4906" name="file0" dev="overlay" ino=1870 res=0 errno=0 [ 1825.033900][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 1825.041276][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1825.052831][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1825.132183][ T5705] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1825.183931][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.755166][ T5705] usb 6-1: config 0 descriptor?? [ 1825.790767][ T5705] hub 6-1:0.0: USB hub found [ 1826.014886][ T5705] hub 6-1:0.0: 1 port detected [ 1827.230133][ T5733] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1827.239381][ T5705] usb 6-1: USB disconnect, device number 33 [ 1828.931885][ T5705] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1829.114614][ T5705] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1829.442709][ T5705] usb 7-1: config 0 has no interface number 0 [ 1829.463642][ T5705] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1829.488888][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.517484][ T5705] usb 7-1: Product: syz [ 1829.540997][ T5705] usb 7-1: Manufacturer: syz [ 1829.559567][ T5705] usb 7-1: SerialNumber: syz [ 1829.607873][ T5705] usb 7-1: config 0 descriptor?? [ 1830.009476][ T5705] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1830.468949][ T29] audit: type=1400 audit(1784997272.166:1262): avc: denied { create } for pid=24344 comm="syz.5.4925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1830.489846][ T5705] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1830.547154][ T5705] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1830.642180][ T5705] usb 7-1: media controller created [ 1830.923668][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1833.502648][ T5705] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1833.530794][T24363] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1833.894352][ T5805] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1834.212757][ T5705] usb 7-1: USB disconnect, device number 50 [ 1834.754196][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 1835.171494][ T29] audit: type=1400 audit(1784997277.226:1263): avc: denied { map } for pid=24387 comm="syz.0.4937" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1835.711634][T24396] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4934'. [ 1836.130213][ T29] audit: type=1400 audit(1784997277.226:1264): avc: denied { execute } for pid=24387 comm="syz.0.4937" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1836.283695][ T29] audit: type=1400 audit(1784997278.336:1265): avc: denied { setopt } for pid=24400 comm="syz.4.4939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1836.496366][T18412] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1837.447693][ T5805] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1837.456846][T18412] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1837.466939][ T5805] usb 6-1: can't read configurations, error -71 [ 1837.473182][T18412] usb 2-1: config 0 has no interface number 0 [ 1837.611320][T18412] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1837.627271][T18412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.666391][T18412] usb 2-1: Product: syz [ 1837.977023][T18412] usb 2-1: Manufacturer: syz [ 1837.990591][T18412] usb 2-1: SerialNumber: syz [ 1838.008064][T18412] usb 2-1: config 0 descriptor?? [ 1838.841415][T18412] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1838.870240][T18412] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1838.909790][T18412] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1838.942333][T18412] usb 2-1: media controller created [ 1838.980011][T18412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1839.100826][ T29] audit: type=1400 audit(1784997281.156:1266): avc: denied { bind } for pid=24417 comm="syz.5.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1839.294204][ T5805] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1840.240160][ T5805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1840.240251][ T5805] usb 1-1: config 0 has no interface number 0 [ 1841.370771][ T5805] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1841.370867][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.370923][ T5805] usb 1-1: Product: syz [ 1841.370938][ T5805] usb 1-1: Manufacturer: syz [ 1841.370955][ T5805] usb 1-1: SerialNumber: syz [ 1842.123072][T18412] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1842.492834][ T29] audit: type=1400 audit(1784997281.586:1267): avc: denied { mount } for pid=24417 comm="syz.5.4945" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1842.504465][ T5805] usb 1-1: config 0 descriptor?? [ 1842.638335][T18412] usb 2-1: USB disconnect, device number 104 [ 1842.649169][ T5805] usb 1-1: can't set config #0, error -71 [ 1842.685485][ T5805] usb 1-1: USB disconnect, device number 104 [ 1845.012258][T24439] block nbd5: shutting down sockets [ 1845.186120][T24446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1845.209743][T21156] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1845.904490][T18412] kernel write not supported for file /dsp1 (pid: 18412 comm: kworker/0:0) [ 1845.921722][T24460] FAULT_INJECTION: forcing a failure. [ 1845.921722][T24460] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.980283][T24460] CPU: 0 UID: 0 PID: 24460 Comm: syz.6.4955 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.980317][T24460] Tainted: [L]=SOFTLOCKUP [ 1845.980325][T24460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1845.980338][T24460] Call Trace: [ 1845.980346][T24460] [ 1845.980355][T24460] dump_stack_lvl+0x100/0x190 [ 1845.980386][T24460] should_fail_ex.cold+0x5/0xa [ 1845.980414][T24460] should_failslab+0xc2/0x120 [ 1845.980442][T24460] __kmalloc_noprof+0xfc/0x820 [ 1845.980467][T24460] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1845.980502][T24460] kernfs_fop_write_iter+0x26a/0x5f0 [ 1845.980533][T24460] vfs_write+0x6ac/0x1050 [ 1845.980566][T24460] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1845.980597][T24460] ? __pfx_vfs_write+0x10/0x10 [ 1845.980649][T24460] ksys_write+0x12a/0x250 [ 1845.980680][T24460] ? __pfx_ksys_write+0x10/0x10 [ 1845.980720][T24460] do_syscall_64+0x115/0x870 [ 1845.980744][T24460] ? clear_bhb_loop+0x40/0x90 [ 1845.980770][T24460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.980792][T24460] RIP: 0033:0x7f07feb9de99 [ 1845.980811][T24460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1845.980832][T24460] RSP: 002b:00007f07ff9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1845.980853][T24460] RAX: ffffffffffffffda RBX: 00007f07fee25fa0 RCX: 00007f07feb9de99 [ 1845.980868][T24460] RDX: 000000000000000c RSI: 0000200000000200 RDI: 0000000000000003 [ 1845.980882][T24460] RBP: 00007f07ff9e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1845.980895][T24460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1845.980908][T24460] R13: 00007f07fee26038 R14: 00007f07fee25fa0 R15: 00007ffefd4ba208 [ 1845.980940][T24460] [ 1846.178729][T24462] overlayfs: failed to resolve './file1': -2 [ 1846.629367][T18412] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1846.708349][ T5805] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1846.975758][T18412] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1846.985009][T18412] usb 6-1: config 0 has no interface number 0 [ 1847.608999][T18412] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1847.634849][ T5805] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1847.648435][T18412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.661871][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.673812][T18412] usb 6-1: Product: syz [ 1847.680985][ T5805] usb 1-1: Product: syz [ 1847.687145][T18412] usb 6-1: Manufacturer: syz [ 1847.701318][ T5805] usb 1-1: Manufacturer: syz [ 1847.707770][T18412] usb 6-1: SerialNumber: syz [ 1847.716551][ T5805] usb 1-1: SerialNumber: syz [ 1847.724077][T18412] usb 6-1: config 0 descriptor?? [ 1847.942306][T18412] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1847.976932][T18412] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1848.008750][T18412] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1848.030608][T18412] usb 6-1: media controller created [ 1848.639237][T24491] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4961'. [ 1848.650183][T18412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1848.659903][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1848.674678][T24483] Process accounting resumed [ 1848.693427][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1849.766488][T15983] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1850.124485][T18412] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1850.330688][T15983] usb 2-1: Using ep0 maxpacket: 32 [ 1850.407671][T15983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1850.616391][T15983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1850.820451][T15983] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1850.897276][T15983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.943419][T15983] usb 2-1: config 0 descriptor?? [ 1850.969408][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1850.969740][T15983] hub 2-1:0.0: USB hub found [ 1851.003567][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1851.067879][ T5805] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1851.088960][T18412] usb 6-1: USB disconnect, device number 36 [ 1851.097683][ T5805] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1851.138780][ T5805] usb 1-1: USB disconnect, device number 105 [ 1851.164036][T15983] hub 2-1:0.0: 1 port detected [ 1852.009050][T24518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1852.059942][T24448] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1852.069768][T24448] CPU: 1 UID: 0 PID: 24448 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.069811][T24448] Tainted: [L]=SOFTLOCKUP [ 1852.069820][T24448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1852.069830][T24448] Workqueue: hci1 hci_rx_work [ 1852.069849][T24448] Call Trace: [ 1852.069855][T24448] [ 1852.069862][T24448] dump_stack_lvl+0x100/0x190 [ 1852.069880][T24448] sysfs_warn_dup.cold+0x1c/0x28 [ 1852.069900][T24448] sysfs_create_dir_ns+0x24b/0x2b0 [ 1852.069919][T24448] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1852.069938][T24448] ? find_held_lock+0x2b/0x80 [ 1852.069956][T24448] ? kobject_add_internal+0x25f/0x930 [ 1852.069972][T24448] ? kobject_add_internal+0x25f/0x930 [ 1852.069990][T24448] ? do_raw_spin_unlock+0x145/0x1e0 [ 1852.070007][T24448] kobject_add_internal+0x2c8/0x930 [ 1852.070027][T24448] kobject_add+0x16a/0x1e0 [ 1852.070043][T24448] ? __pfx_kobject_add+0x10/0x10 [ 1852.070059][T24448] ? class_to_subsys+0x10f/0x150 [ 1852.070078][T24448] ? kobject_put+0xb9/0x640 [ 1852.070092][T24448] ? _raw_spin_unlock+0x28/0x50 [ 1852.070114][T24448] device_add+0x294/0x1970 [ 1852.070131][T24448] ? __pfx_dev_set_name+0x10/0x10 [ 1852.070149][T24448] ? __pfx_device_add+0x10/0x10 [ 1852.070166][T24448] ? mgmt_send_event_skb+0x2fb/0x460 [ 1852.070199][T24448] hci_conn_add_sysfs+0x1a3/0x260 [ 1852.070218][T24448] le_conn_complete_evt+0x11eb/0x1f60 [ 1852.070237][T24448] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1852.070249][T24448] ? hci_event_packet+0x186/0xcd0 [ 1852.070266][T24448] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1852.070280][T24448] ? skb_pull_data+0x15f/0x1e0 [ 1852.070300][T24448] hci_le_meta_evt+0x34a/0x5f0 [ 1852.070317][T24448] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1852.070332][T24448] hci_event_packet+0x51c/0xcd0 [ 1852.070345][T24448] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1852.070360][T24448] ? __pfx_hci_event_packet+0x10/0x10 [ 1852.070375][T24448] ? kcov_remote_start+0x384/0x670 [ 1852.070389][T24448] ? lockdep_hardirqs_on+0x78/0x100 [ 1852.070406][T24448] hci_rx_work+0x451/0xfc0 [ 1852.070422][T24448] process_one_work+0xa23/0x1940 [ 1852.070442][T24448] ? __pfx_process_one_work+0x10/0x10 [ 1852.070460][T24448] ? __pfx_hci_rx_work+0x10/0x10 [ 1852.070473][T24448] worker_thread+0x5ef/0xe50 [ 1852.070491][T24448] ? __pfx_worker_thread+0x10/0x10 [ 1852.070505][T24448] ? kthread+0x13a/0x450 [ 1852.070516][T24448] ? __pfx_worker_thread+0x10/0x10 [ 1852.070528][T24448] kthread+0x370/0x450 [ 1852.070539][T24448] ? __pfx_kthread+0x10/0x10 [ 1852.070552][T24448] ret_from_fork+0x72b/0xd50 [ 1852.070583][T24448] ? __pfx_ret_from_fork+0x10/0x10 [ 1852.070615][T24448] ? __switch_to+0x800/0x10f0 [ 1852.070634][T24448] ? __pfx_kthread+0x10/0x10 [ 1852.070647][T24448] ret_from_fork_asm+0x1a/0x30 [ 1852.070672][T24448] [ 1852.070720][T24448] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1852.354510][T24448] Bluetooth: hci1: failed to register connection device [ 1852.466556][T15983] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1852.477540][ T5733] usb 2-1: USB disconnect, device number 105 [ 1852.831915][T24525] 9p: Bad value for 'version' [ 1853.080417][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1853.091930][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.099374][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.690875][T24533] syz.1.4970 (24533): drop_caches: 2 [ 1854.005097][T24538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1854.055593][T24448] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1854.142208][T18412] IPVS: starting estimator thread 0... [ 1854.191678][ T29] audit: type=1400 audit(1784997296.246:1268): avc: denied { checkpoint_restore } for pid=24541 comm="syz.1.4973" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1854.244498][T24543] IPVS: using max 47 ests per chain, 112800 per kthread [ 1854.341998][T24546] netlink: 'syz.6.4974': attribute type 23 has an invalid length. [ 1854.654487][T15983] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1854.874310][T15983] usb 6-1: Using ep0 maxpacket: 32 [ 1855.070690][T15983] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1855.106341][T15983] usb 6-1: config 0 has no interface number 0 [ 1855.126831][T15983] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1855.261375][T15983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.277142][T15983] usb 6-1: Product: syz [ 1855.281612][T15983] usb 6-1: Manufacturer: syz [ 1855.793116][T15983] usb 6-1: SerialNumber: syz [ 1855.852886][T15983] usb 6-1: config 0 descriptor?? [ 1855.863313][T15983] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1856.237434][T24567] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4978'. [ 1857.141959][T15983] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1857.184818][T15983] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1857.659807][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1857.660818][T18412] usb 6-1: USB disconnect, device number 37 [ 1857.742173][T18412] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1857.960467][T18412] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1857.991367][T18412] quatech2 6-1:0.51: device disconnected [ 1859.173225][T24448] Bluetooth: hci1: command 0x0406 tx timeout [ 1861.856920][T24628] syz_tun: entered allmulticast mode [ 1862.128248][T22269] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1862.298171][T22269] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1862.513758][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1862.694389][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1862.723138][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1862.746810][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1862.761724][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1862.817976][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1862.836916][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1862.853891][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1862.868464][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1862.888319][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1862.916148][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1862.936790][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1862.960185][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1862.982865][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1863.025326][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1863.955104][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1863.984323][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1864.057284][T24646] FAULT_INJECTION: forcing a failure. [ 1864.057284][T24646] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.071326][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1864.085579][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1864.146528][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1864.158051][T24646] CPU: 1 UID: 0 PID: 24646 Comm: syz.0.4996 Tainted: G L syzkaller #0 PREEMPT(full) [ 1864.158081][T24646] Tainted: [L]=SOFTLOCKUP [ 1864.158089][T24646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1864.158100][T24646] Call Trace: [ 1864.158107][T24646] [ 1864.158112][T24646] dump_stack_lvl+0x100/0x190 [ 1864.158131][T24646] should_fail_ex.cold+0x5/0xa [ 1864.158147][T24646] should_failslab+0xc2/0x120 [ 1864.158162][T24646] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1864.158177][T24646] ? __alloc_skb+0x140/0x710 [ 1864.158192][T24646] __alloc_skb+0x140/0x710 [ 1864.158204][T24646] ? __alloc_skb+0x5b7/0x710 [ 1864.158215][T24646] ? __pfx___alloc_skb+0x10/0x10 [ 1864.158229][T24646] ? do_raw_spin_lock+0x128/0x260 [ 1864.158247][T24646] _sctp_make_chunk+0x51/0x270 [ 1864.158262][T24646] sctp_make_control+0x2f/0x2d0 [ 1864.158275][T24646] sctp_make_heartbeat+0xad/0x2f0 [ 1864.158289][T24646] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 1864.158305][T24646] ? sctp_sm_lookup_event+0x10e/0x520 [ 1864.158318][T24646] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 1864.158332][T24646] ? __pfx_sctp_pname+0x10/0x10 [ 1864.158344][T24646] sctp_sf_do_prm_requestheartbeat+0x27/0x220 [ 1864.158363][T24646] ? __pfx_sctp_pname+0x10/0x10 [ 1864.158374][T24646] sctp_do_sm+0x17a/0x5be0 [ 1864.158393][T24646] ? __pfx_sctp_do_sm+0x10/0x10 [ 1864.158403][T24646] ? trace_sched_exit_tp+0x120/0x160 [ 1864.158421][T24646] ? __schedule+0x126e/0x6730 [ 1864.158448][T24646] ? __lock_sock+0x1f8/0x270 [ 1864.158464][T24646] sctp_primitive_REQUESTHEARTBEAT+0x9f/0xd0 [ 1864.158479][T24646] sctp_apply_peer_addr_params+0x110/0x3690 [ 1864.158499][T24646] sctp_setsockopt+0x28d6/0xb370 [ 1864.158519][T24646] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1864.158540][T24646] ? __fget_files+0x215/0x3d0 [ 1864.158562][T24646] ? selinux_socket_setsockopt+0x6a/0x80 [ 1864.158578][T24646] ? sock_common_setsockopt+0x2e/0xf0 [ 1864.158592][T24646] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1864.158609][T24646] do_sock_setsockopt+0xf3/0x1d0 [ 1864.158626][T24646] __sys_setsockopt+0x195/0x220 [ 1864.158643][T24646] __x64_sys_setsockopt+0xbd/0x160 [ 1864.158655][T24646] ? do_syscall_64+0x90/0x870 [ 1864.158667][T24646] ? lockdep_hardirqs_on+0x78/0x100 [ 1864.158679][T24646] do_syscall_64+0x115/0x870 [ 1864.158690][T24646] ? clear_bhb_loop+0x40/0x90 [ 1864.158705][T24646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.158716][T24646] RIP: 0033:0x7f090459de99 [ 1864.158726][T24646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.158737][T24646] RSP: 002b:00007f090548d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1864.158750][T24646] RAX: ffffffffffffffda RBX: 00007f0904826090 RCX: 00007f090459de99 [ 1864.158758][T24646] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000007 [ 1864.158765][T24646] RBP: 00007f090548d090 R08: 000000000000009c R09: 0000000000000000 [ 1864.158772][T24646] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 1864.158779][T24646] R13: 00007f0904826128 R14: 00007f0904826090 R15: 00007ffca8882298 [ 1864.158794][T24646] [ 1864.714498][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1864.833708][T22269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1864.845050][T22269] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1864.873079][T22269] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1865.451055][T24650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1865.465919][T22269] usb 6-1: string descriptor 0 read error: -71 [ 1865.473684][T22269] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1865.496903][T22269] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1865.527705][T22269] usb 6-1: config 0 descriptor?? [ 1865.536319][T22269] usb 6-1: can't set config #0, error -71 [ 1865.554727][T24628] syz_tun: left allmulticast mode [ 1865.561371][T15049] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1865.631420][T22269] usb 6-1: USB disconnect, device number 38 [ 1865.727647][ T29] audit: type=1400 audit(1784997307.786:1269): avc: denied { module_load } for pid=24656 comm="syz.1.4999" path="/sys/kernel/address_bits" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1866.045223][T22269] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1866.204368][T22269] usb 6-1: Using ep0 maxpacket: 32 [ 1866.217274][T22269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1866.246179][T22269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1866.282659][T22269] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1866.311970][T22269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.359176][T22269] usb 6-1: config 0 descriptor?? [ 1866.385874][T22269] hub 6-1:0.0: USB hub found [ 1867.032243][T22269] hub 6-1:0.0: 1 port detected [ 1867.658899][T22269] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1867.659455][T14216] usb 6-1: USB disconnect, device number 39 [ 1867.755474][T15983] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1868.504255][T15983] usb 1-1: Using ep0 maxpacket: 16 [ 1868.515548][T15983] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1868.542594][T15983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1868.568011][T15983] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1868.586501][T15983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.675943][T15983] usb 1-1: Product: syz [ 1868.684209][T15983] usb 1-1: Manufacturer: syz [ 1868.693501][T15983] usb 1-1: SerialNumber: syz [ 1868.711594][T15983] usb 1-1: config 0 descriptor?? [ 1868.733177][T15983] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1868.749591][T15983] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1869.865579][T22269] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1870.722345][ T29] audit: type=1400 audit(1784997312.766:1270): avc: denied { watch } for pid=24703 comm="syz.1.5017" path="/362/file5" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1870.750729][T24712] fuse: Unknown parameter 'fd„¯6–:>žîËA¾:Æ3{0x0000000000000004' [ 1870.770745][T24710] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1870.783507][ T29] audit: type=1400 audit(1784997312.766:1271): avc: denied { watch_sb watch_reads } for pid=24703 comm="syz.1.5017" path="/362/file5" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1870.808780][T15983] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1870.817586][ T29] audit: type=1400 audit(1784997312.766:1272): avc: denied { watch_mount } for pid=24703 comm="syz.1.5017" path="/362/file5" dev="tmpfs" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1870.847561][T15983] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1870.967147][T24715] netlink: 'syz.4.5018': attribute type 23 has an invalid length. [ 1871.004690][T15983] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 1871.027840][T15983] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1871.046877][T15983] em28xx 1-1:0.0: No AC97 audio processor [ 1871.056251][T22269] usb 7-1: Using ep0 maxpacket: 32 [ 1871.074658][T22269] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1871.100005][T22269] usb 7-1: config 0 has no interface number 0 [ 1871.109502][T22269] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1871.119800][T22269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.122851][T24720] netlink: 'syz.1.5019': attribute type 23 has an invalid length. [ 1871.128291][T22269] usb 7-1: Product: syz [ 1871.140651][T22269] usb 7-1: Manufacturer: syz [ 1871.145405][T22269] usb 7-1: SerialNumber: syz [ 1871.172030][T22269] usb 7-1: config 0 descriptor?? [ 1871.244505][T22269] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1871.724441][T22269] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1871.756609][T22269] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1872.790500][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1872.800033][T15983] usb 7-1: USB disconnect, device number 51 [ 1872.826428][ T5805] usb 1-1: USB disconnect, device number 106 [ 1872.853986][T15983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1872.923947][T15983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1872.925265][ T5805] em28xx 1-1:0.0: Disconnecting em28xx [ 1873.073620][T24738] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1873.299704][T15983] quatech2 7-1:0.51: device disconnected [ 1873.408231][ T5805] em28xx 1-1:0.0: Freeing device [ 1874.100131][T15983] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1874.244495][T24749] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5026'. [ 1874.335137][T15983] usb 6-1: Using ep0 maxpacket: 32 [ 1874.446617][ T5805] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1874.451776][T15983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1874.553367][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 1874.935890][T15983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1874.947128][T15983] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1874.958482][T15983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.040781][T15983] usb 6-1: config 0 descriptor?? [ 1875.075252][T15983] hub 6-1:0.0: USB hub found [ 1875.330545][T15983] hub 6-1:0.0: 1 port detected [ 1876.313991][T15983] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1876.389540][T15983] usb 6-1: USB disconnect, device number 40 [ 1877.259970][T24763] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1877.302283][T24763] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1877.803137][T24768] netlink: 'syz.5.5031': attribute type 23 has an invalid length. [ 1880.185651][T24793] can0: slcan on ttyS3. [ 1880.264859][T24794] can0 (unregistered): slcan off ttyS3. [ 1880.545958][T24799] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5039'. [ 1880.980067][T24800] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1880.997131][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5039'. [ 1881.408169][T24808] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1881.727819][T24812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1882.464195][T15983] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1882.472856][T24814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5042'. [ 1882.938987][T24819] tap0: tun_chr_ioctl cmd 1074025678 [ 1882.954249][T24819] tap0: group set to 0 [ 1882.974269][T15983] usb 1-1: Using ep0 maxpacket: 16 [ 1882.986569][T15983] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1883.009062][T15983] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1883.041809][T15983] usb 1-1: config 0 has no interface number 0 [ 1883.064213][T15983] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1883.085980][T15983] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1883.108815][T15983] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1883.146025][T15983] usb 1-1: Product: syz [ 1883.157401][T15983] usb 1-1: SerialNumber: syz [ 1883.196090][T15983] usb 1-1: config 0 descriptor?? [ 1883.432642][T15983] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1883.666072][T15983] usb 1-1: USB disconnect, device number 108 [ 1884.234201][T24843] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1884.274181][T24843] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1885.445098][T24850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1885.547759][T24448] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1886.489529][T24853] FAULT_INJECTION: forcing a failure. [ 1886.489529][T24853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.502820][T24853] CPU: 1 UID: 0 PID: 24853 Comm: syz.5.5052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1886.502852][T24853] Tainted: [L]=SOFTLOCKUP [ 1886.502860][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1886.502873][T24853] Call Trace: [ 1886.502880][T24853] [ 1886.502888][T24853] dump_stack_lvl+0x100/0x190 [ 1886.502918][T24853] should_fail_ex.cold+0x5/0xa [ 1886.502945][T24853] _copy_from_user+0x2e/0xd0 [ 1886.502974][T24853] copy_msghdr_from_user+0x9f/0x4c0 [ 1886.503009][T24853] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1886.503056][T24853] ___sys_sendmsg+0x106/0x1e0 [ 1886.503089][T24853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.503118][T24853] ? __lock_acquire+0x49f/0x1a40 [ 1886.503145][T24853] ? get_pid_task+0x106/0x250 [ 1886.503211][T24853] __sys_sendmsg+0x160/0x210 [ 1886.503237][T24853] ? __pfx___sys_sendmsg+0x10/0x10 [ 1886.503278][T24853] do_syscall_64+0x115/0x870 [ 1886.503300][T24853] ? clear_bhb_loop+0x40/0x90 [ 1886.503332][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.503353][T24853] RIP: 0033:0x7fd302f9de99 [ 1886.503371][T24853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.503390][T24853] RSP: 002b:00007fd303e0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.503410][T24853] RAX: ffffffffffffffda RBX: 00007fd303225fa0 RCX: 00007fd302f9de99 [ 1886.503424][T24853] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 1886.503437][T24853] RBP: 00007fd303e0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.503450][T24853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.503462][T24853] R13: 00007fd303226038 R14: 00007fd303225fa0 R15: 00007ffe429f4378 [ 1886.503492][T24853] [ 1887.427400][T24870] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1887.667003][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'. [ 1888.429391][T24879] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1888.582343][ T29] audit: type=1400 audit(1784997330.636:1273): avc: denied { create } for pid=24885 comm="syz.6.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1888.618541][T24888] input: syz1 as /devices/virtual/input/input39 [ 1888.628902][T24886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1888.646267][ T29] audit: type=1400 audit(1784997330.676:1274): avc: denied { write } for pid=24885 comm="syz.6.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1888.664380][T24888] FAULT_INJECTION: forcing a failure. [ 1888.664380][T24888] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.681105][T24891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24891 comm=syz.6.5062 [ 1888.770163][T24888] CPU: 1 UID: 0 PID: 24888 Comm: syz.0.5063 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.770195][T24888] Tainted: [L]=SOFTLOCKUP [ 1888.770202][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1888.770214][T24888] Call Trace: [ 1888.770221][T24888] [ 1888.770230][T24888] dump_stack_lvl+0x100/0x190 [ 1888.770260][T24888] should_fail_ex.cold+0x5/0xa [ 1888.770287][T24888] should_failslab+0xc2/0x120 [ 1888.770315][T24888] __kmalloc_noprof+0xfc/0x820 [ 1888.770341][T24888] ? kobject_get_path+0xcf/0x2c0 [ 1888.770375][T24888] kobject_get_path+0xcf/0x2c0 [ 1888.770409][T24888] input_devices_seq_show+0x8d/0x1130 [ 1888.770442][T24888] ? __pfx_input_devices_seq_show+0x10/0x10 [ 1888.770476][T24888] ? seq_list_start+0x7a/0xc0 [ 1888.770511][T24888] seq_read_iter+0xbce/0x1270 [ 1888.770546][T24888] seq_read+0x344/0x4d0 [ 1888.770568][T24888] ? __pfx_seq_read+0x10/0x10 [ 1888.770595][T24888] ? lock_acquire+0x1b9/0x370 [ 1888.770626][T24888] ? selinux_file_permission+0x8f/0x6d0 [ 1888.770664][T24888] ? __pfx_seq_read+0x10/0x10 [ 1888.770684][T24888] proc_reg_read+0x240/0x330 [ 1888.770714][T24888] ? __pfx_proc_reg_read+0x10/0x10 [ 1888.770739][T24888] vfs_read+0x1e4/0xb40 [ 1888.770776][T24888] ? __pfx_vfs_read+0x10/0x10 [ 1888.770806][T24888] ? __fget_files+0x215/0x3d0 [ 1888.770835][T24888] ? __fget_files+0x21f/0x3d0 [ 1888.770868][T24888] ksys_read+0x12a/0x250 [ 1888.770898][T24888] ? __pfx_ksys_read+0x10/0x10 [ 1888.770939][T24888] do_syscall_64+0x115/0x870 [ 1888.770961][T24888] ? clear_bhb_loop+0x40/0x90 [ 1888.770988][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.771010][T24888] RIP: 0033:0x7f090459de99 [ 1888.771028][T24888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.771049][T24888] RSP: 002b:00007f09054ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1888.771069][T24888] RAX: ffffffffffffffda RBX: 00007f0904825fa0 RCX: 00007f090459de99 [ 1888.771084][T24888] RDX: 0000000000002020 RSI: 0000200000000300 RDI: 0000000000000004 [ 1888.771097][T24888] RBP: 00007f09054ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.771110][T24888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.771123][T24888] R13: 00007f0904826038 R14: 00007f0904825fa0 R15: 00007ffca8882298 [ 1888.771155][T24888] [ 1889.916241][ T29] audit: type=1400 audit(1784997331.966:1275): avc: denied { write } for pid=24895 comm="syz.0.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1890.644359][T24909] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1891.277084][T24913] netlink: 'syz.0.5069': attribute type 1 has an invalid length. [ 1891.323535][T24916] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1891.354217][ T5733] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1891.551591][T24913] bridge2: entered promiscuous mode [ 1891.580806][T24913] bond1: (slave bridge2): making interface the new active one [ 1891.600119][T24913] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1891.612149][T24920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1891.994239][ T5733] usb 7-1: Using ep0 maxpacket: 16 [ 1892.001128][ T5733] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1892.011144][ T5733] usb 7-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1892.041164][ T5733] usb 7-1: config 0 has no interface number 0 [ 1892.056595][ T5733] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.103318][ T5733] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1892.129806][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1892.206421][ T5733] usb 7-1: Product: syz [ 1892.218053][ T5733] usb 7-1: SerialNumber: syz [ 1892.227883][ T5733] usb 7-1: config 0 descriptor?? [ 1892.295849][ T5733] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1892.677336][T24934] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1892.702510][T24934] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1893.354933][ T5733] usb 7-1: USB disconnect, device number 52 [ 1893.651118][T14665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.163153][T24942] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1894.171769][T24942] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1894.506793][T24942] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1895.413111][T14665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.435161][T24950] FAULT_INJECTION: forcing a failure. [ 1895.435161][T24950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.489702][T24937] Process accounting resumed [ 1895.506427][T24950] CPU: 1 UID: 0 PID: 24950 Comm: syz.1.5080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1895.506460][T24950] Tainted: [L]=SOFTLOCKUP [ 1895.506468][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1895.506480][T24950] Call Trace: [ 1895.506487][T24950] [ 1895.506495][T24950] dump_stack_lvl+0x100/0x190 [ 1895.506524][T24950] should_fail_ex.cold+0x5/0xa [ 1895.506549][T24950] _copy_from_user+0x2e/0xd0 [ 1895.506577][T24950] generic_map_update_batch+0x452/0x800 [ 1895.506619][T24950] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1895.506659][T24950] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1895.506691][T24950] bpf_map_do_batch+0x66f/0x6d0 [ 1895.506723][T24950] __sys_bpf+0x4ce/0x4e80 [ 1895.506753][T24950] ? __pfx___sys_bpf+0x10/0x10 [ 1895.506774][T24950] ? find_held_lock+0x2b/0x80 [ 1895.506805][T24950] ? get_pid_task+0xfc/0x250 [ 1895.506834][T24950] ? get_pid_task+0xfc/0x250 [ 1895.506874][T24950] ? find_held_lock+0x2b/0x80 [ 1895.506908][T24950] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1895.506928][T24950] ? find_held_lock+0x2b/0x80 [ 1895.506957][T24950] ? ksys_write+0x190/0x250 [ 1895.506988][T24950] ? ksys_write+0x190/0x250 [ 1895.507041][T24950] ? fput+0x79/0x100 [ 1895.507071][T24950] ? __x64_sys_bpf+0xce/0x140 [ 1895.507091][T24950] __x64_sys_bpf+0xce/0x140 [ 1895.507114][T24950] ? do_syscall_64+0x90/0x870 [ 1895.507139][T24950] do_syscall_64+0x115/0x870 [ 1895.507160][T24950] ? clear_bhb_loop+0x40/0x90 [ 1895.507193][T24950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.507215][T24950] RIP: 0033:0x7f061879de99 [ 1895.507233][T24950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.507253][T24950] RSP: 002b:00007f06196b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1895.507274][T24950] RAX: ffffffffffffffda RBX: 00007f0618a25fa0 RCX: 00007f061879de99 [ 1895.507289][T24950] RDX: 0000000000000027 RSI: 00002000000001c0 RDI: 000000000000001a [ 1895.507302][T24950] RBP: 00007f06196b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.507315][T24950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.507328][T24950] R13: 00007f0618a26038 R14: 00007f0618a25fa0 R15: 00007ffcabbdd1f8 [ 1895.507358][T24950] [ 1895.753945][T15049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1895.777083][T15049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1895.785175][T15049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1895.795616][T15049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1895.803113][T15049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1896.272709][T14665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.375048][T24966] ip6erspan0: entered allmulticast mode [ 1896.519405][T14665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.693909][T24983] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1896.701265][T24983] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1896.869597][T24984] FAULT_INJECTION: forcing a failure. [ 1896.869597][T24984] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.000407][T24984] CPU: 0 UID: 0 PID: 24984 Comm: syz.1.5089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1897.000441][T24984] Tainted: [L]=SOFTLOCKUP [ 1897.000448][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1897.000461][T24984] Call Trace: [ 1897.000469][T24984] [ 1897.000477][T24984] dump_stack_lvl+0x100/0x190 [ 1897.000508][T24984] should_fail_ex.cold+0x5/0xa [ 1897.000535][T24984] should_failslab+0xc2/0x120 [ 1897.000562][T24984] __kmalloc_noprof+0xfc/0x820 [ 1897.000586][T24984] ? tomoyo_encode2+0xfb/0x3c0 [ 1897.000612][T24984] tomoyo_encode2+0xfb/0x3c0 [ 1897.000634][T24984] tomoyo_encode+0x29/0x50 [ 1897.000651][T24984] tomoyo_realpath_from_path+0x18c/0x690 [ 1897.000679][T24984] tomoyo_path_number_perm+0x23c/0x580 [ 1897.000707][T24984] ? tomoyo_path_number_perm+0x22e/0x580 [ 1897.000736][T24984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1897.000795][T24984] ? find_held_lock+0x2b/0x80 [ 1897.000826][T24984] ? __fget_files+0x215/0x3d0 [ 1897.000846][T24984] ? hook_file_ioctl_common+0x140/0x440 [ 1897.000868][T24984] ? __fget_files+0x215/0x3d0 [ 1897.000893][T24984] ? __fget_files+0x21f/0x3d0 [ 1897.000921][T24984] security_file_ioctl+0xd3/0x230 [ 1897.000953][T24984] __x64_sys_ioctl+0xb7/0x210 [ 1897.000986][T24984] do_syscall_64+0x115/0x870 [ 1897.001008][T24984] ? clear_bhb_loop+0x40/0x90 [ 1897.001036][T24984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.001058][T24984] RIP: 0033:0x7f061879de99 [ 1897.001076][T24984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.001096][T24984] RSP: 002b:00007f0619695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1897.001123][T24984] RAX: ffffffffffffffda RBX: 00007f0618a26090 RCX: 00007f061879de99 [ 1897.001137][T24984] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1897.001151][T24984] RBP: 00007f0619695090 R08: 0000000000000000 R09: 0000000000000000 [ 1897.001165][T24984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.001177][T24984] R13: 00007f0618a26128 R14: 00007f0618a26090 R15: 00007ffcabbdd1f8 [ 1897.001207][T24984] [ 1897.001225][T24984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1897.475869][T24997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5091'. [ 1898.221277][T24448] Bluetooth: hci1: command tx timeout [ 1898.937203][ T29] audit: type=1400 audit(1784997340.996:1276): avc: denied { read } for pid=25015 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1898.973186][ T29] audit: type=1400 audit(1784997341.016:1277): avc: denied { read open } for pid=25015 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.046468][T14665] bridge_slave_1: left allmulticast mode [ 1899.052338][T14665] bridge_slave_1: left promiscuous mode [ 1899.058435][T14665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1899.101855][T14665] bridge_slave_0: left allmulticast mode [ 1899.109530][T18412] libceph: connect (1)[c::]:6789 error -101 [ 1899.167532][ T29] audit: type=1400 audit(1784997341.016:1278): avc: denied { getattr } for pid=25015 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.205031][T18412] libceph: mon0 (1)[c::]:6789 connect error [ 1899.215354][T14665] bridge_slave_0: left promiscuous mode [ 1899.235764][T14665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.241556][T25021] ceph: No mds server is up or the cluster is laggy [ 1899.590999][ T29] audit: type=1400 audit(1784997341.626:1279): avc: denied { write } for pid=24998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.644629][ T29] audit: type=1400 audit(1784997341.626:1280): avc: denied { add_name } for pid=24998 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.697477][ T29] audit: type=1400 audit(1784997341.626:1281): avc: denied { create } for pid=24998 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1899.766461][ T29] audit: type=1400 audit(1784997341.626:1282): avc: denied { write } for pid=24998 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=11786 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1899.853639][ T29] audit: type=1400 audit(1784997341.626:1283): avc: denied { append } for pid=24998 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=11786 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1899.881632][T14665] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1899.912466][T14665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1899.931292][ T29] audit: type=1400 audit(1784997341.826:1284): avc: denied { setattr } for pid=25036 comm="syz.6.5097" name="NETLINK" dev="sockfs" ino=99974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1899.983189][T14665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1900.003601][T14665] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1900.019928][T14665] bond0 (unregistering): Released all slaves [ 1900.033810][ T29] audit: type=1400 audit(1784997341.906:1285): avc: denied { write } for pid=25037 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1900.034629][T14665] bond1 (unregistering): Released all slaves [ 1900.078424][T14665] bond2 (unregistering): Released all slaves [ 1900.104236][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1900.286180][T24448] Bluetooth: hci1: command tx timeout [ 1900.530534][T25056] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1900.559977][T25056] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1901.094064][T18412] kernel write not supported for file /dsp1 (pid: 18412 comm: kworker/0:0) [ 1901.156989][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5102'. [ 1902.394319][T24448] Bluetooth: hci1: command tx timeout [ 1902.698761][T22269] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1902.949044][T22269] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1902.994165][T22269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.003890][T22269] usb 7-1: Product: syz [ 1903.022713][T22269] usb 7-1: Manufacturer: syz [ 1903.044023][T22269] usb 7-1: SerialNumber: syz [ 1904.022735][T22269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1904.080384][T14665] hsr_slave_0: left promiscuous mode [ 1904.082789][T22269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1904.108582][T14665] hsr_slave_1: left promiscuous mode [ 1904.124882][T14665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1904.140724][T14665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1904.173228][T14665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1904.189975][T14665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1904.214082][T14665] veth1_macvtap: left promiscuous mode [ 1904.229509][T14665] veth0_macvtap: left promiscuous mode [ 1904.240794][T14665] veth1_vlan: left promiscuous mode [ 1904.253600][T14665] veth0_vlan: left promiscuous mode [ 1904.308132][T22269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1904.356171][T22269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1904.362232][T25115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1904.395007][T22269] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1904.400871][T24448] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1904.428894][T22269] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1904.445568][T24448] Bluetooth: hci1: command tx timeout [ 1904.467419][T22269] usb 7-1: USB disconnect, device number 53 [ 1904.638603][T25120] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1904.693300][T25120] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1905.000139][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1905.000156][ T29] audit: type=1400 audit(1784997347.056:1290): avc: denied { create } for pid=25124 comm="syz.1.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1905.189356][T25131] [ 1905.191686][T25131] ====================================================== [ 1905.198674][T25131] WARNING: possible circular locking dependency detected [ 1905.205670][T25131] syzkaller #0 Tainted: G L [ 1905.211637][T25131] ------------------------------------------------------ [ 1905.218645][T25131] syz.1.5113/25131 is trying to acquire lock: [ 1905.224700][T25131] ffffffff90b4da28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1905.232464][T25131] [ 1905.232464][T25131] but task is already holding lock: [ 1905.239820][T25131] ffff888070b6f860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1905.248102][T25131] [ 1905.248102][T25131] which lock already depends on the new lock. [ 1905.248102][T25131] [ 1905.258490][T25131] [ 1905.258490][T25131] the existing dependency chain (in reverse order) is: [ 1905.267476][T25131] [ 1905.267476][T25131] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 1905.274838][T25131] lock_acquire+0x1b9/0x370 [ 1905.279843][T25131] __mutex_lock+0x1a4/0x1bd0 [ 1905.284932][T25131] pipe_lock+0x69/0x80 [ 1905.289493][T25131] iter_file_splice_write+0x1fd/0x10b0 [ 1905.295447][T25131] backing_file_splice_write+0x27b/0x820 [ 1905.301585][T25131] ovl_splice_write+0x328/0x610 [ 1905.306936][T25131] do_splice+0x109c/0x1f90 [ 1905.311846][T25131] __do_splice+0x33b/0x370 [ 1905.316760][T25131] __x64_sys_splice+0x187/0x250 [ 1905.322107][T25131] do_syscall_64+0x115/0x870 [ 1905.327193][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.333583][T25131] [ 1905.333583][T25131] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 1905.340943][T25131] lock_acquire+0x1b9/0x370 [ 1905.345949][T25131] mnt_want_write+0x6f/0x410 [ 1905.351053][T25131] path_openat+0xad9/0x4280 [ 1905.356061][T25131] do_file_open+0x20e/0x430 [ 1905.361061][T25131] file_open_name+0x1c3/0x3e0 [ 1905.366238][T25131] filp_open+0x2e/0x50 [ 1905.370810][T25131] fsg_lun_open+0x6b/0x7b0 [ 1905.375732][T25131] fsg_store_file+0x1e7/0x450 [ 1905.380907][T25131] configfs_write_iter+0x302/0x4e0 [ 1905.386534][T25131] vfs_write+0x6ac/0x1050 [ 1905.391364][T25131] ksys_write+0x12a/0x250 [ 1905.396191][T25131] do_syscall_64+0x115/0x870 [ 1905.401276][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.407679][T25131] [ 1905.407679][T25131] -> #4 (&common->filesem){+.+.}-{4:4}: [ 1905.415376][T25131] lock_acquire+0x1b9/0x370 [ 1905.420375][T25131] down_write+0x8b/0x1f0 [ 1905.425112][T25131] fsg_store_file+0x193/0x450 [ 1905.430283][T25131] configfs_write_iter+0x302/0x4e0 [ 1905.435890][T25131] vfs_write+0x6ac/0x1050 [ 1905.440722][T25131] ksys_write+0x12a/0x250 [ 1905.445573][T25131] do_syscall_64+0x115/0x870 [ 1905.450670][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.457073][T25131] [ 1905.457073][T25131] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 1905.464445][T25131] lock_acquire+0x1b9/0x370 [ 1905.469457][T25131] down_read+0x99/0x4c0 [ 1905.474123][T25131] configfs_write_iter+0x218/0x4e0 [ 1905.479740][T25131] vfs_write+0x6ac/0x1050 [ 1905.484582][T25131] ksys_write+0x12a/0x250 [ 1905.489425][T25131] do_syscall_64+0x115/0x870 [ 1905.494521][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.500917][T25131] [ 1905.500917][T25131] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 1905.508458][T25131] lock_acquire+0x1b9/0x370 [ 1905.513474][T25131] __mutex_lock+0x1a4/0x1bd0 [ 1905.518571][T25131] configfs_read_iter+0x79/0x6f0 [ 1905.524014][T25131] __kernel_read+0x397/0xad0 [ 1905.529114][T25131] integrity_kernel_read+0x7e/0xb0 [ 1905.534735][T25131] ima_calc_file_hash_tfm+0x25e/0x350 [ 1905.540609][T25131] ima_calc_file_hash+0x1e3/0x380 [ 1905.546137][T25131] ima_collect_measurement+0x94f/0xb30 [ 1905.552100][T25131] process_measurement+0xdfe/0x2350 [ 1905.557800][T25131] ima_file_check+0xc3/0x110 [ 1905.562893][T25131] security_file_post_open+0xc4/0x210 [ 1905.568777][T25131] path_openat+0x985/0x4280 [ 1905.573782][T25131] do_file_open+0x20e/0x430 [ 1905.578786][T25131] do_sys_openat2+0x10f/0x1e0 [ 1905.583972][T25131] __x64_sys_openat+0x12d/0x210 [ 1905.589328][T25131] do_syscall_64+0x115/0x870 [ 1905.594424][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.600818][T25131] [ 1905.600818][T25131] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1905.609401][T25131] lock_acquire+0x1b9/0x370 [ 1905.614412][T25131] __mutex_lock+0x1a4/0x1bd0 [ 1905.619507][T25131] process_measurement+0x5ab/0x2350 [ 1905.625207][T25131] ima_file_check+0xc3/0x110 [ 1905.630300][T25131] security_file_post_open+0xc4/0x210 [ 1905.636182][T25131] path_openat+0x985/0x4280 [ 1905.641190][T25131] do_file_open_root+0x2f6/0x5a0 [ 1905.646629][T25131] file_open_root+0x1c6/0x3f0 [ 1905.651810][T25131] kernel_read_file_from_path_initns+0x189/0x260 [ 1905.658648][T25131] _request_firmware+0x733/0x13c0 [ 1905.664177][T25131] request_firmware+0x35/0x50 [ 1905.669355][T25131] reg_reload_regdb+0x85/0x460 [ 1905.674628][T25131] genl_family_rcv_msg_doit+0x214/0x300 [ 1905.680682][T25131] genl_rcv_msg+0x560/0x800 [ 1905.685687][T25131] netlink_rcv_skb+0x159/0x420 [ 1905.690952][T25131] genl_rcv+0x28/0x40 [ 1905.695438][T25131] netlink_unicast+0x585/0x850 [ 1905.700705][T25131] netlink_sendmsg+0x8b0/0xda0 [ 1905.705968][T25131] ____sys_sendmsg+0xa4d/0xbe0 [ 1905.711245][T25131] ___sys_sendmsg+0x190/0x1e0 [ 1905.716433][T25131] __sys_sendmsg+0x160/0x210 [ 1905.721526][T25131] do_syscall_64+0x115/0x870 [ 1905.726619][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.733018][T25131] [ 1905.733018][T25131] -> #0 (cb_lock){++++}-{4:4}: [ 1905.739951][T25131] check_prev_add+0xeb/0xe60 [ 1905.745048][T25131] __lock_acquire+0x136c/0x1a40 [ 1905.750402][T25131] lock_acquire+0x1b9/0x370 [ 1905.755411][T25131] down_read+0x99/0x4c0 [ 1905.760071][T25131] genl_rcv+0x19/0x40 [ 1905.764553][T25131] netlink_unicast+0x585/0x850 [ 1905.769816][T25131] netlink_sendmsg+0x8b0/0xda0 [ 1905.775077][T25131] sock_sendmsg+0x394/0x410 [ 1905.780090][T25131] splice_to_socket+0xb3c/0x11a0 [ 1905.785534][T25131] do_splice+0x109c/0x1f90 [ 1905.790454][T25131] __do_splice+0x33b/0x370 [ 1905.795377][T25131] __x64_sys_splice+0x187/0x250 [ 1905.800732][T25131] do_syscall_64+0x115/0x870 [ 1905.805825][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.812222][T25131] [ 1905.812222][T25131] other info that might help us debug this: [ 1905.812222][T25131] [ 1905.822424][T25131] Chain exists of: [ 1905.822424][T25131] cb_lock --> sb_writers#6 --> &pipe->mutex [ 1905.822424][T25131] [ 1905.834239][T25131] Possible unsafe locking scenario: [ 1905.834239][T25131] [ 1905.841663][T25131] CPU0 CPU1 [ 1905.847002][T25131] ---- ---- [ 1905.852340][T25131] lock(&pipe->mutex); [ 1905.856482][T25131] lock(sb_writers#6); [ 1905.863141][T25131] lock(&pipe->mutex); [ 1905.869794][T25131] rlock(cb_lock); [ 1905.873584][T25131] [ 1905.873584][T25131] *** DEADLOCK *** [ 1905.873584][T25131] [ 1905.881704][T25131] 1 lock held by syz.1.5113/25131: [ 1905.886790][T25131] #0: ffff888070b6f860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1905.895485][T25131] [ 1905.895485][T25131] stack backtrace: [ 1905.901353][T25131] CPU: 1 UID: 0 PID: 25131 Comm: syz.1.5113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1905.901382][T25131] Tainted: [L]=SOFTLOCKUP [ 1905.901389][T25131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1905.901401][T25131] Call Trace: [ 1905.901408][T25131] [ 1905.901415][T25131] dump_stack_lvl+0x100/0x190 [ 1905.901440][T25131] print_circular_bug.cold+0x178/0x1c7 [ 1905.901471][T25131] check_noncircular+0x146/0x160 [ 1905.901501][T25131] check_prev_add+0xeb/0xe60 [ 1905.901525][T25131] __lock_acquire+0x136c/0x1a40 [ 1905.901553][T25131] lock_acquire+0x1b9/0x370 [ 1905.901574][T25131] ? genl_rcv+0x19/0x40 [ 1905.901595][T25131] ? __pfx___might_resched+0x10/0x10 [ 1905.901619][T25131] ? mark_held_locks+0x40/0x70 [ 1905.901643][T25131] down_read+0x99/0x4c0 [ 1905.901665][T25131] ? genl_rcv+0x19/0x40 [ 1905.901684][T25131] ? __pfx_down_read+0x10/0x10 [ 1905.901706][T25131] ? __rcu_read_unlock+0x26a/0x5e0 [ 1905.901730][T25131] ? rcu_is_watching+0x12/0xc0 [ 1905.901761][T25131] genl_rcv+0x19/0x40 [ 1905.901779][T25131] netlink_unicast+0x585/0x850 [ 1905.901799][T25131] ? __pfx_netlink_unicast+0x10/0x10 [ 1905.901816][T25131] ? __build_skb_around+0x278/0x390 [ 1905.901850][T25131] netlink_sendmsg+0x8b0/0xda0 [ 1905.901870][T25131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1905.901890][T25131] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1905.901920][T25131] sock_sendmsg+0x394/0x410 [ 1905.901948][T25131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1905.901966][T25131] ? __pfx_sock_sendmsg+0x10/0x10 [ 1905.902003][T25131] splice_to_socket+0xb3c/0x11a0 [ 1905.902032][T25131] ? __pfx_splice_to_socket+0x10/0x10 [ 1905.902058][T25131] ? inode_has_perm+0x16d/0x1d0 [ 1905.902092][T25131] ? bpf_lsm_file_permission+0x9/0x10 [ 1905.902120][T25131] ? security_file_permission+0x76/0x210 [ 1905.902152][T25131] ? rw_verify_area+0xce/0x6d0 [ 1905.902179][T25131] ? __pfx_splice_to_socket+0x10/0x10 [ 1905.902201][T25131] do_splice+0x109c/0x1f90 [ 1905.902224][T25131] ? __lock_acquire+0x49f/0x1a40 [ 1905.902247][T25131] ? __lock_acquire+0x49f/0x1a40 [ 1905.902272][T25131] ? __pfx_do_splice+0x10/0x10 [ 1905.902292][T25131] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1905.902313][T25131] ? find_held_lock+0x2b/0x80 [ 1905.902344][T25131] __do_splice+0x33b/0x370 [ 1905.902366][T25131] ? __pfx___do_splice+0x10/0x10 [ 1905.902392][T25131] __x64_sys_splice+0x187/0x250 [ 1905.902415][T25131] do_syscall_64+0x115/0x870 [ 1905.902436][T25131] ? clear_bhb_loop+0x40/0x90 [ 1905.902458][T25131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1905.902484][T25131] RIP: 0033:0x7f061879de99 [ 1905.902501][T25131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.902521][T25131] RSP: 002b:00007f0619674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1905.902539][T25131] RAX: ffffffffffffffda RBX: 00007f0618a26180 RCX: 00007f061879de99 [ 1905.902552][T25131] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 1905.902564][T25131] RBP: 00007f0618833eaf R08: 000200000000622c R09: 0000000000000000 [ 1905.902577][T25131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1905.902589][T25131] R13: 00007f0618a26218 R14: 00007f0618a26180 R15: 00007ffcabbdd1f8 [ 1905.902610][T25131] [ 1906.465713][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1906.503313][T24955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.511679][T24955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.519961][T24955] bridge_slave_0: entered allmulticast mode [ 1906.527454][T24955] bridge_slave_0: entered promiscuous mode [ 1906.535024][T24955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.542141][T24955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.549938][T24955] bridge_slave_1: entered allmulticast mode [ 1906.559510][T24955] bridge_slave_1: entered promiscuous mode [ 1906.641298][T25136] bridge0: entered promiscuous mode [ 1906.663984][T25136] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 1906.688990][T24955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1906.700254][T24955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.724551][T24955] team0: Port device team_slave_0 added [ 1906.732068][T24955] team0: Port device team_slave_1 added [ 1906.757137][T24955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.764091][T24955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.791098][T24955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.802975][T24955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.810154][T24955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1906.837024][T24955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.910661][T24955] hsr_slave_0: entered promiscuous mode [ 1906.916861][T24955] hsr_slave_1: entered promiscuous mode [ 1906.923508][T24955] debugfs: 'hsr0' already exists in 'hsr' [ 1906.930318][T24955] Cannot create hsr debugfs directory [ 1906.938225][T14665] IPVS: stop unused estimator thread 0... [ 1907.034194][ T29] audit: type=1400 audit(1784997349.086:1291): avc: denied { write } for pid=25139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.048757][T24955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1907.066741][T24955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1907.076211][T24955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1907.084964][T24955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1907.093026][T24955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1907.102066][T24955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1907.108566][ T29] audit: type=1400 audit(1784997349.156:1292): avc: denied { write } for pid=25150 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.112286][T24955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1907.142661][T24955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1907.170066][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1907.206367][T24955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.226144][T24955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.238131][T14665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.245233][T14665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.271870][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.278986][T14665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.388531][ T29] audit: type=1400 audit(1784997349.446:1293): avc: denied { write } for pid=25159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.468493][ T29] audit: type=1400 audit(1784997349.526:1294): avc: denied { write } for pid=25175 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.529852][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1907.593631][T24955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.723059][T24955] veth0_vlan: entered promiscuous mode [ 1907.732358][T24955] veth1_vlan: entered promiscuous mode [ 1907.749224][T24955] veth0_macvtap: entered promiscuous mode [ 1907.759424][T24955] veth1_macvtap: entered promiscuous mode [ 1907.771475][T24955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1907.784375][T24955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1907.796046][T14665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.805172][T14665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.814831][T14665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.823618][T14665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1907.845468][T24955] ieee80211 phy144: Selected rate control algorithm 'minstrel_ht' [ 1907.861986][T20990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.863343][T24955] ieee80211 phy145: Selected rate control algorithm 'minstrel_ht' [ 1907.874756][T20990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.893313][T14665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.901468][T14665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.525545][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.531852][ T1312] ieee802154 phy1 wpan1: encryption failed: -22