last executing test programs: 20m36.916381631s ago: executing program 4 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 20m35.600651932s ago: executing program 4 (id=1328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r4, 0x6}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) 20m34.516735811s ago: executing program 4 (id=1330): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) mremap(&(0x7f0000ab6000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f00003d1000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 20m32.422843971s ago: executing program 4 (id=1340): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x2, 0x40, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffbfffa}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}]}, &(0x7f0000000280)='GPL\x00', 0xf, 0x0, &(0x7f00000002c0), 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0xd384, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0xffffffff, 0x1, 0x3, 0x2}], 0x10, 0x80000001}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x0, 0x44, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x0, 0x8, 0x401}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r3, 0x25, 0x18, @val=@tracing={0x0, 0x9f61}}, 0x20) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x3, &(0x7f0000000240)) ptrace$poke(0x21, r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000008040000000600000000000000a3b9c728503a58355d15691ca59a89d14fa917c70373b95c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000080)={0x5}, 0x20) getpeername$l2tp6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000640)=0x20) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0xa000200000a958, 0x0, 0x3, 0x8, 0x100, 0xfffffffffffffffc, 0xa4e}) 20m32.078994267s ago: executing program 4 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 20m30.676066759s ago: executing program 4 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32, @ANYBLOB="000040000000000000000000000000bf17000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r1, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r12, 0x300, 0x0, 0x25dfdc01, {{}, {@void, @void, @val={0xc, 0x99, {0x7fffffff, 0x45}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7ae8a32cb0646a398f22b73dd5b7b9653a140bf7c277b099"}]]}, 0x58}}, 0x4004084) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20m30.263142707s ago: executing program 32 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001000000", @ANYRES32, @ANYBLOB="000040000000000000000000000000bf17000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r10}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r1, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x58, r12, 0x300, 0x0, 0x25dfdc01, {{}, {@void, @void, @val={0xc, 0x99, {0x7fffffff, 0x45}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7ae8a32cb0646a398f22b73dd5b7b9653a140bf7c277b099"}]]}, 0x58}}, 0x4004084) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16m18.303067669s ago: executing program 5 (id=2172): r0 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid(0xee01) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000300)=0x102) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x4, [0x9, 0x7, 0x1, 0x1]}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000017c00000400428004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) 16m14.760283168s ago: executing program 5 (id=2181): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setrlimit(0xd, &(0x7f0000000000)={0xc, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r3, 0x2}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x5c}, 0x1, 0x0, 0x0, 0x404c051}, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="1cffee00220040424db34e1e0c35f1f6d803ea59fa2abd7000ffdbdf250280d4d55714e5da044001790a50fc898ceabebd50", @ANYRES8=r6, @ANYBLOB="456a6735635dc0feafec6343e463e6ea22a10be3297687a85cf260dd529afda182ea388421f2b3a759aa49a3014ac4890cac49e40c0085695d79fb122406a4df6da5fd598bd4863d627829804ae266610bb2a7589adfae524d4d3f2bf12ec17253be285a53326b1f0fe44d3873bc2af758294ec665c98c4f10132d9984d725a118b8aa49b6bf50add6824a30e13634f8c346b67e8ca819e7684219974d5cbbec6f1ccccba88c762f7bd3a8834169b2f91edf1fae3fe32085db7a6e5251edb4c40a6e18dc10f125f702e9cf312779ca7f326d0dd204e75314073fa9252bcbbb808e6106efccfe16c65af234db7d4747a9022442354aaaa464"], 0x1c}}, 0x8000) madvise(&(0x7f000072b000/0x2000)=nil, 0x2000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x7a) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 16m13.839392085s ago: executing program 5 (id=2184): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$int_in(r0, 0x5421, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}}, 0x8080) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) getpid() socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x3, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 16m12.933438104s ago: executing program 5 (id=2187): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000140)=@other={'decodes', ' ', 'io'}, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)={0x18, r4, 0x1, 0x2, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x8, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x4, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16m12.711598021s ago: executing program 5 (id=2189): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x800, 0xfe) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) creat(0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="00bc", 0x2}], 0x1}, 0x41) setxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) epoll_create1(0x0) 16m10.859369441s ago: executing program 5 (id=2193): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2a) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) (async) ptrace(0x4207, r5) tkill(r5, 0x12) (async) ptrace(0x4208, r5) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f00000014c0)=@svm={0x104, 0x1, 0x1080, {0x25000}, {"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"}}) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (rerun: 32) write$P9_RVERSION(r4, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8) (async, rerun: 32) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) bind$x25(r9, &(0x7f0000000600), 0x12) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000140)="39df2564453e938b8d264fdb6c677f9801c15e55355141479c45ffadaea9f6716a6e1f8cb3c076016e1babb56c8bf6920ffe3fcafb768a0b001fd40e52637f8b269a8127f11dfe05e50eba504ba3a2c3e0467f52794b9336a282464a159814fb3c8fe2104a2d2bf0b38e367031af2df62e44358e4792d704b6c0c9797360075de554a7db0ea39eb88139c0306c0a04045188a44f21732b548491973d32ef1a8ec5241f80d49c2d93c2717410cd5124d2c5d84a6fd8ea124d08dcc1e982a21acecc9320422b27136af5d27f9b60c3") 15m55.807626519s ago: executing program 33 (id=2193): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2a) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) (async) ptrace(0x4207, r5) tkill(r5, 0x12) (async) ptrace(0x4208, r5) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f00000014c0)=@svm={0x104, 0x1, 0x1080, {0x25000}, {"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"}}) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (rerun: 32) write$P9_RVERSION(r4, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x91dd, 0x6, '9P2000'}, 0xc8) (async, rerun: 32) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) bind$x25(r9, &(0x7f0000000600), 0x12) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000140)="39df2564453e938b8d264fdb6c677f9801c15e55355141479c45ffadaea9f6716a6e1f8cb3c076016e1babb56c8bf6920ffe3fcafb768a0b001fd40e52637f8b269a8127f11dfe05e50eba504ba3a2c3e0467f52794b9336a282464a159814fb3c8fe2104a2d2bf0b38e367031af2df62e44358e4792d704b6c0c9797360075de554a7db0ea39eb88139c0306c0a04045188a44f21732b548491973d32ef1a8ec5241f80d49c2d93c2717410cd5124d2c5d84a6fd8ea124d08dcc1e982a21acecc9320422b27136af5d27f9b60c3") 2m37.212412893s ago: executing program 0 (id=4937): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @private1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2m33.452457806s ago: executing program 0 (id=4951): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0), 0x0, 0x5}]) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2, 0x3ce}, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000040), 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000001240)={0x50, 0x0, r7, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r8, 0x401070c9, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) 2m32.524644675s ago: executing program 2 (id=4956): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2a0000000600f5000000000000000000010000000000000001000000000000837d97"], 0x2a) 2m32.440691134s ago: executing program 0 (id=4957): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000000)=0x5, 0x0, 0x4) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r0, 0x3d9f, 0x413d, 0x22, &(0x7f0000000080)={[0xd3a]}, 0x8) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x5) read$dsp(r0, &(0x7f0000000140)=""/226, 0xe2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r1, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000480)={@initdev, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@local, @local, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0x7f, 0xff, 0x8140, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7800, 0x4, 0x101}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x114, r4, 0xd00, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x31c929335d3c5558}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20060082}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x4f5d1bf79cb84c88, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x26}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000a40)={'\x00', 0xfffff791, 0x71224a2eb0f6e341, 0x4}) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000ac0)=0x938c, 0x4) syz_open_dev$midi(&(0x7f0000000b00), 0x5, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000b40)="be734d8c21e8cd0b1114f73d675c14f74ec775e5a73ce199b9087289b0400581a3639b5d61a3", 0x26) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000b80)={0x8000000, 0x2000, 0x1}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', r9, r0, 0x3, 0x1, 0x5}, 0x50) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r11, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r12, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'macvlan1\x00'}) 2m32.240532661s ago: executing program 2 (id=4959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 2m32.197631723s ago: executing program 2 (id=4960): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='./file0\x00') 2m31.740585322s ago: executing program 2 (id=4961): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 32) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) (rerun: 32) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x20004080) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (rerun: 32) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) 2m31.680788913s ago: executing program 0 (id=4962): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) ioctl$VHOST_SET_VRING_KICK(r0, 0x541b, 0x0) 2m31.595115967s ago: executing program 0 (id=4963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7c, 0x1, 0x0, 0x1000000002, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x100000000000006, 0x4, 0x1, 0x8], 0xeeef0000, 0x4fb40}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x2002, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x83000000) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dac02\x00', [0x3c4, 0xd, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x4, 0x723, 0x400, 0x7, 0x13, 0x2, 0xc, 0x100000d, 0x59, 0x1, 0x3ff, 0x9, 0x1f7, 0xe2df, 0xaa14, 0x1, 0x6, 0xa, 0x7, 0x2, 0x6]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfeab) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000467fd1a5491c70939b1bc59f990e09105f4f826c1b5bd74d0f1ef8c884f09a515677d50b9d019582f6c98d69a4e8e7c21c195f95256aac8c356cd22321fa02a0c68e94f6f502f979aaa40b7953ef5115fb35b9afd7659e6816022f6c1e053a95ccddf58c5db15a32b797c49cfb9e198b5ebde114ab7c321ffbbb86ec77f5ce753057dd9d1404c0f1e5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000540)={0x6, 'team_slave_1\x00', {0x3}, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000140)=r6) umount2(&(0x7f0000000080)='./file0\x00', 0x9) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) io_uring_setup(0x9bd, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) connect$unix(r3, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) 2m31.526916351s ago: executing program 2 (id=4964): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x8454b000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000000c0)={0x4, "ccc0dde4b00a6d2c16b99a7fd0d48117b817abfccfa3806091bcc9f67e3de361a9172be4c429adba1c63d1674a55890c3e46ca658ca8939b7fc9c8f133dd3351"}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendto$inet6(r4, 0x0, 0x0, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @mcast1, 0x3}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 2m31.19590489s ago: executing program 2 (id=4967): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0), 0x0, 0x5}]) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2, 0x3ce}, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000040), 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000001240)={0x50, 0x0, r7, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r8, 0x401070c9, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) 2m31.19375657s ago: executing program 0 (id=4968): sysfs$1(0x1, &(0x7f0000000100)='}:\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a6", 0x1, 0x24000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x14380, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f00000003c0)={0x8, 0x80, 0x100, 0xfffffffd, 0x1, 0x4, 0x1, 0x19, 0xffffffff, 0x5, 0x40, 0x8, &(0x7f0000000340)=[0x5], 0x1, &(0x7f0000000380)="c8aebe1b910cfccaeb95ba6f1420fe0d52e06e811943c61486fbc4ab62efa082a05ce4ff3ebddd09bcad6618dc4e0e2f01c5", 0x32}) shutdown(r0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, 0x0, 0x7, 0x404, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}]}, 0x44}}, 0x4) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) 2m30.800651288s ago: executing program 34 (id=4967): socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0), 0x0, 0x5}]) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2, 0x3ce}, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, 0xfffffffffffffffc, 0x1, &(0x7f0000000040), 0x1, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000001240)={0x50, 0x0, r7, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0xc}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r8, 0x401070c9, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) 2m16.089951756s ago: executing program 35 (id=4968): sysfs$1(0x1, &(0x7f0000000100)='}:\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a6", 0x1, 0x24000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x14380, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f00000003c0)={0x8, 0x80, 0x100, 0xfffffffd, 0x1, 0x4, 0x1, 0x19, 0xffffffff, 0x5, 0x40, 0x8, &(0x7f0000000340)=[0x5], 0x1, &(0x7f0000000380)="c8aebe1b910cfccaeb95ba6f1420fe0d52e06e811943c61486fbc4ab62efa082a05ce4ff3ebddd09bcad6618dc4e0e2f01c5", 0x32}) shutdown(r0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, 0x0, 0x7, 0x404, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}]}, 0x44}}, 0x4) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) 1m0.430032459s ago: executing program 3 (id=5291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de00000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) lseek(r8, 0xffffffffffffffff, 0x2) 59.642992952s ago: executing program 3 (id=5295): socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x1e, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x1016, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000036007bc32ddf7000fddbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r5, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r6, &(0x7f0000000000)=0x8, r6, 0x0, 0x4, 0x0) 58.696994022s ago: executing program 3 (id=5296): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843330e", 0x12}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24000814}, 0xc800) getpgrp(0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @p_u32=&(0x7f0000000080)=0x411b}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r6, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) shmctl$SHM_UNLOCK(r6, 0xc) 57.380082883s ago: executing program 3 (id=5300): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 56.763484964s ago: executing program 3 (id=5302): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{0x0, 0x6, 0x7, 0x7, 0x71, 0xb, 0x3, 0x5, 0x2, 0x101, 0xb8, 0x0, 0xe7, 0x4, 0x7ff}}) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) write$tun(r1, &(0x7f0000000100)={@void, @void, @eth={@random="d06d0b76b77d", @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x6}, {0x8100, 0x0, 0x0, 0xfff}}, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0xff268, 0x0, 0x1}, {0x8}, {0xffffb, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x9}, {0x4, 0x0, 0x1}], @generic="7c1e0a3e12501fedce81a11cfa647b30af712bd1cd0d6509b00776aed54de3ac35ceea76fdcbd78ff973ad5dacf8"}}}}}, 0x60) 53.62046595s ago: executing program 3 (id=5307): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4095, 0xfff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="ca3f866c04f99346c0ee4e2f0ec94944e78ac12d552169530cf51117e21c1465726719ae6c6b86c6916dec94c3c04119657ffbbc455717c250a557ccf26b668d109fa432458ee844f3d0f18ee71ed11395a543f027a816af4d49b38f3766376dfccd8e91e20a22c7bcb58b0b9e2028738087d5d97fbdb008e79a6399a845c822ecb18313bc39736cf11d9ce690684ceddebfaa2dc0ffbb"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 38.63044184s ago: executing program 36 (id=5307): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4095, 0xfff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000012c0)={0x18}) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="ca3f866c04f99346c0ee4e2f0ec94944e78ac12d552169530cf51117e21c1465726719ae6c6b86c6916dec94c3c04119657ffbbc455717c250a557ccf26b668d109fa432458ee844f3d0f18ee71ed11395a543f027a816af4d49b38f3766376dfccd8e91e20a22c7bcb58b0b9e2028738087d5d97fbdb008e79a6399a845c822ecb18313bc39736cf11d9ce690684ceddebfaa2dc0ffbb"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.829826756s ago: executing program 7 (id=5510): gettid() socket$can_bcm(0x1d, 0x2, 0x2) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) io_setup(0x81, &(0x7f0000000380)=0x0) eventfd2(0x2, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_submit(r3, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32], 0x5c}, 0x1, 0xba01}, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r1, 0x0, 0x0) 3.603765887s ago: executing program 7 (id=5523): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 3.480838029s ago: executing program 7 (id=5524): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) recvmsg$can_raw(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x2) 3.232162322s ago: executing program 9 (id=5525): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'macvlan0\x00', 0x1008}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r6, 0x0, &(0x7f0000000080)='\x00\x00', 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000040), &(0x7f0000000100)='%-5lx \x00'}, 0x20) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10003, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1c00, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 2.43612932s ago: executing program 7 (id=5528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsm_get_self_attr(0x66, &(0x7f0000000440)={0x0, 0x0, 0x2b, 0xb, ""/11}, 0x0, 0x1) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0xff59, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYRESHEX=r8], 0x20}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000fc41111b07a00f3b77852bb8c25100000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="005294e01312f1914c0002ea132c110000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) socket$alg(0x26, 0x5, 0x0) 2.33005681s ago: executing program 9 (id=5529): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x6000000, 0x30, &(0x7f0000000080)=""/103, &(0x7f0000000100)=0x67) 1.963642597s ago: executing program 9 (id=5533): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x20, 0x8, 0x9}, &(0x7f0000000100)=0x18) 1.378052134s ago: executing program 6 (id=5543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x4000009e, 0x1}}], 0x20}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x2, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.159514133s ago: executing program 9 (id=5547): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) 988.420611ms ago: executing program 6 (id=5548): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_setup(0x8, &(0x7f00000019c0)) 987.928665ms ago: executing program 9 (id=5549): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) 818.317546ms ago: executing program 1 (id=5553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x83, &(0x7f0000000480)={r3, 0x2}, 0x8) 720.275074ms ago: executing program 7 (id=5554): r0 = socket(0xa, 0x3, 0xff) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg(r1, &(0x7f00000026c0)={&(0x7f0000001140)=@l2tp6={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, '\x00', 0x9}, 0xfffffff5, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001280)=[{0x10, 0x29, 0x4}], 0x10}, 0x4000000) 719.895745ms ago: executing program 6 (id=5555): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/3\x00') fchdir(r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x19a54000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 711.854673ms ago: executing program 8 (id=5556): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/stat\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x80800, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x3c) 692.723573ms ago: executing program 1 (id=5557): r0 = io_uring_setup(0x548e, &(0x7f0000000340)={0x0, 0x40bd, 0x1, 0xfffffffc, 0x211}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 628.462433ms ago: executing program 7 (id=5558): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000bc7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000707000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x80803, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 626.294646ms ago: executing program 6 (id=5559): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) userfaultfd(0x80801) r0 = eventfd2(0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write(r0, &(0x7f0000000100)="8492b2bc52621792", 0x8) 577.255181ms ago: executing program 8 (id=5560): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000023000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d82afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3}, 0xffffffffffffff88, 0x1010000000000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@o_path={0x0}, 0x18) 567.047608ms ago: executing program 1 (id=5561): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) close_range(r0, r1, 0x2) 464.711402ms ago: executing program 6 (id=5562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) 464.429883ms ago: executing program 8 (id=5563): r0 = socket(0x2, 0x3, 0xff) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x6}, 0x1c) 454.966483ms ago: executing program 1 (id=5564): r0 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec, 0x3}) timer_create(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL_GET(0x22) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) clock_settime(0x5, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 363.120702ms ago: executing program 6 (id=5565): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x10000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 317.92613ms ago: executing program 8 (id=5566): socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 240.628901ms ago: executing program 1 (id=5567): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES64], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x7fbfffff}], 0x1, 0x2000, 0x0) 188.022068ms ago: executing program 8 (id=5568): add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000000)="3082bffd", 0x4, 0xfffffffffffffffc) 152.615121ms ago: executing program 1 (id=5569): setrlimit(0x40000000000008, &(0x7f0000000000)={0x204, 0x801}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x4d98, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4098, 0x440000}], 0x1000000000000125) 369.188µs ago: executing program 8 (id=5570): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 9 (id=5571): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) kernel console output (not intermixed with test programs): e 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.577974][T11017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.606847][T11017] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1504.617180][T11017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.644970][T11017] usb 7-1: config 0 descriptor?? [ 1504.780911][T26254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1504.791646][T26254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1504.806226][T26254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1504.818533][T26254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1504.862981][T26329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.874167][T26329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.903646][T21281] Bluetooth: hci0: command tx timeout [ 1504.943085][T26254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.970738][T26254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.986859][T17513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.994028][T17513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.011708][T17513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.018961][T17513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.090115][T11017] pyra 0003:1E7D:2CF6.003C: unknown main item tag 0x2 [ 1505.156320][T11017] pyra 0003:1E7D:2CF6.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1505.291032][ T29] audit: type=1400 audit(2000000294.761:2089): avc: denied { getopt } for pid=26328 comm="syz.6.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1505.315800][T11017] pyra 0003:1E7D:2CF6.003C: couldn't init struct pyra_device [ 1505.345642][T11017] pyra 0003:1E7D:2CF6.003C: couldn't install mouse [ 1505.361762][T11017] pyra 0003:1E7D:2CF6.003C: probe with driver pyra failed with error -32 [ 1505.403272][T11017] usb 7-1: USB disconnect, device number 98 [ 1505.473969][T26254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.582626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1505.590683][ C1] lec:lec_tx_timeout: lec0 [ 1505.595650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1505.651296][ T29] audit: type=1400 audit(2000000295.121:2090): avc: denied { lock } for pid=26388 comm="syz.3.4994" path="socket:[115533]" dev="sockfs" ino=115533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1505.774829][T21281] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1507.006362][T21281] Bluetooth: hci0: command tx timeout [ 1507.026023][T26254] veth0_vlan: entered promiscuous mode [ 1507.187080][T26254] veth1_vlan: entered promiscuous mode [ 1507.234092][T26418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.247897][T26418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.448451][T26254] veth0_macvtap: entered promiscuous mode [ 1507.965789][T26254] veth1_macvtap: entered promiscuous mode [ 1508.280909][T26254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.297109][T26254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.307140][ T29] audit: type=1400 audit(2000000297.771:2091): avc: denied { setopt } for pid=26426 comm="syz.1.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1508.366206][ T124] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.385087][ T124] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.410736][ T124] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.430062][ T124] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.959594][ T29] audit: type=1400 audit(2000000298.041:2092): avc: denied { create } for pid=26426 comm="syz.1.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1509.021129][ T29] audit: type=1400 audit(2000000298.051:2093): avc: denied { write } for pid=26426 comm="syz.1.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1509.063648][T21281] Bluetooth: hci0: command tx timeout [ 1509.090943][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.108320][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.272758][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.290895][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.375500][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.386867][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.543080][ T5884] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1509.722796][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 1509.733615][ T5884] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1509.750620][ T5884] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1509.760563][ T5884] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.777432][ T5884] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1509.789887][ T5884] usb 7-1: config 250 has no interface number 0 [ 1509.796760][ T5884] usb 7-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1509.811224][ T5884] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1510.386396][ T5884] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1510.400939][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1510.423016][ T5884] usb 7-1: Product: syz [ 1510.427726][ T5884] usb 7-1: SerialNumber: syz [ 1510.602732][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1510.610821][ C1] lec:lec_tx_timeout: lec0 [ 1510.616120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1510.623891][ T5884] hub 7-1:250.228: bad descriptor, ignoring hub [ 1510.676506][ T5884] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1510.763648][T26437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.774327][T26437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.801415][T26462] IPv6: Can't replace route, no match found [ 1510.822843][ T29] audit: type=1400 audit(2000000300.291:2094): avc: denied { write } for pid=26461 comm="syz.1.5010" path="socket:[115708]" dev="sockfs" ino=115708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1511.515011][ T24] usb 7-1: reset high-speed USB device number 99 using dummy_hcd [ 1511.917998][ T24] usb 7-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1511.947805][ T24] usb 7-1: USB disconnect, device number 99 [ 1513.152780][ T29] audit: type=1400 audit(2000000302.611:2095): avc: denied { ioctl } for pid=26486 comm="syz.6.5016" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1513.324468][T21281] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1515.500059][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1515.525269][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1515.535021][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1515.555206][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1515.587080][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1515.609019][ T29] audit: type=1400 audit(2000000305.081:2096): avc: denied { ioctl } for pid=26504 comm="syz.1.5022" path="socket:[116246]" dev="sockfs" ino=116246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1515.634747][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1515.634906][ C1] lec:lec_tx_timeout: lec0 [ 1515.643371][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1515.818800][T26508] xfrm0 speed is unknown, defaulting to 1000 [ 1515.854986][T26508] lo speed is unknown, defaulting to 1000 [ 1516.776350][T26508] chnl_net:caif_netlink_parms(): no params data found [ 1516.909058][T26508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.917671][T26508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.925472][T26508] bridge_slave_0: entered allmulticast mode [ 1516.934218][T26508] bridge_slave_0: entered promiscuous mode [ 1516.943682][T26508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.951080][T26508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.958709][T26508] bridge_slave_1: entered allmulticast mode [ 1516.966871][T26508] bridge_slave_1: entered promiscuous mode [ 1517.003571][T26508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.016433][T26508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.053058][T26508] team0: Port device team_slave_0 added [ 1517.061869][T26508] team0: Port device team_slave_1 added [ 1517.632127][T26508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.657308][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.709299][ T5806] Bluetooth: hci5: command tx timeout [ 1517.719520][T26508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.751321][T26508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.768817][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.862376][T26508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.931236][T26538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26538 comm=syz.1.5027 [ 1518.031066][ T5806] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1518.076791][T26508] hsr_slave_0: entered promiscuous mode [ 1518.098224][T26508] hsr_slave_1: entered promiscuous mode [ 1518.131598][T26508] debugfs: 'hsr0' already exists in 'hsr' [ 1518.154284][T26508] Cannot create hsr debugfs directory [ 1518.635907][T26508] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1518.657514][T26508] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1518.677636][T26508] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1518.692308][T26508] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1518.892304][T26508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.924631][T26556] IPVS: length: 39 != 24 [ 1518.936165][ T29] audit: type=1400 audit(2000000309.409:2097): avc: denied { accept } for pid=26554 comm="syz.6.5031" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1518.965491][T26508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.003976][T24943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.011104][T24943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.078537][T24943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.085766][T24943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.093734][T21281] Bluetooth: hci5: command tx timeout [ 1520.128078][ T29] audit: type=1400 audit(2000000310.599:2098): avc: denied { mount } for pid=26564 comm="syz.7.5030" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1520.272491][T26572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5034'. [ 1520.648547][T26585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.812376][T26585] netlink: 124 bytes leftover after parsing attributes in process `syz.7.5037'. [ 1521.140785][T26508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.462553][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 1521.470640][ C1] lec:lec_tx_timeout: lec0 [ 1521.475505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1521.517016][T26601] xt_hashlimit: max too large, truncated to 1048576 [ 1521.590959][T26603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1521.807987][ T29] audit: type=1400 audit(2000000312.279:2099): avc: denied { accept } for pid=26610 comm="syz.3.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1522.102780][T21281] Bluetooth: hci5: command tx timeout [ 1522.224192][T26508] veth0_vlan: entered promiscuous mode [ 1522.281501][T26508] veth1_vlan: entered promiscuous mode [ 1522.399055][T26508] veth0_macvtap: entered promiscuous mode [ 1522.445766][T26508] veth1_macvtap: entered promiscuous mode [ 1522.674519][T26508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1522.691253][T26626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1524.041242][T26634] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1524.049576][T26634] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1524.061039][T26634] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1524.095574][T26508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.146792][ T29] audit: type=1400 audit(2000000314.539:2100): avc: denied { firmware_load } for pid=26619 comm="syz.3.5041" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1524.182678][T21281] Bluetooth: hci5: command tx timeout [ 1524.235277][T12249] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.267782][T12249] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.321285][T12249] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.341498][T12249] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.399337][ T29] audit: type=1400 audit(2000000314.869:2101): avc: denied { ioctl } for pid=26642 comm="syz.3.5047" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1525.280673][T12249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.313725][T12249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.346487][T21281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1525.358663][T21281] CPU: 1 UID: 0 PID: 21281 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1525.358686][T21281] Tainted: [L]=SOFTLOCKUP [ 1525.358690][T21281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1525.358699][T21281] Workqueue: hci0 hci_rx_work [ 1525.358723][T21281] Call Trace: [ 1525.358729][T21281] [ 1525.358735][T21281] dump_stack_lvl+0x100/0x190 [ 1525.358761][T21281] sysfs_warn_dup.cold+0x1c/0x28 [ 1525.358779][T21281] sysfs_create_dir_ns+0x24b/0x2b0 [ 1525.358797][T21281] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1525.358813][T21281] ? find_held_lock+0x2b/0x80 [ 1525.358829][T21281] ? kobject_add_internal+0x25f/0x930 [ 1525.358845][T21281] ? kobject_add_internal+0x25f/0x930 [ 1525.358859][T21281] ? do_raw_spin_unlock+0x145/0x1e0 [ 1525.358873][T21281] kobject_add_internal+0x2c8/0x930 [ 1525.358890][T21281] kobject_add+0x16a/0x1e0 [ 1525.358904][T21281] ? __pfx_kobject_add+0x10/0x10 [ 1525.358917][T21281] ? class_to_subsys+0x10f/0x150 [ 1525.358935][T21281] ? kobject_put+0xb9/0x640 [ 1525.358947][T21281] ? _raw_spin_unlock+0x28/0x50 [ 1525.358972][T21281] device_add+0x294/0x1950 [ 1525.358995][T21281] ? __pfx_dev_set_name+0x10/0x10 [ 1525.359021][T21281] ? __pfx_device_add+0x10/0x10 [ 1525.359043][T21281] ? mgmt_send_event_skb+0x2fb/0x460 [ 1525.359065][T21281] hci_conn_add_sysfs+0x1a3/0x260 [ 1525.359078][T21281] le_conn_complete_evt+0x11cb/0x1f40 [ 1525.359098][T21281] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1525.359119][T21281] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1525.359137][T21281] ? skb_pull_data+0x15f/0x1e0 [ 1525.359153][T21281] hci_le_meta_evt+0x34a/0x5f0 [ 1525.359171][T21281] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1525.359190][T21281] hci_event_packet+0x682/0x11c0 [ 1525.359207][T21281] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1525.359225][T21281] ? __pfx_hci_event_packet+0x10/0x10 [ 1525.359243][T21281] ? kcov_remote_start+0x374/0x660 [ 1525.359260][T21281] ? lockdep_hardirqs_on+0x78/0x100 [ 1525.359276][T21281] hci_rx_work+0x451/0xfc0 [ 1525.359297][T21281] process_one_work+0x9d7/0x1920 [ 1525.359316][T21281] ? __pfx_process_one_work+0x10/0x10 [ 1525.359333][T21281] ? __pfx_hci_rx_work+0x10/0x10 [ 1525.359350][T21281] worker_thread+0x5da/0xe40 [ 1525.359366][T21281] ? __pfx_worker_thread+0x10/0x10 [ 1525.359378][T21281] ? kthread+0x13a/0x450 [ 1525.359388][T21281] ? __pfx_worker_thread+0x10/0x10 [ 1525.359398][T21281] kthread+0x370/0x450 [ 1525.359408][T21281] ? __pfx_kthread+0x10/0x10 [ 1525.359419][T21281] ret_from_fork+0x754/0xd80 [ 1525.359432][T21281] ? __pfx_ret_from_fork+0x10/0x10 [ 1525.359444][T21281] ? __switch_to+0x7b4/0x1120 [ 1525.359458][T21281] ? __pfx_kthread+0x10/0x10 [ 1525.359469][T21281] ret_from_fork_asm+0x1a/0x30 [ 1525.359490][T21281] [ 1525.359513][T21281] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1525.664456][T21281] Bluetooth: hci0: failed to register connection device [ 1525.712463][T17513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.741474][T17513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.482617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1526.486686][T26677] xfrm0 speed is unknown, defaulting to 1000 [ 1526.490714][ C1] lec:lec_tx_timeout: lec0 [ 1526.499317][T26679] netlink: 'syz.8.5050': attribute type 11 has an invalid length. [ 1526.501356][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1526.524718][T26679] overlayfs: missing 'lowerdir' [ 1526.556371][T26677] lo speed is unknown, defaulting to 1000 [ 1527.743511][ T29] audit: type=1400 audit(2000000318.219:2102): avc: denied { bind } for pid=26701 comm="syz.8.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1527.829917][ T29] audit: type=1400 audit(2000000318.249:2103): avc: denied { connect } for pid=26701 comm="syz.8.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1527.883953][ T29] audit: type=1400 audit(2000000318.249:2104): avc: denied { read } for pid=26701 comm="syz.8.5053" path="socket:[116724]" dev="sockfs" ino=116724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1528.041450][T26713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5055'. [ 1528.256197][ T29] audit: type=1400 audit(2000000318.729:2105): avc: denied { call } for pid=26716 comm="syz.8.5056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1528.509034][T26722] dlm: no local IP address has been set [ 1528.514852][T26722] dlm: cannot start dlm midcomms -107 [ 1528.527632][T26722] openvswitch: netlink: IP tunnel dst address not specified [ 1528.702676][T11017] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1528.862782][T11017] usb 7-1: Using ep0 maxpacket: 8 [ 1528.889966][T11017] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1528.904005][T11017] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1528.948159][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1528.966587][T11017] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1529.014560][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1529.055134][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1529.089265][T11017] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1529.118308][T11017] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1529.127531][T11017] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1529.136463][T11017] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1529.176697][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1529.190068][T11017] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1529.261701][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1529.330715][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1529.379013][T11017] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1529.460982][T26734] xt_TCPMSS: Only works on TCP SYN packets [ 1529.559162][ T29] audit: type=1400 audit(2000000319.949:2106): avc: denied { ioctl } for pid=26730 comm="syz.8.5060" path="socket:[117985]" dev="sockfs" ino=117985 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1529.782183][T11017] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1529.831271][T11017] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1529.860505][T11017] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1529.920864][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1529.960198][T11017] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1530.006652][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1530.066230][T11017] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1530.125874][ T29] audit: type=1400 audit(2000000320.599:2107): avc: denied { unmount } for pid=26254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1530.129827][T11017] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1530.201200][T11017] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1530.244175][T11017] usb 7-1: string descriptor 0 read error: -22 [ 1530.281651][T11017] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1530.315628][T11017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.629422][ T29] audit: type=1400 audit(2000000320.859:2108): avc: denied { connect } for pid=26745 comm="syz.8.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1530.785664][T11017] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1530.890257][T26751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1530.965290][ T29] audit: type=1400 audit(2000000321.429:2109): avc: denied { map } for pid=26750 comm="syz.3.5065" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1531.522605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1531.530644][ C1] lec:lec_tx_timeout: lec0 [ 1531.538714][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1532.132781][T15404] block nbd0: Possible stuck request ffff888028210000: control (read@0,1024B). Runtime 120 seconds [ 1532.154721][T15404] block nbd0: Possible stuck request ffff888028210200: control (read@1024,1024B). Runtime 120 seconds [ 1532.173068][T15404] block nbd0: Possible stuck request ffff888028210400: control (read@2048,1024B). Runtime 120 seconds [ 1532.196454][T15404] block nbd0: Possible stuck request ffff888028210600: control (read@3072,1024B). Runtime 120 seconds [ 1533.216862][ T9] usb 7-1: USB disconnect, device number 101 [ 1533.370069][ T29] audit: type=1400 audit(2000000323.839:2110): avc: denied { ioctl } for pid=26776 comm="syz.6.5074" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1533.454452][ T29] audit: type=1400 audit(2000000323.909:2111): avc: denied { append } for pid=26783 comm="syz.7.5077" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1533.792609][ T29] audit: type=1400 audit(2000000324.239:2112): avc: denied { connect } for pid=26787 comm="syz.8.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1534.259922][ T24] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1534.480231][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1534.530634][ T24] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1534.560952][ T24] usb 7-1: config 0 has no interface number 0 [ 1534.598489][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1534.622865][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.648542][ T24] usb 7-1: Product: syz [ 1534.677555][ T24] usb 7-1: Manufacturer: syz [ 1534.696478][ T24] usb 7-1: SerialNumber: syz [ 1534.725992][ T24] usb 7-1: config 0 descriptor?? [ 1534.736032][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1534.757683][ T24] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input78 [ 1534.846454][T26816] syzkaller0: entered promiscuous mode [ 1534.863019][T26816] syzkaller0: entered allmulticast mode [ 1535.016756][ T9] usb 7-1: USB disconnect, device number 102 [ 1535.088635][ T29] audit: type=1400 audit(2000000325.549:2113): avc: denied { getopt } for pid=26819 comm="syz.3.5087" lport=44917 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1536.145839][T26835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1536.191247][ C1] blk_print_req_error: 4 callbacks suppressed [ 1536.191266][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.208078][ C1] buffer_io_error: 18 callbacks suppressed [ 1536.208091][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1536.223060][T26837] Buffer I/O error on dev loop9, logical block 1, async page read [ 1536.242341][T26837] Buffer I/O error on dev loop9, logical block 1, async page read [ 1536.250640][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.261367][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1536.364979][T26837] Buffer I/O error on dev loop9, logical block 1, async page read [ 1536.380860][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.391617][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1536.401082][T26837] Buffer I/O error on dev loop9, logical block 1, async page read [ 1536.409660][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.420304][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1536.453328][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.463968][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1536.474860][T26837] Buffer I/O error on dev loop9, logical block 1, async page read [ 1536.499281][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.512849][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.549290][T26837] ldm_validate_partition_table(): Disk read failed. [ 1536.555992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1536.556017][ C1] lec:lec_tx_timeout: lec0 [ 1536.564321][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1536.576629][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.723432][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.735157][ T29] audit: type=1400 audit(2000000327.209:2114): avc: denied { mount } for pid=26851 comm="syz.3.5094" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1536.758303][T26853] overlay: Unknown parameter '/' [ 1536.764836][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1536.785997][T26837] Dev loop9: unable to read RDB block 0 [ 1536.849798][T26837] loop9: unable to read partition table [ 1536.861823][ T29] audit: type=1400 audit(2000000327.229:2115): avc: denied { mounton } for pid=26851 comm="syz.3.5094" path="/399/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1536.909066][T26837] loop9: partition table beyond EOD, truncated [ 1537.667610][T26056] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1537.732213][ T29] audit: type=1400 audit(2000000328.199:2116): avc: denied { unmount } for pid=18671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1537.834693][T26056] usb 9-1: Using ep0 maxpacket: 8 [ 1537.856904][T26056] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1537.960337][T26056] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1538.004782][T26056] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1538.059478][T26056] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.107973][T26056] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1538.157140][T26056] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1538.197589][T26056] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1538.253938][T26056] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1539.255772][T26056] usb 9-1: unable to read config index 1 descriptor/start: -71 [ 1539.282855][T26056] usb 9-1: can't read configurations, error -71 [ 1541.561962][T26903] FAULT_INJECTION: forcing a failure. [ 1541.561962][T26903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1541.575640][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1541.575671][ C1] lec:lec_tx_timeout: lec0 [ 1541.584076][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1541.707308][T26903] CPU: 1 UID: 0 PID: 26903 Comm: syz.3.5106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1541.707341][T26903] Tainted: [L]=SOFTLOCKUP [ 1541.707348][T26903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1541.707358][T26903] Call Trace: [ 1541.707364][T26903] [ 1541.707371][T26903] dump_stack_lvl+0x100/0x190 [ 1541.707412][T26903] should_fail_ex.cold+0x5/0xa [ 1541.707431][T26903] ? prepare_alloc_pages+0x16d/0x5f0 [ 1541.707453][T26903] should_fail_alloc_page+0xeb/0x140 [ 1541.707481][T26903] prepare_alloc_pages+0x1f0/0x5f0 [ 1541.707503][T26903] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1541.707529][T26903] ? try_to_migrate_one+0x142e/0x37f0 [ 1541.707559][T26903] ? __pfx_try_to_migrate_one+0x10/0x10 [ 1541.707580][T26903] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1541.707619][T26903] ? __up_read+0x2c5/0x700 [ 1541.707639][T26903] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1541.707665][T26903] ? policy_nodemask+0xed/0x4f0 [ 1541.707693][T26903] alloc_pages_mpol+0x1fb/0x550 [ 1541.707721][T26903] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1541.707754][T26903] folio_alloc_mpol_noprof+0x36/0x340 [ 1541.707775][T26903] alloc_migration_target_by_mpol+0x2c1/0x650 [ 1541.707797][T26903] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1541.707818][T26903] ? __pfx___might_resched+0x10/0x10 [ 1541.707843][T26903] migrate_pages_batch+0x4f2/0x4530 [ 1541.707864][T26903] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1541.707893][T26903] ? css_rstat_updated+0x1ce/0x5a0 [ 1541.707916][T26903] ? walk_pgd_range+0x1115/0x1eb0 [ 1541.707945][T26903] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1541.707962][T26903] ? __pfx_css_rstat_updated+0x10/0x10 [ 1541.707991][T26903] ? __lock_acquire+0x4a5/0x2630 [ 1541.708030][T26903] migrate_pages_sync+0x12c/0x880 [ 1541.708050][T26903] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1541.708074][T26903] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1541.708100][T26903] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1541.708119][T26903] ? try_to_wake_up+0xcf1/0x1a80 [ 1541.708143][T26903] ? rcu_is_watching+0x12/0xc0 [ 1541.708164][T26903] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1541.708191][T26903] ? lockdep_hardirqs_on+0x78/0x100 [ 1541.708212][T26903] migrate_pages+0x1aae/0x28a0 [ 1541.708235][T26903] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1541.708262][T26903] ? __pfx_migrate_pages+0x10/0x10 [ 1541.708280][T26903] ? rwsem_wake.isra.0+0xc5/0x120 [ 1541.708300][T26903] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 1541.708318][T26903] ? find_held_lock+0x2b/0x80 [ 1541.708343][T26903] ? do_mbind+0x557/0xfd0 [ 1541.708366][T26903] ? up_write+0x290/0x4f0 [ 1541.708387][T26903] do_mbind+0x5a6/0xfd0 [ 1541.708413][T26903] ? __pfx_do_mbind+0x10/0x10 [ 1541.708429][T26903] ? find_held_lock+0x2b/0x80 [ 1541.708450][T26903] ? ksys_write+0x190/0x250 [ 1541.708474][T26903] ? ksys_write+0x190/0x250 [ 1541.708510][T26903] ? __pfx_get_nodes+0x10/0x10 [ 1541.708534][T26903] ? __fget_files+0x21f/0x3d0 [ 1541.708556][T26903] kernel_mbind+0x1b7/0x200 [ 1541.708577][T26903] ? __pfx_kernel_mbind+0x10/0x10 [ 1541.708604][T26903] do_syscall_64+0x106/0xf80 [ 1541.708621][T26903] ? clear_bhb_loop+0x40/0x90 [ 1541.708643][T26903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.708661][T26903] RIP: 0033:0x7f78e1b9c799 [ 1541.708678][T26903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.708694][T26903] RSP: 002b:00007f78e2a94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1541.708713][T26903] RAX: ffffffffffffffda RBX: 00007f78e1e15fa0 RCX: 00007f78e1b9c799 [ 1541.708724][T26903] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 1541.708734][T26903] RBP: 00007f78e2a94090 R08: 0000000000000000 R09: 0000000000000002 [ 1541.708745][T26903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.708755][T26903] R13: 00007f78e1e16038 R14: 00007f78e1e15fa0 R15: 00007ffd6c6e6468 [ 1541.708779][T26903] [ 1542.369233][T26929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1542.610492][ T29] audit: type=1400 audit(2000000333.069:2117): avc: denied { create } for pid=26931 comm="syz.1.5114" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1542.746744][T26937] netlink: 124 bytes leftover after parsing attributes in process `syz.8.5109'. [ 1542.853748][T26932] block device autoloading is deprecated and will be removed. [ 1542.887445][ T29] audit: type=1400 audit(2000000333.249:2118): avc: denied { write } for pid=26931 comm="syz.1.5114" name="file0" dev="tmpfs" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1543.032110][ T29] audit: type=1400 audit(2000000333.249:2119): avc: denied { open } for pid=26931 comm="syz.1.5114" path="/454/file0" dev="tmpfs" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1543.075389][ T29] audit: type=1400 audit(2000000333.479:2120): avc: denied { unlink } for pid=17824 comm="syz-executor" name="file0" dev="tmpfs" ino=2390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1543.294101][T26946] FAULT_INJECTION: forcing a failure. [ 1543.294101][T26946] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.311305][T26946] CPU: 1 UID: 0 PID: 26946 Comm: syz.7.5117 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.311332][T26946] Tainted: [L]=SOFTLOCKUP [ 1543.311338][T26946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1543.311349][T26946] Call Trace: [ 1543.311354][T26946] [ 1543.311361][T26946] dump_stack_lvl+0x100/0x190 [ 1543.311394][T26946] should_fail_ex.cold+0x5/0xa [ 1543.311417][T26946] should_failslab+0xc2/0x120 [ 1543.311442][T26946] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1543.311463][T26946] ? flow_indr_dev_setup_offload+0x27f/0x8d0 [ 1543.311493][T26946] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 1543.311511][T26946] flow_indr_dev_setup_offload+0x27f/0x8d0 [ 1543.311543][T26946] tcf_block_offload_cmd.isra.0+0x2ce/0x310 [ 1543.311565][T26946] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 1543.311593][T26946] ? __pfx_down_write+0x10/0x10 [ 1543.311620][T26946] tcf_block_get_ext+0x7ed/0x1950 [ 1543.311651][T26946] tcf_block_get+0xa8/0x100 [ 1543.311669][T26946] ? __pfx_tcf_block_get+0x10/0x10 [ 1543.311687][T26946] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 1543.311711][T26946] ? lockdep_init_map_type+0x5c/0x250 [ 1543.311728][T26946] ? timer_init_key+0x150/0x340 [ 1543.311755][T26946] fq_pie_init+0x4e2/0x910 [ 1543.311772][T26946] ? lockdep_rtnl_is_held+0x26/0x40 [ 1543.311793][T26946] ? __pfx_fq_pie_init+0x10/0x10 [ 1543.311810][T26946] qdisc_create+0x47b/0x1090 [ 1543.311829][T26946] ? do_raw_read_unlock+0x3f/0x70 [ 1543.311849][T26946] tc_modify_qdisc+0xdcf/0x2120 [ 1543.311872][T26946] ? __mutex_lock+0x26a/0x1b90 [ 1543.311892][T26946] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1543.311912][T26946] ? __lock_acquire+0x4a5/0x2630 [ 1543.311953][T26946] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1543.311975][T26946] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1543.311998][T26946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1543.312022][T26946] ? ref_tracker_free+0x37e/0x6c0 [ 1543.312049][T26946] netlink_rcv_skb+0x159/0x420 [ 1543.312068][T26946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1543.312086][T26946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1543.312116][T26946] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1543.312141][T26946] netlink_unicast+0x5aa/0x870 [ 1543.312165][T26946] ? __pfx_netlink_unicast+0x10/0x10 [ 1543.312195][T26946] netlink_sendmsg+0x8b0/0xda0 [ 1543.312220][T26946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.312239][T26946] ? __might_fault+0xa0/0x140 [ 1543.312271][T26946] ____sys_sendmsg+0xa54/0xc30 [ 1543.312297][T26946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1543.312332][T26946] ___sys_sendmsg+0x190/0x1e0 [ 1543.312358][T26946] ? __pfx____sys_sendmsg+0x10/0x10 [ 1543.312413][T26946] __sys_sendmsg+0x170/0x220 [ 1543.312431][T26946] ? __pfx___sys_sendmsg+0x10/0x10 [ 1543.312466][T26946] do_syscall_64+0x106/0xf80 [ 1543.312483][T26946] ? clear_bhb_loop+0x40/0x90 [ 1543.312509][T26946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.312526][T26946] RIP: 0033:0x7ff8a4f9c799 [ 1543.312542][T26946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.312557][T26946] RSP: 002b:00007ff8a5e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1543.312574][T26946] RAX: ffffffffffffffda RBX: 00007ff8a5215fa0 RCX: 00007ff8a4f9c799 [ 1543.312585][T26946] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1543.312595][T26946] RBP: 00007ff8a5e54090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.312605][T26946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.312615][T26946] R13: 00007ff8a5216038 R14: 00007ff8a5215fa0 R15: 00007ffc55e42a18 [ 1543.312647][T26946] [ 1543.752625][ T5868] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1543.942034][T26953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1544.102863][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 1544.197416][ T5868] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.308676][ T5868] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1544.357445][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.368224][T26955] openvswitch: netlink: IP tunnel dst address not specified [ 1544.408689][ T5868] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.467422][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.513264][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.559331][ T5868] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1544.583304][ T5868] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1544.591399][ T5868] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1544.599142][ T5868] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1544.620653][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1544.680661][T26962] fuse: Unknown parameter '™žpý˝žąĹ‚Ď—™¦·ËÇ”CâÉQIÜEů*[3ŃČ»Ë9ľPň±$FĆ\~;{†mČ6-7˘Y^-Âbe5űźŰ7íĘ­§N–ŃčFŤ;Ł`Ž¶' [ 1544.694428][ T5868] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1544.732801][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1544.749320][ T29] audit: type=1400 audit(2000000335.209:2121): avc: denied { listen } for pid=26963 comm="syz.7.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1544.774793][ T5868] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1544.788956][ T29] audit: type=1400 audit(2000000335.249:2122): avc: denied { execute } for pid=26963 comm="syz.7.5124" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=119300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1544.817188][ T5868] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1544.830908][ T5868] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1545.156465][ T29] audit: type=1400 audit(2000000335.629:2123): avc: denied { mount } for pid=26956 comm="syz.1.5122" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1545.176603][T26972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.188150][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5124'. [ 1545.504474][ T5868] usb 7-1: unable to read config index 2 descriptor/start: -71 [ 1545.713636][ T29] audit: type=1400 audit(2000000336.189:2124): avc: denied { ioctl } for pid=26977 comm="syz.8.5127" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1545.876780][ T5868] usb 7-1: can't read configurations, error -71 [ 1546.592682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1546.600818][ C1] lec:lec_tx_timeout: lec0 [ 1546.605686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1546.722895][T26985] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5129'. [ 1547.297418][T27003] FAULT_INJECTION: forcing a failure. [ 1547.297418][T27003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.334571][T27003] CPU: 1 UID: 0 PID: 27003 Comm: syz.3.5133 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.334603][T27003] Tainted: [L]=SOFTLOCKUP [ 1547.334609][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1547.334620][T27003] Call Trace: [ 1547.334627][T27003] [ 1547.334633][T27003] dump_stack_lvl+0x100/0x190 [ 1547.334666][T27003] should_fail_ex.cold+0x5/0xa [ 1547.334689][T27003] _copy_from_user+0x2e/0xd0 [ 1547.334714][T27003] io_register_mem_region+0x12d/0x4a0 [ 1547.334734][T27003] ? __pfx_io_register_mem_region+0x10/0x10 [ 1547.334755][T27003] ? __pfx___mutex_lock+0x10/0x10 [ 1547.334774][T27003] ? find_held_lock+0x2b/0x80 [ 1547.334813][T27003] __do_sys_io_uring_register+0x103e/0x1ac0 [ 1547.334837][T27003] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1547.334863][T27003] ? __fget_files+0x21f/0x3d0 [ 1547.334884][T27003] ? fput+0x79/0x100 [ 1547.334902][T27003] ? ksys_write+0x1ac/0x250 [ 1547.334926][T27003] ? __pfx_ksys_write+0x10/0x10 [ 1547.334957][T27003] do_syscall_64+0x106/0xf80 [ 1547.334972][T27003] ? clear_bhb_loop+0x40/0x90 [ 1547.334994][T27003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.335011][T27003] RIP: 0033:0x7f78e1b9c799 [ 1547.335026][T27003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.335041][T27003] RSP: 002b:00007f78e2a94028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1547.335059][T27003] RAX: ffffffffffffffda RBX: 00007f78e1e15fa0 RCX: 00007f78e1b9c799 [ 1547.335070][T27003] RDX: 0000200000000380 RSI: 0000000000000022 RDI: 0000000000000003 [ 1547.335080][T27003] RBP: 00007f78e2a94090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.335089][T27003] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1547.335099][T27003] R13: 00007f78e1e16038 R14: 00007f78e1e15fa0 R15: 00007ffd6c6e6468 [ 1547.335122][T27003] [ 1548.577440][ T29] audit: type=1400 audit(2000000339.049:2125): avc: denied { bind } for pid=27017 comm="syz.3.5137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1548.619806][T27019] comedi comedi3: pcmmio: I/O port conflict (0x2,32) [ 1551.491084][ T29] audit: type=1400 audit(2000000341.959:2126): avc: denied { create } for pid=27046 comm="syz.7.5147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1551.522901][T27047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5147'. [ 1551.595781][T26056] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1551.612564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.620686][ C1] lec:lec_tx_timeout: lec0 [ 1551.626180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1551.752832][T26056] usb 7-1: Using ep0 maxpacket: 8 [ 1551.760960][T27054] fuse: Unknown parameter '™žpý˝žąĹ‚Ď—™¦·ËÇ”CâÉQIÜEů*[3ŃČ»Ë9ľPň±$FĆ\~;{†mČ6-7˘Y^-Âbe5űźŰ7íĘ­§N–ŃčFŤ;Ł`Ž¶' [ 1552.091846][T26056] usb 7-1: too many endpoints for config 0 interface 0 altsetting 24: 130, using maximum allowed: 30 [ 1552.108567][T26056] usb 7-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.250757][T27057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1552.341631][T26056] usb 7-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1552.554367][T26056] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1552.693275][ T29] audit: type=1400 audit(2000000343.109:2127): avc: denied { read } for pid=27059 comm="syz.1.5150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1552.803753][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1552.996973][T26056] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1553.029209][T26056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.095716][T26056] usb 7-1: config 0 descriptor?? [ 1553.142809][ T24] usb 9-1: device descriptor read/64, error -71 [ 1553.449169][T27071] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5152'. [ 1553.486072][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1553.622731][ T24] usb 9-1: device descriptor read/64, error -71 [ 1553.732816][ T24] usb usb9-port1: attempt power cycle [ 1553.827636][T26056] usb 7-1: can't set config #0, error -71 [ 1553.915177][T26056] usb 7-1: USB disconnect, device number 105 [ 1554.343291][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1554.507954][ T24] usb 9-1: device descriptor read/8, error -71 [ 1554.766907][ T5806] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1554.775840][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1555.960107][T27088] openvswitch: netlink: IP tunnel dst address not specified [ 1556.139525][ T24] usb 9-1: device descriptor read/8, error -71 [ 1556.248257][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5160'. [ 1556.272687][ T24] usb usb9-port1: unable to enumerate USB device [ 1556.632584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1556.640605][ C1] lec:lec_tx_timeout: lec0 [ 1556.645429][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1556.919768][ T29] audit: type=1400 audit(2000000347.389:2128): avc: denied { mounton } for pid=27089 comm="syz.1.5159" path="/file0" dev="ramfs" ino=119812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1557.108145][T27109] can0: slcan on pty32. [ 1557.463185][T27104] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1557.473012][T21281] Bluetooth: hci5: command 0x0406 tx timeout [ 1557.530985][T27104] overlayfs: failed to set xattr on upper [ 1557.577746][T27104] overlayfs: ...falling back to redirect_dir=nofollow. [ 1557.608883][T27104] overlayfs: ...falling back to index=off. [ 1557.640183][T27104] overlayfs: ...falling back to uuid=null. [ 1557.701214][T27104] overlayfs: failed to clone lowerpath [ 1558.122618][T26056] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1558.392648][T26056] usb 9-1: Using ep0 maxpacket: 16 [ 1558.757376][T26056] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.773072][T26056] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1558.785089][T26056] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1558.795007][T26056] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.921855][T26056] usb 9-1: config 0 descriptor?? [ 1559.056752][T27128] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5166'. [ 1559.274002][T26056] usbhid 9-1:0.0: can't add hid device: -71 [ 1559.280098][T26056] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1559.326603][T26056] usb 9-1: USB disconnect, device number 8 [ 1560.716861][T27106] can0 (unregistered): slcan off pty32. [ 1560.873416][T27153] siw: device registration error -23 [ 1560.888623][T27153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5169'. [ 1562.123471][T27156] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5173'. [ 1562.182985][T15404] block nbd0: Possible stuck request ffff888028210000: control (read@0,1024B). Runtime 150 seconds [ 1562.202662][T15404] block nbd0: Possible stuck request ffff888028210200: control (read@1024,1024B). Runtime 150 seconds [ 1562.213739][T15404] block nbd0: Possible stuck request ffff888028210400: control (read@2048,1024B). Runtime 150 seconds [ 1562.232746][T15404] block nbd0: Possible stuck request ffff888028210600: control (read@3072,1024B). Runtime 150 seconds [ 1562.422563][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1562.430662][ C1] lec:lec_tx_timeout: lec0 [ 1562.435759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1563.952906][ T29] audit: type=1400 audit(2000000354.419:2129): avc: denied { audit_write } for pid=27184 comm="syz.1.5180" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1564.025111][ T29] audit: type=1400 audit(2000000354.489:2130): avc: denied { watch watch_reads } for pid=27184 comm="syz.1.5180" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1564.708783][T27211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1565.186784][T27221] Bluetooth: MGMT ver 1.23 [ 1565.761568][T27230] siw: device registration error -23 [ 1566.719731][ T29] audit: type=1400 audit(2000000357.189:2131): avc: denied { setattr } for pid=27235 comm="syz.6.5188" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1566.827836][ T29] audit: type=1400 audit(2000000357.299:2132): avc: denied { write } for pid=27235 comm="syz.6.5188" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1567.194433][ T29] audit: type=1400 audit(2000000357.329:2133): avc: denied { open } for pid=27235 comm="syz.6.5188" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1567.303381][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1567.311535][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 1567.462572][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1567.464095][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1567.470656][ C1] lec:lec_tx_timeout: lec0 [ 1567.479536][T27260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1567.484337][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1567.833528][T27266] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1567.848357][T27266] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1568.092584][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1568.269229][T27286] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5200'. [ 1568.398098][ T9] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1568.441250][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1568.480576][ T9] usb 9-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 1568.553801][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.602469][ T9] usb 9-1: config 0 descriptor?? [ 1568.643678][T27291] FAULT_INJECTION: forcing a failure. [ 1568.643678][T27291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.656835][T27291] CPU: 1 UID: 0 PID: 27291 Comm: syz.6.5197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.656863][T27291] Tainted: [L]=SOFTLOCKUP [ 1568.656870][T27291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1568.656880][T27291] Call Trace: [ 1568.656887][T27291] [ 1568.656896][T27291] dump_stack_lvl+0x100/0x190 [ 1568.656930][T27291] should_fail_ex.cold+0x5/0xa [ 1568.656954][T27291] _copy_from_user+0x2e/0xd0 [ 1568.656980][T27291] vhost_vsock_dev_ioctl+0x116/0xb60 [ 1568.657001][T27291] ? __fget_files+0x215/0x3d0 [ 1568.657019][T27291] ? hook_file_ioctl_common+0x146/0x410 [ 1568.657044][T27291] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1568.657071][T27291] ? selinux_file_ioctl+0xb4/0x290 [ 1568.657093][T27291] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 1568.657115][T27291] __x64_sys_ioctl+0x18e/0x210 [ 1568.657143][T27291] do_syscall_64+0x106/0xf80 [ 1568.657161][T27291] ? clear_bhb_loop+0x40/0x90 [ 1568.657185][T27291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.657203][T27291] RIP: 0033:0x7f47a9d9c799 [ 1568.657219][T27291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.657235][T27291] RSP: 002b:00007f47aabd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1568.657253][T27291] RAX: ffffffffffffffda RBX: 00007f47aa016180 RCX: 00007f47a9d9c799 [ 1568.657265][T27291] RDX: 0000200000000040 RSI: 000000004004af61 RDI: 0000000000000003 [ 1568.657275][T27291] RBP: 00007f47aabd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.657286][T27291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.657297][T27291] R13: 00007f47aa016218 R14: 00007f47aa016180 R15: 00007ffca887a7e8 [ 1568.657322][T27291] [ 1569.070909][T27299] FAULT_INJECTION: forcing a failure. [ 1569.070909][T27299] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.084289][T27300] netlink: 'syz.1.5202': attribute type 10 has an invalid length. [ 1569.092175][T27300] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1569.120439][T27299] CPU: 0 UID: 0 PID: 27299 Comm: syz.6.5203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.120475][T27299] Tainted: [L]=SOFTLOCKUP [ 1569.120480][T27299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1569.120490][T27299] Call Trace: [ 1569.120496][T27299] [ 1569.120503][T27299] dump_stack_lvl+0x100/0x190 [ 1569.120536][T27299] should_fail_ex.cold+0x5/0xa [ 1569.120557][T27299] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1569.120577][T27299] should_failslab+0xc2/0x120 [ 1569.120603][T27299] __kmalloc_noprof+0xe0/0x850 [ 1569.120630][T27299] tomoyo_realpath_from_path+0xb6/0x690 [ 1569.120654][T27299] tomoyo_path_number_perm+0x23c/0x580 [ 1569.120680][T27299] ? tomoyo_path_number_perm+0x22e/0x580 [ 1569.120708][T27299] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1569.120758][T27299] ? find_held_lock+0x2b/0x80 [ 1569.120779][T27299] ? __fget_files+0x215/0x3d0 [ 1569.120793][T27299] ? hook_file_ioctl_common+0x146/0x410 [ 1569.120820][T27299] ? __fget_files+0x21f/0x3d0 [ 1569.120839][T27299] security_file_ioctl+0xd3/0x230 [ 1569.120859][T27299] __x64_sys_ioctl+0xb7/0x210 [ 1569.120884][T27299] do_syscall_64+0x106/0xf80 [ 1569.120901][T27299] ? clear_bhb_loop+0x40/0x90 [ 1569.120921][T27299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.120938][T27299] RIP: 0033:0x7f47a9d9c799 [ 1569.120954][T27299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.120970][T27299] RSP: 002b:00007f47aac1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1569.120988][T27299] RAX: ffffffffffffffda RBX: 00007f47aa015fa0 RCX: 00007f47a9d9c799 [ 1569.120998][T27299] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 1569.121008][T27299] RBP: 00007f47aac1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.121017][T27299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.121026][T27299] R13: 00007f47aa016038 R14: 00007f47aa015fa0 R15: 00007ffca887a7e8 [ 1569.121049][T27299] [ 1569.121082][T27299] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1569.129193][T27300] .`: entered promiscuous mode [ 1569.339091][T27300] bond_slave_0: entered promiscuous mode [ 1569.345016][T27300] bond_slave_1: entered promiscuous mode [ 1570.170576][T27306] comedi comedi0: Minor 3 could not be opened [ 1570.316741][T27323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.835868][T27323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.535338][T27349] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1571.826006][T27355] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5216'. [ 1571.943612][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1571.949638][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1571.998763][ T9] usb 9-1: USB disconnect, device number 9 [ 1572.492558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1572.500582][ C1] lec:lec_tx_timeout: lec0 [ 1572.505231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1572.592039][T27365] binder: 27361:27365 ioctl 4018620d 0 returned -22 [ 1572.656491][T27367] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5221'. [ 1573.122298][T27376] netlink: 'syz.7.5223': attribute type 10 has an invalid length. [ 1573.130376][T27376] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5223'. [ 1573.454154][ T29] audit: type=1400 audit(2000000363.589:2134): avc: denied { write } for pid=27372 comm="syz.7.5223" path="socket:[120341]" dev="sockfs" ino=120341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1574.482395][T27396] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1574.483440][T27384] random: crng reseeded on system resumption [ 1574.504938][ T29] audit: type=1400 audit(2000000364.949:2135): avc: denied { append } for pid=27375 comm="syz.3.5224" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1574.538630][T27396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5227'. [ 1575.760833][T27411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1575.795933][T27411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1575.994372][ T5920] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1576.165910][ T5920] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1576.178606][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.439914][ T5920] usb 9-1: Product: syz [ 1576.448111][ T5920] usb 9-1: Manufacturer: syz [ 1576.468430][ T5920] usb 9-1: SerialNumber: syz [ 1576.509443][ T5920] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1576.519281][ T29] audit: type=1400 audit(2000000366.989:2136): avc: denied { firmware_load } for pid=792 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1576.571726][ T792] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1577.364531][ T5920] usb 9-1: USB disconnect, device number 10 [ 1577.512555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1577.520597][ C1] lec:lec_tx_timeout: lec0 [ 1577.525422][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1577.584571][ T29] audit: type=1400 audit(2000000368.049:2137): avc: denied { listen } for pid=27439 comm="syz.6.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1577.645015][ T792] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1577.674983][ T792] ath9k_htc: Failed to initialize the device [ 1577.690042][ T29] audit: type=1400 audit(2000000368.059:2138): avc: denied { bind } for pid=27439 comm="syz.6.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1577.807908][ T5920] usb 9-1: ath9k_htc: USB layer deinitialized [ 1578.916493][T27446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1578.918767][T27456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.980281][T27456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.362752][T26056] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 1579.534071][T26056] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1579.545811][T26056] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1579.559035][T26056] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1579.570765][T26056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.582051][T26056] usb 7-1: config 0 descriptor?? [ 1579.597308][T27458] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1579.706696][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5245'. [ 1579.832259][T27458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.843876][T27458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.853966][T27458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.863897][T27458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.877001][T26056] usbhid 7-1:0.0: can't add hid device: -71 [ 1579.890051][T26056] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1579.927255][T26056] usb 7-1: USB disconnect, device number 106 [ 1579.986155][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1580.000268][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1580.083964][T27458] syz.6.5243 (27458): drop_caches: 4 [ 1580.332955][ T5920] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1580.365645][ T29] audit: type=1400 audit(2000000370.819:2139): avc: denied { shutdown } for pid=27483 comm="syz.1.5251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1580.398122][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1580.515458][ T29] audit: type=1400 audit(2000000370.989:2140): avc: denied { getopt } for pid=27489 comm="syz.8.5253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1580.537195][ T5920] usb 7-1: device descriptor read/64, error -71 [ 1580.842761][ T5920] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1581.126658][T27500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1581.157971][ T5920] usb 7-1: device descriptor read/64, error -71 [ 1581.216475][T27503] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1581.294187][ T5920] usb usb7-port1: attempt power cycle [ 1581.368187][T27508] tap0: tun_chr_ioctl cmd 1074025677 [ 1581.433336][T27508] tap0: linktype set to 776 [ 1581.536451][T27515] netlink: 111 bytes leftover after parsing attributes in process `syz.8.5258'. [ 1581.774425][ T5920] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1581.832765][ T5920] usb 7-1: device descriptor read/8, error -71 [ 1581.910623][T27524] ubi0: attaching mtd0 [ 1581.916756][T27524] ubi0 error: ubi_attach_mtd_dev: bad VID header (2147483647) or data offsets (-2147483585) [ 1582.008263][T27531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1582.024906][ T29] audit: type=1400 audit(2000000372.499:2141): avc: denied { read } for pid=5160 comm="acpid" name="event#" dev="devtmpfs" ino=4887 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1582.062212][T27531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.084826][ T29] audit: type=1400 audit(2000000372.499:2142): avc: denied { open } for pid=5160 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4887 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1582.124990][ T29] audit: type=1400 audit(2000000372.499:2143): avc: denied { ioctl } for pid=5160 comm="acpid" path="/dev/input/event#" dev="devtmpfs" ino=4887 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1582.315527][T27544] input: syz0 as /devices/virtual/input/input79 [ 1582.383306][ T5920] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1582.475844][T27549] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1582.511204][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1582.532576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1582.540665][ C1] lec:lec_tx_timeout: lec0 [ 1582.552612][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1582.732802][T27436] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1582.777461][ T5920] usb 7-1: config 3 has an invalid interface number: 155 but max is 0 [ 1582.795185][ T5920] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.806865][ T5920] usb 7-1: config 3 has no interface number 0 [ 1582.813534][ T5920] usb 7-1: config 3 interface 155 has no altsetting 0 [ 1582.826003][ T5920] usb 7-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1582.840469][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.850305][ T5920] usb 7-1: Product: syz [ 1582.854963][T27551] syz_tun: entered promiscuous mode [ 1582.866331][ T5920] usb 7-1: Manufacturer: syz [ 1582.871194][ T5920] usb 7-1: SerialNumber: syz [ 1582.871368][T27551] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1582.942691][T27436] usb 9-1: Using ep0 maxpacket: 8 [ 1582.950702][T27436] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1582.985360][T27436] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1583.068861][T27436] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1583.082192][T27436] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1583.096113][T27436] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1583.120293][T27436] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.382909][T27436] usb 9-1: GET_CAPABILITIES returned 0 [ 1583.435532][T27559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.453096][T27436] usbtmc 9-1:16.0: can't read capabilities [ 1583.483699][T27559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.989157][T27577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5277'. [ 1585.751528][ T29] audit: type=1400 audit(2000000376.219:2144): avc: denied { bind } for pid=27586 comm="syz.7.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1585.795582][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5279'. [ 1585.856683][ T29] audit: type=1400 audit(2000000376.219:2145): avc: denied { node_bind } for pid=27586 comm="syz.7.5279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1586.519953][T26056] usb 9-1: USB disconnect, device number 11 [ 1586.889306][ T29] audit: type=1400 audit(2000000377.359:2146): avc: denied { read } for pid=27576 comm="syz.3.5277" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1587.044044][ T29] audit: type=1400 audit(2000000377.469:2147): avc: denied { setopt } for pid=27576 comm="syz.3.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1587.239906][ T5920] uvcvideo 7-1:3.155: probe with driver uvcvideo failed with error -22 [ 1587.255763][ T5920] usb 7-1: USB disconnect, device number 110 [ 1587.358534][T27594] netlink: 'syz.8.5282': attribute type 1 has an invalid length. [ 1587.367243][T27591] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1587.511615][T27594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1587.527106][T27594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27594 comm=syz.8.5282 [ 1587.562596][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1587.570736][ C1] lec:lec_tx_timeout: lec0 [ 1587.575350][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1588.673083][T27577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1588.728688][T27577] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1588.735730][T27577] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1588.753717][T27612] overlayfs: failed to clone upperpath [ 1588.774534][T27577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1588.781367][T27577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1588.787957][T27577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1588.798169][ T5806] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1588.846733][T27577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1588.873505][T27577] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1589.009978][T27577] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1589.055968][T27577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1589.078313][T27577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1589.088875][T27577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1589.098312][T27577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1589.146710][T27621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5287'. [ 1589.229461][T27577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1589.249518][T27577] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1589.382622][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.998468][T27576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1590.042693][ T792] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1590.140877][T27636] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1590.171071][T27636] netlink: 208 bytes leftover after parsing attributes in process `syz.3.5291'. [ 1590.252704][ T792] usb 9-1: Using ep0 maxpacket: 32 [ 1590.267326][ T792] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1590.285234][ T792] usb 9-1: config 0 has no interface number 0 [ 1590.302264][ T792] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1590.320943][ T792] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1590.356444][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.383191][ T792] usb 9-1: Product: syz [ 1590.387402][ T792] usb 9-1: Manufacturer: syz [ 1590.423784][ T792] usb 9-1: SerialNumber: syz [ 1590.445368][ T792] usb 9-1: config 0 descriptor?? [ 1590.742919][ T5806] Bluetooth: hci6: command 0x0406 tx timeout [ 1590.796999][T27641] syzkaller0: entered promiscuous mode [ 1590.804730][T27641] syzkaller0: entered allmulticast mode [ 1590.814600][T27656] 9p: Could not find request transport: rÓD[}’’"Ůl¦ťŚdma¬port=0x000000000004exĺűŽ00000000000 [ 1590.825236][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 1590.825315][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 1590.912736][T21281] Bluetooth: hci4: command 0x0c1a tx timeout [ 1591.072031][T21281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1591.632170][T21281] Bluetooth: hci5: command 0x0406 tx timeout [ 1591.978280][ T29] audit: type=1800 audit(2000000382.439:2148): pid=27666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5296" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 1592.265277][ T792] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1592.282722][T15404] block nbd0: Possible stuck request ffff888028210000: control (read@0,1024B). Runtime 180 seconds [ 1592.294209][T15404] block nbd0: Possible stuck request ffff888028210200: control (read@1024,1024B). Runtime 180 seconds [ 1592.312630][T15404] block nbd0: Possible stuck request ffff888028210400: control (read@2048,1024B). Runtime 180 seconds [ 1592.332616][T15404] block nbd0: Possible stuck request ffff888028210600: control (read@3072,1024B). Runtime 180 seconds [ 1592.356414][ T792] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1592.379803][ T792] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1592.400114][ T792] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1592.443738][ T792] usb 9-1: USB disconnect, device number 12 [ 1592.582770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1592.590832][ C1] lec:lec_tx_timeout: lec0 [ 1592.595453][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1592.823218][T21281] Bluetooth: hci6: command 0x0406 tx timeout [ 1592.903349][T21281] Bluetooth: hci3: command 0x0c1a tx timeout [ 1592.985750][T21281] Bluetooth: hci4: command 0x0c1a tx timeout [ 1593.100030][T27682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.110324][T27682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.133773][T27682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.152059][T21281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1593.183940][T26056] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 1593.354666][T26056] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.362943][T26056] usb 7-1: config 0 has no interface number 0 [ 1593.369086][T26056] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1593.378335][T26056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.390703][T26056] usb 7-1: config 0 descriptor?? [ 1593.402977][T26056] usb 7-1: selecting invalid altsetting 1 [ 1593.408873][T26056] dvb_ttusb_budget: ttusb_init_controller: error [ 1593.416353][T26056] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1593.477273][T26056] DVB: Unable to find symbol cx22700_attach() [ 1593.517005][T26056] DVB: Unable to find symbol tda10046_attach() [ 1593.524250][T26056] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1593.639322][ T29] audit: type=1400 audit(2000000384.099:2149): avc: denied { connect } for pid=27679 comm="syz.6.5299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1593.654399][T27680] fuse: Bad value for 'group_id' [ 1593.678749][T27680] fuse: Bad value for 'group_id' [ 1593.713044][T21281] Bluetooth: hci5: command 0x0406 tx timeout [ 1593.721976][ T5920] usb 7-1: USB disconnect, device number 111 [ 1593.923151][T27436] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1594.081998][T27436] usb 9-1: device descriptor read/64, error -71 [ 1594.405337][T27436] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1594.572774][T27436] usb 9-1: device descriptor read/64, error -71 [ 1594.687561][T27436] usb usb9-port1: attempt power cycle [ 1595.037416][T27436] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1595.062761][T21281] Bluetooth: hci4: command 0x0c1a tx timeout [ 1595.079697][T27436] usb 9-1: device descriptor read/8, error -71 [ 1595.539037][T21281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1595.669888][T27436] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1595.713284][T27436] usb 9-1: device descriptor read/8, error -71 [ 1595.824320][T27436] usb usb9-port1: unable to enumerate USB device [ 1597.547634][T27436] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1597.602546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1597.610565][ C1] lec:lec_tx_timeout: lec0 [ 1597.622702][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1597.631725][T27712] overlay: Unknown parameter 'appraise' [ 1597.999656][T21281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1598.058297][T27436] usb 7-1: device descriptor read/64, error -71 [ 1598.300127][ T29] audit: type=1400 audit(2000000388.769:2150): avc: denied { link } for pid=27718 comm="syz.8.5310" name="#3c" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1598.302602][T27436] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1598.390592][ T29] audit: type=1400 audit(2000000388.859:2151): avc: denied { rename } for pid=27718 comm="syz.8.5310" name="#3d" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1598.878157][T27732] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5312'. [ 1599.012651][T27436] usb 7-1: device descriptor read/64, error -71 [ 1599.123580][T27436] usb usb7-port1: attempt power cycle [ 1599.488124][T27436] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1599.513093][T27436] usb 7-1: device descriptor read/8, error -71 [ 1599.535340][T27738] overlayfs: failed to clone upperpath [ 1599.791173][ T29] audit: type=1400 audit(2000000390.259:2152): avc: denied { setattr } for pid=27748 comm="syz.1.5319" name="RAW" dev="sockfs" ino=122188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1599.826762][T27747] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5316'. [ 1600.030794][T21281] Bluetooth: hci0: command 0x0c1a tx timeout [ 1600.292669][ T29] audit: type=1400 audit(2000000390.759:2153): avc: denied { write } for pid=27755 comm="syz.6.5321" dev="sockfs" ino=121814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1600.562949][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5324'. [ 1600.590441][T27767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5324'. [ 1600.617619][T27767] netlink: 'syz.1.5324': attribute type 19 has an invalid length. [ 1600.629432][T27767] netlink: 'syz.1.5324': attribute type 20 has an invalid length. [ 1600.830701][T27772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27772 comm=syz.6.5325 [ 1601.363920][T27768] orangefs_mount: mount request failed with -4 [ 1602.632542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1602.641119][ C1] lec:lec_tx_timeout: lec0 [ 1602.645817][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1602.987760][T27800] veth0: entered promiscuous mode [ 1602.995525][T27793] veth0: left promiscuous mode [ 1603.111904][T27805] overlayfs: failed to clone upperpath [ 1603.356703][T26056] IPVS: starting estimator thread 0... [ 1603.367574][T27811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5338'. [ 1603.376777][T27811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5338'. [ 1603.444426][T27814] IPVS: using max 74 ests per chain, 177600 per kthread [ 1603.934928][T27828] netlink: 512 bytes leftover after parsing attributes in process `syz.6.5341'. [ 1604.216862][T27837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5344'. [ 1604.243672][T27839] overlayfs: workdir and upperdir must reside under the same mount [ 1605.132721][T27845] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5346'. [ 1605.350339][ T29] audit: type=1804 audit(2000000395.819:2154): pid=27850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5348" name="/newroot/87/bus/bus" dev="overlay" ino=475 res=1 errno=0 [ 1605.662621][T26056] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1605.832991][T26056] usb 7-1: Using ep0 maxpacket: 32 [ 1605.857529][T26056] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1605.874013][T26056] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.875175][T27861] dlm: no local IP address has been set [ 1605.890959][T27861] dlm: cannot start dlm midcomms -107 [ 1605.893384][T26056] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1605.913285][T27861] openvswitch: netlink: IP tunnel dst address not specified [ 1605.922557][T26056] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.930613][T26056] usb 7-1: Product: syz [ 1605.958024][T26056] usb 7-1: Manufacturer: syz [ 1605.962939][T26056] usb 7-1: SerialNumber: syz [ 1606.214252][T26056] usb 7-1: Not enough endpoints found in device, aborting! [ 1606.690467][T26056] usb 7-1: USB disconnect, device number 116 [ 1608.052998][ T29] audit: type=1400 audit(2000000398.529:2155): avc: denied { ioctl } for pid=27893 comm="syz.8.5361" path="socket:[122504]" dev="sockfs" ino=122504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1608.107841][ T29] audit: type=1400 audit(2000000398.529:2156): avc: denied { write } for pid=27893 comm="syz.8.5361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1608.374571][T27902] FAULT_INJECTION: forcing a failure. [ 1608.374571][T27902] name failslab, interval 1, probability 0, space 0, times 0 [ 1608.416145][T27902] CPU: 0 UID: 0 PID: 27902 Comm: syz.7.5365 Tainted: G L syzkaller #0 PREEMPT(full) [ 1608.416175][T27902] Tainted: [L]=SOFTLOCKUP [ 1608.416181][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1608.416192][T27902] Call Trace: [ 1608.416198][T27902] [ 1608.416206][T27902] dump_stack_lvl+0x100/0x190 [ 1608.416239][T27902] should_fail_ex.cold+0x5/0xa [ 1608.416261][T27902] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1608.416280][T27902] should_failslab+0xc2/0x120 [ 1608.416311][T27902] __kmalloc_noprof+0xe0/0x850 [ 1608.416339][T27902] tomoyo_realpath_from_path+0xb6/0x690 [ 1608.416363][T27902] tomoyo_path_number_perm+0x23c/0x580 [ 1608.416388][T27902] ? tomoyo_path_number_perm+0x22e/0x580 [ 1608.416416][T27902] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1608.416466][T27902] ? find_held_lock+0x2b/0x80 [ 1608.416487][T27902] ? __fget_files+0x215/0x3d0 [ 1608.416502][T27902] ? hook_file_ioctl_common+0x146/0x410 [ 1608.416530][T27902] ? __fget_files+0x21f/0x3d0 [ 1608.416552][T27902] security_file_ioctl+0xd3/0x230 [ 1608.416573][T27902] __x64_sys_ioctl+0xb7/0x210 [ 1608.416599][T27902] do_syscall_64+0x106/0xf80 [ 1608.416618][T27902] ? clear_bhb_loop+0x40/0x90 [ 1608.416640][T27902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.416659][T27902] RIP: 0033:0x7ff8a4f9c799 [ 1608.416674][T27902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.416692][T27902] RSP: 002b:00007ff8a5e54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1608.416710][T27902] RAX: ffffffffffffffda RBX: 00007ff8a5215fa0 RCX: 00007ff8a4f9c799 [ 1608.416721][T27902] RDX: 0000200000000000 RSI: 00000000000089e3 RDI: 0000000000000004 [ 1608.416732][T27902] RBP: 00007ff8a5e54090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.416742][T27902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.416752][T27902] R13: 00007ff8a5216038 R14: 00007ff8a5215fa0 R15: 00007ffc55e42a18 [ 1608.416778][T27902] [ 1608.416786][T27902] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1608.432514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1608.444007][ T29] audit: type=1400 audit(2000000398.919:2157): avc: denied { ioctl } for pid=27901 comm="syz.7.5365" path="socket:[122533]" dev="sockfs" ino=122533 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1608.446004][ C1] lec:lec_tx_timeout: lec0 [ 1608.660313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1609.186547][T18650] IPVS: starting estimator thread 0... [ 1609.592580][T27916] IPVS: using max 75 ests per chain, 180000 per kthread [ 1609.646509][ T792] IPVS: starting estimator thread 0... [ 1609.762647][T27921] IPVS: using max 72 ests per chain, 172800 per kthread [ 1610.388988][ T29] audit: type=1800 audit(2000000400.839:2158): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5371" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1610.743257][T18650] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1610.839536][T27931] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1611.003438][T18650] usb 7-1: Using ep0 maxpacket: 16 [ 1611.014267][T18650] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.032191][T27934] dlm: no local IP address has been set [ 1611.037846][T27934] dlm: cannot start dlm midcomms -107 [ 1611.045378][T27934] openvswitch: netlink: IP tunnel dst address not specified [ 1611.057607][T18650] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1611.068017][T18650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.076976][T18650] usb 7-1: Product: syz [ 1611.084509][T18650] usb 7-1: Manufacturer: syz [ 1611.095137][T18650] usb 7-1: SerialNumber: syz [ 1611.119049][T18650] usb 7-1: config 0 descriptor?? [ 1611.146669][T18650] mcba_usb 7-1:0.0: Can't find endpoints [ 1611.150837][ T29] audit: type=1400 audit(2000000401.619:2159): avc: denied { map } for pid=27935 comm="syz.8.5375" path="socket:[122657]" dev="sockfs" ino=122657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1611.178436][ T29] audit: type=1400 audit(2000000401.659:2160): avc: denied { read accept } for pid=27935 comm="syz.8.5375" path="socket:[122657]" dev="sockfs" ino=122657 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1611.229376][ T29] audit: type=1400 audit(2000000401.679:2161): avc: denied { read } for pid=27935 comm="syz.8.5375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1611.256160][ T29] audit: type=1400 audit(2000000401.679:2162): avc: denied { read } for pid=27935 comm="syz.8.5375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1611.396017][T26058] usb 7-1: USB disconnect, device number 117 [ 1611.512704][ T792] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1611.561326][ T29] audit: type=1400 audit(2000000402.029:2163): avc: denied { write } for pid=27939 comm="syz.1.5376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1611.583148][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1611.593723][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1611.686800][ T792] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1611.697621][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.705755][ T792] usb 9-1: Product: syz [ 1611.710116][ T792] usb 9-1: Manufacturer: syz [ 1611.714796][ T792] usb 9-1: SerialNumber: syz [ 1611.881893][T18650] usb 4-1: USB disconnect, device number 4 [ 1612.025758][ T792] rtl8150 9-1:1.0: couldn't reset the device [ 1612.049384][ T792] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 1612.078377][ T792] usb 9-1: USB disconnect, device number 17 [ 1612.102049][T27949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1612.171119][T27949] tipc: Started in network mode [ 1612.190533][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1612.202368][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1612.211605][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1612.219364][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1612.242729][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1612.250291][T27949] tipc: Node identity aa6d1e495c4, cluster identity 4711 [ 1612.292854][T27949] tipc: Enabled bearer , priority 0 [ 1612.299763][T27954] syzkaller0: entered promiscuous mode [ 1612.306459][T27954] syzkaller0: entered allmulticast mode [ 1612.402675][T27952] xfrm0 speed is unknown, defaulting to 1000 [ 1612.410846][T27949] tipc: Resetting bearer [ 1612.425481][T27952] lo speed is unknown, defaulting to 1000 [ 1612.444747][T27948] tipc: Resetting bearer [ 1612.524236][T27948] tipc: Disabling bearer [ 1612.741629][T27952] chnl_net:caif_netlink_parms(): no params data found [ 1612.792609][T27436] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1612.834189][T27952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.841382][T27952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.849351][T27952] bridge_slave_0: entered allmulticast mode [ 1612.856964][T27952] bridge_slave_0: entered promiscuous mode [ 1612.866683][T27952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.874489][T27952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.881770][T27952] bridge_slave_1: entered allmulticast mode [ 1612.889518][T27952] bridge_slave_1: entered promiscuous mode [ 1612.921164][T27952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.939520][T27952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.952948][T27436] usb 9-1: Using ep0 maxpacket: 16 [ 1612.960376][T27436] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1612.969407][T27952] team0: Port device team_slave_0 added [ 1612.970226][T27436] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1612.977901][T27952] team0: Port device team_slave_1 added [ 1613.001386][T27436] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.012202][T27952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.019567][T27952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.027088][T27436] usb 9-1: config 0 descriptor?? [ 1613.055541][T27973] xt_SECMARK: invalid mode: 2 [ 1613.076541][T27952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.133560][T27952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.140553][T27952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.213045][T27952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.587060][T27962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.609391][T27962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.623375][T27952] hsr_slave_0: entered promiscuous mode [ 1613.632034][T27952] hsr_slave_1: entered promiscuous mode [ 1613.642030][T27952] debugfs: 'hsr0' already exists in 'hsr' [ 1613.651057][T27952] Cannot create hsr debugfs directory [ 1613.665873][ T29] audit: type=1400 audit(2000000404.139:2164): avc: denied { connect } for pid=27961 comm="syz.8.5382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1613.668693][T27436] hid (null): unknown global tag 0xc [ 1613.782142][T27979] dlm: no local IP address has been set [ 1613.788167][T27979] dlm: cannot start dlm midcomms -107 [ 1613.795717][T27979] openvswitch: netlink: IP tunnel dst address not specified [ 1613.876907][T27981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5386'. [ 1613.993267][T26056] usb 9-1: USB disconnect, device number 18 [ 1614.102199][T27952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1614.135437][T27952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1614.146550][T27952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1614.157462][T27952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1614.258123][T27952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.281665][T27952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.311443][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.318673][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.336605][T26765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.343863][T26765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.353849][T21281] Bluetooth: hci7: command tx timeout [ 1614.403546][ T29] audit: type=1400 audit(2000000404.879:2165): avc: denied { write } for pid=27995 comm="syz.7.5390" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1614.422535][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1614.435481][ C1] lec:lec_tx_timeout: lec0 [ 1614.440495][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1614.440569][T27952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1614.461086][T27952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1614.685444][T27952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.821527][ T29] audit: type=1326 audit(2000000405.289:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.8.5392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ce1b9c799 code=0x0 [ 1615.084069][T27952] veth0_vlan: entered promiscuous mode [ 1615.109761][T27952] veth1_vlan: entered promiscuous mode [ 1615.164355][T27952] veth0_macvtap: entered promiscuous mode [ 1615.180267][T27952] veth1_macvtap: entered promiscuous mode [ 1615.206941][T27952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1615.225912][T27952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1615.260829][T12480] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.277208][T12480] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.294544][T12480] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.304962][T12480] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.475866][T26765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.500205][T26765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.545856][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.566441][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.606128][T28022] openvswitch: netlink: IP tunnel dst address not specified [ 1615.720733][T28024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5396'. [ 1615.965978][T28032] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1616.013684][T18650] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1616.094868][T28032] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1616.350832][T28035] netlink: 'syz.7.5393': attribute type 13 has an invalid length. [ 1616.433389][T21281] Bluetooth: hci7: command tx timeout [ 1616.458477][ T29] audit: type=1400 audit(2000000406.929:2167): avc: denied { write } for pid=28042 comm="syz.6.5399" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1616.483943][T18650] usb 10-1: Using ep0 maxpacket: 32 [ 1616.506974][ T29] audit: type=1400 audit(2000000406.929:2168): avc: denied { open } for pid=28042 comm="syz.6.5399" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1616.534652][T18650] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1616.534682][T18650] usb 10-1: config 0 has no interface number 0 [ 1616.534718][T18650] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1616.536528][T18650] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1616.536557][T18650] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.536576][T18650] usb 10-1: Product: syz [ 1616.536591][T18650] usb 10-1: Manufacturer: syz [ 1616.536607][T18650] usb 10-1: SerialNumber: syz [ 1616.571069][T18650] usb 10-1: config 0 descriptor?? [ 1616.576904][T28026] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1616.736615][ T29] audit: type=1804 audit(2000000407.209:2169): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5400" name="/newroot/95/bus/bus" dev="overlay" ino=527 res=1 errno=0 [ 1616.818238][T28026] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1617.023614][T28026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.051684][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.532823][T18650] asix 10-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1617.716265][T28052] netlink: 184 bytes leftover after parsing attributes in process `syz.8.5402'. [ 1617.762286][T18650] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1617.804398][T18650] asix 10-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1617.843173][T28058] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5402'. [ 1617.863335][T18650] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1618.052766][T18650] usb 10-1: USB disconnect, device number 2 [ 1618.174481][T28078] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5407'. [ 1618.498815][T28080] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5408'. [ 1618.507873][ T5806] Bluetooth: hci7: command tx timeout [ 1619.472639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1619.480687][ C1] lec:lec_tx_timeout: lec0 [ 1619.485807][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1620.558550][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 1620.582733][ T5806] Bluetooth: hci7: command tx timeout [ 1621.855919][T28115] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1622.019653][ T29] audit: type=1800 audit(2000000412.489:2170): pid=28121 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5419" name="bus" dev="tmpfs" ino=409 res=0 errno=0 [ 1622.153386][T28123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5421'. [ 1622.192166][T28125] kAFS: unable to lookup cell '.({^ú@' [ 1622.344230][T15404] block nbd0: Possible stuck request ffff888028210000: control (read@0,1024B). Runtime 210 seconds [ 1622.355380][T15404] block nbd0: Possible stuck request ffff888028210200: control (read@1024,1024B). Runtime 210 seconds [ 1622.366515][T15404] block nbd0: Possible stuck request ffff888028210400: control (read@2048,1024B). Runtime 210 seconds [ 1622.374350][T28130] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5419'. [ 1622.382715][T15404] block nbd0: Possible stuck request ffff888028210600: control (read@3072,1024B). Runtime 210 seconds [ 1622.552597][ T5920] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1622.715929][ T5920] usb 10-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1622.734113][ T5920] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1622.754096][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.777719][ T5920] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.798052][ T5920] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1622.825826][ T5920] usb 10-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1622.844432][ T5920] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.865823][ T5920] usb 10-1: config 0 descriptor?? [ 1623.389191][ T5920] input: HID 28bd:0909 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:0909.003E/input/input80 [ 1623.520369][T28128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.533186][T28128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.594102][ T5920] uclogic 0003:28BD:0909.003E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.9-1/input0 [ 1623.629459][ T5920] usb 10-1: USB disconnect, device number 3 [ 1623.669651][T28145] fido_id[28145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1623.858397][T28147] netlink: 'syz.8.5428': attribute type 3 has an invalid length. [ 1624.448986][T28167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1624.492536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1624.500592][ C1] lec:lec_tx_timeout: lec0 [ 1624.505460][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1624.911834][T24836] udevd[24836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1625.335320][ T29] audit: type=1804 audit(2000000415.809:2171): pid=28193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5439" name="/newroot/102/bus/bus" dev="overlay" ino=583 res=1 errno=0 [ 1625.661944][ T29] audit: type=1400 audit(2000000415.929:2172): avc: denied { getopt } for pid=28194 comm="syz.7.5440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1625.861889][ T5920] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1626.083553][ T5920] usb 7-1: Using ep0 maxpacket: 32 [ 1626.242245][ T5920] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1626.269712][ T5920] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.341626][ T5920] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1626.376363][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.924728][ T5920] usb 7-1: Product: syz [ 1626.944605][ T5920] usb 7-1: Manufacturer: syz [ 1626.954717][ T5920] usb 7-1: SerialNumber: syz [ 1627.601235][ T5920] usb 7-1: Cannot retrieve CPort count: -71 [ 1627.621827][ T5920] usb 7-1: Cannot retrieve CPort count: -71 [ 1627.647957][ T5920] es2_ap_driver 7-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1627.689846][ T5920] usb 7-1: USB disconnect, device number 118 [ 1628.002762][T28016] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1628.164521][T28016] usb 10-1: Using ep0 maxpacket: 16 [ 1628.206882][T28016] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1628.243894][T28016] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.286725][T28016] usb 10-1: Product: syz [ 1628.291015][T28016] usb 10-1: Manufacturer: syz [ 1628.306343][T28227] dlm: no local IP address has been set [ 1628.312390][T28227] dlm: cannot start dlm midcomms -107 [ 1628.327987][T28016] usb 10-1: SerialNumber: syz [ 1628.348448][T28016] usb 10-1: config 0 descriptor?? [ 1628.359451][T28227] openvswitch: netlink: IP tunnel dst address not specified [ 1628.389162][T28016] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1629.093144][T18650] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1629.112916][T28016] gspca_spca508: reg_read err -110 [ 1629.130739][T28016] gspca_spca508: reg_read err -32 [ 1629.137417][T28016] gspca_spca508: reg_read err -32 [ 1629.143092][T28016] gspca_spca508: reg_read err -32 [ 1629.148872][T28016] gspca_spca508: reg write: error -32 [ 1629.157062][T28016] spca508 10-1:0.0: probe with driver spca508 failed with error -32 [ 1629.282607][T18650] usb 7-1: Using ep0 maxpacket: 16 [ 1629.305774][T18650] usb 7-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1629.347375][T18650] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1629.387164][T18650] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1629.418217][T18650] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.441090][T18650] usb 7-1: Product: syz [ 1629.454112][T18650] usb 7-1: Manufacturer: syz [ 1629.475871][T18650] usb 7-1: SerialNumber: syz [ 1629.506876][T18650] usb 7-1: config 0 descriptor?? [ 1629.512524][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1629.520504][ C1] lec:lec_tx_timeout: lec0 [ 1629.525152][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1629.534736][T18650] mcba_usb 7-1:0.0: Can't find endpoints [ 1629.700221][T28016] usb 10-1: USB disconnect, device number 4 [ 1629.869653][ T24] usb 7-1: USB disconnect, device number 119 [ 1630.031550][ T29] audit: type=1400 audit(2000000420.499:2173): avc: denied { ioctl } for pid=28242 comm="syz.1.5453" path="socket:[125654]" dev="sockfs" ino=125654 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1630.592610][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1630.827514][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.852006][ T29] audit: type=1804 audit(2000000421.319:2174): pid=28256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5457" name="/newroot/105/bus/bus" dev="overlay" ino=609 res=1 errno=0 [ 1630.891301][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1630.921323][ T24] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1630.935127][ T24] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1630.948987][ T24] usb 10-1: Manufacturer: syz [ 1630.968394][ T24] usb 10-1: config 0 descriptor?? [ 1631.035880][T28261] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5460'. [ 1631.045622][T28261] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5460'. [ 1631.117050][T28263] overlayfs: failed to clone upperpath [ 1631.143268][T18650] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1631.152632][T26058] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1631.422766][T18650] usb 9-1: Using ep0 maxpacket: 32 [ 1631.429359][T26058] usb 7-1: Using ep0 maxpacket: 32 [ 1631.509960][T18650] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1631.532442][T26058] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1631.809746][T18650] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.822936][T26058] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.833577][T18650] usb 9-1: Product: syz [ 1631.839617][T26058] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1631.849200][T18650] usb 9-1: Manufacturer: syz [ 1631.857042][T26058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.867117][T18650] usb 9-1: SerialNumber: syz [ 1631.886505][T18650] usb 9-1: config 0 descriptor?? [ 1631.895425][T26058] usb 7-1: Product: syz [ 1631.902851][T26058] usb 7-1: Manufacturer: syz [ 1631.921724][T26058] usb 7-1: SerialNumber: syz [ 1631.976258][T28273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5463'. [ 1632.135912][T18650] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 019 [ 1632.180647][T26058] usb 7-1: Not enough endpoints found in device, aborting! [ 1632.396918][T28016] usb 7-1: USB disconnect, device number 120 [ 1632.867144][T28278] i2c i2c-1: failure reading status [ 1632.942466][T28278] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5459'. [ 1632.957057][T28278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.969624][T28278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.312990][ T24] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #100: -71 [ 1633.346480][ T24] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 1633.368963][ T24] uclogic 0003:256C:006D.003F: failed probing pen v1 parameters: -71 [ 1633.382423][ T24] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 1633.391101][ T24] uclogic 0003:256C:006D.003F: probe with driver uclogic failed with error -71 [ 1633.417457][ T24] usb 10-1: USB disconnect, device number 5 [ 1633.520169][T28295] overlayfs: failed to clone upperpath [ 1634.315869][ T5920] usb 9-1: USB disconnect, device number 19 [ 1634.318811][ T29] audit: type=1804 audit(2000000424.789:2175): pid=28301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.5472" name="/newroot/107/bus/bus" dev="overlay" ino=629 res=1 errno=0 [ 1634.532582][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1634.540641][ C1] lec:lec_tx_timeout: lec0 [ 1634.545270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1635.227808][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1635.383021][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1635.390706][ T9] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1635.423181][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1635.445501][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1635.457409][ T9] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1635.475168][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1635.485883][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1635.504391][ T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1635.519793][ T9] usb 9-1: Product: syz [ 1635.524706][ T9] usb 9-1: Manufacturer: syz [ 1635.529487][ T9] usb 9-1: SerialNumber: syz [ 1635.540088][ T9] usb 9-1: config 0 descriptor?? [ 1635.550717][ T9] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1635.584705][ T9] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1635.813026][T28309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.840169][T28309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.842849][T26058] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1636.033948][T26058] usb 7-1: Using ep0 maxpacket: 32 [ 1636.049067][T26058] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.070929][T26058] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1636.084876][T26058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.165950][ T29] audit: type=1400 audit(2000000426.559:2176): avc: denied { bind } for pid=28308 comm="syz.8.5473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1636.202635][T26058] usb 7-1: Product: syz [ 1636.206830][T26058] usb 7-1: Manufacturer: syz [ 1636.224584][T26058] usb 7-1: SerialNumber: syz [ 1636.283962][T26058] usb 7-1: config 0 descriptor?? [ 1636.309412][T26058] usb 7-1: bad CDC descriptors [ 1636.317592][T26058] usb 7-1: unsupported MDLM descriptors [ 1636.556245][T28340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1636.958053][ T29] audit: type=1400 audit(2000000427.429:2177): avc: denied { setopt } for pid=28332 comm="syz.9.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1637.728920][ T29] audit: type=1804 audit(2000000428.199:2178): pid=28347 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5484" name="/newroot/93/bus/bus" dev="overlay" ino=533 res=1 errno=0 [ 1638.812271][ T24] usb 7-1: USB disconnect, device number 121 [ 1639.412718][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1639.452707][T26058] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1639.542432][T28366] TCP: TCP_TX_DELAY enabled [ 1639.552544][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1639.560595][ C1] lec:lec_tx_timeout: lec0 [ 1639.565320][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1639.572347][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1639.580072][ T24] usb 10-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 1639.590708][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1639.600462][ T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1639.609807][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.618007][T26058] usb 7-1: Using ep0 maxpacket: 16 [ 1639.623769][ T24] usb 10-1: Product: syz [ 1639.628027][ T24] usb 10-1: Manufacturer: syz [ 1639.633119][ T24] usb 10-1: SerialNumber: syz [ 1639.644391][T26058] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1639.657014][ T24] usb 10-1: config 0 descriptor?? [ 1639.663925][ T24] mcba_usb 10-1:0.0: Can't find endpoints [ 1639.671122][T26058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.686543][T26058] usb 7-1: Product: syz [ 1639.690735][T26058] usb 7-1: Manufacturer: syz [ 1639.700720][T26058] usb 7-1: SerialNumber: syz [ 1639.714402][T26058] usb 7-1: config 0 descriptor?? [ 1639.721813][T26058] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1639.868754][ T5920] usb 10-1: USB disconnect, device number 6 [ 1640.434014][T26058] gspca_spca508: reg_read err -110 [ 1640.441128][T26058] gspca_spca508: reg_read err -32 [ 1640.449808][T26058] gspca_spca508: reg_read err -32 [ 1640.456604][T26058] gspca_spca508: reg_read err -32 [ 1640.462934][T26058] gspca_spca508: reg write: error -32 [ 1640.474409][T26058] spca508 7-1:0.0: probe with driver spca508 failed with error -32 [ 1640.820460][ T5920] usb 7-1: USB disconnect, device number 122 [ 1641.112920][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1641.128501][ T29] audit: type=1804 audit(2000000431.599:2179): pid=28383 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5495" name="/newroot/96/bus/bus" dev="overlay" ino=558 res=1 errno=0 [ 1641.343121][T28331] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1641.369350][T26058] usb 9-1: USB disconnect, device number 20 [ 1641.369804][ T9] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1641.390468][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.445080][T26058] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1641.871409][ T9] usb 10-1: Product: syz [ 1641.890450][ T9] usb 10-1: Manufacturer: syz [ 1641.901275][ T9] usb 10-1: SerialNumber: syz [ 1641.915577][ T9] usb 10-1: config 0 descriptor?? [ 1641.941539][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1641.976213][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1641.988242][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1642.000008][ T9] usb 10-1: media controller created [ 1642.014828][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1642.149487][ T9] DVB: Unable to find symbol mt352_attach() [ 1642.244279][ T9] DVB: Unable to find symbol nxt6000_attach() [ 1642.250467][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1642.265257][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input81 [ 1642.291153][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 1642.304008][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1642.314818][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1642.321777][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1642.338139][ T9] usb 10-1: USB disconnect, device number 7 [ 1642.362787][T26058] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1642.683764][T26058] usb 9-1: Using ep0 maxpacket: 32 [ 1642.775626][T26058] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1642.795223][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1642.806829][T26058] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1642.838042][T26058] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1642.855051][T26058] usb 9-1: Product: syz [ 1642.885057][T26058] usb 9-1: Manufacturer: syz [ 1642.917464][T26058] usb 9-1: SerialNumber: syz [ 1642.940916][T26058] usb 9-1: config 0 descriptor?? [ 1642.949159][T28411] overlayfs: failed to clone upperpath [ 1642.956752][ T29] audit: type=1400 audit(2000000433.429:2180): avc: denied { accept } for pid=28408 comm="syz.1.5501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1642.984676][T28395] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1643.000617][T26058] hub 9-1:0.0: bad descriptor, ignoring hub [ 1643.012964][T26058] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1643.276842][T28417] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1643.283368][T28417] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1643.296863][T28417] vhci_hcd vhci_hcd.0: Device attached [ 1643.314547][T28417] vhci_hcd vhci_hcd.0: port 0 already used [ 1643.318127][T28421] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1643.330377][T28419] vhci_hcd: connection closed [ 1643.345371][T17513] vhci_hcd vhci_hcd.7: stop threads [ 1643.351661][T28421] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 1643.360985][T17513] vhci_hcd vhci_hcd.7: release socket [ 1643.370718][T17513] vhci_hcd vhci_hcd.7: disconnect device [ 1643.391845][T28426] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5504'. [ 1643.403112][T28426] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5504'. [ 1643.626642][ T29] audit: type=1804 audit(2000000434.099:2181): pid=28432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.5506" name="/newroot/22/bus/bus" dev="overlay" ino=139 res=1 errno=0 [ 1643.832807][T28391] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5497'. [ 1644.572554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1644.580635][ C1] lec:lec_tx_timeout: lec0 [ 1644.585409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1644.613155][T28458] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5510'. [ 1646.187390][T28469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.432233][T28480] overlayfs: failed to clone upperpath [ 1646.927155][T28490] FAULT_INJECTION: forcing a failure. [ 1646.927155][T28490] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.940005][T28490] CPU: 0 UID: 0 PID: 28490 Comm: syz.9.5519 Tainted: G L syzkaller #0 PREEMPT(full) [ 1646.940038][T28490] Tainted: [L]=SOFTLOCKUP [ 1646.940044][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1646.940055][T28490] Call Trace: [ 1646.940062][T28490] [ 1646.940070][T28490] dump_stack_lvl+0x100/0x190 [ 1646.940109][T28490] should_fail_ex.cold+0x5/0xa [ 1646.940133][T28490] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1646.940155][T28490] should_failslab+0xc2/0x120 [ 1646.940184][T28490] __kmalloc_noprof+0xe0/0x850 [ 1646.940214][T28490] tomoyo_realpath_from_path+0xb6/0x690 [ 1646.940241][T28490] tomoyo_path_number_perm+0x23c/0x580 [ 1646.940268][T28490] ? tomoyo_path_number_perm+0x22e/0x580 [ 1646.940296][T28490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1646.940347][T28490] ? find_held_lock+0x2b/0x80 [ 1646.940369][T28490] ? __fget_files+0x215/0x3d0 [ 1646.940385][T28490] ? hook_file_ioctl_common+0x146/0x410 [ 1646.940413][T28490] ? __fget_files+0x21f/0x3d0 [ 1646.940435][T28490] security_file_ioctl+0xd3/0x230 [ 1646.940456][T28490] __x64_sys_ioctl+0xb7/0x210 [ 1646.940483][T28490] do_syscall_64+0x106/0xf80 [ 1646.940500][T28490] ? clear_bhb_loop+0x40/0x90 [ 1646.940522][T28490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1646.940540][T28490] RIP: 0033:0x7faade99c799 [ 1646.940557][T28490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.940574][T28490] RSP: 002b:00007faadf7c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.940593][T28490] RAX: ffffffffffffffda RBX: 00007faadec15fa0 RCX: 00007faade99c799 [ 1646.940605][T28490] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1646.940615][T28490] RBP: 00007faadf7c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.940626][T28490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.940636][T28490] R13: 00007faadec16038 R14: 00007faadec15fa0 R15: 00007ffef7c35e28 [ 1646.940661][T28490] [ 1646.940669][T28490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1647.493083][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5525'. [ 1647.965439][T28502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1648.566071][ T9] usb 9-1: USB disconnect, device number 21 [ 1649.592535][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1649.600597][ C1] lec:lec_tx_timeout: lec0 [ 1649.605519][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1650.504438][ T30] INFO: task syz.0.4968:26241 blocked for more than 143 seconds. [ 1650.512228][ T30] Tainted: G L syzkaller #0 [ 1650.569566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1650.612597][ T30] task:syz.0.4968 state:D stack:27368 pid:26241 tgid:26240 ppid:20106 task_flags:0x400140 flags:0x00080002 [ 1650.626247][ T30] Call Trace: [ 1650.637366][ T30] [ 1650.648016][ T30] __schedule+0xfee/0x60e0 [ 1650.663100][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1650.678476][ T30] ? __pfx___schedule+0x10/0x10 [ 1650.689633][ T30] ? find_held_lock+0x2b/0x80 [ 1650.694912][ T30] ? schedule+0x2bf/0x390 [ 1650.699507][ T30] schedule+0xdd/0x390 [ 1650.704520][ T30] schedule_preempt_disabled+0x13/0x30 [ 1650.710219][ T30] __mutex_lock+0xc9a/0x1b90 [ 1650.721515][ T30] ? bdev_open+0xa2/0xe40 [ 1650.726207][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1650.731427][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 1650.738472][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1650.744792][ T30] ? file_init_path+0x48e/0x670 [ 1650.749916][ T30] ? bdev_open+0xa2/0xe40 [ 1650.754804][ T30] bdev_open+0xa2/0xe40 [ 1650.759973][ T30] ? iput+0x3a/0x40 [ 1650.765047][ T30] bdev_file_open_by_dev+0x179/0x210 [ 1650.770434][ T30] setup_bdev_super+0x78/0x730 [ 1650.775757][ T30] get_tree_bdev_flags+0x363/0x620 [ 1650.780977][ T30] ? __pfx_squashfs_fill_super+0x10/0x10 [ 1650.787104][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1650.793063][ T30] ? cap_capable+0x107/0x460 [ 1650.797837][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1650.803086][ T30] ? security_capable+0x80/0x260 [ 1650.808228][ T30] vfs_get_tree+0x92/0x320 [ 1650.813187][ T30] path_mount+0x7d0/0x23d0 [ 1650.817750][ T30] ? __pfx_path_mount+0x10/0x10 [ 1650.828983][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1650.836579][ T30] ? putname+0xb1/0x110 [ 1650.840893][ T30] ? kmem_cache_free+0x124/0x6a0 [ 1650.846362][ T30] ? __x64_sys_mount+0x293/0x310 [ 1650.856459][ T30] __x64_sys_mount+0x293/0x310 [ 1650.862165][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 1650.868055][ T30] do_syscall_64+0x106/0xf80 [ 1650.873735][ T30] ? clear_bhb_loop+0x40/0x90 [ 1650.878611][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.884852][ T30] RIP: 0033:0x7f223bb9c799 [ 1650.889504][ T30] RSP: 002b:00007f2239df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1650.898467][ T30] RAX: ffffffffffffffda RBX: 00007f223be15fa0 RCX: 00007f223bb9c799 [ 1650.906954][ T30] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000900 [ 1650.928203][ T30] RBP: 00007f223bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1650.952592][ T30] R10: 0000000001408009 R11: 0000000000000246 R12: 0000000000000000 [ 1650.973141][ T30] R13: 00007f223be16038 R14: 00007f223be15fa0 R15: 00007ffc20c40cf8 [ 1650.991446][ T30] [ 1650.997959][ T30] [ 1650.997959][ T30] Showing all locks held in the system: [ 1651.035477][ T30] 1 lock held by khungtaskd/30: [ 1651.047316][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1651.074605][ T30] 2 locks held by getty/5562: [ 1651.084842][ T30] #0: ffff8880386930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1651.107093][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1651.117503][ T30] 1 lock held by udevd/24800: [ 1651.122184][ T30] #0: ffff888028171358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1651.131664][ T30] 2 locks held by syz.0.4968/26241: [ 1651.137040][ T30] #0: ffff888055d7c0e0 (&type->s_umount_key#105/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1651.148007][ T30] #1: ffff888028171358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1651.161472][ T30] 1 lock held by syz.9.5571/28607: [ 1651.167402][ T30] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1651.177468][ T30] [ 1651.179816][ T30] ============================================= [ 1651.179816][ T30] [ 1651.188633][ T30] NMI backtrace for cpu 0 [ 1651.188649][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.188672][ T30] Tainted: [L]=SOFTLOCKUP [ 1651.188678][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.188688][ T30] Call Trace: [ 1651.188693][ T30] [ 1651.188700][ T30] dump_stack_lvl+0x100/0x190 [ 1651.188733][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1651.188761][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1651.188789][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1651.188818][ T30] sys_info+0x141/0x190 [ 1651.188839][ T30] watchdog+0xd25/0x1050 [ 1651.188870][ T30] ? __pfx_watchdog+0x10/0x10 [ 1651.188893][ T30] ? __kthread_parkme+0x18c/0x230 [ 1651.188921][ T30] ? kthread+0x13a/0x450 [ 1651.188937][ T30] ? __pfx_watchdog+0x10/0x10 [ 1651.188959][ T30] kthread+0x370/0x450 [ 1651.188975][ T30] ? __pfx_kthread+0x10/0x10 [ 1651.188993][ T30] ret_from_fork+0x754/0xd80 [ 1651.189013][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.189033][ T30] ? __switch_to+0x7b4/0x1120 [ 1651.189053][ T30] ? __pfx_kthread+0x10/0x10 [ 1651.189070][ T30] ret_from_fork_asm+0x1a/0x30 [ 1651.189101][ T30] [ 1651.189109][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1651.315049][ C1] NMI backtrace for cpu 1 [ 1651.315067][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.315086][ C1] Tainted: [L]=SOFTLOCKUP [ 1651.315091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.315099][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1651.315118][ C1] Code: b8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 dc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1651.315132][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1651.315144][ C1] RAX: 000000000735d25b RBX: ffff88801e6b2480 RCX: ffffffff8b8fac75 [ 1651.315153][ C1] RDX: 0000000000000000 RSI: ffffffff8de72aee RDI: ffffffff8c1af220 [ 1651.315162][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1651.315171][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd6490 [ 1651.315180][ C1] R13: 0000000000000001 R14: ffffffff90d97a10 R15: 0000000000000000 [ 1651.315189][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 1651.315203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.315213][ C1] CR2: 00007f2ce1de7c38 CR3: 0000000075721000 CR4: 00000000003526f0 [ 1651.315222][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.315230][ C1] DR3: 000000000000db67 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1651.315239][ C1] Call Trace: [ 1651.315244][ C1] [ 1651.315248][ C1] default_idle+0x9/0x10 [ 1651.315263][ C1] default_idle_call+0x6c/0xb0 [ 1651.315277][ C1] do_idle+0x35b/0x4b0 [ 1651.315295][ C1] ? __pfx_do_idle+0x10/0x10 [ 1651.315314][ C1] cpu_startup_entry+0x4f/0x60 [ 1651.315331][ C1] start_secondary+0x21d/0x2d0 [ 1651.315350][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1651.315370][ C1] common_startup_64+0x13e/0x148 [ 1651.315390][ C1] [ 1651.509374][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1651.516236][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.526907][ T30] Tainted: [L]=SOFTLOCKUP [ 1651.531207][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.541236][ T30] Call Trace: [ 1651.544497][ T30] [ 1651.547409][ T30] dump_stack_lvl+0x100/0x190 [ 1651.552080][ T30] vpanic+0x552/0x970 [ 1651.556044][ T30] ? __pfx_vpanic+0x10/0x10 [ 1651.560525][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1651.566671][ T30] panic+0xd1/0xe0 [ 1651.570408][ T30] ? __pfx_panic+0x10/0x10 [ 1651.574813][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1651.580962][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1651.587104][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1651.593239][ T30] ? watchdog.cold+0x198/0x1ca [ 1651.597992][ T30] ? watchdog+0xd35/0x1050 [ 1651.602389][ T30] watchdog.cold+0x1a9/0x1ca [ 1651.606960][ T30] ? __pfx_watchdog+0x10/0x10 [ 1651.611615][ T30] ? __kthread_parkme+0x18c/0x230 [ 1651.616669][ T30] ? kthread+0x13a/0x450 [ 1651.620916][ T30] ? __pfx_watchdog+0x10/0x10 [ 1651.625616][ T30] kthread+0x370/0x450 [ 1651.629670][ T30] ? __pfx_kthread+0x10/0x10 [ 1651.634247][ T30] ret_from_fork+0x754/0xd80 [ 1651.638827][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.643919][ T30] ? __switch_to+0x7b4/0x1120 [ 1651.648580][ T30] ? __pfx_kthread+0x10/0x10 [ 1651.653154][ T30] ret_from_fork_asm+0x1a/0x30 [ 1651.657917][ T30] [ 1651.661207][ T30] Kernel Offset: disabled [ 1651.665512][ T30] Rebooting in 86400 seconds..