last executing test programs: 12m37.891421184s ago: executing program 4 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000034c0)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0xe}], @ipv6=@generic={0x8, 0x6, "c3d261", 0x0, 0x4, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}, 0x0) 12m37.722247899s ago: executing program 4 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x820}, 0x0) 12m37.590718505s ago: executing program 4 (id=230): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 12m37.448389169s ago: executing program 4 (id=234): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 12m37.348120922s ago: executing program 4 (id=236): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x8080) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000034c0)={0x3, 0xa, &(0x7f0000003400)="11d3ed99a82a2c4f3de5"}) 12m37.031887595s ago: executing program 4 (id=244): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 12m36.891272956s ago: executing program 32 (id=244): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) 12m35.669216834s ago: executing program 2 (id=265): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x189802, 0xcd) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m35.124045776s ago: executing program 2 (id=269): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000002c00)="84", 0x1) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 12m35.025054151s ago: executing program 2 (id=271): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) write(r1, &(0x7f0000000340), 0x11000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f0000000640)=""/223, 0xdf) 12m31.252442927s ago: executing program 2 (id=306): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 12m31.169037044s ago: executing program 2 (id=308): openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x1) 12m30.568417833s ago: executing program 2 (id=319): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 12m30.335547091s ago: executing program 33 (id=319): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 4m10.937569573s ago: executing program 3 (id=2751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="0f22c466baf80cb888e50d8def66bafc0c66ed0f149108000000f00995e1ee00008fe808edf650d97a56b9040100400f32f3f62a663ef43e0f35", 0x3a}], 0x1, 0x11, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r3, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x3000b288, 0x0, 0x10, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42544, 0x1) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ptrace$getenv(0x4201, 0x0, 0x2, &(0x7f00000002c0)) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 4m8.55385584s ago: executing program 3 (id=2760): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000002000000cc2400000004000000000061615f61007570ae3b8e9ad29a168f1e9d201c7ad8758f42f3fca347994d4da4983854a7390de956ec6578de8b19974df170bc02a06082793d1f77d0480d838df57948439863155fa2aa5b97cc123cccc37a393765fa54b21e0bb925cbf427123f9ab0a920c63592227f69fe840cc83af827fff6970b930cc72cf8a81c27e57c954c98f3f61fd83de6c70c76a3add2a6c6271855e1f87015558dfa7c799086c0f9040ea5e5e522f3ea4d"], &(0x7f0000002200)=""/4106, 0x2a, 0x100a, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0xffffff7f00000000, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r8, 0x1}) ioctl$DRM_IOCTL_LOCK(r7, 0x4008642a, &(0x7f0000000040)={r8, 0x10}) 4m7.596275985s ago: executing program 3 (id=2761): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') mknod(0x0, 0x8001420, 0x0) r1 = userfaultfd(0x801) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x28041, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102368, 0x18fe0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1) close(0xffffffffffffffff) 4m7.11398386s ago: executing program 3 (id=2763): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) socket$kcm(0x29, 0x5, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x7}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x3, 0x10, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x1, 0x1, 0x1], &(0x7f00000002c0)=[{0x2, 0x4, 0x10, 0x4}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={r7, r8}) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x3, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) 4m6.615612959s ago: executing program 3 (id=2764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) openat$kvm(0x0, &(0x7f0000000200), 0x8700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000003c0), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x1) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000002480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000300)={0xa0, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000}, 0x4) read$FUSE(r6, &(0x7f0000000400)={0x2020}, 0x2020) 4m6.318810198s ago: executing program 3 (id=2766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000340)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000002c0)=0xfffff057, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x8045) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000340)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xf5i\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqGf\xe0B\xf9n\xf8/\"~LI\xe9\xea\x1a\x7fuSg\xac[M\xf3\x8a`\x99\\rM\xdf\xa1 \xfb\xd0,\x12W\x80\xd3\x1e\x9c\xc6\xf02+\x00\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1) lseek(r6, 0x0, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES64=r1], 0x50}}], 0x0, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000000)=0x84) 4m5.812371296s ago: executing program 34 (id=2766): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000340)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0400000000e000e218d1ddf66ed538f2523250", 0x78, 0x44014, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000002c0)=0xfffff057, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x8045) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = memfd_create(&(0x7f0000000340)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xf5i\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqGf\xe0B\xf9n\xf8/\"~LI\xe9\xea\x1a\x7fuSg\xac[M\xf3\x8a`\x99\\rM\xdf\xa1 \xfb\xd0,\x12W\x80\xd3\x1e\x9c\xc6\xf02+\x00\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1) lseek(r6, 0x0, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES64=r1], 0x50}}], 0x0, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000000)=0x84) 7.276034273s ago: executing program 0 (id=3617): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0xc090) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1b5}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000004}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 6.85355888s ago: executing program 0 (id=3619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000280)="0f22c466baf80cb888e50d8def66bafc0c66ed0f149108000000f00995e1ee00008fe808edf650d97a56b9040100400f32f3f62a663ef43e0f35", 0x3a}], 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 6.651702339s ago: executing program 0 (id=3624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x410c, 0xf0}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r9 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 6.410352056s ago: executing program 5 (id=3625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x228, 0x1398, 0x1398, 0x228, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x6, "276ffe5afe5447da771c495aa9d200"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @loopback, [0x0, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xff000000, 0xff0000ff, 0xff000000], 'macvtap0\x00', 'macvlan1\x00', {0xff}, {}, 0x33, 0x5, 0x7, 0x54}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x40000}, {0x28}}}}, 0x358) 5.255155999s ago: executing program 5 (id=3626): socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x24020400) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0xfffffffe, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0x10}}], 0x18, 0x4c00}, 0x40409d6) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0xc7adefed7fe3c587, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) 4.75612523s ago: executing program 0 (id=3627): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x488, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000000c0)) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.706190259s ago: executing program 7 (id=3628): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='@\n.'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) splice(r1, &(0x7f0000000000)=0x9, r2, &(0x7f0000000080)=0xfffffffffffffffa, 0x100000000, 0x12) 4.461805364s ago: executing program 5 (id=3630): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xf, 0x0) syz_clone(0x8002100, &(0x7f0000000000), 0x0, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)="6db13a384d49da6647d00a10d08fac86eed194d1c08af19fd544b511e7fdd320cd17ac7347d740bd033d78f992dbd8add1408a6c51b12d2400dd4dc1dff700b632cb9fc28aa3676d07d4d5103f9f1dbee2ba2f3be639a3da8fadf38c70175434437a51183ff087f3cd268ca012c83822e210e59d52f1e7b8e5d8afaaacaf3f0367f320177a5168c70b3071575ee9fc4c41ccdd871a43ded319b07b6c2be08325e48a5bc0248916ab180478ab61bc88a275fd5bf74a1aa23232a803d1ac3d7f32949189b86fc460") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) syz_clone(0xa2902500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipmr_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x0, 0x1, 0xff, 0x2, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x200088d0}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000480)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0xffffffffffffff55, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000006800010003001000f9ffff7f0000000000000000240002000003", @ANYRES32], 0x3c}}, 0x4000080) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r9, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c1) 4.431706855s ago: executing program 1 (id=3631): mknod(0x0, 0x8001420, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x28041, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) read$msr(r3, &(0x7f0000019680)=""/102368, 0x18fe0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x1) close(0xffffffffffffffff) 4.228060993s ago: executing program 6 (id=3632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) 4.103101472s ago: executing program 1 (id=3633): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x34, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.993401803s ago: executing program 6 (id=3634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000250a00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x007\x00\x00\x00\x00\x00\b\x00'], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008840) 3.923525807s ago: executing program 1 (id=3635): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) io_uring_setup(0x4b12, &(0x7f0000002ac0)={0x0, 0x88e9, 0x8000, 0x2, 0x157}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000340)="a8", 0xfe56}) 3.876524375s ago: executing program 0 (id=3636): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000f00bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = memfd_secret(0x80000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, 0x0, 0x4000891) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) ftruncate(r4, 0x51a9497) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x10, 0x0, 0x0) sendto$inet6(r7, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback, 0x2}, 0x1c) sched_setscheduler(0x0, 0x5, 0x0) 3.858326654s ago: executing program 6 (id=3637): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(r2, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 3.079958511s ago: executing program 5 (id=3638): fsopen(&(0x7f0000000040)='adfs\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x6) 3.016619979s ago: executing program 1 (id=3639): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x110) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="456efc128600"], 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x0, {{}, {0x0, 0x0, 0x0, 0x1}}}, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x80000001}, {0xe7f6, 0xfd}]}) write$ppp(r5, &(0x7f0000000140)="1e08", 0x2) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0xfffffffffffffceb) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="17000000140081044e81f782db44b904021f0802190000", 0x17}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'ipvlan0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="44b6719299657a5f2a98fa7906d0a3fa7f05000008000000000000022000886a3cdb81c0b4fb334a5754", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) write$nci(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="40020000008257c0876d33ba445ae5475a2da37f2033ed1b570909b60fbba4d6231cdda66c35a9b9cc56b5fbd46827cd96fed1e092c491c575c049612e2e635748bef825a5ee55e704f747e7f15bb989957051563ded51714f0d"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32=r1, @ANYBLOB="08000400000000000800030000", @ANYRESHEX=r8, @ANYBLOB="7f4712bc7f87611bec78d14364f8fc2eadceb0984691774a0bf32eaf73a345f80db105a76503a564dd0fd768f5fa6835de0504b451cb417ed1b4d10c62c40554a8271c14e159b00499c4fdbe283c8b979b087a5d3e4ad2db3a0ebcf65192bb80c0a80269ec4a1e7d9eac30cc1499156628ebbec4356dd0e4c563825249ea6b214c282edd4c72bc7a27a0899fdd7e4443d5cc46d429", @ANYRES64=r0, @ANYBLOB="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", @ANYRES16=r6, @ANYRESOCT=r8, @ANYRES8=r9, @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYRES64=r7, @ANYRES8=r4], 0x2c}}, 0x0) 2.864019772s ago: executing program 5 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf25010000000500040002000000050002"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) r2 = semget$private(0x0, 0x4, 0x413) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0x9, 0x3, 0x1, 0x3, 0x7, 0x1, 0x5]) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10\x02\x00\x00\x00\xe3c*sgrVex\xbe:\xf2', 0x0) r5 = epoll_create1(0x0) io_setup(0x7, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f00000002c0)={0x20000014}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) chroot(0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x3b05824, 0x0) r6 = semget$private(0x0, 0x2, 0x5167ebfed1ed13d8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a7e000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00006f7000/0x3000)=nil) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, &(0x7f00000001c0)) remap_file_pages(&(0x7f0000197000/0x3000)=nil, 0x3000, 0x6417298e4d51202, 0x600, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQFD(r10, 0x4020ae76, &(0x7f0000001480)={0xffffffffffffffff, 0x6, 0x3}) semctl$IPC_INFO(r6, 0x3, 0x3, &(0x7f0000000080)=""/229) copy_file_range(r7, 0x0, r5, &(0x7f0000000200)=0x100000000, 0x7f, 0x0) 2.860737806s ago: executing program 0 (id=3641): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0098000aac0f00", @ANYRESHEX, @ANYBLOB="702f1388ea51d126bed2aede0727f1d9b6f90eda923ca69e335de52fe0720c55586e034c2eff28604a1d97f901b65b373b2aa25300b27b361546d1a64ed3fe59"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)) ppoll(0x0, 0x0, 0x0, &(0x7f0000000380)={[0xa66e]}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0xc, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000140)={0x4}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 2.494069444s ago: executing program 7 (id=3642): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x321103, &(0x7f00000000c0)={@_ha_fsid={[0x3c52, 0x400]}, {0x8, 0x4, 0x6, 0x3eb}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x4}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xdcb8, 0x40, 0x1, 0x9c3, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2.472051223s ago: executing program 6 (id=3643): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x214102, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x2001, 0x6, 0x6, 0xd}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/89, 0x59}], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[r0, r0, r0]}, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) prlimit64(r1, 0x8, &(0x7f0000000240)={0x9, 0x30c}, &(0x7f0000000280)) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x9, 0x8, 0x6, 0x1, 0x2, 0x6, 0x18, 0x6, 0xf, 0xd2, 0x81, 0xbd, 0x8}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x4, 0x1, {{0x12, 0x4, 0x2, 0x3, 0x48, 0x68, 0x0, 0x83, 0x2f, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x13, 0xdd, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x1c, 0x35, 0x1, 0x9, [{@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast1, 0x8db00000}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="ef8d1ba067f1eaeb70d0aeab7da6ea73d1a52b2c08f4e5daa1074b48ca63491f89500c1c2191476c2be57c9e", 0x2c}], 0x1, &(0x7f0000000540)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0xe, "20fc48a06bd02c4a47a5b586"}, {0x2, 0x6, "57dab331"}]}, @end, @cipso={0x86, 0x40, 0x3, [{0x0, 0x10, "5717afa6b5d3438d2c43bbae6b6a"}, {0x2, 0xb, "7bcf09a487929f43f1"}, {0x2, 0xa, "e72963e79dafeb5d"}, {0x5, 0x3, "a9"}, {0x5, 0x9, "337c25d053545d"}, {0x6, 0x9, "9c615d1a83f89d"}]}, @cipso={0x86, 0x3a, 0x1, [{0x1, 0x11, "c0ce7765f35c1379f4195e52e0348b"}, {0x6, 0x8, "5f549a29f7af"}, {0x5, 0x7, "384876b87a"}, {0x0, 0xc, "0b3aac522384b2adf7d9"}, {0x6, 0x3, 'U'}, {0x1, 0x5, "68e0f0"}]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0xe, [0x9db8]}, @lsrr={0x83, 0x1b, 0x74, [@private=0xa010100, @local, @remote, @broadcast, @multicast2, @rand_addr=0x64010101]}, @noop, @lsrr={0x83, 0x7, 0xa5, [@broadcast]}, @timestamp={0x44, 0x8, 0x7a, 0x0, 0xe, [0x5]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xb3, 0x0, 0x0, [0x6]}, @noop, @timestamp_addr={0x44, 0x2c, 0xb6, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x3}, {@rand_addr=0x64010102, 0x7f}, {@empty, 0x2}, {@broadcast, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @dev={0xac, 0x14, 0x14, 0x26}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x1a8}, 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000740)={{0x2b, @multicast1, 0x4e24, 0x2, 'lc\x00', 0x2, 0x1, 0x11}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2000, 0x2, 0x1, 0x3}}, 0x44) sendmmsg(r5, &(0x7f0000004c40)=[{{&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'macvlan0\x00'}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="77c612e2b5fdbf800ce0b2823facc7c6227a0ef6b87b8669f769172a92e7ae5629fc221fcce64510260e7920df15cf92bc13e17de2fcb7ebaa712931b2f64664135d469127ed57f0bf318c9a8dc17f", 0x4f}, {&(0x7f00000009c0)="35db6d0bb519b90e10c2feef5df31231d3bbbfc6dfa1c9cf176da86c255b0e16288032253d2f750f84ab6e294de14f8679698d7a255809e93942e0394e2a3b84a6dd7c3cab8d7bd539026fe12674ce5c8ccb44854194d2281280870257333f9824dfbf9d346038e2ab7e266e256b0a48f55daf961261c3402df37d672d58f876ae426d5d02e6a05142495de535e317deaf6f57d2d8b1e48f41e0b9568161c98d33f08b6f213c8e51eeb498623625f6badc5c891b06b67af2625d3fa39571839d74068fe1849c100c4fa650d0080ff8e679d3e0a6d303cdcf86ca3b8de4d27b153a455cecf70ef33f25bb4e82b33ffacd16b85f02", 0xf4}, {&(0x7f0000000ac0)="f1a8542589f5caed8adc3719b5c02c2a43e981a1b4be3d3e482ebbe682e52864fd08", 0x22}, {&(0x7f0000000b00)="1779680940215779708188c3d823fdd0ed69e2d0a96b9a44b77b1015ca88b3e6288952dc1831e82d81d7f944a45da27318938dcff38be0192825bf71057939075c9bdb21ed3a79da1cc1685c0852fb85468abb37c5d0f11c24bf2a539350dbb60ff04eb128750b12b664fa573c7ed6306fc20224e8e9c94eac4380536a2f634b51375e3ce2bd61bb127042bcca0583ad5548036ac85d8eb4d44c32cf248dfa4f2b94b8ee7ca5d1b4306351a061a0a3913cec200be1cef6e34f440fa5e94598a078950d24a4abba97eba30f1454786b0724162435a6240e80d6c2e1fa0b9c35", 0xdf}, {&(0x7f0000000c00)="14634138fb9ff7b4798292cf1d37d96c91006c9135d935cd0cdcc6292d687be1b74c3fe6376debdd917b289aca9a3640758a290c089d8a968f01e3b739cd63a97cc44e8b67513061", 0x48}, {&(0x7f0000000c80)="7c7ffa4a3ce6996e401f3f1e400985de311f22783a88c3ab61979532e133cf34036997fb6eccafdcac00587be69080cab1bf20e055a0e4b8f8f52e4b99ceaeff027a29975e76", 0x46}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="986645e81cad3caaccbdcfc996eba8c354fbd1f6157dffd79b9ce7fc474b92331608e29468ee43d71de94df3a4242029cbf7a5226d92c3d078e9761ae8e03e9f658d4d4b0daa6871e7fc01fb66ae1103c732ad32bc2625e7011520b53cd83554c8043af30e5a", 0x66}], 0x9, &(0x7f0000001e40)=[{0x1010, 0x114, 0x6, "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"}, {0x40, 0x10a, 0x2, "ed9efc9d09076066bcbc1125f7c1994458efbbfbdbc9f56b688cefd1af6c5cd856d136e28e11d085f13950a7"}], 0x1050}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000002ec0)="4ea07e7a453a6506181c5721d1c5024d877c6a6ed183d68ea7f6fb7f7beb0ebbc94da0821acc2f8acb1c791f46ad90fd10fb1073c29fce25b7a607e3403f0e9ba92f5fdd04063f9992c4bbde174bb48bcea7bcc36d6e080485d3d197148d76743fdd97c43d1e162beb86fca0dc5c2c999b22be353a7cd9f4172d06e5cf4b14b2fe98ff81c28d7e923df34c4d83", 0x8d}, {&(0x7f0000002f80)="c40a36b8ac76f53d05e395e428a2194d9e0d348efd47aa83f364087dbf236ae24d6852f41d14a8818a513b33ecea4e76067f1a53d5cba8b0b69043e5a9e3b183b610d0b55ce4b15b337135a27da16e1f7561815b0b9ca2ed188d1474c4e272fa95f3ed943534704d6ab5d900814dcf2111cc4c620724eda444b2c0579bfe40780f297176114cba20c866b65a1acb4588", 0x90}, {&(0x7f0000003040)="172eba86d6a3dad9cd5a2dd7add58e0b56989be2c70990063fa1fdbb7d46c49007a8339ef9b81d0540ea8850dc7fec64c6e7e6a28fa86ef4c4c479f640935458e62ed94a4330efe951416a50b4a9881ccb29c8ceea1f2aaa0ecc1d11b392a9dcec8f3c8cd22f9a3f27c3e3960c5ffd4c706882a27556b5f371b555438fe5e30252f78f6f3821e28ab4d58e4b318b8ec54976340c1553415a2be58d53a20f61a8e9a7d0ebeeef0e70e3a34850cd36bd40840f83680afdda905317d081e78ed4fe4b5e099e222f072f9068dd119a949cd5", 0xd0}, {&(0x7f0000003140)="92ee188a608ed7edfc743d4b9af7d3c48c0e752afb6912c045ac004d7196520eb6fdb05b1d8890f69e4df54ddeb04cd56fa4c40ec310860769422658c5307eeb7797fb9a9c7212b21c93a9b05800c10127d199b9fc6318f7cef260d4d6608d9a6deea0d8ff44d3e7169f7cfe67a9014cecbbab008fc58ac7c67ebcfdc32a6a0468f23a2b6f653d50251a02490b379759539907994af0bc5d1b22afa21d9f8b5d62", 0xa1}, {&(0x7f0000003200)="7d7f66d17f403cbeda5177a81c343911940abd6ae11136a1a76fc00093f40bf3799f414c038b0f225303688d60f79b50e236881226eec4", 0x37}, {&(0x7f0000003240)="6580c4021bf5f33f2fb8fb4e65353e02118d15a6fd4a2813dfe06046f2c48cabc15446a406c5eb5832822aafa7c92bd34e8b25865220071fb241cf4adc9040b80b7c46165fb15de85461374c2b1aa14762fbbe6c8df441c76c417a555ec5023b94fd31a316f9b040b1f526dfa3a7b3d1cc21d88f25100e605585acb28797458d35324e928772b97eb0e719e0beac37dd857b3fb1a160309a43135f26c8ee7479f6bc6db421625ba991d04f163d8c15f1e5f0db0bcc13f9ca9215fefba80d9fa4d379205c290ed9ebed78da62e640aac5d22a571a617e776808b6adfe2da085c2371a", 0xe2}, {&(0x7f0000003340)="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", 0x1000}], 0x7, &(0x7f00000043c0)=[{0x10, 0x119, 0x7}, {0xb0, 0x119, 0x10001, "81825faebee8b7d830f939db8547b9bf9f46a29952468ec252f315022520f6a208e2a3c6e5665c22921d49d648490f3d72d30dc05da386916ba6305e417edbc83a396d3e6171b703470477555b660cd1cd683a858687660fbba21a8ea3765ce741098a0c11d4026cfb7abb8f8e30eb4405710442ee1276801c075936dd106598b976ff922969bc8ee0507076650a5d1e26181fe6a229e97d25e705"}, {0x10, 0x119, 0x7}, {0xc0, 0x114, 0x9, "04b2a7e1f6fecf17c4b58fc88107371ba629a1341ab117b24a2f76a4bbf9d34e0326cef2567396f6559b64f8ee6d472a0333086550c8ffe4ecc5eea03ce66385ed1444dfa7be090dd66d5ef002d2f6665a82ffd8b159db9dfd125d4bee2faaccc7b0457aefdfeea4bbe06b80eddc3fde6a579dd179a800971fd4b630c59e346fe47cea47f05acb3ae51fb088145064d0eb14b7c3ea50e9a0e089830013c3f3169697e676f07862c2586b948ed3196255"}, {0x100, 0xff, 0xc56, "b25f8cd1899bac85ebb9403ecaa31d68303e1aa148c83085d26b0b41c23451b143141483e97adc04bf2655c8f4085bff134158585fc62216dc50cceeafe960c760fac66ca63108354ee4017a2d99484152c9eb0e752ef3939b6b51441bc65e8c36295fe759f384458616c5d5ff8f68efae352f1be8ec922b794ac8db7482d16a958e169b3d077e79fad9730c9b472ce542b875fa8ee4e1d02aedc0df497550d29ee558cd1b1634e7b81919e576be4b37fbf895408225d1372b0e5c9c32748a4175720e20aaf0a0c4f88b53548c728abad3bbe08b894586b6316d294b75e0622ece5c678c0f90381650f941d4e7ddcc16"}, {0x40, 0x1, 0x4, "3bf351a46f141bd321f5c8db6ecd20300c0f46e9c33710a80295b42c6191ec47dbd35b147965b1407b8d7555898e2959"}, {0x60, 0x10d, 0x7, "bc57b93e7676299dcd6c5db665201326c09a4ca99e435f8891c977043ebde10875313e19095050fcf4e928d6723d0ef0807971e2a511ec6e4c75fd3b9d9bc2195d5986aeae43a4a5257006cefa0b"}, {0x100, 0xff, 0x6, "c3790322573d590bd6f2eb9c8b7a9d50358190fbadf3bd27a270dadf9f42b2756e11f6570aba8b816e4f31e5ff6b64485c1a79450b4afcbb0f757c44cd2263f8002a62f7889f7541290f4069c3dd7818422dae701d59a8f5cf68ed45bf3e4497a965e2352434b7ea8ce74192f2eef7543233cbfcc08ff33fde93e673237deb1b5fd1914c53f93e78929a5416cdb850e0c577af626c808c7e80fc1dbc5d272cfb84e328c9c9822c8f443840d978c93986fae806558647b67535334732a139ce94315c407718bba24dfa3b74eff45b96334aa2ba2a64ca8f6ba321b729d24a8e1ba0115159158cdf57b8b1ff434eb1"}, {0xc0, 0x11, 0x5, "933a5e45d4030c99ad806f1a105363b41c561fae85205276d72441631d1ea9003cde2739808cf4caea7dc3e3c5990233569603764bf186cd3ccc9e2c8169a1e575f395b7fbc44064d8c50a277b3b65e5a8a2a0f68e96fed87bd295f8869e3bb349a8883a4337e914606f13f129935337d9b0391832801e8d0cf938811a7d01d200c0cffaac0bd36d127e6bc7f556cf7565afca1182801a1d8fe91207be611ae868325e4da2200cdc534f3183"}], 0x4f0}}, {{&(0x7f00000048c0)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004940)="11f626310f3c207c4f90d3ba9e2163c7ffc98115dfcf6cca692062dc2c2039a0705b4b3ab16a286908951f006adc1c0edacad2665f439805b3a371ae1de92f1977039a901a54ac413f289c4b283ba2363157602effdb034c79d5bcfea0d9050b37d53b2379244e6900bdf1e5a9e3404f287f20fe261f317bf7308ad189e9b313543621d38982adc779a8883760d34339083bc74482ff3ffba244fba06a66d4df940433d09199ed7ad7f4595684c2527ef5ed36dfaa12a5344414b5e0881f95f16ac0e4e7baf5a7b390d85ae4f68c9f0351423ca6ff702231a5ce66105330888cc37612f112de", 0xe6}], 0x1, &(0x7f0000004a80)=[{0xb8, 0x101, 0x9, "33a343f7a89b222a1a394e0a02c04edcc742db7eb14c728d6e1e1b08bd1b362bde1b9b24620f417fcb0ed0542fc4c0587555bd63523e8c9e4ef78bf2cbecc35489b243057d80d54d6fe12f54cb71464b5ee4df40b5c210ca9da9a1cd58e34186c6205e8dec1bb7f2d6d12224a98cb79f16a3340f4b7f1a0e8a92d23646825091dd70745fc258f4188818f386fa798c49b06aca41e9a5ca7a18ec29fb056d69c3002b4233ac0b"}, {0x100, 0x10a, 0x6, "e6f0163a9e417647073917e743faa4579784aef00d295d15abcc5ce693e2120be0e0e6f1cd6ec5a1aaab729d59d42f59e61a118baa2adccae0b232593e2fd3acde8c7464b7e9a193a7742cf592b43eb277d6ba808bd7832e33bff4edddeb663ae2e6eceb80e3de59142e99be1df3eae22ffe1b8bb7c97ff2abfc2b15403f36b42db01c5cf35dbb4c5239214ec0f6b91628ebba6d2d64c00cb86b877504d2ab256e711b7663ca22f6594c357f854e8f935675a9e6f303ec973c408488df4f0a72950340dbdc7dee7190f734ea23720ecd7fe60fff786ce1f73babcc73a7a1cd8a424899dd675778f582653402"}], 0x1b8}}], 0x3, 0x82) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004d80)={'syztnl0\x00', &(0x7f0000004d00)={'sit0\x00', r6, 0x700, 0x1, 0x10, 0x7, {{0x14, 0x4, 0x0, 0x16, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty, {[@generic={0x88, 0x4, "8996"}, @rr={0x7, 0x1b, 0xcd, [@loopback, @private=0xa010101, @multicast2, @rand_addr=0x64010101, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0x75, 0x3, 0x4, [{@broadcast, 0x200}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x6}]}]}}}}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x318, 0x4, &(0x7f0000004dc0)) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000004e00)={{r0}, {@void, @max}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000004e40)) r7 = open$dir(&(0x7f0000004e80)='./file0\x00', 0x40800, 0x10) r8 = open_tree(r7, &(0x7f0000004ec0)='./file0\x00', 0x9000) r9 = syz_open_dev$video(&(0x7f0000004f00), 0xdbb, 0x400) ioctl$VIDIOC_ENCODER_CMD(r9, 0xc028564d, &(0x7f0000004f40)={0x1, 0x1, [0x1, 0x0, 0x6, 0x10000, 0x0, 0x9, 0xe, 0x81]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r8, 0x84, 0x15, &(0x7f0000004f80)={0xe}, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000004fc0)=@sack_info={0x0, 0xc5, 0x7}, &(0x7f0000005000)=0xc) syncfs(r7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000005040)={r0, r0, 0xd, 0x0, @val=@netfilter={0x7, 0x0, 0xf, 0x1}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000005080)=0x4) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000050c0)=0xf) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x810, 0xffffffffffffffff, 0x0) 2.375713708s ago: executing program 7 (id=3644): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000640)='\x00', &(0x7f0000000680)) r1 = syz_clone(0x4111, 0x0, 0x88, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/netstat\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x40000006, 0x6a, &(0x7f0000000800)=""/106, 0x41100, 0x7, '\x00', 0x0, @fallback=0x1e, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x3, 0xa}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xe5e}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={0x0, r3, 0x4000, r0}, 0x18) pread64(r2, &(0x7f0000000100)=""/57, 0x39, 0x40000000009) accept$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @remote}, &(0x7f0000000700)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) r7 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47b6, 0x3400000, 0x28, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x5100, 0x0) 2.364018145s ago: executing program 6 (id=3645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.255755528s ago: executing program 7 (id=3646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10001}, [@call={0x85, 0x0, 0x0, 0x87}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x0, 0x25dfdbfc, {{}, {0x0, 0x410c, 0xf000}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r9 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 2.01946622s ago: executing program 6 (id=3647): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') flock(r0, 0x1) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x11, 0x4, "21a7f160"}, 0x0, 0x0}) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="00010000000000135513000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4c}, 0x94) ioctl(r0, 0x600, &(0x7f0000000080)="e3ee882c0a3701536e4e1560a96524a2563f99cedb9c38905f2e9dc03dd0e3a037276c7b4f38a3e3dc30418be9a0fd44") 1.275900607s ago: executing program 5 (id=3648): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x66) fcntl$notify(r4, 0x402, 0x8000003d) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c935171c5423f94c4f0e1ae8910d92adb6caf57a484396522db83fc9e400426ecf234ffd751ac637a43beed92f26df63bc84fb07cd24bca7354af5108a5e0badc64fb90d007d003c0368efbe1e2e377d23196179e7cc74b60120eb386cb3b20765b550e31891cfa8", @ANYRES16=0x0, @ANYBLOB="1977000000000000000004000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="42b48f658fc38f32000000000800000000000000", @ANYBLOB], 0x20}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60001e90db24e66dea000000180600fe80000000000000000000000000002531e7d2bbfe8000000000000000000000000000aa00004e2232b1c80a95648027fa78556628e6ccb2952ab12afe418771b5c4f91a3e4b9a86e3b1f0da441b92df7db494a3867e664ba9e6c5bfae62895fa06757d8ccc10bbbd4dd2ee169fbda886b6516121ef4722eb68e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078ffff03030800"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) 904.740607ms ago: executing program 7 (id=3649): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x37, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 832.780113ms ago: executing program 1 (id=3650): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f00000001c0)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) syz_emit_ethernet(0x1c1, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd697a262d018b3afefe80000000000000e1ffffff000000aaff020000000000000000000000000001332a000000000000000100c910fc010000000000000000000000000001050207ff07500000000012810500e2000000000000000200000000f3ffff0400000000000000000000000000000002000000000000000500000000000000aa4f10000000000008000000000000000300000000000000c910fc000000000000000000000000000001c910fc020000000000000000000000000001c91000000000000000000000000000000001f5b0964351e86d27ebdf10644b767741375315eaa9e003ddc4cffd6a3f5f3ab7574ded8d817cd84db793acac249b04e647bd5f329a2c8e9e61cecfa752895d7957583d9acc48b8df1fc2c95e96330935384e13738de2e2fbace2cbdb51e745c86e3dcdf5fd65d8b66fde80f93cec92f48bcb79be179f4f2bd75cd67b88038ec01b5d9ad35b5235f6a7641ed27c4b2db459db3ce0e94146234b23fb15d265ebb738db9a737db72d7ed43784ef74a2fc7ff2fc05028001008b00907800ff000dffffffffffffffb2389eb0b907415521991b6094fe5961a6b978fb55fc1ed5433e8ee5eded9c2d18a50e70b2b813e1b4a20f36a7393438a5923b6712967d7e799af2fa390ddfac51c9f0090a063b0a21fde3bb32c2b9f7018d03a4c31d6f9b520cf85f7d6a09ff96aeca909cbc1804383013378fa1c26d3cfb2390dc05c9a5120f4a7d5006ed2750f83d7338c7fbb85f97d7069486fd9452efe5e8b6905559305eb0bc04ba27e83efc692f8076bb4f6469896e424e9a804682cee981559f7d907b22f04918582199cbfb849cc9fe214d02e329c13136bbd050af23615e90d2a6c3f09d770c246a17ebcf9659"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000120a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a300000c6060a010612fdff000000000073797a3100080000040004800900020073797a32000000001400000011000000de000000006a26593c00000a4777f5606ae8ef66bf084c8c16298c058e32f57290b8190d6758b8b1c7c4b26416639016b1afd8c801f7f200c445de9cfc8ce9813d473d07a0269cc010fa43f658173949b90f686c22cede38a75a47de4cbe11b52e7ba0c7d0193948ba9ab14f233c72abc2724cd11017c4faf0f85cce0e136e36197c56a375160ad74bdedf17b81ef938ee3d52739100"/231], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 751.581424ms ago: executing program 7 (id=3651): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="86", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4) 0s ago: executing program 1 (id=3652): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x18}, 0xc) pwritev(r6, &(0x7f00000006c0)=[{&(0x7f0000000240)="bc8ade31212e4fa350765ff2b3544f6ebfc8103f9cb869d3e2040dc99979620a2fb69da01a9ddeb3475c4e5534c111145ca3006d98b6e4f59f0745af44f58033250f5bdf88d51070b0253e5f8460f2fd8298397d89c7bb2b066bd6defa20b47eec5e982f6b96c72ff721d81f929d4e97d0115e8d04db8eec821bb8db34c0", 0x7e}, {&(0x7f00000003c0)="f01cc5dd762b12a826df63c647ee376bf46f2d74ffbeeca5de4d062cb56b0571c55760a255228a79fde8dcea3486f0b169ea4f337da2d9c3b2139c37f5ba912fd6ed6577b7ee0a6232d6a4b948f0a57693cd4fd9bd24a4ccfe80bfbdf1688dbc165153bae869d3fb08470449a2809f8a69c9c3357834127ba7604391c98226e3d93be74f2a80955db74952472a67407f9c458316a4d323cf143aa494e384b2940f331de5980623abd156b34e31c3f6b8a335978d7d0860e906a72f365c", 0xbd}, {&(0x7f0000000500)="f4637e459d", 0x5}, {&(0x7f0000000540)="2507510d978c6dc0ae312d45d5394c16f2d703b3376a4f80633b0b713582c8422061663dd86a6ac276627e3188a5f73031ab7be370ed30c277e4f1f0895ec8266b57163e112ead690802a86937ebbeeacd9a45ca09ace76f1ef871858ed44d490defed92dacfcf44f4cedde0fdd82ae7e561e02dfeca2a008e0ef6f08499b47f8f8a89a5d93a517f4662fd4dcf76421ae3216489a68e097bcd84e1df428b071b0dbbcc868099b97aab6bbc43309b9a5ee4955f26dbf0584c7a5a2dac3b", 0xbd}, {&(0x7f0000000600)="71cd77ca945bce636c1361176a637b6e841e262a35a4e6920868e0091fec24448c52eee905d65414c0aa695b2372ea3eedab37b93f314f6ef1e4d2854c508e511dfa0387efae9e54450eaa6b8ecfc1685365fa1c741549f89ee0525b94798ac275e48b5702a62a1791a3d7c3da0964cc50eafbe09fe3992060177d1c0f3ced547f87e03df48549d4c3e57c", 0x8b}], 0x5, 0x1, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x500}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): T16531] unsupported nla_type 66 [ 696.488267][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3012'. [ 696.531513][T16505] delete_channel: no stack [ 696.540266][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 696.569953][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 696.603899][T16536] FAULT_INJECTION: forcing a failure. [ 696.603899][T16536] name failslab, interval 1, probability 0, space 0, times 0 [ 696.616968][T16536] CPU: 0 UID: 0 PID: 16536 Comm: syz.7.3013 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.616998][T16536] Tainted: [L]=SOFTLOCKUP [ 696.617004][T16536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.617014][T16536] Call Trace: [ 696.617020][T16536] [ 696.617032][T16536] dump_stack_lvl+0x100/0x190 [ 696.617065][T16536] should_fail_ex.cold+0x5/0xa [ 696.617088][T16536] should_failslab+0xc2/0x120 [ 696.617116][T16536] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 696.617141][T16536] ? __alloc_skb+0x140/0x710 [ 696.617162][T16536] __alloc_skb+0x140/0x710 [ 696.617176][T16536] ? __alloc_skb+0x5b7/0x710 [ 696.617190][T16536] ? __pfx___alloc_skb+0x10/0x10 [ 696.617217][T16536] ? __pfx_nf_tables_abort+0x10/0x10 [ 696.617242][T16536] netlink_ack+0x117/0xb80 [ 696.617271][T16536] nfnetlink_rcv_batch+0x1d5c/0x2880 [ 696.617311][T16536] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 696.617337][T16536] ? find_held_lock+0x2b/0x80 [ 696.617375][T16536] ? avc_has_perm_noaudit+0x145/0x3b0 [ 696.617427][T16536] ? __nla_parse+0x40/0x60 [ 696.617449][T16536] nfnetlink_rcv+0x3bd/0x440 [ 696.617474][T16536] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 696.617505][T16536] netlink_unicast+0x5aa/0x870 [ 696.617530][T16536] ? __pfx_netlink_unicast+0x10/0x10 [ 696.617560][T16536] netlink_sendmsg+0x8b0/0xda0 [ 696.617585][T16536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.617603][T16536] ? __might_fault+0x40/0x140 [ 696.617634][T16536] ____sys_sendmsg+0xa54/0xc30 [ 696.617659][T16536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.617693][T16536] ___sys_sendmsg+0x190/0x1e0 [ 696.617718][T16536] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.617773][T16536] __sys_sendmsg+0x170/0x220 [ 696.617791][T16536] ? __pfx___sys_sendmsg+0x10/0x10 [ 696.617826][T16536] do_syscall_64+0x106/0xf80 [ 696.617844][T16536] ? clear_bhb_loop+0x40/0x90 [ 696.617867][T16536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.617885][T16536] RIP: 0033:0x7f5af219c799 [ 696.617900][T16536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.617917][T16536] RSP: 002b:00007f5af30d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.617935][T16536] RAX: ffffffffffffffda RBX: 00007f5af2415fa0 RCX: 00007f5af219c799 [ 696.617947][T16536] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 696.617957][T16536] RBP: 00007f5af30d4090 R08: 0000000000000000 R09: 0000000000000000 [ 696.617967][T16536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.617978][T16536] R13: 00007f5af2416038 R14: 00007f5af2415fa0 R15: 00007ffceeb0ffc8 [ 696.618003][T16536] [ 697.059648][T16549] fuse: Bad value for 'group_id' [ 697.064677][T16549] fuse: Bad value for 'group_id' [ 698.952199][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 698.961028][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.023765][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.032287][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.048064][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 699.166431][T11410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.208681][ T30] audit: type=1400 audit(1772448696.609:904): avc: denied { create } for pid=16572 comm="syz.7.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 699.259579][ T30] audit: type=1400 audit(1772448696.639:905): avc: denied { getopt } for pid=16572 comm="syz.7.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 699.335620][T11410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.351034][T16575] binder: 16574:16575 ioctl 5605 0 returned -22 [ 699.441138][T11410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.677764][T11410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.024486][T16580] sp0: Synchronizing with TNC [ 700.031513][T16578] [U] [ 701.144799][ T5817] Bluetooth: hci2: command tx timeout [ 701.202804][ T6718] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 701.274477][ T30] audit: type=1400 audit(1772448698.679:906): avc: denied { create } for pid=16599 comm="syz.6.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 701.388399][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.405372][ T6718] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 701.416483][ T6718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.517686][ T6718] usb 6-1: config 0 descriptor?? [ 701.699229][ T6718] pwc: Askey VC010 type 2 USB webcam detected. [ 701.810085][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 701.822598][T16612] netlink: 'syz.6.3037': attribute type 30 has an invalid length. [ 701.856325][T11410] dvmrp9 (unregistering): left allmulticast mode [ 701.861965][T16613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 701.890834][T16613] netlink: 'syz.6.3037': attribute type 30 has an invalid length. [ 701.917534][T11410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.975381][ T6718] pwc: recv_control_msg error -32 req 02 val 2b00 [ 701.984988][ T6718] pwc: recv_control_msg error -32 req 02 val 2700 [ 701.995023][T11410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.016759][ T6718] pwc: recv_control_msg error -32 req 02 val 2c00 [ 702.026565][ T6718] pwc: recv_control_msg error -32 req 04 val 1000 [ 702.042166][ T6718] pwc: recv_control_msg error -32 req 04 val 1300 [ 702.055061][T11410] bond0 (unregistering): Released all slaves [ 702.067560][ T6718] pwc: recv_control_msg error -32 req 04 val 1400 [ 702.075624][ T6718] pwc: recv_control_msg error -32 req 02 val 2000 [ 702.083063][ T6718] pwc: recv_control_msg error -32 req 02 val 2100 [ 702.091418][ T6718] pwc: recv_control_msg error -32 req 04 val 1500 [ 702.098932][ T6718] pwc: recv_control_msg error -32 req 02 val 2500 [ 702.107000][ T6718] pwc: recv_control_msg error -32 req 02 val 2400 [ 702.114533][ T6718] pwc: recv_control_msg error -32 req 02 val 2600 [ 702.121793][ T6718] pwc: recv_control_msg error -32 req 02 val 2900 [ 702.157174][T11410] bond1 (unregistering): Released all slaves [ 702.208669][T11410] bond2 (unregistering): Released all slaves [ 702.297442][T11412] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.398109][T11412] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.442626][T11412] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.932855][T16569] chnl_net:caif_netlink_parms(): no params data found [ 702.979683][T11412] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.204158][ T5817] Bluetooth: hci2: command tx timeout [ 703.347485][T16569] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.362928][T16569] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.402924][T16569] bridge_slave_0: entered allmulticast mode [ 703.410685][T16569] bridge_slave_0: entered promiscuous mode [ 703.484180][T16569] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.491879][T16569] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.522825][T16569] bridge_slave_1: entered allmulticast mode [ 703.535025][T16569] bridge_slave_1: entered promiscuous mode [ 703.642686][ T6718] pwc: recv_control_msg error -71 req 04 val 1100 [ 703.682316][ T6718] pwc: recv_control_msg error -71 req 04 val 1200 [ 703.704536][T16569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.726696][ T6718] pwc: Registered as video103. [ 703.875154][ T6718] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 703.981455][T16569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.134993][ T6718] usb 6-1: USB disconnect, device number 48 [ 704.284625][T16569] team0: Port device team_slave_0 added [ 704.443943][T16569] team0: Port device team_slave_1 added [ 705.418866][ T5817] Bluetooth: hci2: command tx timeout [ 705.621634][T16569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.641131][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.751365][T16569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.905085][T11410] hsr_slave_0: left promiscuous mode [ 705.955617][T11410] hsr_slave_1: left promiscuous mode [ 705.975193][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.022582][T11410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.046186][T11410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.072638][T11410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.113231][T11410] batman_adv: batadv0: Interface deactivated: vlan1 [ 706.119857][T11410] batman_adv: batadv0: Removing interface: vlan1 [ 706.167201][T11410] veth1_macvtap: left promiscuous mode [ 706.182840][T11410] veth0_macvtap: left promiscuous mode [ 706.188409][T11410] veth1_vlan: left promiscuous mode [ 706.194042][T11410] veth0_vlan: left promiscuous mode [ 707.220121][T11410] team0 (unregistering): Port device team_slave_1 removed [ 707.244761][T11410] team0 (unregistering): Port device team_slave_0 removed [ 707.280561][T11407] smc: removing ib device syz2 [ 707.343789][ T6706] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 707.442641][ T5817] Bluetooth: hci2: command tx timeout [ 707.533197][T16569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.540331][ T6706] usb 7-1: Using ep0 maxpacket: 8 [ 707.545716][T16569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.604085][ T6706] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 707.617290][ T6706] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.629022][T16569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.646531][ T6706] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 707.679237][ T6706] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.796872][ T6706] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.922225][ T6706] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 708.010980][ T6706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.037906][ T6707] syz2: Port: 1 Link DOWN [ 708.056961][T16569] hsr_slave_0: entered promiscuous mode [ 708.092848][T16569] hsr_slave_1: entered promiscuous mode [ 708.105541][T16569] debugfs: 'hsr0' already exists in 'hsr' [ 708.111420][T16569] Cannot create hsr debugfs directory [ 708.290391][ T6706] usb 7-1: GET_CAPABILITIES returned 0 [ 708.538901][ T6706] usbtmc 7-1:16.0: can't read capabilities [ 708.662928][ T6706] usb 7-1: USB disconnect, device number 30 [ 708.751488][T16715] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 708.776151][T16715] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 712.739474][T16569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 712.868588][T11410] IPVS: stop unused estimator thread 0... [ 712.875799][T16569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.909464][T16569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.998398][T16569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.676645][T16569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.771392][T16838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=16838 comm=syz.7.3076 [ 714.841971][T16838] EXT4-fs (nbd7): unable to read superblock [ 715.151121][T16569] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.178732][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.185914][T11410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.225974][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.233112][T11410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.262637][ T6707] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 715.907721][ T30] audit: type=1400 audit(1772448713.309:907): avc: denied { read } for pid=16848 comm="syz.6.3078" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 715.937082][ T6707] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.012018][ T6707] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.431930][ T30] audit: type=1400 audit(1772448713.309:908): avc: denied { ioctl } for pid=16848 comm="syz.6.3078" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 716.472063][ T6707] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 716.484385][T16569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 716.542294][ T6707] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 716.567406][T16569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 716.602553][ T6707] usb 8-1: Manufacturer: syz [ 717.000986][ T6707] usb 8-1: config 0 descriptor?? [ 717.053228][ T6707] usb 8-1: can't set config #0, error -71 [ 717.097144][ T6707] usb 8-1: USB disconnect, device number 6 [ 717.286755][T16867] tmpfs: Bad value for 'mpol' [ 717.360454][T16869] netlink: 'syz.6.3080': attribute type 4 has an invalid length. [ 717.413692][T16874] netlink: 'syz.6.3080': attribute type 4 has an invalid length. [ 718.180310][T16569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.252757][ T5812] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 718.478867][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 719.076682][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.101528][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.110712][T16569] veth0_vlan: entered promiscuous mode [ 719.152786][T16569] veth1_vlan: entered promiscuous mode [ 719.161379][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 719.222039][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 719.282611][ T5812] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 719.315963][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.360363][T16569] veth0_macvtap: entered promiscuous mode [ 719.520230][ T5812] hub 7-1:1.0: bad descriptor, ignoring hub [ 719.548209][ T5812] hub 7-1:1.0: probe with driver hub failed with error -5 [ 719.558739][ T30] audit: type=1400 audit(1772448716.949:909): avc: denied { ioctl } for pid=16896 comm="syz.5.3084" path="socket:[65132]" dev="sockfs" ino=65132 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 719.591479][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 719.599376][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 719.608636][ T5812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 719.622368][ T5812] cdc_wdm 7-1:1.0: Unknown control protocol [ 719.628854][T16569] veth1_macvtap: entered promiscuous mode [ 719.774291][T16569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.858744][T16569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.999786][ T3568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.089838][ T3568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.711370][ T3568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.720811][ T3568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.026839][T11414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.054460][T11414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.099058][T16931] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3093'. [ 721.134911][ T30] audit: type=1400 audit(1772448718.529:910): avc: denied { listen } for pid=16930 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 721.255985][ T30] audit: type=1400 audit(1772448718.529:911): avc: denied { read } for pid=16930 comm="syz.5.3092" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 721.373585][T11416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.383006][ T30] audit: type=1400 audit(1772448718.539:912): avc: denied { open } for pid=16930 comm="syz.5.3092" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 721.411663][T11416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.958467][ T30] audit: type=1400 audit(1772448719.359:913): avc: denied { mounton } for pid=16569 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 722.177228][ T5959] usb 7-1: USB disconnect, device number 31 [ 723.068786][ T5959] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 723.304000][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.316138][ T5959] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 723.337798][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.373155][ T5959] usb 6-1: config 0 descriptor?? [ 723.807223][ T5959] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 723.829282][ T5959] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000A/input/input39 [ 724.100841][ T5959] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 725.533772][ T5959] usb 6-1: USB disconnect, device number 49 [ 726.626511][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3108'. [ 726.839401][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.849111][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.861303][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.871371][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.887140][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 727.022598][ T5812] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 727.192528][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 727.205058][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.216559][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.239648][T16996] chnl_net:caif_netlink_parms(): no params data found [ 727.246995][ T5812] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 727.269045][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.300034][ T5812] usb 8-1: config 0 descriptor?? [ 727.529711][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.580156][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3110'. [ 727.602807][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.632779][T16996] bridge_slave_0: entered allmulticast mode [ 727.640114][T16996] bridge_slave_0: entered promiscuous mode [ 727.656199][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3110'. [ 727.682643][T17008] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3110'. [ 727.704690][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.722420][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.742807][T16996] bridge_slave_1: entered allmulticast mode [ 727.750227][T16996] bridge_slave_1: entered promiscuous mode [ 727.788141][T17009] ubi31: attaching mtd0 [ 727.793838][ T5812] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 727.822578][T17009] ubi31 error: ubi_attach_mtd_dev: bad VID header (57700) or data offsets (57764) [ 727.892419][T16996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.965533][T16996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.105157][T16996] team0: Port device team_slave_0 added [ 728.173670][ T30] audit: type=1326 audit(1772448725.579:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17011 comm="syz.5.3107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3e079c799 code=0x0 [ 728.180004][ T5956] usb 8-1: USB disconnect, device number 7 [ 728.203500][T16996] team0: Port device team_slave_1 added [ 728.279593][T16996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.292548][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.336275][T16996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.440400][T16996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.447711][T16996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.474547][T16996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.967174][T16996] hsr_slave_0: entered promiscuous mode [ 728.972992][ T5822] Bluetooth: hci5: command tx timeout [ 728.981276][T16996] hsr_slave_1: entered promiscuous mode [ 728.987799][T16996] debugfs: 'hsr0' already exists in 'hsr' [ 728.994130][T16996] Cannot create hsr debugfs directory [ 730.076716][T17038] xt_hashlimit: size too large, truncated to 1048576 [ 730.136738][T17041] FAULT_INJECTION: forcing a failure. [ 730.136738][T17041] name failslab, interval 1, probability 0, space 0, times 0 [ 730.212655][T17041] CPU: 0 UID: 0 PID: 17041 Comm: syz.6.3117 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.212691][T17041] Tainted: [L]=SOFTLOCKUP [ 730.212696][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.212705][T17041] Call Trace: [ 730.212711][T17041] [ 730.212717][T17041] dump_stack_lvl+0x100/0x190 [ 730.212751][T17041] should_fail_ex.cold+0x5/0xa [ 730.212773][T17041] should_failslab+0xc2/0x120 [ 730.212800][T17041] __kmalloc_cache_noprof+0x7a/0x6f0 [ 730.212821][T17041] ? call_usermodehelper_setup+0xaf/0x360 [ 730.212846][T17041] ? __pfx_free_modprobe_argv+0x10/0x10 [ 730.212864][T17041] call_usermodehelper_setup+0xaf/0x360 [ 730.212884][T17041] __request_module+0x3c7/0x6c0 [ 730.212899][T17041] ? __pfx___request_module+0x10/0x10 [ 730.212920][T17041] ? xt_find_target+0x1dc/0x280 [ 730.212945][T17041] xt_request_find_target+0xf6/0x130 [ 730.212966][T17041] find_check_entry.isra.0+0x62c/0xa00 [ 730.212993][T17041] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 730.213019][T17041] ? kasan_quarantine_put+0x104/0x240 [ 730.213040][T17041] ? lockdep_hardirqs_on+0x78/0x100 [ 730.213062][T17041] ? translate_table+0xb53/0x16c0 [ 730.213080][T17041] ? kfree+0x1f6/0x6b0 [ 730.213098][T17041] ? xt_check_table_hooks+0x206/0x330 [ 730.213122][T17041] translate_table+0xc31/0x16c0 [ 730.213155][T17041] ? __pfx_translate_table+0x10/0x10 [ 730.213184][T17041] do_ip6t_set_ctl+0x57c/0xba0 [ 730.213204][T17041] ? nf_sockopt_find.isra.0+0x222/0x290 [ 730.213227][T17041] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 730.213249][T17041] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 730.213278][T17041] ? nf_sockopt_find.isra.0+0x222/0x290 [ 730.213301][T17041] nf_setsockopt+0x8d/0xf0 [ 730.213323][T17041] ipv6_setsockopt+0x135/0x170 [ 730.213347][T17041] rawv6_setsockopt+0xee/0x5a0 [ 730.213366][T17041] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 730.213384][T17041] ? selinux_socket_setsockopt+0x6a/0x80 [ 730.213399][T17041] ? sock_common_setsockopt+0x2e/0xf0 [ 730.213418][T17041] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 730.213440][T17041] do_sock_setsockopt+0xf3/0x1d0 [ 730.213463][T17041] __sys_setsockopt+0x195/0x220 [ 730.213483][T17041] __x64_sys_setsockopt+0xbd/0x160 [ 730.213498][T17041] ? do_syscall_64+0x95/0xf80 [ 730.213513][T17041] ? lockdep_hardirqs_on+0x78/0x100 [ 730.213528][T17041] do_syscall_64+0x106/0xf80 [ 730.213542][T17041] ? clear_bhb_loop+0x40/0x90 [ 730.213560][T17041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.213577][T17041] RIP: 0033:0x7fbe1f59c799 [ 730.213592][T17041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.213609][T17041] RSP: 002b:00007fbe204c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.213626][T17041] RAX: ffffffffffffffda RBX: 00007fbe1f816090 RCX: 00007fbe1f59c799 [ 730.213638][T17041] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 730.213647][T17041] RBP: 00007fbe204c4090 R08: 0000000000000528 R09: 0000000000000000 [ 730.213657][T17041] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 730.213674][T17041] R13: 00007fbe1f816128 R14: 00007fbe1f816090 R15: 00007ffe2bbee538 [ 730.213698][T17041] [ 730.670976][T11416] erspan0: left allmulticast mode [ 730.695363][T11416] erspan0: left promiscuous mode [ 730.700520][T11416] bridge0: port 3(erspan0) entered disabled state [ 730.915851][T11416] bridge_slave_1: left allmulticast mode [ 731.041522][T11416] bridge_slave_1: left promiscuous mode [ 731.072577][ T5817] Bluetooth: hci5: command tx timeout [ 731.072841][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.113460][T11416] bridge_slave_0: left allmulticast mode [ 731.119173][T11416] bridge_slave_0: left promiscuous mode [ 731.143722][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.893957][T17065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 733.034730][T11416] bond1 (unregistering): (slave bridge1): Releasing active interface [ 733.122668][ T5817] Bluetooth: hci5: command 0x040f tx timeout [ 733.680302][T11416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.700481][T11416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.715466][T11416] bond0 (unregistering): Released all slaves [ 733.740289][T11416] bond1 (unregistering): Released all slaves [ 733.756343][T11416] bond2 (unregistering): Released all slaves [ 733.844772][T11416] bond3 (unregistering): (slave wlan0): Releasing backup interface [ 734.239301][T11416] bond3 (unregistering): Released all slaves [ 734.275236][T11416] bond4 (unregistering): Released all slaves [ 734.498001][T11416] IPVS: stopping backup sync thread 10339 ... [ 735.208361][ T5822] Bluetooth: hci5: command 0x040f tx timeout [ 735.215954][ T6723] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 735.304997][T17105] IPv6: addrconf: prefix option has invalid lifetime [ 735.482753][ T6723] usb 7-1: Using ep0 maxpacket: 32 [ 735.491209][ T6723] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.672648][ T5822] Bluetooth: hci5: command 0x040f tx timeout [ 738.744134][ T6723] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 739.928239][T16996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 739.940172][ T6723] usb 7-1: string descriptor 0 read error: -71 [ 739.965764][ T6723] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 740.046643][ T6723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.097940][T11416] hsr_slave_0: left promiscuous mode [ 740.098594][ T6723] usb 7-1: config 0 descriptor?? [ 740.116394][T11416] hsr_slave_1: left promiscuous mode [ 740.126135][T11416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.136554][T11416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.149199][ T6723] usb 7-1: can't set config #0, error -71 [ 740.241432][ T6723] usb 7-1: USB disconnect, device number 32 [ 740.429545][ T5959] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 740.435558][T11410] Bluetooth: hci0: Frame reassembly failed (-84) [ 740.718314][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 740.736457][ T5959] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 740.753424][ T30] audit: type=1400 audit(1772448738.159:915): avc: denied { write } for pid=17132 comm="syz.5.3138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 740.830667][ T30] audit: type=1400 audit(1772448738.179:916): avc: denied { read } for pid=17132 comm="syz.5.3138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 740.852744][ T5959] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 740.860345][ T5959] usb 2-1: can't read configurations, error -61 [ 741.045425][ T5959] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 741.062352][T11416] team0 (unregistering): Port device team_slave_1 removed [ 741.088008][T11416] team0 (unregistering): Port device team_slave_0 removed [ 741.209866][T16996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 741.216812][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 741.224662][ T5959] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 741.240959][T16996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 741.297336][ T5959] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.317702][T16996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 741.326275][ T5959] usb 2-1: can't read configurations, error -61 [ 741.342404][ T5959] usb usb2-port1: attempt power cycle [ 741.497723][T17151] CUSE: info not properly terminated [ 741.693205][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.702405][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.819592][T16996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.872163][T16996] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.879171][ T5959] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 741.908819][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 741.916041][ T5959] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 741.935735][T11412] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.942889][T11412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.959282][ T5959] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 741.970352][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.977569][T11418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.995758][ T5959] usb 2-1: can't read configurations, error -61 [ 742.035686][T11416] IPVS: stop unused estimator thread 0... [ 742.152627][ T5959] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 742.183126][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 742.195198][ T5959] usb 2-1: too many configurations: 200, using maximum allowed: 8 [ 742.223885][ T5959] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 742.236930][ T5959] usb 2-1: can't read configurations, error -61 [ 742.272621][ T5959] usb usb2-port1: unable to enumerate USB device [ 742.429476][T17176] binder_alloc: 17175: binder_alloc_buf, no vma [ 742.492897][ T5817] Bluetooth: hci0: command 0xfc11 tx timeout [ 742.502181][ T5822] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 742.627693][T16996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.184278][T16996] veth0_vlan: entered promiscuous mode [ 743.236544][T16996] veth1_vlan: entered promiscuous mode [ 743.434637][T16996] veth0_macvtap: entered promiscuous mode [ 743.449240][T16996] veth1_macvtap: entered promiscuous mode [ 743.659240][T17206] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3150'. [ 743.997559][T16996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.217301][ T5956] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 744.260711][T16996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.425448][T11407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.456954][T11418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.484570][T11418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.512908][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 744.515935][T11418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.538062][ T5956] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 744.549211][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.563148][T11418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.581236][T11418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.588441][ T5956] usb 2-1: config 0 descriptor?? [ 744.627880][T11407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.636494][T11407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.685535][T17219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.712925][ T6706] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 744.853453][ T5956] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 744.878927][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 744.891629][ T5956] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 744.898880][ T5956] usb 2-1: media controller created [ 744.915769][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 744.915812][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.940236][ T6706] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.951183][ T6706] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.002727][ T6706] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 745.012009][ T6706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.035488][ T6706] usb 6-1: config 0 descriptor?? [ 745.064266][ T6706] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 745.073358][T17203] 9p: Bad value for 'rfdno' [ 745.080372][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.135921][ T5956] DVB: Unable to find symbol dib7000p_attach() [ 745.142266][ T5956] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 745.152578][T17207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.492579][ T5956] rc_core: IR keymap rc-dib0700-rc5 not found [ 745.498896][ T5956] Registered IR keymap rc-empty [ 745.508014][ T5956] dvb-usb: could not initialize remote control. [ 745.517623][ T5956] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 746.349191][T17246] input: syz1 as /devices/virtual/input/input41 [ 746.373351][ T5956] usb 2-1: USB disconnect, device number 35 [ 746.427801][ T30] audit: type=1400 audit(1772448743.789:917): avc: denied { write } for pid=17242 comm="syz.6.3161" path="socket:[67455]" dev="sockfs" ino=67455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 746.508538][T17248] FAULT_INJECTION: forcing a failure. [ 746.508538][T17248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.561870][ T5956] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 746.571774][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.0.3160 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.571801][T17248] Tainted: [L]=SOFTLOCKUP [ 746.571807][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.571815][T17248] Call Trace: [ 746.571822][T17248] [ 746.571828][T17248] dump_stack_lvl+0x100/0x190 [ 746.571859][T17248] should_fail_ex.cold+0x5/0xa [ 746.571879][T17248] _copy_from_user+0x2e/0xd0 [ 746.571901][T17248] input_event_from_user+0x123/0x310 [ 746.571923][T17248] ? __pfx_input_event_from_user+0x10/0x10 [ 746.571940][T17248] ? __pfx___might_resched+0x10/0x10 [ 746.571958][T17248] ? input_event+0xbb/0xd0 [ 746.571976][T17248] uinput_write+0xac8/0x10e0 [ 746.572003][T17248] ? avc_policy_seqno+0x9/0x20 [ 746.572027][T17248] ? __pfx_uinput_write+0x10/0x10 [ 746.572052][T17248] ? bpf_lsm_file_permission+0x9/0x10 [ 746.572074][T17248] ? security_file_permission+0x76/0x210 [ 746.572094][T17248] ? rw_verify_area+0xce/0x6d0 [ 746.572119][T17248] vfs_write+0x2aa/0x1070 [ 746.572143][T17248] ? __pfx_uinput_write+0x10/0x10 [ 746.572168][T17248] ? __pfx_vfs_write+0x10/0x10 [ 746.572187][T17248] ? find_held_lock+0x2b/0x80 [ 746.572207][T17248] ? __fget_files+0x215/0x3d0 [ 746.572223][T17248] ? __fget_files+0x215/0x3d0 [ 746.572243][T17248] ? __fget_files+0x21f/0x3d0 [ 746.572267][T17248] ksys_write+0x1f8/0x250 [ 746.572291][T17248] ? __pfx_ksys_write+0x10/0x10 [ 746.572321][T17248] do_syscall_64+0x106/0xf80 [ 746.572339][T17248] ? clear_bhb_loop+0x40/0x90 [ 746.572360][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.572377][T17248] RIP: 0033:0x7f0ca1b9c799 [ 746.572391][T17248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.572406][T17248] RSP: 002b:00007f0ca2a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 746.572423][T17248] RAX: ffffffffffffffda RBX: 00007f0ca1e16090 RCX: 00007f0ca1b9c799 [ 746.572434][T17248] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 746.572443][T17248] RBP: 00007f0ca2a17090 R08: 0000000000000000 R09: 0000000000000000 [ 746.572453][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.572466][T17248] R13: 00007f0ca1e16128 R14: 00007f0ca1e16090 R15: 00007ffda809b228 [ 746.572487][T17248] [ 747.448319][ T5956] usb 6-1: USB disconnect, device number 50 [ 748.084081][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3169'. [ 748.102912][T17272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17272 comm=syz.6.3169 [ 748.802948][ T5956] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 748.966283][ T5956] usb 8-1: unable to get BOS descriptor or descriptor too short [ 748.974578][ T5956] usb 8-1: not running at top speed; connect to a high speed hub [ 749.089188][ T5956] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.123376][ T5956] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 750.294847][ T5956] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 750.335016][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.376400][ T5956] usb 8-1: Product: syz [ 750.380579][ T5956] usb 8-1: Manufacturer: syz [ 750.442523][ T5956] usb 8-1: SerialNumber: syz [ 750.668479][T17313] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 750.679478][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3174'. [ 750.703055][ T5956] usb 8-1: unit 0 not found! [ 750.717986][ T5956] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 750.731166][T17312] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 750.857562][ T5956] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 751.321205][ T5956] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 751.361331][ T5956] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 751.398297][ T5956] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 751.497404][ T5956] usb 8-1: USB disconnect, device number 8 [ 751.759311][T17323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3182'. [ 754.239252][T17341] netlink: 'syz.7.3185': attribute type 3 has an invalid length. [ 754.250659][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3191'. [ 754.302568][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3191'. [ 754.354204][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3191'. [ 754.981864][ T6718] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 755.254562][ T6718] usb 1-1: Using ep0 maxpacket: 8 [ 755.260858][ T6718] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 755.269494][ T6718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.280445][ T6718] usb 1-1: config 0 has no interface number 0 [ 755.287521][ T6718] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 755.352989][T17370] loop3: detected capacity change from 0 to 7 [ 755.360409][ T6718] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 755.387568][T17370] Dev loop3: unable to read RDB block 7 [ 755.395831][ T6718] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 755.409968][T17370] loop3: unable to read partition table [ 755.427492][T17370] loop3: partition table beyond EOD, truncated [ 755.436240][ T6718] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.454700][T17370] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 755.482622][ T6718] usb 1-1: config 0 interface 52 has no altsetting 0 [ 755.502696][ T6718] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 755.524897][ T6718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.589990][ T6718] usb 1-1: config 0 descriptor?? [ 755.835015][ T6718] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input42 [ 756.585373][ T5956] usb 1-1: USB disconnect, device number 33 [ 756.585512][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 757.143518][T17385] binder: BINDER_SET_CONTEXT_MGR already set [ 757.149873][T17385] binder: 17384:17385 ioctl 4018620d 200000000040 returned -16 [ 757.296614][ T30] audit: type=1400 audit(1772448754.699:918): avc: denied { read } for pid=17386 comm="syz.6.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 757.425487][ T30] audit: type=1400 audit(1772448754.829:919): avc: denied { wake_alarm } for pid=17393 comm="syz.6.3205" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 757.460360][T17399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3206'. [ 757.707466][ T30] audit: type=1400 audit(1772448755.109:920): avc: denied { ioctl } for pid=17400 comm="syz.7.3207" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 757.814818][T17405] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.822732][T17405] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.013915][T17405] bridge0: entered allmulticast mode [ 759.192682][ T6718] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 759.439994][T17411] bridge_slave_1: left allmulticast mode [ 759.450875][T17411] bridge_slave_1: left promiscuous mode [ 759.456939][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.481751][T17411] bridge_slave_0: left allmulticast mode [ 759.488401][T17411] bridge_slave_0: left promiscuous mode [ 759.497189][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.603287][ T6718] usb 6-1: Using ep0 maxpacket: 32 [ 759.616137][ T6718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.660199][ T6718] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 759.700239][ T6718] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 759.780000][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.805459][ T6718] usb 6-1: Product: syz [ 759.830920][ T6718] usb 6-1: Manufacturer: syz [ 759.929731][ T6718] usb 6-1: SerialNumber: syz [ 759.953039][ T6718] usb 6-1: config 0 descriptor?? [ 761.299594][T17438] binder: BINDER_SET_CONTEXT_MGR already set [ 761.336089][T17438] binder: 17437:17438 ioctl 4018620d 200000000040 returned -16 [ 761.760387][ T6706] usb 6-1: USB disconnect, device number 51 [ 762.091040][T17451] syzkaller0: entered promiscuous mode [ 762.108859][T17451] syzkaller0: entered allmulticast mode [ 762.120232][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3221'. [ 762.276691][T17449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.293240][T17449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.498799][T14895] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 762.531510][T17468] binder: BINDER_SET_CONTEXT_MGR already set [ 762.546704][T17468] binder: 17467:17468 ioctl 4018620d 200000000040 returned -16 [ 762.597699][T17453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 762.641077][T17456] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 762.667294][T17476] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.676342][T17456] bond2: (slave wlan0): Enslaving as an active interface with an up link [ 763.760973][T11410] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.783170][T11410] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.797666][T11410] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.817963][T14895] usb 8-1: unable to get BOS descriptor or descriptor too short [ 765.156714][ T77] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.171299][T14895] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 765.189433][T14895] usb 8-1: can't read configurations, error -71 [ 765.398761][T17487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17487 comm=syz.5.3230 [ 766.247321][T17500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=17500 comm=syz.6.3235 [ 766.497493][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3237'. [ 767.780165][T17530] FAULT_INJECTION: forcing a failure. [ 767.780165][T17530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.802641][T17530] CPU: 0 UID: 0 PID: 17530 Comm: syz.1.3245 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.802661][T17530] Tainted: [L]=SOFTLOCKUP [ 767.802665][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.802672][T17530] Call Trace: [ 767.802675][T17530] [ 767.802680][T17530] dump_stack_lvl+0x100/0x190 [ 767.802700][T17530] should_fail_ex.cold+0x5/0xa [ 767.802714][T17530] strncpy_from_user+0x3b/0x2d0 [ 767.802731][T17530] do_getname+0x78/0x390 [ 767.802746][T17530] do_sys_openat2+0xc5/0x1e0 [ 767.802759][T17530] ? __pfx_do_sys_openat2+0x10/0x10 [ 767.802771][T17530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 767.802785][T17530] ? __fget_files+0x21f/0x3d0 [ 767.802798][T17530] __x64_sys_openat+0x12d/0x210 [ 767.802811][T17530] ? __pfx___x64_sys_openat+0x10/0x10 [ 767.802823][T17530] ? ksys_write+0x1ac/0x250 [ 767.802844][T17530] do_syscall_64+0x106/0xf80 [ 767.802854][T17530] ? clear_bhb_loop+0x40/0x90 [ 767.802867][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.802881][T17530] RIP: 0033:0x7f102ed9c799 [ 767.802891][T17530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.802902][T17530] RSP: 002b:00007f102fd14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.802913][T17530] RAX: ffffffffffffffda RBX: 00007f102f015fa0 RCX: 00007f102ed9c799 [ 767.802920][T17530] RDX: 0000000000080001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 767.802926][T17530] RBP: 00007f102fd14090 R08: 0000000000000000 R09: 0000000000000000 [ 767.802932][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.802938][T17530] R13: 00007f102f016038 R14: 00007f102f015fa0 R15: 00007fff780ecf38 [ 767.802952][T17530] [ 768.180480][T17545] netlink: 'syz.7.3250': attribute type 10 has an invalid length. [ 768.517910][ T6707] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 768.705738][ T6707] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 768.714897][ T6707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.723375][ T6707] usb 1-1: Product: syz [ 768.727546][ T6707] usb 1-1: Manufacturer: syz [ 768.732137][ T6707] usb 1-1: SerialNumber: syz [ 768.747824][ T6707] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 768.768994][ T6706] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 768.932532][T17557] loop3: detected capacity change from 0 to 7 [ 768.956523][ T5971] Dev loop3: unable to read RDB block 7 [ 768.973223][ T5971] loop3: unable to read partition table [ 768.988615][ T5971] loop3: partition table beyond EOD, truncated [ 769.129736][T17557] Dev loop3: unable to read RDB block 7 [ 769.164880][T17557] loop3: unable to read partition table [ 769.172131][T17557] loop3: partition table beyond EOD, truncated [ 769.178517][T17557] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 769.440088][ T30] audit: type=1400 audit(1772448766.619:921): avc: denied { connect } for pid=17541 comm="syz.0.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 769.852935][ T6706] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 769.860558][ T6706] ath9k_htc: Failed to initialize the device [ 769.917279][ T6706] usb 1-1: ath9k_htc: USB layer deinitialized [ 770.810976][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3260'. [ 771.422677][ T6707] usb 1-1: USB disconnect, device number 34 [ 771.605451][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3266'. [ 771.622908][T17602] xt_hashlimit: size too large, truncated to 1048576 [ 771.963005][T17604] bond2: (slave wlan0): Releasing backup interface [ 772.029759][T17600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 772.522603][ T6723] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 772.560531][ C1] hrtimer: interrupt took 44057 ns [ 772.703863][ T6723] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 772.720509][ T6723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.812671][ T6723] usb 8-1: Product: syz [ 772.817010][ T6723] usb 8-1: Manufacturer: syz [ 772.902980][ T6723] usb 8-1: SerialNumber: syz [ 773.193102][ T6723] usb 8-1: config 0 descriptor?? [ 773.415849][ T6723] usb 8-1: ignoring: probably an ADSL modem [ 773.725377][T17650] FAULT_INJECTION: forcing a failure. [ 773.725377][T17650] name failslab, interval 1, probability 0, space 0, times 0 [ 773.806804][T17650] CPU: 1 UID: 0 PID: 17650 Comm: syz.5.3276 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.806826][T17650] Tainted: [L]=SOFTLOCKUP [ 773.806830][T17650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.806836][T17650] Call Trace: [ 773.806840][T17650] [ 773.806844][T17650] dump_stack_lvl+0x100/0x190 [ 773.806866][T17650] should_fail_ex.cold+0x5/0xa [ 773.806880][T17650] should_failslab+0xc2/0x120 [ 773.806898][T17650] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 773.806912][T17650] ? alloc_empty_file+0x55/0x1c0 [ 773.806924][T17650] ? __pfx_stack_trace_save+0x10/0x10 [ 773.806941][T17650] alloc_empty_file+0x55/0x1c0 [ 773.806954][T17650] path_openat+0xe8/0x31a0 [ 773.806964][T17650] ? kasan_save_stack+0x3f/0x50 [ 773.806978][T17650] ? kasan_save_stack+0x30/0x50 [ 773.806992][T17650] ? kasan_save_track+0x14/0x30 [ 773.807005][T17650] ? __kasan_slab_alloc+0x89/0x90 [ 773.807020][T17650] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 773.807033][T17650] ? do_getname+0x35/0x390 [ 773.807045][T17650] ? do_sys_openat2+0xc5/0x1e0 [ 773.807057][T17650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.807070][T17650] ? __pfx_path_openat+0x10/0x10 [ 773.807086][T17650] do_file_open+0x20e/0x430 [ 773.807098][T17650] ? __pfx_do_file_open+0x10/0x10 [ 773.807118][T17650] ? alloc_fd+0x476/0x790 [ 773.807131][T17650] ? do_getname+0x191/0x390 [ 773.807145][T17650] do_sys_openat2+0x10d/0x1e0 [ 773.807158][T17650] ? __pfx_do_sys_openat2+0x10/0x10 [ 773.807176][T17650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 773.807190][T17650] ? __fget_files+0x21f/0x3d0 [ 773.807203][T17650] __x64_sys_openat+0x12d/0x210 [ 773.807216][T17650] ? __pfx___x64_sys_openat+0x10/0x10 [ 773.807228][T17650] ? ksys_write+0x1ac/0x250 [ 773.807248][T17650] do_syscall_64+0x106/0xf80 [ 773.807258][T17650] ? clear_bhb_loop+0x40/0x90 [ 773.807271][T17650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.807282][T17650] RIP: 0033:0x7fd3e079c799 [ 773.807291][T17650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.807301][T17650] RSP: 002b:00007fd3e15e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 773.807311][T17650] RAX: ffffffffffffffda RBX: 00007fd3e0a16090 RCX: 00007fd3e079c799 [ 773.807318][T17650] RDX: 0000000000080001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 773.807324][T17650] RBP: 00007fd3e15e5090 R08: 0000000000000000 R09: 0000000000000000 [ 773.807330][T17650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.807336][T17650] R13: 00007fd3e0a16128 R14: 00007fd3e0a16090 R15: 00007fff7c94c848 [ 773.807350][T17650] [ 774.152816][ T6723] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 774.161250][ T6723] usb 8-1: USB disconnect, device number 11 [ 775.027316][T17680] IPv6: addrconf: prefix option has invalid lifetime [ 775.094162][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.226996][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'. [ 777.083578][T17687] delete_channel: no stack [ 777.088814][ T30] audit: type=1400 audit(1772448774.489:922): avc: denied { ioctl } for pid=17683 comm="syz.1.3288" path="socket:[69585]" dev="sockfs" ino=69585 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 777.492623][ T30] audit: type=1400 audit(1772448774.889:923): avc: denied { write } for pid=17708 comm="syz.0.3294" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 777.643124][ T30] audit: type=1400 audit(1772448774.949:924): avc: denied { block_suspend } for pid=17708 comm="syz.0.3294" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 777.688325][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 777.731605][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 777.742724][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 777.764642][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 777.773861][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 777.957230][T11418] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.161102][T17725] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 778.193707][T11418] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.335547][T11418] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.362586][ T6706] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 778.528135][T11418] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.557317][ T6706] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 778.578358][ T6706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.587782][ T6706] usb 2-1: Product: syz [ 778.592174][ T6706] usb 2-1: Manufacturer: syz [ 778.597603][ T6706] usb 2-1: SerialNumber: syz [ 778.630622][ T6706] usb 2-1: config 0 descriptor?? [ 778.838561][ T6706] usb 2-1: ignoring: probably an ADSL modem [ 778.965618][T17711] chnl_net:caif_netlink_parms(): no params data found [ 778.994817][T17729] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3300'. [ 779.047542][T17729] netlink: 'syz.6.3300': attribute type 1 has an invalid length. [ 779.067719][T17729] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3300'. [ 779.074418][T11418] bridge_slave_1: left allmulticast mode [ 779.132604][T11418] bridge_slave_1: left promiscuous mode [ 779.153598][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.232765][T11418] bridge_slave_0: left promiscuous mode [ 779.257655][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.305878][ T6706] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 780.247350][ T5817] Bluetooth: hci0: command tx timeout [ 780.259578][ T6706] usb 2-1: USB disconnect, device number 36 [ 780.307340][ T30] audit: type=1400 audit(1772448777.709:925): avc: denied { unmount } for pid=6931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 781.738876][T11418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.782872][T11418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.812992][T11418] bond0 (unregistering): Released all slaves [ 781.840342][T11418] bond1 (unregistering): Released all slaves [ 781.989930][T11418] bond2 (unregistering): Released all slaves [ 782.033996][T11418] bond3 (unregistering): Released all slaves [ 782.328710][ T5817] Bluetooth: hci0: command tx timeout [ 782.346870][T17741] tipc: Started in network mode [ 782.351840][T17741] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 782.362165][T17741] tipc: Enabled bearer , priority 10 [ 782.403181][T17770] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3305'. [ 782.413010][T17770] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3305'. [ 782.469468][T11418] tipc: Left network mode [ 782.548738][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.560663][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.568273][T17711] bridge_slave_0: entered allmulticast mode [ 782.585898][T17711] bridge_slave_0: entered promiscuous mode [ 782.596098][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.603522][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.610873][T17711] bridge_slave_1: entered allmulticast mode [ 782.631386][T17711] bridge_slave_1: entered promiscuous mode [ 782.649529][T17779] FAULT_INJECTION: forcing a failure. [ 782.649529][T17779] name failslab, interval 1, probability 0, space 0, times 0 [ 782.696273][T17779] CPU: 0 UID: 0 PID: 17779 Comm: syz.6.3307 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.696293][T17779] Tainted: [L]=SOFTLOCKUP [ 782.696297][T17779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.696303][T17779] Call Trace: [ 782.696307][T17779] [ 782.696311][T17779] dump_stack_lvl+0x100/0x190 [ 782.696337][T17779] should_fail_ex.cold+0x5/0xa [ 782.696352][T17779] should_failslab+0xc2/0x120 [ 782.696370][T17779] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 782.696384][T17779] ? security_file_alloc+0x34/0x2c0 [ 782.696397][T17779] ? trace_kmem_cache_alloc+0xf3/0x120 [ 782.696409][T17779] security_file_alloc+0x34/0x2c0 [ 782.696422][T17779] init_file+0x95/0x480 [ 782.696435][T17779] alloc_empty_file+0x73/0x1c0 [ 782.696448][T17779] path_openat+0xe8/0x31a0 [ 782.696458][T17779] ? kasan_save_stack+0x3f/0x50 [ 782.696472][T17779] ? kasan_save_stack+0x30/0x50 [ 782.696485][T17779] ? kasan_save_track+0x14/0x30 [ 782.696499][T17779] ? __kasan_slab_alloc+0x89/0x90 [ 782.696513][T17779] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 782.696526][T17779] ? do_getname+0x35/0x390 [ 782.696538][T17779] ? do_sys_openat2+0xc5/0x1e0 [ 782.696550][T17779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.696563][T17779] ? __pfx_path_openat+0x10/0x10 [ 782.696579][T17779] do_file_open+0x20e/0x430 [ 782.696590][T17779] ? __pfx_do_file_open+0x10/0x10 [ 782.696610][T17779] ? alloc_fd+0x476/0x790 [ 782.696622][T17779] ? do_getname+0x191/0x390 [ 782.696636][T17779] do_sys_openat2+0x10d/0x1e0 [ 782.696648][T17779] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.696660][T17779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.696675][T17779] ? __fget_files+0x21f/0x3d0 [ 782.696687][T17779] __x64_sys_openat+0x12d/0x210 [ 782.696700][T17779] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.696712][T17779] ? ksys_write+0x1ac/0x250 [ 782.696732][T17779] do_syscall_64+0x106/0xf80 [ 782.696742][T17779] ? clear_bhb_loop+0x40/0x90 [ 782.696754][T17779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.696765][T17779] RIP: 0033:0x7fbe1f59c799 [ 782.696773][T17779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.696783][T17779] RSP: 002b:00007fbe204e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.696794][T17779] RAX: ffffffffffffffda RBX: 00007fbe1f815fa0 RCX: 00007fbe1f59c799 [ 782.696800][T17779] RDX: 0000000000080001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 782.696807][T17779] RBP: 00007fbe204e5090 R08: 0000000000000000 R09: 0000000000000000 [ 782.696812][T17779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.696818][T17779] R13: 00007fbe1f816038 R14: 00007fbe1f815fa0 R15: 00007ffe2bbee538 [ 782.696832][T17779] [ 783.311826][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.430830][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.467832][ T6707] tipc: Node number set to 9480874 [ 783.528878][T17769] SET target dimension over the limit! [ 783.645097][T17791] loop3: detected capacity change from 0 to 7 [ 783.799014][T17711] team0: Port device team_slave_0 added [ 783.808515][T17711] team0: Port device team_slave_1 added [ 783.811407][T17791] Dev loop3: unable to read RDB block 7 [ 783.833583][T17791] loop3: unable to read partition table [ 783.846634][T17791] loop3: partition table beyond EOD, truncated [ 783.913449][T17803] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 784.002670][T17791] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 784.412805][ T5817] Bluetooth: hci0: command tx timeout [ 784.509436][T17803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 784.525975][T17804] bond1: (slave geneve2): making interface the new active one [ 784.535051][T17804] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 785.056403][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.069341][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.112522][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.252908][T11418] hsr_slave_0: left promiscuous mode [ 785.267773][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.298109][T11418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.328068][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.610722][T11418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.646017][T11418] veth1_macvtap: left promiscuous mode [ 785.674609][T11418] veth0_macvtap: left promiscuous mode [ 786.483792][ T5817] Bluetooth: hci0: command tx timeout [ 786.528224][T17839] CUSE: info not properly terminated [ 786.636033][T11418] team0 (unregistering): Port device team_slave_1 removed [ 786.680241][T11418] team0 (unregistering): Port device team_slave_0 removed [ 786.790277][T11418] bridge_slave_0 (unregistering): left allmulticast mode [ 787.178955][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.204889][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.465505][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.961243][T17711] hsr_slave_0: entered promiscuous mode [ 787.967777][T17711] hsr_slave_1: entered promiscuous mode [ 788.496311][T11418] IPVS: stop unused estimator thread 0... [ 790.985040][T17891] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3328'. [ 791.266607][T17711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 791.298181][T17711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 791.325960][T17711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 791.363089][T17711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 791.528853][T17711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.667514][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.721185][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.728368][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.804416][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.811530][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.858476][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.221395][ T5956] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 793.889808][ T5956] usb 8-1: Using ep0 maxpacket: 32 [ 794.098953][ T5956] usb 8-1: unable to get BOS descriptor or descriptor too short [ 794.120595][ T5956] usb 8-1: language id specifier not provided by device, defaulting to English [ 794.568575][ T5956] usb 8-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 794.593307][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.611472][ T5956] usb 8-1: Product: Ж [ 794.619047][ T5956] usb 8-1: Manufacturer: 鶑鑑薣뾥瞟癯↯㧑紓ࣻङ㖾信븇踺ꩺ癌䭯撸̮ၶ鬖壳駑겙꣨膙慘혱灐䪆쨻ᭂ⟻ΗӦ࢒ﾎ𢡊礼䤉늍枎院비Ჸ뾼뷔㫸膼銳ᰲ⑧⎈趣ퟍ鷞磤糲ᤊ溜﨣狷䠎䊥減葀⑥췎ᒳ䕱攞ꜱဦ㈪렾炔孛扌늝鹪د傃ᵝ췇ノ逿︽衔䣕Ȿݝ恝禗林䖄䌊졎屴盷 [ 794.767773][T17711] veth0_vlan: entered promiscuous mode [ 794.776532][ T5956] usb 8-1: SerialNumber: ခ [ 794.812341][T17711] veth1_vlan: entered promiscuous mode [ 794.828492][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3339'. [ 794.858106][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3339'. [ 794.883173][T17966] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3339'. [ 794.956292][T17711] veth0_macvtap: entered promiscuous mode [ 794.993105][T17711] veth1_macvtap: entered promiscuous mode [ 795.021841][ T5956] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 795.050078][ T5956] usb 8-1: unit 37 not found! [ 795.066762][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.074473][ T5956] usb 8-1: unit 0 not found! [ 795.112227][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.182804][T17972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17972 comm=syz.6.3340 [ 795.449595][T11418] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.659101][T11418] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.689614][ T5956] usb 8-1: USB disconnect, device number 12 [ 795.717697][ T30] audit: type=1400 audit(1772449049.112:926): avc: denied { getattr } for pid=17975 comm="syz.0.3342" path="socket:[71840]" dev="sockfs" ino=71840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 795.858790][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.887350][T11418] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.920467][T11418] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.370518][T17990] syzkaller0: entered promiscuous mode [ 796.376013][T17990] syzkaller0: entered allmulticast mode [ 796.419565][ T30] audit: type=1400 audit(1772449049.823:927): avc: denied { setopt } for pid=17988 comm="syz.6.3344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 796.450263][T11414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.477973][T11414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.568347][T11416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.584017][T11416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.443933][T18015] tmpfs: Bad value for 'mpol' [ 797.995017][T18029] input: syz1 as /devices/virtual/input/input44 [ 798.070212][T18034] FAULT_INJECTION: forcing a failure. [ 798.070212][T18034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.147569][T18034] CPU: 1 UID: 0 PID: 18034 Comm: syz.0.3351 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.147599][T18034] Tainted: [L]=SOFTLOCKUP [ 798.147605][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.147616][T18034] Call Trace: [ 798.147622][T18034] [ 798.147629][T18034] dump_stack_lvl+0x100/0x190 [ 798.147663][T18034] should_fail_ex.cold+0x5/0xa [ 798.147686][T18034] _copy_from_user+0x2e/0xd0 [ 798.147712][T18034] input_event_from_user+0x123/0x310 [ 798.147734][T18034] ? __pfx_input_event_from_user+0x10/0x10 [ 798.147754][T18034] ? __pfx___might_resched+0x10/0x10 [ 798.147772][T18034] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 798.147801][T18034] ? input_event+0xbb/0xd0 [ 798.147822][T18034] uinput_write+0xac8/0x10e0 [ 798.147853][T18034] ? avc_policy_seqno+0x9/0x20 [ 798.147877][T18034] ? __pfx_uinput_write+0x10/0x10 [ 798.147902][T18034] ? bpf_lsm_file_permission+0x9/0x10 [ 798.147927][T18034] ? security_file_permission+0x76/0x210 [ 798.147950][T18034] ? rw_verify_area+0xce/0x6d0 [ 798.147976][T18034] vfs_write+0x2aa/0x1070 [ 798.148006][T18034] ? __pfx_uinput_write+0x10/0x10 [ 798.148032][T18034] ? __pfx_vfs_write+0x10/0x10 [ 798.148055][T18034] ? find_held_lock+0x2b/0x80 [ 798.148076][T18034] ? __fget_files+0x215/0x3d0 [ 798.148093][T18034] ? __fget_files+0x215/0x3d0 [ 798.148116][T18034] ? __fget_files+0x21f/0x3d0 [ 798.148148][T18034] ksys_write+0x1f8/0x250 [ 798.148175][T18034] ? __pfx_ksys_write+0x10/0x10 [ 798.148210][T18034] do_syscall_64+0x106/0xf80 [ 798.148229][T18034] ? clear_bhb_loop+0x40/0x90 [ 798.148251][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.148269][T18034] RIP: 0033:0x7f0ca1b9c799 [ 798.148284][T18034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.148301][T18034] RSP: 002b:00007f0ca2a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.148318][T18034] RAX: ffffffffffffffda RBX: 00007f0ca1e16090 RCX: 00007f0ca1b9c799 [ 798.148330][T18034] RDX: 000000000000045c RSI: 0000200000000a40 RDI: 0000000000000003 [ 798.148340][T18034] RBP: 00007f0ca2a17090 R08: 0000000000000000 R09: 0000000000000000 [ 798.148351][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.148361][T18034] R13: 00007f0ca1e16128 R14: 00007f0ca1e16090 R15: 00007ffda809b228 [ 798.148387][T18034] [ 798.526617][T18041] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 800.201326][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 800.277279][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 800.391006][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 800.426502][ T5959] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 800.631359][ T5959] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 800.681192][ T5959] usb 2-1: config 0 has no interface number 0 [ 800.722672][ T5959] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 800.723099][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.753171][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.764403][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.780546][ T5959] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 800.845892][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.857371][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.865441][ T5959] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 800.920979][T11412] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.932696][ T5959] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 800.948383][ T5959] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 800.961502][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.031014][ T5959] usb 2-1: Product: syz [ 801.056444][ T5959] usb 2-1: Manufacturer: syz [ 801.083936][ T5959] usb 2-1: SerialNumber: syz [ 801.098293][ T5959] usb 2-1: config 0 descriptor?? [ 801.111954][ T5959] iguanair 2-1:0.255: failed to get version [ 801.133046][ T5959] iguanair 2-1:0.255: probe with driver iguanair failed with error -90 [ 801.147584][T11412] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.730988][T11412] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.805534][T18068] chnl_net:caif_netlink_parms(): no params data found [ 801.812462][ T5959] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 801.866277][T18093] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3364'. [ 801.907171][T18099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3360'. [ 802.064084][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 802.287162][ T5959] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 802.311747][ T5959] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 802.324786][T18103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3367'. [ 802.334641][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.353684][ T5959] usb 6-1: Product: syz [ 802.362987][T18103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3367'. [ 802.373468][ T5959] usb 6-1: Manufacturer: syz [ 802.405434][ T5959] usb 6-1: SerialNumber: syz [ 802.426995][T11412] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.428573][ T5959] usb 6-1: config 0 descriptor?? [ 802.595287][ T6723] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 802.616052][ T5956] usb 2-1: USB disconnect, device number 37 [ 802.631683][T18068] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.651715][T18068] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.680476][T18068] bridge_slave_0: entered allmulticast mode [ 802.696047][T18068] bridge_slave_0: entered promiscuous mode [ 802.712988][T18068] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.739193][T18068] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.755549][ T6723] usb 1-1: Using ep0 maxpacket: 16 [ 802.762244][ T6723] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 802.771402][T18068] bridge_slave_1: entered allmulticast mode [ 802.771628][ T6723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.795605][ T6723] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.797005][T18068] bridge_slave_1: entered promiscuous mode [ 802.806597][ T6723] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.814112][ T5959] usb 6-1: USB disconnect, device number 52 [ 802.877127][ T6723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.895353][ T6723] usb 1-1: Product: syz [ 802.916566][ T6723] usb 1-1: Manufacturer: syz [ 802.931058][ T6723] usb 1-1: SerialNumber: syz [ 802.966021][ T5822] Bluetooth: hci3: command tx timeout [ 802.980064][T18068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.036385][T18068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.083291][T11412] bridge_slave_1: left allmulticast mode [ 803.091392][T11412] bridge_slave_1: left promiscuous mode [ 803.105521][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.118819][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.125540][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.134596][T11412] bridge_slave_0: left allmulticast mode [ 803.140950][T11412] bridge_slave_0: left promiscuous mode [ 803.149480][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.255254][ T6723] usb 1-1: 0:2 : does not exist [ 803.271812][ T6723] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 803.349820][T18125] netlink: 'syz.1.3369': attribute type 3 has an invalid length. [ 803.478965][ T6723] usb 1-1: USB disconnect, device number 35 [ 803.846620][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.041352][T11412] bond0 (unregistering): left promiscuous mode [ 804.059389][T11412] bond_slave_0: left promiscuous mode [ 804.077413][T11412] bond_slave_1: left promiscuous mode [ 804.356213][T11412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.576843][T11412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.596061][T11412] bond0 (unregistering): Released all slaves [ 804.666369][T18068] team0: Port device team_slave_0 added [ 804.677388][T18068] team0: Port device team_slave_1 added [ 804.830974][T18068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.840328][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.870778][T18068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.036778][ T5822] Bluetooth: hci3: command tx timeout [ 805.198588][T18068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.248236][T18068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.349823][T18068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.728913][T18175] 9p: Bad value for 'rfdno' [ 805.922247][T18068] hsr_slave_0: entered promiscuous mode [ 805.928818][T18068] hsr_slave_1: entered promiscuous mode [ 805.936689][T18068] debugfs: 'hsr0' already exists in 'hsr' [ 805.942482][T18068] Cannot create hsr debugfs directory [ 806.152106][T18186] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3380'. [ 806.451049][T11412] batadv0: left promiscuous mode [ 806.492353][T11412] hsr_slave_0: left promiscuous mode [ 806.528780][T11412] hsr_slave_1: left promiscuous mode [ 806.545874][T11412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.574367][T11412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.590294][ T30] audit: type=1400 audit(1772449315.993:928): avc: denied { setopt } for pid=18196 comm="syz.0.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 806.634410][ T30] audit: type=1400 audit(1772449316.024:929): avc: denied { ioctl } for pid=18196 comm="syz.0.3384" path="socket:[71651]" dev="sockfs" ino=71651 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 807.268866][ T5822] Bluetooth: hci3: command tx timeout [ 807.615404][T11412] team0 (unregistering): Port device team_slave_1 removed [ 807.647231][T11412] team0 (unregistering): Port device team_slave_0 removed [ 807.802652][ T6723] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 807.952700][ T6723] usb 6-1: device descriptor read/64, error -71 [ 808.712240][ T6723] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 808.962598][ T6723] usb 6-1: device descriptor read/64, error -71 [ 809.082442][ T6723] usb usb6-port1: attempt power cycle [ 809.110987][T11412] IPVS: stop unused estimator thread 0... [ 809.352186][ T5817] Bluetooth: hci3: command tx timeout [ 809.451847][ T6723] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 809.474166][ T6723] usb 6-1: device descriptor read/8, error -71 [ 809.570372][T18068] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 809.703172][T18068] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 810.664983][ T5817] Bluetooth: hci1: command 0x2016 tx timeout [ 810.679722][ T6723] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 810.693654][T18068] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 811.075238][ T6723] usb 6-1: device descriptor read/8, error -71 [ 811.087901][T18068] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 811.185482][T18257] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 811.192252][T18257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 811.211370][ T6723] usb usb6-port1: unable to enumerate USB device [ 811.282218][T18257] vhci_hcd vhci_hcd.0: Device attached [ 811.379342][T18068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.470908][T14897] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 811.508686][T18068] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.599163][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.606354][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.652368][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.659475][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.011196][T18267] vhci_hcd: connection reset by peer [ 812.021101][T11412] vhci_hcd vhci_hcd.5: stop threads [ 812.026300][T11412] vhci_hcd vhci_hcd.5: release socket [ 812.042185][T11412] vhci_hcd vhci_hcd.5: disconnect device [ 812.776869][ T6707] IPVS: starting estimator thread 0... [ 812.920931][T18293] IPVS: using max 43 ests per chain, 103200 per kthread [ 813.103378][T18068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.151606][ T5822] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 813.251797][ T5956] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 813.594543][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.604970][ T5956] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 813.656856][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.694492][ T5956] usb 1-1: config 0 descriptor?? [ 813.817012][T18068] veth0_vlan: entered promiscuous mode [ 813.873056][T18068] veth1_vlan: entered promiscuous mode [ 814.114752][T18068] veth0_macvtap: entered promiscuous mode [ 814.157859][T18068] veth1_macvtap: entered promiscuous mode [ 814.164567][ T5956] usb 1-1: USB disconnect, device number 36 [ 814.240071][T18068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.275401][T18068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.295977][T11407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.325541][T11407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.367846][T11407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.392221][T11407] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.546806][T18340] loop3: detected capacity change from 0 to 7 [ 814.560921][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.587941][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.641627][T18340] Dev loop3: unable to read RDB block 7 [ 814.669458][T18340] loop3: unable to read partition table [ 814.675272][T18340] loop3: partition table beyond EOD, truncated [ 814.687169][T11407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.722562][T18340] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 814.739395][T11407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.759643][ T6718] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 814.984235][ T6718] usb 2-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 815.005294][ T6718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.038837][ T6718] usb 2-1: Product: syz [ 815.057562][ T6718] usb 2-1: Manufacturer: syz [ 815.078042][ T6718] usb 2-1: SerialNumber: syz [ 815.511339][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3412'. [ 815.548974][ T5959] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 815.602727][T18371] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 815.720540][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8202, setting to 64 [ 815.766378][ T5959] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 815.775602][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.795354][ T5959] usb 8-1: config 0 descriptor?? [ 816.134023][ T5959] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 816.654648][T14897] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 816.741563][T18396] binder: 18394:18396 ioctl c0306201 0 returned -14 [ 818.301271][T14897] usb 8-1: USB disconnect, device number 13 [ 818.402478][ T6718] pwc: Visionite VCS-UC300 USB webcam detected. [ 818.415275][ T6718] pwc: Failed to set LED on/off time (-71) [ 818.576604][ T6718] pwc: send_video_command error -71 [ 818.587223][ T6718] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 818.605448][ T6718] Philips webcam 2-1:5.0: probe with driver Philips webcam failed with error -71 [ 818.633500][ T6718] usb 2-1: USB disconnect, device number 38 [ 818.681081][T18439] sctp: [Deprecated]: syz.1.3424 (pid 18439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.681081][T18439] Use struct sctp_sack_info instead [ 820.040807][T18462] loop5: detected capacity change from 0 to 7 [ 820.149477][T18462] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 820.154989][T18462] loop5: partition table partially beyond EOD, truncated [ 820.163351][T18462] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 821.093241][T18465] binder: 18464:18465 ioctl c0306201 0 returned -14 [ 821.167796][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 821.646446][T18472] ceph: No mds server is up or the cluster is laggy [ 822.137680][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 822.166300][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 822.180295][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 822.313060][T18477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.517891][T18483] Cannot find add_set index 0 as target [ 823.528444][T18483] overlayfs: overlapping lowerdir path [ 823.556859][ T30] audit: type=1400 audit(1772449332.942:930): avc: denied { mounton } for pid=18478 comm="syz.0.3433" path="/67/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 824.166889][ T30] audit: type=1400 audit(1772449333.482:931): avc: denied { unmount } for pid=16996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 824.315181][ T6707] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 824.504337][ T6707] usb 8-1: Using ep0 maxpacket: 16 [ 824.518470][ T6707] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 824.547706][ T6707] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 824.564159][ T6707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.578204][ T6707] usb 8-1: Product: syz [ 824.598389][ T6707] usb 8-1: Manufacturer: syz [ 824.607222][ T6707] usb 8-1: SerialNumber: syz [ 824.753683][ T6707] usb 8-1: config 0 descriptor?? [ 824.780698][T18491] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 824.971657][ T6707] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 825.928722][T18491] kvm: kvm [18489]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1000000 [ 826.066601][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 826.621500][T18541] loop3: detected capacity change from 0 to 7 [ 826.631374][T18541] Dev loop3: unable to read RDB block 7 [ 826.637068][T18541] loop3: unable to read partition table [ 826.642910][T18541] loop3: partition table beyond EOD, truncated [ 826.670782][T18541] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 826.996370][ T30] audit: type=1400 audit(1772449336.404:932): avc: denied { write } for pid=18548 comm="syz.6.3452" path="socket:[74678]" dev="sockfs" ino=74678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 827.095757][T18556] binder: BINDER_SET_CONTEXT_MGR already set [ 827.102321][T18556] binder: 18555:18556 ioctl 4018620d 200000000040 returned -16 [ 827.138046][ T5472] mcba_usb 8-1:0.0 can0: bit-timing not yet defined [ 827.194001][ C0] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 827.194941][ T29] usb 8-1: USB disconnect, device number 14 [ 827.200172][ C0] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 827.222977][T14897] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 827.242403][ T29] mcba_usb 8-1:0.0 can0: device disconnected [ 827.542801][T14897] usb 2-1: Using ep0 maxpacket: 16 [ 827.554060][T14897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 827.804845][T18583] IPv6: addrconf: prefix option has invalid lifetime [ 827.812637][T14897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 827.853980][T14897] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 827.872608][T14897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.880660][T14897] usb 2-1: Product: syz [ 827.921658][T14897] usb 2-1: Manufacturer: syz [ 827.932552][T14897] usb 2-1: SerialNumber: syz [ 827.950702][T14897] usb 2-1: config 0 descriptor?? [ 827.963015][T14897] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.022782][T14897] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 828.185095][T18594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.266359][T18594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.451661][T18594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.610626][T14897] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 828.626997][T14897] em28xx 2-1:0.0: Config register raw data: 0xea [ 828.648842][T14897] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 829.594466][T14897] em28xx 2-1:0.0: No AC97 audio processor [ 829.842667][T18621] FAULT_INJECTION: forcing a failure. [ 829.842667][T18621] name failslab, interval 1, probability 0, space 0, times 0 [ 829.855791][T18621] CPU: 0 UID: 0 PID: 18621 Comm: syz.5.3470 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.855818][T18621] Tainted: [L]=SOFTLOCKUP [ 829.855824][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.855834][T18621] Call Trace: [ 829.855842][T18621] [ 829.855854][T18621] dump_stack_lvl+0x100/0x190 [ 829.855879][T18621] should_fail_ex.cold+0x5/0xa [ 829.855902][T18621] ? bpf_prog_array_alloc+0x46/0x60 [ 829.855926][T18621] should_failslab+0xc2/0x120 [ 829.855953][T18621] __kmalloc_noprof+0xe0/0x850 [ 829.855973][T18621] bpf_prog_array_alloc+0x46/0x60 [ 829.855990][T18621] netns_bpf_prog_attach+0x438/0x510 [ 829.856009][T18621] __sys_bpf+0x48da/0x4b90 [ 829.856025][T18621] ? __pfx___sys_bpf+0x10/0x10 [ 829.856040][T18621] ? proc_fail_nth_write+0x9f/0x220 [ 829.856063][T18621] ? find_held_lock+0x2b/0x80 [ 829.856089][T18621] ? find_held_lock+0x2b/0x80 [ 829.856106][T18621] ? ksys_write+0x190/0x250 [ 829.856125][T18621] ? __mutex_unlock_slowpath+0x15c/0x790 [ 829.856139][T18621] ? __fget_files+0x215/0x3d0 [ 829.856157][T18621] ? fput+0x79/0x100 [ 829.856171][T18621] ? ksys_write+0x1ac/0x250 [ 829.856194][T18621] ? __pfx_ksys_write+0x10/0x10 [ 829.856222][T18621] __x64_sys_bpf+0x7b/0xc0 [ 829.856239][T18621] ? lockdep_hardirqs_on+0x78/0x100 [ 829.856253][T18621] do_syscall_64+0x106/0xf80 [ 829.856264][T18621] ? clear_bhb_loop+0x40/0x90 [ 829.856277][T18621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.856288][T18621] RIP: 0033:0x7f441419c799 [ 829.856298][T18621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.856310][T18621] RSP: 002b:00007f44150a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.856327][T18621] RAX: ffffffffffffffda RBX: 00007f4414416090 RCX: 00007f441419c799 [ 829.856339][T18621] RDX: 0000000000000014 RSI: 0000200000000580 RDI: 0000000000000008 [ 829.856349][T18621] RBP: 00007f44150a5090 R08: 0000000000000000 R09: 0000000000000000 [ 829.856359][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.856368][T18621] R13: 00007f4414416128 R14: 00007f4414416090 R15: 00007ffef6d60658 [ 829.856392][T18621] [ 830.925943][ T5959] usb 2-1: USB disconnect, device number 39 [ 832.246295][T18655] netlink: 'syz.0.3469': attribute type 4 has an invalid length. [ 832.254210][T18655] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3469'. [ 832.505684][T18655] .`: renamed from bond0 (while UP) [ 833.134638][T18676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3486'. [ 833.278304][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3490'. [ 833.289570][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3490'. [ 833.299138][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3490'. [ 833.485031][T18687] sp0: Synchronizing with TNC [ 833.497006][T18687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3489'. [ 833.506112][T18687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3489'. [ 833.515463][T18687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3489'. [ 833.524348][T18687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3489'. [ 833.533713][T18687] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3489'. [ 833.902440][T18696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.947052][ T30] audit: type=1326 audit(1772449343.317:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 833.985865][ T30] audit: type=1326 audit(1772449343.317:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.070061][ T30] audit: type=1326 audit(1772449343.317:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.128349][ T30] audit: type=1326 audit(1772449343.317:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.160446][ T30] audit: type=1326 audit(1772449343.317:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.189518][ T30] audit: type=1326 audit(1772449343.317:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.214292][ T30] audit: type=1326 audit(1772449343.327:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.308091][ T30] audit: type=1326 audit(1772449343.327:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.357308][ T30] audit: type=1326 audit(1772449343.327:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 834.465852][ T30] audit: type=1326 audit(1772449343.337:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18688 comm="syz.5.3491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441419c799 code=0x7ffc0000 [ 835.384713][T18720] syzkaller1: entered promiscuous mode [ 835.399663][T18720] syzkaller1: entered allmulticast mode [ 835.848161][T18729] loop3: detected capacity change from 0 to 7 [ 835.970239][T18729] Dev loop3: unable to read RDB block 7 [ 836.109825][T18729] loop3: unable to read partition table [ 836.134411][T18729] loop3: partition table beyond EOD, truncated [ 836.163916][T18729] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 836.689683][T18739] tmpfs: Bad value for 'mpol' [ 836.776121][T18743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 836.791093][T18750] netlink: 'syz.6.3502': attribute type 4 has an invalid length. [ 836.931388][T18754] netlink: 'syz.6.3502': attribute type 4 has an invalid length. [ 837.247398][T18752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18752 comm=syz.5.3507 [ 837.327318][T18748] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 837.445312][T18748] bond2: (slave wlan0): Enslaving as an active interface with an up link [ 837.468785][ T5959] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 838.000529][T18768] __nla_validate_parse: 150 callbacks suppressed [ 838.000546][T18768] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3512'. [ 838.098025][ T5959] usb 7-1: Using ep0 maxpacket: 8 [ 838.123435][ T5959] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.309725][T14890] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 838.341616][ T5959] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 838.453751][ T5959] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 838.472706][ T5959] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 838.541050][ T6707] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 838.649818][ T5959] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 838.670214][T14890] usb 1-1: Using ep0 maxpacket: 32 [ 838.813673][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.881838][ T5959] hub 7-1:1.0: bad descriptor, ignoring hub [ 838.897006][ T6707] usb 2-1: Using ep0 maxpacket: 16 [ 838.914717][ T5959] hub 7-1:1.0: probe with driver hub failed with error -5 [ 838.924120][T14890] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 838.940291][T14890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.959258][ T6707] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 838.979055][ T5959] cdc_wdm 7-1:1.0: skipping garbage [ 838.984426][T14890] usb 1-1: Product: syz [ 838.989167][ T5959] cdc_wdm 7-1:1.0: skipping garbage [ 838.994522][T14890] usb 1-1: Manufacturer: syz [ 838.999741][ T6707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 839.014181][ T5959] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 839.020767][T14890] usb 1-1: SerialNumber: syz [ 839.028479][ T5959] cdc_wdm 7-1:1.0: Unknown control protocol [ 839.038943][T14890] usb 1-1: config 0 descriptor?? [ 839.045846][ T6707] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 839.058429][ T6707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.075562][ T6707] usb 2-1: Product: syz [ 839.085316][ T6707] usb 2-1: Manufacturer: syz [ 839.121804][ T6707] usb 2-1: SerialNumber: syz [ 839.149825][ T6707] usb 2-1: config 0 descriptor?? [ 839.166618][ T6707] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 839.176808][ T6707] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 839.283102][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3518'. [ 839.312524][T18784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.333450][T18784] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 839.352288][T18784] bond1: (slave wlan0): Enslaving as an active interface with an up link [ 840.309710][ T6707] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 840.376229][ T6707] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 841.370092][T14890] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 841.781054][T14890] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 841.818781][T14890] usb 1-1: USB disconnect, device number 37 [ 842.174600][ T6707] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 842.240153][T18809] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3525'. [ 842.250215][ T6707] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 842.260008][ T6707] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 842.273896][ T6707] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 842.291292][ T6707] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 842.298726][ T6707] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 842.306143][ T6707] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 842.338494][T14890] usb 7-1: USB disconnect, device number 33 [ 842.364030][ T6707] usb 2-1: USB disconnect, device number 40 [ 842.486643][T18816] loop3: detected capacity change from 0 to 7 [ 842.493436][T18816] Dev loop3: unable to read RDB block 7 [ 842.499118][T18816] loop3: unable to read partition table [ 842.504881][T18816] loop3: partition table beyond EOD, truncated [ 842.513263][T18816] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 842.613105][T18820] Cannot find set identified by id 0 to match [ 842.697007][T18824] comedi comedi3: pcmda12: I/O port conflict (0x6,16) [ 842.712845][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 842.712864][ T30] audit: type=1400 audit(1772449608.135:960): avc: denied { listen } for pid=18819 comm="syz.0.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 842.743674][T14890] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 842.955688][T14890] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 842.973689][T14890] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 842.984476][T14890] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 842.995176][T14890] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 842.998054][ T6718] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 843.006596][T14890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.362824][T14890] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.608559][ T6718] usb 6-1: Using ep0 maxpacket: 32 [ 844.101007][ T6718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.101230][T14890] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 844.236210][T14890] usb 7-1: USB disconnect, device number 34 [ 844.256039][ T6718] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 844.316011][ T6718] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.40 [ 844.345233][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.577899][ T6718] usb 6-1: Product: syz [ 844.582147][ T6718] usb 6-1: Manufacturer: syz [ 844.596484][ T6718] usb 6-1: SerialNumber: syz [ 844.614991][ T6718] gspca_main: spca501-2.14.0 probing 0000:0000 [ 844.817675][T18824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.848840][T18824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.881051][ T6718] gspca_spca501: reg write: error -71 [ 844.981951][ T6718] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 844.994112][ T6718] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 845.007777][ T6718] usb 6-1: 0:2 : does not exist [ 845.032101][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.053396][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.055798][ T6718] usb 6-1: USB disconnect, device number 57 [ 845.258376][T14890] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 845.409281][T14890] usb 1-1: Using ep0 maxpacket: 8 [ 845.426882][T14890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.444328][T14890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 845.471089][T14890] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 845.481149][T14890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.500644][T14890] usb 1-1: Product: syz [ 845.513347][T14890] usb 1-1: Manufacturer: syz [ 845.527598][T14890] usb 1-1: SerialNumber: syz [ 845.542594][T14890] usb 1-1: config 0 descriptor?? [ 845.766526][T14890] usb 1-1: USB disconnect, device number 38 [ 845.817923][T18875] dummy0: entered promiscuous mode [ 845.824004][T18875] macvlan2: entered promiscuous mode [ 845.830017][T18875] macvlan2: entered allmulticast mode [ 845.836665][T18875] dummy0: entered allmulticast mode [ 845.868579][ T6707] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 845.928614][T18881] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3552'. [ 845.939755][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3552'. [ 845.950392][T18881] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3552'. [ 845.968954][T18881] ubi31: attaching mtd0 [ 845.977159][T18881] ubi31: scanning is finished [ 846.029702][ T6707] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 846.039700][ T6707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.049738][ T6707] usb 6-1: config 0 descriptor?? [ 846.057562][ T6707] cp210x 6-1:0.0: cp210x converter detected [ 846.140955][T18883] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers [ 847.111240][T18881] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 847.702782][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3554'. [ 847.725416][T18899] No source specified [ 847.728415][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 847.747637][T18896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3554'. [ 847.816118][T18902] ubi31: attaching mtd0 [ 848.833374][T18902] ubi31: scanning is finished [ 848.863604][ T6707] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 848.907267][ T6707] cp210x 6-1:0.0: querying part number failed [ 848.929363][ T6707] usb 6-1: cp210x converter now attached to ttyUSB0 [ 849.198595][ T6707] usb 6-1: USB disconnect, device number 58 [ 849.278493][ T6707] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 849.306833][ T6707] cp210x 6-1:0.0: device disconnected [ 849.402053][T18902] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 849.650433][T18927] xt_hashlimit: size too large, truncated to 1048576 [ 849.837964][ T29] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 850.488695][ T29] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 850.507344][ T29] usb 8-1: config 0 has no interface number 0 [ 850.535631][ T29] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 850.562297][ T29] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 850.581647][ T29] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 850.623500][ T29] usb 8-1: Manufacturer: syz [ 850.640957][ T29] usb 8-1: SerialNumber: syz [ 850.680988][ T29] usb 8-1: config 0 descriptor?? [ 850.759886][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3567'. [ 850.785961][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3567'. [ 850.807685][T18939] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3567'. [ 850.849520][T18942] ubi31: attaching mtd0 [ 850.853882][T18942] ubi31 error: ubi_attach_mtd_dev: bad VID header (57700) or data offsets (57764) [ 850.977752][ T29] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 851.013892][ T29] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 851.187800][T18949] overlayfs: conflicting lowerdir path [ 851.237642][T18950] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3570'. [ 851.294163][ T5817] Bluetooth: hci5: command 0x040f tx timeout [ 851.682008][ T29] usb 8-1: USB disconnect, device number 15 [ 851.698405][ T6707] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 851.858888][ T6707] usb 7-1: Using ep0 maxpacket: 16 [ 851.885566][ T6707] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 851.934978][ T6707] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 851.983598][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 852.026592][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 852.056483][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 852.071509][ T6707] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 852.081598][ T6707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.091153][ T6707] usb 7-1: Product: syz [ 852.184738][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 852.194457][ T6707] usb 7-1: Manufacturer: syz [ 852.199917][ T6707] usb 7-1: SerialNumber: syz [ 852.209348][ T6707] usb 7-1: config 0 descriptor?? [ 852.227422][ T6707] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 852.239846][ T6707] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 852.888695][ T6707] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 852.960378][ T6707] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 852.994219][ T6707] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 853.021758][ T6707] em28xx 7-1:0.0: No AC97 audio processor [ 853.053245][T18973] tmpfs: Bad value for 'mpol' [ 853.068875][ T6707] usb 7-1: USB disconnect, device number 35 [ 853.085683][ T6707] em28xx 7-1:0.0: Disconnecting em28xx [ 853.110947][ T6707] em28xx 7-1:0.0: Freeing device [ 853.325833][T18973] netlink: 'syz.0.3575': attribute type 4 has an invalid length. [ 853.469817][T18979] netlink: 'syz.0.3575': attribute type 4 has an invalid length. [ 854.347889][ T6718] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 854.907881][ T6718] usb 1-1: Using ep0 maxpacket: 8 [ 854.914855][ T6718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.925320][ T6718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 854.941798][ T6718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 854.965800][ T6718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 854.992194][ T6718] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 855.035350][ T6718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.077893][ T6718] hub 1-1:1.0: bad descriptor, ignoring hub [ 855.084277][ T6718] hub 1-1:1.0: probe with driver hub failed with error -5 [ 855.092238][ T6718] cdc_wdm 1-1:1.0: skipping garbage [ 855.157869][ T6718] cdc_wdm 1-1:1.0: skipping garbage [ 855.173523][ T6718] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 855.197854][ T6718] cdc_wdm 1-1:1.0: Unknown control protocol [ 855.740740][T19003] IPv6: addrconf: prefix option has invalid lifetime [ 857.874909][T18975] Can't find ip_set type ha [ 857.970960][T19030] FAULT_INJECTION: forcing a failure. [ 857.970960][T19030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.085489][T19030] CPU: 1 UID: 0 PID: 19030 Comm: syz.7.3594 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.085519][T19030] Tainted: [L]=SOFTLOCKUP [ 858.085525][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.085534][T19030] Call Trace: [ 858.085540][T19030] [ 858.085547][T19030] dump_stack_lvl+0x100/0x190 [ 858.085579][T19030] should_fail_ex.cold+0x5/0xa [ 858.085603][T19030] _copy_to_user+0x32/0xd0 [ 858.085630][T19030] drm_ioctl+0x608/0xc60 [ 858.085661][T19030] ? __pfx_drm_mode_obj_set_property_ioctl+0x10/0x10 [ 858.085684][T19030] ? __pfx_drm_ioctl+0x10/0x10 [ 858.085719][T19030] ? selinux_file_ioctl+0x139/0x290 [ 858.085740][T19030] ? selinux_file_ioctl+0xb4/0x290 [ 858.085761][T19030] ? __pfx_drm_ioctl+0x10/0x10 [ 858.085786][T19030] __x64_sys_ioctl+0x18e/0x210 [ 858.085812][T19030] do_syscall_64+0x106/0xf80 [ 858.085830][T19030] ? clear_bhb_loop+0x40/0x90 [ 858.085851][T19030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.085868][T19030] RIP: 0033:0x7f5af219c799 [ 858.085882][T19030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.085897][T19030] RSP: 002b:00007f5af30d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.085913][T19030] RAX: ffffffffffffffda RBX: 00007f5af2415fa0 RCX: 00007f5af219c799 [ 858.085924][T19030] RDX: 0000200000000300 RSI: 00000000c01864ba RDI: 0000000000000003 [ 858.085935][T19030] RBP: 00007f5af30d4090 R08: 0000000000000000 R09: 0000000000000000 [ 858.085945][T19030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.085954][T19030] R13: 00007f5af2416038 R14: 00007f5af2415fa0 R15: 00007ffceeb0ffc8 [ 858.085978][T19030] [ 859.818271][ T6718] usb 1-1: USB disconnect, device number 39 [ 859.846911][T19061] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 859.856393][T19061] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3601'. [ 860.294169][T19074] loop5: detected capacity change from 0 to 7 [ 860.419500][T19074] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 860.425021][T19074] loop5: partition table partially beyond EOD, truncated [ 860.434453][T19074] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 861.553702][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3606'. [ 862.023314][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 862.045198][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3606'. [ 862.082966][T19082] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3606'. [ 862.658691][T19056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 863.185912][T19101] overlayfs: failed lookup in lower (newroot/90, name='file1', err=-40): overlapping layers [ 863.197136][T19101] overlayfs: failed lookup in lower (newroot/90, name='file1', err=-40): overlapping layers [ 863.208448][T19101] overlayfs: failed lookup in lower (newroot/90, name='file1', err=-40): overlapping layers [ 863.274972][ T30] audit: type=1400 audit(1772449884.601:961): avc: denied { link } for pid=19097 comm="syz.1.3610" name="#4c" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 863.414638][ T30] audit: type=1400 audit(1772449884.601:962): avc: denied { rename } for pid=19097 comm="syz.1.3610" name="#4d" dev="tmpfs" ino=520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 863.918537][T19116] netlink: 'syz.5.3615': attribute type 49 has an invalid length. [ 864.552834][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.563776][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.795108][T19127] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3618'. [ 865.807283][ T30] audit: type=1326 audit(1772449887.221:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af219c799 code=0x7fc00000 [ 865.854528][T19161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 866.404176][ T30] audit: type=1326 audit(1772449887.821:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af2196517 code=0x7fc00000 [ 866.476699][ T30] audit: type=1326 audit(1772449887.821:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af213db19 code=0x7fc00000 [ 866.503013][ T30] audit: type=1326 audit(1772449887.871:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5af213dbdd code=0x7fc00000 [ 866.509857][T19137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.950379][T19170] overlayfs: upper fs does not support file handles, falling back to index=off. [ 866.968146][ T30] audit: type=1326 audit(1772449887.871:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19134 comm="syz.7.3623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5af219c799 code=0x7fc00000 [ 867.013956][T19170] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 867.260030][ T6718] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 867.419981][ T6718] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 867.435402][ T6718] usb 8-1: config 0 has no interface number 0 [ 867.454432][ T6718] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.479550][ T6718] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.507850][ T6718] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 867.524761][ T6718] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.555042][ T6718] usb 8-1: config 0 descriptor?? [ 867.660594][T19193] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3634'. [ 868.418957][ T6718] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.000C/input/input48 [ 868.628794][ T6718] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 868.704717][ T6718] usb 8-1: USB disconnect, device number 16 [ 868.827505][T19209] fido_id[19209]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 869.638551][T19210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 870.267833][ T29] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 870.820379][ T29] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 870.886262][T19258] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 870.901395][T19258] netdevsim netdevsim5: Direct firmware load for / [ 870.901395][T19258] failed with error -2 [ 870.914669][T19258] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 870.914669][T19258] [ 870.954448][ T30] audit: type=1400 audit(1772449892.341:968): avc: denied { firmware_load } for pid=19251 comm="syz.5.3648" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 870.984978][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.159033][ T29] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 871.168197][ T29] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 871.188723][ T29] usb 7-1: Manufacturer: syz [ 871.303477][T19261] netlink: 'syz.1.3650': attribute type 3 has an invalid length. [ 871.475173][ T29] usb 7-1: config 0 descriptor?? [ 871.631520][T19264] sctp: [Deprecated]: syz.7.3651 (pid 19264) Use of int in maxseg socket option. [ 871.631520][T19264] Use struct sctp_assoc_value instead [ 871.647800][ T29] rc_core: IR keymap rc-hauppauge not found [ 871.653844][ T29] Registered IR keymap rc-empty [ 871.658924][ T5817] Bluetooth: hci3: command 0x0419 tx timeout [ 871.668821][ T5817] ------------[ cut here ]------------ [ 871.674552][ T5817] refcnt < 0 [ 871.674566][ T5817] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#1: kworker/u9:4/5817 [ 871.688527][ T5817] Modules linked in: [ 871.692628][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.703708][ T5817] Tainted: [L]=SOFTLOCKUP [ 871.708073][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.718222][ T5817] Workqueue: hci3 hci_conn_timeout [ 871.723369][ T5817] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 871.729024][ T5817] Code: 44 0f b6 2d 33 cc 4d 06 31 ff 41 83 e5 40 44 89 ee e8 da 68 81 f7 45 84 ed 0f 84 02 ff ff ff e9 d6 68 ea f6 e8 77 6e 81 f7 90 <0f> 0b 90 e8 6e 6e 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 871.749261][ T5817] RSP: 0018:ffffc90003fa7c18 EFLAGS: 00010293 [ 871.755656][ T5817] RAX: 0000000000000000 RBX: ffff88807cae0a40 RCX: ffffffff8a87436f [ 871.763681][ T5817] RDX: ffff88807beea4c0 RSI: ffffffff8a874469 RDI: ffff88807beea4c0 [ 871.771684][ T5817] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 871.779679][ T5817] R10: 00000000ffffffff R11: 000000000000760b R12: ffff88807cae0000 [ 871.787868][ T5817] R13: ffff88807beea984 R14: ffffffff90d9b804 R15: 0000000000000000 [ 871.795840][ T5817] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 871.804904][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 871.811544][ T5817] CR2: 0000200000404030 CR3: 000000002d314000 CR4: 00000000003526f0 [ 871.819530][ T5817] Call Trace: [ 871.822804][ T5817] [ 871.825713][ T5817] process_one_work+0x9d7/0x1920 [ 871.830662][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 871.836015][ T5817] ? __pfx_hci_conn_timeout+0x10/0x10 [ 871.841628][ T5817] worker_thread+0x5da/0xe40 [ 871.846260][ T5817] ? kthread+0x13a/0x450 [ 871.850666][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 871.855802][ T5817] kthread+0x370/0x450 [ 871.859875][ T5817] ? __pfx_kthread+0x10/0x10 [ 871.864457][ T5817] ret_from_fork+0x754/0xd80 [ 871.869045][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 871.874151][ T5817] ? rcu_is_watching+0x12/0xc0 [ 871.878938][ T5817] ? __switch_to+0x7b4/0x1120 [ 871.883596][ T5817] ? __pfx_kthread+0x10/0x10 [ 871.888223][ T5817] ret_from_fork_asm+0x1a/0x30 [ 871.893006][ T5817] [ 871.896035][ T5817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 871.903287][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.914282][ T5817] Tainted: [L]=SOFTLOCKUP [ 871.918576][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 871.928604][ T5817] Workqueue: hci3 hci_conn_timeout [ 871.933695][ T5817] Call Trace: [ 871.936945][ T5817] [ 871.939851][ T5817] dump_stack_lvl+0x100/0x190 [ 871.944504][ T5817] vpanic+0x552/0x970 [ 871.948463][ T5817] ? __pfx_vpanic+0x10/0x10 [ 871.952942][ T5817] panic+0xd1/0xe0 [ 871.956632][ T5817] ? __pfx_panic+0x10/0x10 [ 871.961022][ T5817] ? check_panic_on_warn+0x1f/0x90 [ 871.966111][ T5817] check_panic_on_warn.cold+0x19/0x34 [ 871.971458][ T5817] ? hci_conn_timeout+0x16a/0x230 [ 871.976465][ T5817] __warn.cold+0x191/0x348 [ 871.980852][ T5817] __report_bug+0x296/0x3d0 [ 871.985329][ T5817] ? hci_conn_timeout+0x16a/0x230 [ 871.990332][ T5817] ? __pfx___report_bug+0x10/0x10 [ 871.995336][ T5817] ? add_lock_to_list+0x99/0x110 [ 872.000249][ T5817] ? hci_conn_timeout+0x16a/0x230 [ 872.005247][ T5817] report_bug+0xb2/0x220 [ 872.009462][ T5817] ? hci_conn_timeout+0x16a/0x230 [ 872.014483][ T5817] handle_bug+0x16a/0x2a0 [ 872.018788][ T5817] exc_invalid_op+0x17/0x50 [ 872.023261][ T5817] asm_exc_invalid_op+0x1a/0x20 [ 872.028082][ T5817] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 872.033692][ T5817] Code: 44 0f b6 2d 33 cc 4d 06 31 ff 41 83 e5 40 44 89 ee e8 da 68 81 f7 45 84 ed 0f 84 02 ff ff ff e9 d6 68 ea f6 e8 77 6e 81 f7 90 <0f> 0b 90 e8 6e 6e 81 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 872.053284][ T5817] RSP: 0018:ffffc90003fa7c18 EFLAGS: 00010293 [ 872.059355][ T5817] RAX: 0000000000000000 RBX: ffff88807cae0a40 RCX: ffffffff8a87436f [ 872.067326][ T5817] RDX: ffff88807beea4c0 RSI: ffffffff8a874469 RDI: ffff88807beea4c0 [ 872.075302][ T5817] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 872.083261][ T5817] R10: 00000000ffffffff R11: 000000000000760b R12: ffff88807cae0000 [ 872.091218][ T5817] R13: ffff88807beea984 R14: ffffffff90d9b804 R15: 0000000000000000 [ 872.099186][ T5817] ? hci_conn_timeout+0x6f/0x230 [ 872.104114][ T5817] ? hci_conn_timeout+0x169/0x230 [ 872.109132][ T5817] ? hci_conn_timeout+0x169/0x230 [ 872.114144][ T5817] process_one_work+0x9d7/0x1920 [ 872.119069][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 872.124429][ T5817] ? __pfx_hci_conn_timeout+0x10/0x10 [ 872.129795][ T5817] worker_thread+0x5da/0xe40 [ 872.134390][ T5817] ? kthread+0x13a/0x450 [ 872.138621][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 872.143710][ T5817] kthread+0x370/0x450 [ 872.147756][ T5817] ? __pfx_kthread+0x10/0x10 [ 872.152338][ T5817] ret_from_fork+0x754/0xd80 [ 872.156936][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 872.162042][ T5817] ? rcu_is_watching+0x12/0xc0 [ 872.166783][ T5817] ? __switch_to+0x7b4/0x1120 [ 872.171525][ T5817] ? __pfx_kthread+0x10/0x10 [ 872.176089][ T5817] ret_from_fork_asm+0x1a/0x30 [ 872.180839][ T5817] [ 872.184157][ T5817] Kernel Offset: disabled [ 872.188471][ T5817] Rebooting in 86400 seconds..