last executing test programs: 1m5.386118416s ago: executing program 0 (id=5971): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000001380)={&(0x7f0000001340)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000300)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xfffffffffffffef6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x80000, 0x0, 0x2, 0x3, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0xfffffffc, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfcda}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) (rerun: 64) ioctl$TUNSETIFF(r5, 0x40140921, 0x0) 1m3.351496305s ago: executing program 0 (id=5982): openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000200)=""/48, 0x304000, 0x1000, 0x0, 0x3}, 0x20) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000014e200000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000122662c5504af1250000042cbd7000fedbdf2540000000"], 0x14}}, 0x10000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10000000000006, 0xfa11, 0xfffffffe}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000c40)='asymmetric\x00', &(0x7f0000000c80)='/dev/snd/midiC#D#\x00') syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) socket$nl_xfrm(0x10, 0x3, 0x6) 1m2.418213858s ago: executing program 0 (id=5984): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12d2d1610100001b61e308d016a91052300102030109021b0001000000f74bfeabf6000904000001ff7f8800090503025c8e00bd50147c9c71a1c7f783b7fe68e99d993a44aa64d1f9457564f10677892b25976cf2b918ab4fca2d71d197b1e76823"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.300194958s ago: executing program 0 (id=5998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x20, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 59.213393297s ago: executing program 0 (id=6000): r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setregid(r11, r11) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)) r17 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r17, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x8005, 0x5}, 0x42, [0x9, 0x40, 0x800, 0x6, 0x2, 0x400, 0x80000000, 0x4000, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9e, 0xfffffffc, 0x1, 0xfffffffb, 0x2004, 0x1, 0x4, 0xf252, 0x0, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0x6, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x3, 0xfffff7ff, 0x4, 0x6, 0x1000, 0x5, 0xd, 0x8, 0xa, 0x5], [0x7, 0x4, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xffffffff, 0xc7, 0x7fff, 0x8, 0x1c32, 0x3, 0x5, 0xc93, 0x80000001, 0x8001, 0x3, 0x41, 0x297, 0x5, 0x0, 0x985, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x81, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x400, 0xc, 0x3, 0x37a, 0x9, 0x10e, 0x5, 0x7, 0x2, 0x99a1, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0x0, 0x200ffff, 0xcd3, 0x8, 0x1f, 0x404, 0x4, 0x8, 0x7fff, 0x7, 0x9, 0x800e8b, 0xf7ce, 0x80000001, 0x48, 0x3f92, 0x1000, 0x5, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x8, 0x200003, 0x7, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0xffffffff, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x40002005, 0x9, 0x4, 0x9, 0x9, 0x20000005, 0x3, 0x2, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2008, 0x3, 0x8088, 0x0, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x803, 0x8220fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x100, 0x5, 0x6, 0x2, 0xe47, 0x3, 0x2, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x80000000, 0x40020008, 0x8a8, 0x86, 0x44, 0x409, 0x3, 0x744, 0x0, 0x12, 0x4, 0xe, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x5, 0xf, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r17, 0x5501) write$uinput_user_dev(r17, &(0x7f0000000100)={'syz0\x00', {0x773, 0xf4, 0x4, 0x8}, 0x32, [0x8, 0x3, 0x6, 0x2, 0x3, 0xcb, 0xed, 0xc, 0xffff, 0x0, 0x1, 0x0, 0xe, 0x6, 0x2, 0x1, 0x2, 0xa00, 0x4, 0x200, 0x20, 0xb75, 0x3, 0x6c5, 0x9, 0x7ff, 0x9, 0xfffffc01, 0x9, 0x8, 0x81, 0x9, 0x5, 0x8, 0x80000000, 0x101, 0x8, 0x3, 0x101, 0x8, 0xc, 0x1, 0x1, 0x8, 0x4, 0x40, 0x8, 0x1f, 0x4b55, 0x24c, 0x400401, 0x6, 0x8, 0xffff, 0x2, 0x4, 0x10000, 0x64b1, 0x7, 0x5, 0x2, 0x7d19b9c5, 0xca, 0xa4415c6c], [0x10000, 0x6, 0x0, 0x5, 0x6, 0x8, 0xfffffffe, 0x7, 0x4, 0x9, 0x4, 0x4, 0xfffffc01, 0x6, 0xff, 0x1, 0x800, 0x7e8, 0x7, 0x1, 0x8, 0x3, 0xb2, 0x7, 0x9, 0xfffffffc, 0x7, 0xfff, 0xf6, 0x1, 0xcb, 0x6, 0xfffffffd, 0x3, 0xde6d, 0x8, 0x0, 0x76b, 0x3, 0x0, 0x1, 0x3, 0xffff7e7f, 0xfffffd55, 0x80, 0x9, 0x1, 0x6, 0x0, 0x9, 0x9ea, 0x6, 0x1, 0x1f40, 0x6, 0x1, 0x2, 0xb, 0x6, 0x40, 0xdf0, 0x10000, 0x0, 0xed8], [0x800, 0xffff0003, 0x0, 0x600, 0x99, 0x8, 0x249, 0x1, 0x0, 0x10001, 0x7, 0x0, 0xf5, 0x41a, 0x2, 0x7, 0x2134986c, 0x5, 0x1, 0x1, 0x88, 0x5, 0x7, 0x7, 0x0, 0x3, 0xe655, 0x8001, 0x8, 0xfffffffc, 0x1, 0xf, 0x4, 0x7aa, 0x6, 0xf, 0xc0, 0x3769, 0x18c4, 0x693, 0x6, 0x7, 0x7f, 0xaac, 0x2, 0x5, 0x3fa0, 0x800, 0x6, 0x2, 0x18000000, 0x7fff, 0x6, 0xe8, 0x6, 0x9, 0xd, 0x1000, 0x2, 0x4, 0x10001, 0x80000000, 0x1, 0x101], [0x5, 0x0, 0x0, 0x100, 0xfffffff7, 0x7, 0xff, 0x8, 0x6, 0x7, 0x3, 0xffff3748, 0x1000, 0xd, 0x7, 0x7f, 0x0, 0x9, 0xa67, 0x60000000, 0x6, 0x0, 0x4, 0x3, 0x2, 0x7f, 0xb5d, 0xb, 0x0, 0xd46, 0x25, 0x8, 0x2, 0xf, 0x8, 0x9, 0xe6, 0xa, 0x7f, 0x7, 0x6, 0x7, 0x0, 0x1, 0x0, 0x4c, 0x8001, 0x9, 0x9, 0x6, 0x6, 0x5, 0x200, 0xff, 0x400, 0x2, 0x4, 0x9, 0x4, 0xffff, 0x4, 0x0, 0x3, 0x5587]}, 0x45c) read(r17, 0x0, 0x18) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) sendmmsg$unix(r4, &(0x7f0000006fc0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)="e4ca97f8e050033a92e6365277c1c2538ee19f9121d5a3f953018c63f5dac8399de4e60f372d012fd39433304f0745c3c3", 0x31}, {&(0x7f00000004c0)="cb878c88bd591338410958f841d582286bf26b6c70003064ded55a9402a212b66510badd34dad7dc3db71b542864d0e39909f78bbefc4ca89beb809ae3e52f4d8ea69747d132f3b99f65474a603853e3d2f77cb570ed19e7bfc29975339255514fda4e992606e5468e735f467b071b82e16c207f4f64fb9c1565b3bf7854ac9b9cb711eebbf2dc7332d77bed9dec4544f4106d7c4ccb6fdeb3ab0991724e887151ac38c35960fc8a2e475cb424d2ff82845b4795015e5a1a3080dfabea3033a8fc443bf862df5ec1b086420e574e", 0xce}, {&(0x7f00000001c0)="8e24203eb383dfa8838065bb556b829e05d053f75c87", 0x16}], 0x3, &(0x7f0000000740)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r11}}}, @cred={{0x1c, 0x1, 0x2, {r2, r13, r16}}}], 0x78, 0x20000000}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000840)="2cc209e19056f7c95bd73b42f67d30916d82d919780be10911b1cf70c14f3f95ecba4e15eec0f9e536b34360454b6c90222d60dceb1949bb6508babd44e72f9d3f0a89902c1a85f9ede9323bfda1181422d0ae151be37b0cefd7d666c5c8d7c3d9a86bcbb1856624cb7b47ef1c42e7f5f41c2ac78e886215d10dee75f2f7c4529167406c55c78501439402ec9ccfa4225ea128e821f9d51048cb7ed0a871ab869999ca41c5ddb1aba1aba66385f067eddf3fd1dab3d8f26ddfb2bddabdcf8902a53cf00e1b2108ba93be3ddbfa077a7e8f0123dca47f0125e2337f72a9141c", 0xdf}, {&(0x7f0000000940)="9896ee869b979f6e15a3dec8b729530511ad3e840d96cf00a9472e41f1bc8ad00761893cf178112d56c580", 0x2b}, {&(0x7f0000000980)="865fc9be1c4f6ba9bd7d550bac5d21", 0xf}, {&(0x7f00000009c0)="385ead46573087ef53f237f2efbab65d0f9844fca31bf9a4b2ee6451e58dc1b63ba47a34fd8f060c4e61b123aca41b22f415be86a36e6802eb3ce144a064dfb825428373e0eb9de5172b3ff9884ad19e19b5ba0db119d03f01f3c98a90ab2a4324e68f14fd48065e9a62f45287c812173ec28c3cf7340c2933d066a54e8882b11b4c5974567b72d21622adeff150ea5dba5fbf258218be63c1cffdadc6a50f0e08f0ad9aebf546a20c3d5292ce934192ac486537fc070a2a8083cf33d6f2d71829e1051abe7dab2a0e790fc68572ccced38087282b1bb267fa3fa8acfe0c75df113da3df19079f11b9bf32b6309ab962100f65cccfc83efc5d", 0xf9}], 0x4, 0x0, 0x0, 0x2004000}}, {{&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000b80)="9531ccaa6a4425a29e334c13bca56d186b775bfadeff49ed667af87c6cdb37fc3fd2d2ec4175be220a506c835bd6d63087219ebbe44c003b31d01977757693fecdfc496bf61391e1abb674c190733bdb7685d9f9e464d082ec9d8ab4fafe855e9021bb65e692daa21150b070227ca32ecdd0a4a812a9772b70f8450962df62c9e485eb8b9ea660b4", 0x88}, {&(0x7f0000000c40)="487c0a3fd736a4435c4da0b9f76a67eace89c43c16694598b40dc25e02db9aa893dd7631b5513de0252992ba9b17b15e3536c95fd6d7c9376a37d4522f3858ec447b11b9148e6c5ed00a63fe058a36776ed752049e63e6f71c8830ef61fd45d19c74d8f88dd702cdd31dc1e4b58629e4a0c5b6e92940bf857b6cf877af19c07a07a75f61453878b39aefe461865c54f8d981329566efddbd21d8b7b9bebaa4198b0752b98cb08c98fef2a884e9a28063a0930738818a3e9dad2f6c9074107b1357eca53f3e6444150363027eb0d0d398e3b402297b9920fdd26312790b61fb7d389f18375a734e39c6edf4f6e717c0", 0xef}, {&(0x7f0000000d40)="235402a666b16282aac364d50e9c7bf9463dca60341d616a59bc8f6711636470e1e888e07d5886aa68c072a0215f05cfe3159d1e9932b86f6a42f2b9a23fd5025abf8e5443876f900436b3bd3bef151c8ac3c31fa89483817b67b4116163010b32a4143a044304f4756403d508855dd5be4817d64c06f5f4b78838af3cb4022396d9453453e6ec21e079ca6612", 0x8d}, {&(0x7f0000000e00)="12ee3b3f4716520ea637978f09b150fdd669e38725f7d1facc33c90711a64e21081460cf829345f4cc8fe35543238fba775689c3d8050a2f0c8fef3610942dada4568b76d42845d796222d14e77eec80032ed57030ee7f4888a41ce31ce65489221a95f3f41bdcd2ac00e0855a77ea14d615772d453b7b3bab16013783448af96454db24452195af82e6f435ef8612f28d440bc7a99f1375fb3a6846dcd2f3d8abbc5f0eba773ceb7aebad0f2ad559045542a5bfd9ff194b490c53426a126252a6888c5ff8eb99190830a6ab024452f57e53a8480a333329e230cecd00a9df0b4a09dab87d", 0xe5}, {&(0x7f0000000f00)="ae6ccf6ac0d70e2211d4b15d6e0113b752ba64d257d09279544c2b831478107fdb7c907cc5484fa745e9c50576b14d2660d670ef7b4e2c61b7eaf74fe6f50134f8d2bdff7f7f7da126a67846c69e1c76e32e8c2826df9767b3042e8c90ab23cb13c116191ab059e496cd974bfb4f943d4f463cee8eef264ce249674d23cade63a90f0171dcf567871f890a73b016f4938c6bba849fe67f3cce63c603c6442d24c094b9829b", 0xa5}, {&(0x7f00000024c0)="31e5df1ac2f251023ff6f770494672b731cba850dcac0315f4ac0a3bdec087f60227557f0b8cda4f64864ca88c6375723cb0b5f4f89fec0d42302414718c9f86a6a92ef2105a6d44dc6d05b5487e3e983349b3dc656c9e8ce57198df306519c0f3d3ea5811030af865200df0c9c5a6f237aef24b9027707ef9457306122dd3ec39e3a06e0a840915b58e39cb6bda64da6b09086e9afa33c98e14e8d1527c595f06cb25fb92eaea7799fca7c684dd553be93e7cc44cbc92d3ff1cddc9dd29032e41f83881727dcd0345de282832f8966cd2d10cde614d5e3b75e6d5469fdfecfcb5c5d08c45f5c5ab97721613172b176f9c7f588c06f60ac1236fc0fda72fa0f69257269e09d0733ab3b0cac916c8d17be8bd5cb34307c9e7256c0adeee35c675e5073bd93e5cf48cba109027213349aa10971a4a9be75f874f440ba61f76774b87b3defb3074db97244468a858fb8503da82cd7413a609f02ad1a2f43b5b70cbdc3e105c7c79e29ac74db775b2243ec57d53e1a4d04def85e4122f37c623cafc35dd6dcb4aa972ba8a4d88de19747f7a75c542995aa49d11455c3a3b10bdcfe32d135213a2cd2315fa5ce1e87a3288a469e184a25c238f98e46866689d93ff660f9b9bebc66073e58e63ee35996fa2577a6c7b4dfa83fca87fd65aed7182a0db5598d78390af74be12e5d65195cc41a3e7ad15b782472abd7d5571959395cc3d1614c61f2b226ceeefaf97e7dd3f9653fbc1e3b64a2c9c87fcc9c9e47a70ac684980095703d745192e615a99cd1482a9be4c555ea41cbf9d9bbc826c1d89ba69331b0acb608f7aebf20ac9ab8c9fb345ae4db7a4405e989b2cddc603cc2f8db7e9ba9d906665a849e62141ec3aad12a296858eed09808ed646d28995353a1a40edd2d3ec31ab9c530b30bbbb9a3b9506acebd2666a36b6b5ebaf61fa6ab8fb2623a3b852f4c7e87a7f4b1183ba4e56032ce0efb880405a0986923c124e94f27c77533995a6671cf5b8f158302d4486361502e72b1337de6d2b026a01626c5bdb3b1adb86d20498b237b9a2c6c8d65c0be45e07717ec37802d3fab728ceee2c476f0ca9a8a16cbfc3ba241bf672e8d0b67b93d913dbbef66c0acc787411e06dd84c344356341730e16624f2fcdd11dc7f3a565e6ba46113bb0003a8fa78ba11376e8fd99a5469c75710b2cf999834f957e98ca810c16a509d5bb30871da2d95459dd4ebc074b4984b4bf6a7dccc9eab7675456de098304ccdb5f1002f210122f8a9d25ecd49fd0c49e7d7f9aac97fe42bd7081c6ed39032ec9817d7db3112861cb98ae702da46cedbf95357baf6f0bcd6a9f118ccf8feb7134b22404cde2b1933413d3d6c3163da22573e07ef368c5a70cf58f70ae395ec0008e8291e54f740bc1382cd31d486f169bbb3e08376e1e6d0a17db4352b7016dd0e71f5b28498b9891e3771a93ea1d9725fb5e3325b56939528f4af05cb3105a32b208db98a724fe051167f9f744fa384cff90112e4b438e745c8823dd931bfafb7c011637e7ded321811daef1a191f25a1d6553dc6b95ef9e583465be27e2744ac8247622e64710f6bafacd3322e58404df39be5b071819107818b36ed103c941515db224c7806f4f67e9c71b8dd497b2f108acd44a4aae144fe3102ea099ba8056a43173384e81846e2d37dfe4e7c25f661c2647ae5583569702e286073e1fab9bf5724e983a8a69046817e31a1479e348c0e7bfaf0ceb0b8d02b46ecc03a21f4e0d43d2950cd4742a24428b580e9f731c3a3c459e9feeda7e5e938688b3bdd181cad4b3c71080a7459d0a8fd14ea952920f4af01da9be66a0eeff2ea98ab60059bc731c64ed30ae8628a556de726bd958451bafe11a864e2384292d652bdce863afa647f3f907402204f544271e3f6695a87da3adb88d1901f8258b2921bf31f58ff242cf200cd058e2be8c7a141e169c878ba4bff1beda345c38791299a630dc668acc61e49cec54ad7bf4d1df1a2b90711b83329f8414b55e941d2cb994a7fd70a038855db19701d99856bb160ac5ad503db4b2cdbd1a5eef295e74fecd8d9ffd39c910f2af60a5531a2dcf9be2df1609c23c295fa1eebfe2719ae7e6efd8f35bc307c1de87882179e7543f90921f8ee8a9dbc0d7ba44f5f1118b9e86d820e089ed5d6e006b7778fe8c47f3667343170d6a33cf947b1fc8c26c9a6b52735b7696dd3da1b0ddd24a77a2055c5bb029e0d8afdbe20bea262e06c6deb59e82fa5bea3a5b23fcdbce7b06a1718c8bc788267bd7146651031f2b7567ac5584ff2685e0c0b72f365a70902c9c1fa8c057aa8038a5a7bbf8829c2b594f719cc456d02f682032c9adf6c0322e437d735ad6a5c0ed94c61ff058e964788b1f10dcda962ca6b9036205b10522544045bf2f13a20d415d1bce64fc19db7787c0393f60d2ea2373240bd3c478151c225c4408f3acb74e4830e13a03277958c1fb3188ed443cc83e99cc98af09c886fdff7f8f99e0d1a0300d427fe2d77b41a887edfa10f8b3c05be22a426c28622dc0f66360d64e4d16c18ba2f157028a6b74937603120f48894c027e59fd8f87d0a576aee535cc2c5e467c4a9cbc6ae4fed67e08fe7afe2734ab34d8c680045a70822eed45019f24982fd8fb12c75a2d0e9d2a353a5d5942fb2fae24e70848bc25f538eafed79125d0d0ee60ddacfb5f8f4b45aa5ec0b166f3551a84ec9708c4c0a01de408adaf254b18114d5fec2a546b4ba8a940434a55773588cf17308afe69cca22d4043604e9a5a56bbff2ec30d57df69776e5109320f841c4bdb45550c99f401e457460d6a65c83315baae08c45d9544e5fa49c003321aba157e1667c4e55d93ca5ba47db5485b612950bd54586ca41aa90427876171d8b56af416f4b1039853adf8bfce48f1851ebfe76cbb179b8c45e530ee763b76efe28e5251fc65a499342f68e228190ac575621038bd61f97b9d5d9ebe3917ef56184ad214ede4cc43160eab1df9e6c1106c1c931b76056c0c20a5b565f21911e59dd9569a4048b9468090a88d6456bd3eff32aff6c11b18c0609b5e5a5e28030e829f4eafe763018497915a78b18a06cf47266f12c50f9b9f55bc66f309895fa64c0e292e573105ecc82460c869b62c8b9be9c2365bf0560612272c76c9510f51798d066fbeef99677839cf18d141e7a73014ce6760ae5c0b80c63b3765758aa891d11c8ae02707cb089fcca00abda8082aaa7e677ad040046e70a4f1d1246e5bbd76da55dfa898b25349bcb634d8be8da72a571de26c48d3d1930edb99e1cc2590e2845f81d739f7c05ed8dda5c483a7c11c9179cb55279fcacd1cad1ee04794920e011a01345fe8fb2cf78f8fe947fc98882da9802f8d4431002f93d1ca42a33abe88bb7da3c6527f918bf3b318eaad988f306914abbd4ccc93a2b7c5fd92cfad49202f7ea1b09f7f45c12a76ac7e7f492f5ba994e6497f8d960c489fe6354ba80da6736d4591ba8caace062791b938915ed5734b65de30120281ba1b64e5cab072e20ae281f59ef110febdac9a21fdb2573a01cf3e3adf01c6fa807fd496f23c2cbbc73c214e79ff8973da5ca09d9bf5e1cd46ef4b72b06458e316f581e320c731eaf955e4ace231beb415307b7eb517ac95ad6337880229c19ac5e8346cdac9726fbc1a7c504ab828d91c360fb9ff3b4b908d23df6c7eddca98a8e0d7df3dcd3f23093eb0b2cb6a16718a52673bb8cde2bb55726de87a920f548ee0f1c1fd679caf226a93c7d0e239cfeddcc34f5163122b33c319201c47a070022f29f8cd3bfae12ccec934f16c3585cad0c0c30831cd71dd91682d5ded1e040a32660286ba1b34398e51295f8e38a4063f60f6a1684b191c78d941c2603210b01f39874701f7e915cbf4bc6ec0ca8ff600d8a3d50d6079b3160b42562a5f6b5ce5afa8b48cf1071164c0c2d2706c4fac0a7693de189b3f70d6c7c0a426668c7d63bc46d9aa1f001487e5284ae4d5114ccd221d7f0a896836f9bbfacf095e258d664fccf8421e0c448cfcaef03bf8da7c17cfebacef87e9d05a6687e110f3604e91c0a84bc057d670b43b9a751eaa6aa35688d009e83b96ade98eb5213c0f1852bec0b2e92f98489b0e0b203bb45ec589579f8f6927beba818ea3679973f10569cfa8e8d043e761ad0b0d00f06b208e25c6a2c1b9e9cd64bc81e6690fce88e294bb1865651632e77311f151188ae49d83f37a52ab1ee7c4b4690b956a6fadcc75c07214215fe0f696c04f3bb153fc25c3d909e71fd632510db189418902737245f3a3a8511e2d9ff854d69ab1abfb79e1f9541ee1d3d8aa9bf7be4050687ca4df924fc24bebbf1eacc678725d4ee46ca40f1ce4e8387f925b8a56254a4d668f3cb1b2ecddf1fc845ab8ef5aebd0081bd227983d8f4f7c2fcb82c7cba0c736794a40aec217c99b5f1601a8d0777a94ddbcef2f6cae3d8daec5cc26ec0ece01b1503549a9a74bc334fc828660e6dff01448ce2d75ca95b545abd2861d4a0d5f14bdcdc47a48eb877ac50deefe2fc24d1d3b698998242bd464957c778beecb03c96efd95e09ee90cc6a36d34a1c3263003450be6c12347d19859e0fa7be327df638e85b577ba47be0a2f5820ec87942f9ba9491fc377437b24c9aff06b7361d3fe54edc1d7131ac76f1fc6f67abdbe884e5316b6bbda1e900b2150823487dfa005bc480bead8fd181228ed210dce891c82e43088e12a86f4db9786083ae28f6fa48bed9663f6d021855e5036c4f604cd5c90055587fa3e6bafaa560b45854b4b550171c04cba70469d849c459a4c0d16e283c0e48cdab3091c35edd24d06ee07023179360906bd4da226baf461d0d3ef4e8e7242c8b420b40a2eb87d457a45057d8a889b15b7e8a209c2a871865932d7db2c8da96159d0d567c53b95d01f13228baf0c11c5688bf24528c106ecaa8925a72ff7ddafc8ca8fbaa0222265edd23e82b205cedff0cb907c966501363031ed68cb2e051e9f78f24f98d2cfca5078a9896b4231e0075eb5283fd6b0e0c693eff9b4f7bf7bb0e07f73f10630064936912cf96b8c1bc21cf6131d22b1aabf6c6d23f936aaa6f9b0c1cc7b34829b7d6c4582535644ba410b8d8b9bd6b1c99eeea5237d85d4b64a29312f46d791bfc76987134033bdb6a617de53f480f0cce180c52d5e6590b220931ad28542dca5f2b8b1e674c383206899c1b5d2ae602f9beb4aab115e5e1e31764fa92c8cd03ebf37631c00316f10caa0b50ec31e0369157260d7a512b61a5534087d9c8a74125d8fbc221bdb4fc13ae53ffb696e0c1d4aa3e0ef7ace68bff2f62ac8114fbd15aaac3a85dc69a184eb9c0f8c4d36930935ddf67750ef7b8975a6014c4f2c725b338f569b268f984e0a26e3b74d77d0ef8cad95e4f2e4ea660bdbc34a94a7529fbbda6d5ef75ad84e64cdb722e135b7f32c7949d628e03cbf63a3a55ff4179e94c28ecfeba9beae54eeb7cae124ac210a3fad07eedb6319bbfdcc20473b8c32253b72dcfa113f5ce7c1019850f64d525f6e4fb7da3a06ef87c536130fb486b5789c918671755a4069bf38a543bfb6509b2f0f4b96270db4bda76d75693beae942af0b9fd698a7c244fe530badf96341c6438c93f32165c9595f26405f64ce5388a460d76259656f709aabc19d09e224b02f64623fe300682a7433f165d93bbb02fb41b62258a0c76f7d40a8517305b18de999fac8f82f3255a59f962e34ba7c0d5e4b5b710fec05337217bfd3f4b0a2db8e1b5a8318dfe0e22edf8eb8e2e347f002bf2934e114aa42e20e20ec0ba", 0x1000}], 0x7}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)="118f4786755039b95c55b0c0bdbe7c02d7b04104bb5054dced6bff78b19bedd4ddde0f753c3e4668182d93663310d43211aa2e4501dec7d08c91b6c91f1c0bb1dd84075895726439b860f6ca145c622b194cb493022662164d509c58fa820014a2a710520883251ce0774919efc7bb7f5c924f9013feda47821542f0d5c6d5e0c7e2f8252759b13193fdaafe436df1c6f712d8a44d0558b4509699e25c7ea179013b57e56dfd6881778e", 0xaa}, {&(0x7f0000001100)="37620d0b445e9c414396b56fe45fcc770b6cf08e5bce9d4de434470b55ca5fafa674ffcf65aae594c3823918fbf12f083b6066a777a854c6e68d2f05b4a3d766e68911bc76ecaf816fef09293e3aea3f349c4ad391cc6323bb8b13e9963576df6e859d63d1870b59de81cc173bbd25ce", 0x70}, {&(0x7f0000001180)="5d38c505f683750815e2d4b1e1aa20cd774b19", 0x13}, {&(0x7f00000011c0)="4c3f32f18be29481b735efcdded7907608c28e3266a63ecda1f1feb8f6356bf0f297004cfd59591827596554a1b4d47c10ae3f3a4f57f3e5674f001e56229ccb94c816b0f537cf20637b5c1e97c249d7212dfeb0e5e304cb9551f0e1680889fc7ea8168e7b4d9eb2666e1a5943d4ecb95ce27e68feb03801843d6c8b9092e0d2071a726b48771e4b833d83e39bf15aefd8c0a528e1c956f430bcd6bf15ad338200997fd594fd750b3c0af2346ba0327afb0d7f257116c65f33", 0xb9}], 0x4, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r10, r12, r15}}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r15}}}], 0x60, 0x805}}, {{&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000044c0)=[{&(0x7f00000013c0)="9149b6da50a64a3b148e77b280453e6b86a5aa4eecb10cbb17d51aff0aa7585d042858fe193eb200f2e0ba452d10939260e333acf5a9162948a45274258a6499a110a8adbfb57905000f7d72d5f83afd7aee3637090c588faa01de80bacfec45fb4ed0aa321ac1f832381626e47dde981606efe891bc85373edacbdfd0d373aff035375bd6e819b7902cd4f89fcee43d07e5b3949629d3d86a67d2331dcad8", 0x9f}, {&(0x7f00000034c0)="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", 0x1000}], 0x2, &(0x7f0000004500)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r3, r17, 0xffffffffffffffff, r0]}}], 0x28, 0x600c0}}, {{&(0x7f0000004540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005a80)=[{&(0x7f00000045c0)="d54e9b79b66ff80e9042789c782dbb041b1ab44219fc8fabe361a0a3d269cb996eec0d797b70892f503749a8fc5fb95908d71a85d7754902b892a9c9c662f33eba9f15cad4daead1701091b2b71e98c8c8b7fe087e7eccb7bf20279ee831b6e53a47a3d6aaf31dba13f4f86bca7b672d0b2f3c522e2cfbca2e5ced1d74359f0a576788face844ff1539108a503d0a189697f7fb2de843147a8d6a71426ae87b280063b9aa36a00f3fe29", 0xaa}, {&(0x7f0000004680)="f9d4e1d90de2f34dc4692b5c8869687bd95a635bbe05579724af8ce3485e5028d32455d654a4196b123256c1ef0730a39a8e2cd34326b3cacf4f4f5872c03c8cb9c6471082dc247a57e725c04db2d6d9c8ce04632f837b45219c3182b8b95d2f1d43e84d24ab7de70089ea99dacf970d59fa6342a6aa3cf9ce21dc04014a1d8c188f103ee284f62714675f94143a5d1f2872", 0x92}, {&(0x7f0000004740)="33821cdd08fb13eeb740e507a248564f80f6d0c1cb065d55d749425686ca73c47326acb75f2318fbeb3af503e7db65ea15a8d57762ebc7add2c51fdb6812b8f05e7a32d1f53627132d66e23301f00a16e60574a074b470cc4d8644ab8ac50b6c0e22a1bac8c973cc4d4964bee093bb415fe84158f745a2041f014cd40737c0767241ebcd2b93199b74a52e2d4a6d918cb2856a85b67577b7a485814b6759d833a3c53c9559ef7f3ac15f", 0xaa}, {&(0x7f0000004800)="d433907f37a341a622ff429b63ba6ec9099c224f679dc967cd69f550568c09b9aa397b3ac82dac20454e3819e700", 0x2e}, {&(0x7f0000004840)="7be4ace7aa147a063e604807b860eb17d1834396878afc011cc57dc473441e1c7867ad2c76bacecb733514db56b13b9eb1e70210f9f0a2e72a8c707d7116b17796f1c83665c8cf5c49d5f25076fe5ba2e527068c233b634385b99fbda4c19c55c8736491195ea7b3231156ce24d83571e9d27635ef7cd4adc9d1dcf3c8d571bb8f20e1badf5e72e4c5027e04a5dc73537d09748da06e7187ea9b6a367b1aa41bdb5f170adb5f130b399a6fea7cb4021367fdc8a06de7985aef07b9e8dbce37a2d41987810ab9770a067f5ca85622d5d0d958e6814a6d", 0xd6}, {&(0x7f0000004940)="264fe80e8e1dafdb6e2a22a1a334a54b35d12e5d8e4fa3167e169c2b07f5c355d25dcc2fe66d14693ed3d2ecdc39038ead8941bb256f492b20fe18fadc6b3cf54690eca2468cbe5af7370d65d6da5474dc01097d398c2e9e558b27845de08f18250ceea324b59fce346348329622249fe3ea9f9bb5ffff9c426fb036efb26937186dffa970629d498f64ff5b44176844cfd62bd634d1db384c6a8ba581be3bc85d6f75f6969b5a1b1d549313f777e89c8011c1fb6b1ec80b0f16b17bab65cf3a9d4bc15b2ba7e717f130214400918a83d5d6603962f60a05f007ec823e4adab80b5f8fc6e5c6ba03c577fb72631dbf6d1c6d9b1bdcbe41b8bb1efb217e6ee8d75406a053e0e8e03de77a873b123751ce136fb3a7ee21d8f03b566c7b98e9d6a96b361d0264c6101988bf026a569a0e5fc9788cf97a54ffa11bc43d58a351b1bb32320a8d227e487dcee63aae53ccea77b7a59756d01bbf4ed92eda4e0cf9d9970f40bc7847422851edbc29f1ec2a4984697c98f75ccfee1a09fc90f552dc715cb9cbeab90e8c7be448291ac4b1f5f0ca7f1f255f958733208c25ec8a5746342dc1934a70f5504a43e679e045744c3271dc39c52632344d421e2d4e83b5dfa2750cfe83d8ace2b4bad4467c7a4b08aea42cedc2c0b6ce8c0e1e7d535da743164322927a21d6b8be7d6a82214b2af26dec0fda8367fb56af8c7afa67774611e7904a1036718d984e619975fe5a936334ea5559ab7dc63465eab2741bf5ac9a21ec3949ebce4b09fc37084632cb8ea323711956b2d105772d0de1292de902b0891518b2535b301c2918299ccff7cfae583017db892c62f357a0634f31a88b569211c69fb4257380f72e79fcd07e83b1450e693e9d4ac7ea59a6678ae831e6af801ce235ab7f6571382deddbe96d2f566a1ee6fa870f2957b79be26123f730edeb375a6cc26bec53e22b57998bc264acba102eca1183fc24ef9fcf0dfe3e250364587ecadce9dcd10381a5675fe4a6da7f865fac9a38d7ab7ff729847d6b2db53fc6122c97332254171b731ed898750f87e51a4e68aff3b1f00ae8f527a20a66bacb5b84d11a035672cde10d0e5fef2fae68a20c0ba18f56a35d784bf1aabf629ed13617b5d724ad4b561bd3b91b86371ef6c29a834dc4560fed3ff5c87016695c2ed1a81c9798c07bf285dd9b9107c11ea683b3ce2f1972d5e43724bd4e65b785ad37b82e691542313e1aea8a43dfdc25a6807a46a2474c703285e57868675a5bb04486410110d704e26669f43fcbf40f4a946e2e26d4641353f12b348cbfe0119d51f087a98e71d486821d0f77c31a65a2dcf2c29386aca2bc5a32e897bc3d43ca50ea4359c62475dd5cf8feea686f87cdd417c238b9cbec0c7e355cb2c1173738514966a8c45390c82143492e611e7fbfe6378c2cbb5575a3415fa830dea93c487964bf5eff3df4d683c83a9cef3cd7960420ab034e509990fa2f91c43e91a4ba6625e4b884441077a3f4c53cb26d07cbbff9d76ca5b1bc6ad46e30615f9c7a41893dbb590582d4796f6040f26383556b09540f18ee474cf5eded54e2a2ee5268b6b9245cc768d46f5a357e51b19aa2db06e235f59d7a2de3b336df37de01c95ef06b4992ab44837978b7b0060b8acb7406f65846793ee5e50b9353f7f0550a27fde8c95e43fe7c3cefc122033a17112978da1dea9de51137d5b3c59ace562b2c41901736137eda1bb82ab06c49014bac08ee350a4320cbdc684429e59ae98b69027f9727a9f1f8dae867a38b082b351d32d9598f007cee7229453b791c4c55d92ba8a278809d81cd3dcc220ddc98b96b138ae8bb82efddc3e48106609f53945561e00a87d551d23ff75a14379ebd170367015dbc64033b3afb2060f2f1f23319f7572cfac0bccd3088ad07a670e682958ff2ecaf0af58dbc6e97034b591d4fb1efda6f136e60152e03fc4c44125056f474c25ab4b26bc54cba4be03eb44f6bd9f2bbba5aa3e9d148b76d52666efcf78bf973b90de8bb31c36e4128c67067b99c1d228ef006f5316bc2a7255ab90efc8ddbcb17e3d118e2b460ad0f88bbc0c548e1a744322dce242c2160f7a577f3fcaca688335f8284b05f00309217c6a5b18f3349f046e2480231455d83f5d9a93320d831a66b8cbc44ea051cf4626c1ac9870eba82e701d402718f38bdfe9481ee32cbee3c29252359dbff2664de4a20620a5656e3afe0f7cc39bce36c6fd02721686d2319c352c15e5075540cd64ed5f5694dcda9220ff4cb5c7e454fc21070b219518384e75035600e8f31dde64fad2ffbfa4e50ecedffcc1185a933f28830b454d19adebe6408f10f5e94c08ad6b60bbd19597adef8c3e369417f8793abbb1a2bd2ca275f0b5f53a6b7e8ceb102e93d80c8b5ccbe90bc34a124af348b4ac5d3c3f12d3b7c3853ea1f58178ac7490b77b3470028df4ba5873ceadffec0225e9bcb2b169ce2ad5ab1d8620197d5a64052ed18f01adfa306fd2917b1379ea2921ab8868b8f6984c72d0ec59854734ae4d13008a28fea6908f834ab28202e7a7d4341622ba41fcc130cd72454d38b55c0ad30c3e32550a7ff3e1205af92aedf95cc6bf88c6127cfacd3347ee5c806595c9124e8044bc3b44b9b46b818e0150184f22842a75ca99efe66f5a2b9be6b0f664addc2f4fc0585d1029edbb23eba7e08194386e30ad2dbcac2b1938c0ad3461d861535db22b3103647e96a72cb5e48edba73be7715dee233fede8aa2727985dfd51282ffc5e81cd890dc54be8e3f98857ecd73b564d7b41d79a33827fa8da89a76c29d6140a9dd4d81ed1ba45c9c18a0ffeb75a2b4db4b11f24288ca1db2108e378e87e5703fcc7fa26845b46706d29dcb4b60d2fd039ad5ca6b6a3f78a7065c2f37db157b965eb632f0b6ebf30d824672acfc208660034cbd59e2bab0dbef3fc524e8a65ed1eef13f2e381bf94a7e516d54b8f642a8d4585f3f4298c75853912500b4e8d24370d2dd199101daa2af8c7c6a558f6fd77ff935a062ac7a4c30ca0c01e2c58e5e7ea06ff62d5fb852ecfe9816ccff1e2128dfac01c4409088dae113709a6a92eacaa8037e94fffcdbfb6786f3394e9f74756e86bc3d77481a333e570840689924d2ad907c24d96483e938f9279606e7151d7de71f0d32a4ddedc881791cc3a151d6812ffe4d6c1a83be5cee485d7c1fa4b2ce5cdf82db2f3253245e1944f081ac9f2e7b33c20f5dc96e2bb90a58ae457c9f20255a5114666aef101e94002d908ebfcf76ee1b9fcac36dd91f21641692b3e949d58b0841b23d18f9f9b9ad2500d2068a89a739e17bd33a8a0af03b84880c2b9fc9a22fcff09f8bd13e8544d3d5e5afd28176f07a3669eb6e49ac8b4452570b9de0a3b2e675258680bd850ce579d9e0782ee1c982dbf4c9730c6e2c87e55b718b78934a01ea0d129a2e5bf9f14fc62166f1b2b156ee701ea74c0cfcfc9262969ddd81645d0555378d8c6ef7841154bf10b43ed41e8c4a9f26669aaf9d12372239a23235e24473e93415bc1b930b6ce7201bc3d14cec23e6060c085c27967c1b9932c28b584060a0457224247f302fdbf9b7c7524e3977200e981d905ace63e09d0d05d53489e3a9443d3c091d9761552ffc7918df53feef6ede9149650444ac3973af16152d725ee49cbc82a5c06f006b37f02f64decbde18e56f5b61004be3f8cd117157938c61711891d6acc4558bce080f5797d5c33d561d9f5842d670bb793eecb669213dc51aa524c107dab10d3e8e978ea5f3f86cf82dbaa592467c259dd2119b795eca338f98f4148b58d34db0b9b0ae444c695f7fefe7523c99241e81a6344a78af420144a701f5ce40023474b76e833fffb5e2b4f7e1fe675c914df5b117ea4e6abc15ac2749603efb90d8912fd091ee353171824ae2bb39b5344c9422df0362d5c605fa77a772ee1260251f18c7c187333cc82639ab72c3f4a59d61b5f53e9b696db57716d8852a7ea110701931de3ab8731ba26bd443f033b4de3d4f0aabbdbd40c771e7fb55ebb6dbc6db38c01b3098ebcf4c2cf939a14a723d5d4bb9cb5e9631f03c312a5fdc0ea0795e2b8f21cf2102b71b7c71401b286475b1285923bd01c5d45ceb1ecde8d196403168598c802c8f16e43b0a3a53bbc4fae2c996d841e30cf266b2dadfa5644c07af440cf2174d98553e80d3799d9784731653e9809fe4d73a9e0533ba282248f6a0f897ae81e19ab04af0334547254ba015186954f96486359f3903c778413c0a7cd67a9ac6433430211a54d0459a6c1b50257ad27bfb48cca0dd44d30bffd69b3d46d336f2d2f36e510673a30550a9fe02a17c24c6dc6bc9549531308417b4b652a08a14cbe608941c11c5769762a1dab3a34f1323aea2a7315f86674f5d1bd5fa00215698e0a447d3794322ec68d274f89dc3195b9039304171517969d0256bf5249e0705d6b63f8859c2842e3fee3d866301c4aab3ca46f557858fd77c7e93712a413976bcf133b2ed3583d12d7dcfb3e07e6fb9f28a73b3a1bdaffbc2bc2f31d2f8fab60dc124d7d50d3ce0f04844d4c0b66386a3af0a6ed0567f3ef323537b25aa805563222d573d5e769098ddc1348dae00d0bea7b4566fb13b1ff8328a2eaca70f48f2d17e625ade960df567d9dd8d72f4f89076c4c8162fe02919e71dd500d3bf1ee55ac8bb872f806c2f1e584172914ce535d4381552fb42e308851db57124bc247bbe1fc03693988c1665a967698bd87f88fbb4bc65710471283a330984353d49542025f1131ac01c83a9aff7d904832b5ee59ebe7aec32344c8df28cc05f4a4c97585f6aede4156d0f6d8721eb623970728b2e5661dfec03cf505f57b8423c7c1dcf6db2c99b76c38c5bbbe37bd6fef7b783621bad43203aadf3590774fbae08a4c2d7a0acdb5ef96d001a7beb9e5791e8fefd550135ea4a806aa77064e28584885bca86df1172a8a268d47cd54867821b377e19750a464726d90e2a8d192e2d5fd58cef60aa05f6e3f31553c585e9f254e437313d3984fa5afd161ee980894191e5b5449c8fcd78ad8cfd70be8073a4f51ff8ceee4257a2b525be50d821122e80e51e28499843682fa89a361fc51e20aab15e59c4fd0cd9c920e27fe203511cb3b81ccf1136b79ede448b588456b0399121c00235e725bff31ee7f6cb10f6561fcc37a4321ef182dd4a8f9309e52527b761adf49b1e682c21c5c027abff2e1f7907a8401cd7764fa4aa0403a6cc65ea1fc500cc3831ead3de6255bb04d26edf9bfe57db5ecf2f880c21ecf7ca8d573f41d50448f125442e1fd9f63e19f3a32d482787571886632939bef10b72288c384fcf50220b6fe8ef2636d9ffbd0fbf23734fe96c4ef9dc74c5f58cefa8fdd321b8d3882dad0fa5c8b31325e74cc03bf7b379bb0d3e791a75439fd1d7d44c062df09b53859b1bcec09b0108231a3ed6d6c62277362c64d2f07f775a4cffd9f1d0d5343b8eda84b73c9ab9d747de2e0e10f22914b8375a0a0141a2fd6ff1d6fce292778133fef15fd085fc1a8b2c437496935adc4832b65455de4b60598718f52b2a58e28aa07401f908fb0000b8c509a1e6d721e38834aa7f92ca2c29b3847eb61b2ec30db220499f89d8b48938e415ba0a44b614e7f84d6d7c8e5a2fbf88fecdc539bdd1c890037c15feaeac5615daef98a03ff12d0692539ca6fae2a1526416b9767ee8360489327a9915a94daea5aa07bc811abd8132754ae11955d5bc0676a7d66a97af6e3389671efd01eb570578e4907435080b0913c8cd8e1085a35123f5b1cfbd4228", 0x1000}, {&(0x7f0000005940)="ea0f36b959d18f89bb2133960dc470286f7dde6c82c1f20d443ced4172acf9c98ea1e8662d0651a661249b38e07a9b2faf0c9cccc72063f5295a51f2bc5464fe57c0e6f07b188dc748bc1dc3cc6a0d5d836cd80c9fe769b58c28cb8a8a58097b9d9c387a9946751149802b22e3dc30a2a2311fc6d6e6b4534530e5e0940d749f744a0f2d04a0326e38fdd4436abe28e4143038dfe91da7dbcb47ecfb0db8408c6384253fb6de1d9afddef0efb913e0c7a592b7927b3d92514695da0f9533b4185ccda6e1cf72dd1d61b79ac0ad532edc7f9cbc75b399c56f0889ba4ba75511d8", 0xe0}, {&(0x7f0000005a40)="28449ba275feb2c867dff640ab5415c88f4397464de8d9655b4d3a28ec", 0x1d}], 0x8, &(0x7f0000005b00)=[@rights={{0x30, 0x1, 0x1, [r8, r18, r8, r17, r17, r0, r17, r4]}}], 0x30, 0x24000000}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005b40)="355e0442a39c898d961968cdd72fe03565ab5ce122024334bded6ff22bed1d0382f1f873ec1217801725c4f5f334b2da659534b5b6a43be1c74f788c0cba17465c091bcbfd19b394065e5350d4f08bba977aeef42d007f30c2dcab6d0b54373b80c8def75322b48ce56830374c897f74eb7540af04d8c35d9f020e3f5eef570a612a6c70d2b1c0b76f39c55ddbcd6eb97a36f278a65102d21d1c8e3bf5f6544db61a87fba4e11d2e9f9810245554712d5c9acb3760fdb726b8d417929315c055d34e39b3f6458a9fedee1ed3fe8b2dc7164656ce4c45ff65ef", 0xd9}], 0x1, &(0x7f0000005c80)=[@cred={{0x1c, 0x1, 0x2, {r2, r12, r7}}}, @cred={{0x1c, 0x1, 0x2, {r5, r13, r7}}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}], 0x80}}, {{&(0x7f0000005d00)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000005d80)="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", 0x1000}, {&(0x7f0000006d80)="e34fece5952469e1e9596d9a0a69e191e920dbe7f2a7012ecc70243bbccb0c7a1babcd9af8bfcf32b5a70b61f69ee065fb61314fce4cbe20c47e8bc4f1c3f18220f433e9ad758f529dab79558dd41884c45963676d3963df3d75c91d4b368610c19f15550e49f84a86776de1ee9f5f85f11d3019ed28678a5034a34db929fccf1cd507e1745b2e919d200b25c28b01793b6af454b402b822", 0x98}, {&(0x7f0000006e40)="d7510b0dac0c8916afb0fa2097bbd0190043f60df59760942c6f7ba5497826b8b93730974f515164c6ac78d8d78dd3b4b081a97c1cddf0e710837fb5b7dbbbbe4a2d5977ee80931997944bfcba6b1df92f2ee5", 0x53}], 0x3, &(0x7f0000006f40)=[@cred={{0x1c, 0x1, 0x2, {r5, r14, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r3]}}], 0x50, 0x4000000}}], 0x8, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r19 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r19, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) r20 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r21, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r21, r22, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r20, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 59.08184059s ago: executing program 0 (id=6001): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0x7ffffffb, 0x3ed7}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x42f7, 0x40080) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x600c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = open_tree(0xffffffffffffffff, 0x0, 0x8001) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000240)='\x00', 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e21, 0x2, @loopback, 0x5}, 0x1c) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xf8d}], 0x1, 0x140, 0x0) r6 = fanotify_init(0x4, 0x1000) readv(r6, &(0x7f0000000340), 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000019480)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3, @ANYRES16=r5, @ANYRES64, @ANYRESHEX=r6, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="63e527a5b3cafc5b80bc2ffe7fe1060f50d6e25bde6cb3dc7016b1e2b189779d9ccf38fa"], 0x1b) fanotify_mark(r6, 0x1, 0x40001019, r4, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x6, 0x6, &(0x7f0000019300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sync() getdents64(r4, &(0x7f0000000740)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) 43.988688188s ago: executing program 32 (id=6001): setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0x7ffffffb, 0x3ed7}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x42f7, 0x40080) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x600c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = open_tree(0xffffffffffffffff, 0x0, 0x8001) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r5, &(0x7f0000000240)='\x00', 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e21, 0x2, @loopback, 0x5}, 0x1c) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xf8d}], 0x1, 0x140, 0x0) r6 = fanotify_init(0x4, 0x1000) readv(r6, &(0x7f0000000340), 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000019480)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3, @ANYRES16=r5, @ANYRES64, @ANYRESHEX=r6, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="63e527a5b3cafc5b80bc2ffe7fe1060f50d6e25bde6cb3dc7016b1e2b189779d9ccf38fa"], 0x1b) fanotify_mark(r6, 0x1, 0x40001019, r4, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x6, 0x6, &(0x7f0000019300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sync() getdents64(r4, &(0x7f0000000740)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) 21.000496014s ago: executing program 4 (id=6101): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) (async) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x602, 0x0) (async) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async) r2 = socket(0xa, 0x1, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) fremovexattr(r0, &(0x7f00000002c0)=@random={'os2.', 'string\x00'}) (async) close(0x3) (async) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 20.300078128s ago: executing program 4 (id=6105): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006800010003000000fddbdf250a00000000000000060007000800000008000500", @ANYRES32=r1, @ANYBLOB="100008800c0001000000001c80000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000040)={0x10e, 0x80000000}) 20.196273219s ago: executing program 4 (id=6106): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x800780, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000280), {0x14}, &(0x7f0000000480)=""/158, 0x9e, &(0x7f00000008c0)=""/212, &(0x7f0000000200), 0x0, {r1}}, 0x58) timer_create(0x6, &(0x7f00000006c0)={0x0, 0x23, 0x0, @tid=r2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaa2aaaaaa50060001080006000003aaaaaaaaaaaaac1414aa0180c2000000ffb60002"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @sco, 0x4fe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/163, 0xa3}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x3, 0x1}) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) close_range(r7, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xec, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}, @CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x2, 0x1, 0x5, 0x1ff, 0x6]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) 19.923841761s ago: executing program 4 (id=6107): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x40, 0xe, 0xab, {0xab, 0x22, "d4879d76fa0ac20a69206103377551f98edcf18d6adfa09e7d0a85f18a8fcc84b7350b8c4db03b0a62f170c6e4f5f5e5c9869e6cbabbb4da600685b9be5c21d191a24a4a22dec05fb47038c72f78234abd880e2da9ac7dea37a7e1059ef7a91aac4ed71f6ce0207b48d1536ccf3b612815afc6e21a193da61ce6ea36c2a8a752d037645255514ee087670c5f66f674f7687b2e4d0fef318c39f956fa4fb1905c643e87a7fa18d6bb8f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000140)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x2, 0xf000, 0x81, [0xff0030, 0x3f00, 0xff0000, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8, 0x2b, 0x8}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0xb80bc2e479ecc647, 0xb0, 0xe6, "b64221dc", "5ee3b6c8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x2, 0x1, 0xe, 0x0, 0x1ff, 0x8000}}}, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x40, 0x1b, 0xa0, "4ddb86cadb4fbb08b66a81d3cd58b38cb18033f78ddcb71bd2a86bcd6af21aacd885dd55be225b6758bb7be1e222e09d2a96ada63b9edbd618968fbfc6d9e261465756cf9d342dc4d570e6f6c274bd1cb870c6145e9d8bd9892e6eecd70820b05472f6acbc7a54db9f2aa3773d71e32c6d9800705f30202b195bda64c076a814a46789f17d63f82341e62d9560a7aa79828ee73694575cb600806e6ba2835e49"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x6, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x100}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, ';\v'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "ddc9"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x61}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000ac0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.000992384s ago: executing program 3 (id=6141): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc3", 0x6) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "6017f19a2af4d2f35f3f4b265c24e341f53e93a9f0275ab30071a332e70072108b0921471105d97c35cab22b1b362f06a0bd928abddb310e9a29e13c58906a5b3dcefc7e6214a56d0a0eb08af68030e4232c08e4d61733678c72c9d2092b2db7c9778334d9d6a88e85ffc6323955b4f9"}, 0x7b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x8080000, 0x1000, &(0x7f0000891000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000001040300000000000000000002f6200405000100010000000800044000000008e62d7ca17a4bd46a635304d351c901508b8daf02f4e47251bd6c5ce8d8ac957f878c66421bc3ac9eedf13b3f100cdccbdcfd51b18c77fc35f3a306bd05c6a5e68c06aa370a28e3a76ab62bceae1800c17efac9fa35ee61f2267be0742999ebaba8ad08dc0c0d7dd9ab3481d1db1e18a80b7f802d397680bf5a803a6e2a502b4e9a7a8c0ff3c28f1a3d24a729a3667742860f47ddcd000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) close(0xffffffffffffffff) 7.623669507s ago: executing program 2 (id=6148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xc, 0x5}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}}, 0x0) 7.618223686s ago: executing program 5 (id=6149): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) io_setup(0x6, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022a100000083640000000b11330000b374"], 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x200) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 7.524020523s ago: executing program 3 (id=6150): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(0x0, 0x4) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 7.33819664s ago: executing program 2 (id=6151): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@canfd={0xd, {{0x1}, 0x2, 0x5, 0x0, 0x0, "2af7d7396f36d9b8533ab8331f24f95a7251bbaea78c21d8516d37f3c3ab4f1330e56919ad3dc0633b20c843879ad691ed27ca6980f95b55924018c26b886988"}}}}, &(0x7f0000000240)={0x1, 0x1, [0xc9b, 0x565, 0xc45, 0x9ac]}) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4e, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 6.466356566s ago: executing program 2 (id=6152): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x58, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000001, 0x43564548, 0x9, 0x7, 0x200, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, &(0x7f0000000280)=""/216, 0xd8, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 6.216390148s ago: executing program 3 (id=6153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sysfs$2(0x2, 0x817fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x4, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xf5, 0xd68, 0x2, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x40, 0xffffffff, 0xd, 0x0, 0x0, 0x1, 0xfffffff9], [0x2, 0x1606, 0x0, 0x0, 0x1, 0x5, 0x4, 0x800], [0x200000, 0x5, 0x0, 0x7, 0xfffffffe, 0x7, 0xfffffffe]], '\x00', [{0xfffffffb}, {0x803}, {0xfeffffff, 0xa40}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0x4}, {0xc01, 0x8}, {0x8, 0xe595}, {0xffffffff, 0x200000}, {0x164, 0xffff}, {0x8, 0x1}, {0x0, 0xfe8}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35}) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000048040)=""/102392, 0x18ff8) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x80, r7, 0xc}, 0xc) close(0x3) io_uring_setup(0x9, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0xc5c, 0x3) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 6.077873499s ago: executing program 2 (id=6154): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB="f367170a61b7f0299534f4a5f2e0047fcce8700e3e9b6d9b09757c3d6e6bb3a1077214d802e4d4cf4236cb54b95d22139d4fc0485bcf8fa0e436ad48925bd83b24637ac2643675c2c2c7b2ca52ac78316c20b42a90e8f92f8c2a059a0816a9f6f0b0eaf8355a2869230fb28544d45627411806880f6f36bce1ffae003e5fc54f722baf234c67c971e5a991d06c20b9dfc74497"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000001ff69000000000001000000c000000002080200861fa72e5b", 0x20, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x13, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x63}, @jmp={0x5, 0x0, 0x1, 0x4, 0x0, 0xffffffffffffffe0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0xa6, &(0x7f0000000480)=""/166, 0x41000, 0x28, '\x00', r3, @sk_reuseport=0x27, r5, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x8, 0x3, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000400), &(0x7f0000000640)=[{0x1, 0x1, 0x0, 0x5}, {0x4, 0x4, 0x4, 0x9}], 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, &(0x7f0000000040)) 5.275403774s ago: executing program 4 (id=6115): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, 0x5775, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0xfffffffc, 0x50424752, 0x2, @stepwise={0x1, 0x3, 0x6, 0x1, 0x1}}) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x38}, @l2cap_cid_signaling={{0x34}, [@l2cap_conf_rsp={{0x5, 0x3, 0x28}, {0x401, 0x1, 0x0, [@l2cap_conf_efs={0x6, 0x10, {0xf5, 0x0, 0x7d, 0x7fffffff, 0x40, 0x7fffffff}}, @l2cap_conf_flushto={0x2, 0x2, 0x93}, @l2cap_conf_ews={0x7, 0x2, 0xfff5}, @l2cap_conf_flushto={0x2, 0x2, 0x200}, @l2cap_conf_flushto={0x2, 0x2, 0xffff}]}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0xf800, 0x8ea8}}]}}, 0x3d) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) tee(r4, r3, 0x2000200000000, 0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x10000000}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000680)={0x20000008}) 4.940067296s ago: executing program 5 (id=6155): r0 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@RTM_NEWNSID={0x34, 0x58, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x34}}, 0x4004050) (async) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1ffffffffffffc6d, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff0d, &(0x7f000000cf3d)=""/187, 0x0, 0x25, '\x00', r4, @sk_msg}, 0x5a) close(r5) (async, rerun: 64) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000080)="b87d7ae8f879ab907e21ba1f4a54e24782e0370844454dd5f0fd1422fe8ca1ff20e17840a66022125508e9f5b6b69d1815ce5cf63647d8cd605b6e9e79e83e5e3f093789b2e8e24aa6e2cc0ea3a55c5103656fd789ae3b6a4289e21f8ec4cf194b2fb8da504bf62be89db965c44aa5e92ccc11d95b132e2e416690e5128b173e650b728c5ce8875b66c4dd7bb899f1b17c531853e2117e30fe953dac7640b5df7fa67264fffb955ed570c192116b67b1b3c988d59de83907cb97d361e351ab50d54119da9a19a8285141ddf3a1417093300b527cc01d8dba493d", 0xda) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 32) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (rerun: 32) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1520, 0x1298, 0x1298, 0xffffffff, 0x0, 0x1180, 0x1488, 0x1488, 0xffffffff, 0x1488, 0x1488, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10d8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1580) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r12}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) 4.725584105s ago: executing program 5 (id=6156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe9}]}, 0x38}, 0x1, 0x0, 0xffffff7f, 0x800}, 0x8004) 4.696450634s ago: executing program 1 (id=6157): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x3d, 0x1, 0x2}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x0, 0x81, 0xc556}, {0x6}]}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a310000000005000100e4000000440007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000080000000060004404e1f00000500070084000000"], 0x6c}, 0x1, 0x0, 0x0, 0xe730d03276346fbd}, 0x0) (async) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x6235, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x6, 0x3, 0x2, 0x0, 0x6, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x1, 0x59e6, 0x102, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0x3, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0x6, 0x60, 0xb, 0x1, 0x6, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0x40, 0xca, 0x9, 0x7, 0xfffffffd, 0x6, 0x9, 0x6, 0xc5, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x100003, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x2, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x5, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x2, 0x1, 0x7, 0xffff8000, 0x8, 0x100003, 0x6, 0x10000, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x5, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x102, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x1, 0xffc0, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7fffffff, 0x3, 0x2, 0x400, 0x10009, 0x5, 0x5, 0x1002, 0xffffff7d, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0xfffffffc, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0xfffffffd, 0x5, 0xb8, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r7, 0x5501) (async) ioctl$UI_SET_PROPBIT(r7, 0x4004556e, 0x8) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0xf0, 0x160, 0x160, 0x0, 0x0, 0x1c0, 0x280, 0x280, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1}, {0x4, 0x6, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) (async) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) 4.426587736s ago: executing program 5 (id=6158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000001c0)={0x0, 0x10, 0x1}) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x186}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d5", 0xb0}, {&(0x7f0000000140)="985e44efeabe001cabcf3d8673c3a254a9a2d3187950cb347b70a27cb566ec4e49f5084e2c245023cfd8259e2efaf6dee305ca987ec87c1bc4fc49fc3b8646adbde9ec691b0f01f353ed1274a2dd799a0f20af36628ab32fd0936dde49f973d182ff21a67b38a66f82274c9e8c98592b98b90f88330be0cfe168cc00caa212308653ee86182c563d5a041c562c84f886799218fd54e7e9353e1b1cbc9be56fa4337820ad06b22c31773b6b4c59c17d5cfc1a", 0xb2}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="f77d2b5dc0f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022d60f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacb", 0x62}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.071445696s ago: executing program 1 (id=6159): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl724\x00', [0x6, 0x2, 0x7fffffff, 0x3ff, 0x6, 0x2006, 0x1000, 0x400000, 0x80ff6, 0x0, 0x69b5, 0x84fd, 0x1003, 0x1000006, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x3e4, 0x9ea, 0x1000, 0x1000, 0x8, 0x5, 0xffffff01, 0xff, 0x5, 0x8, 0x2, 0x4, 0x7]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x8, 0x8}, 0x100, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80, 0x6}, 'port1\x00', 0x54, 0x1b100b, 0x7ffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x2}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) mount$afs(&(0x7f0000000000)=@cell={0x25, '', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x9000, &(0x7f0000000280)={[{}], [{@uid_gt={'uid>', r3}}, {@appraise}, {@appraise}]}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_dump={0x1, 0x7a, 0x5}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1, 0x9, 0x9}}, 0x28) 3.834428469s ago: executing program 1 (id=6160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r4, 0x1, 0x48000038, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x48}}, 0x0) 3.191896422s ago: executing program 5 (id=6161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220108, 0xb, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800, r3, 0x4}, 0x38) 2.585936398s ago: executing program 2 (id=6162): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000200)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc0004}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc3", 0x6) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "6017f19a2af4d2f35f3f4b265c24e341f53e93a9f0275ab30071a332e70072108b0921471105d97c35cab22b1b362f06a0bd928abddb310e9a29e13c58906a5b3dcefc7e6214a56d0a0eb08af68030e4232c08e4d61733678c72c9d2092b2db7c9778334d9d6a88e85ffc6323955b4f9"}, 0x7b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x8080000, 0x1000, &(0x7f0000891000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000001040300000000000000000002f6200405000100010000000800044000000008e62d7ca17a4bd46a635304d351c901508b8daf02f4e47251bd6c5ce8d8ac957f878c66421bc3ac9eedf13b3f100cdccbdcfd51b18c77fc35f3a306bd05c6a5e68c06aa370a28e3a76ab62bceae1800c17efac9fa35ee61f2267be0742999ebaba8ad08dc0c0d7dd9ab3481d1db1e18a80b7f802d397680bf5a803a6e2a502b4e9a7a8c0ff3c28f1a3d24a729a3667742860f47ddcd000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) close(0xffffffffffffffff) 2.490693839s ago: executing program 4 (id=6163): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0xb) close(0x3) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2020) 2.488035612s ago: executing program 1 (id=6164): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x58, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000001, 0x43564548, 0x9, 0x7, 0x200, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, &(0x7f0000000280)=""/216, 0xd8, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) 2.324116743s ago: executing program 5 (id=6165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xcc}], 0x1}, 0x0) shutdown(r2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x0, 0xffffffffffffffff, 0x9) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="343bddf3287e5f35001b72078545cc99079afad24e", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000"], 0x34}}, 0x24048180) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.319781096s ago: executing program 3 (id=6166): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000140)={0x0, 0x1896, 0x7fff, 0xd3, 0x6, 0x2}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 2.202886517s ago: executing program 1 (id=6167): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.951313763s ago: executing program 1 (id=6168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89e14f00800", 0x0, 0x23ffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) syz_emit_ethernet(0x85, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4f, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x7, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac1"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r6, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) io_setup(0xfffffff8, &(0x7f00000004c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) 1.255741055s ago: executing program 3 (id=6169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r6, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000001000010000040900010073797a30000000002c000000030a01020000000000000000010000000900010073797a3000000000090001007a30000000004c000000160a010800000000000000000100000708000740000000010c00054000000000000000030900010073797a30000000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000000000a0000"], 0xc0}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x2, 0xc8, @vifc_lcl_ifindex, @private=0xa010100}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r7 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bind$l2tp6(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff4}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, 0x0, 0x0) 174.301829ms ago: executing program 2 (id=6170): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @empty, @void, {@canfd={0xd, {{0x1}, 0x2, 0x5, 0x0, 0x0, "2af7d7396f36d9b8533ab8331f24f95a7251bbaea78c21d8516d37f3c3ab4f1330e56919ad3dc0633b20c843879ad691ed27ca6980f95b55924018c26b886988"}}}}, &(0x7f0000000240)={0x1, 0x1, [0xc9b, 0x565, 0xc45, 0x9ac]}) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x4e, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 0s ago: executing program 3 (id=6171): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x40, 0x0) ftruncate(r0, 0x2007ffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0xa0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000400)="b0", 0x1, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x18, 0x8015}, 0x84) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42c80, 0x0) write$sndseq(r6, &(0x7f0000000340)=[{0x10, 0x0, 0xe, 0x0, @time={0x4, 0x1000}, {}, {0x0, 0x2}, @result={0x8, 0x9}}, {0x0, 0x1, 0x0, 0x0, @time={0xc6c7, 0xffffffa8}, {}, {}, @result={0xc, 0x401}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @result={0x39, 0xffffffff}}], 0x54) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r7, 0x4b49, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 1574.709586][T27855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.709596][T27855] RSP: 002b:00007f7a17e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1574.709608][T27855] RAX: ffffffffffffffda RBX: 00007f7a17215fa0 RCX: 00007f7a16f9bf79 [ 1574.709615][T27855] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000006 [ 1574.709622][T27855] RBP: 00007f7a17e71090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.709628][T27855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.709635][T27855] R13: 00007f7a17216038 R14: 00007f7a17215fa0 R15: 00007ffc186be618 [ 1574.709649][T27855] [ 1575.094821][T27857] FAULT_INJECTION: forcing a failure. [ 1575.094821][T27857] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.138303][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.3.5902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1575.138338][T27857] Tainted: [L]=SOFTLOCKUP [ 1575.138345][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1575.138355][T27857] Call Trace: [ 1575.138362][T27857] [ 1575.138369][T27857] dump_stack_lvl+0x100/0x190 [ 1575.138406][T27857] should_fail_ex.cold+0x5/0xa [ 1575.138431][T27857] should_failslab+0xc2/0x120 [ 1575.138458][T27857] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1575.138480][T27857] ? skb_clone+0x190/0x400 [ 1575.138506][T27857] skb_clone+0x190/0x400 [ 1575.138529][T27857] netlink_deliver_tap+0xaed/0xcc0 [ 1575.138557][T27857] netlink_unicast+0x650/0x870 [ 1575.138585][T27857] ? __pfx_netlink_unicast+0x10/0x10 [ 1575.138618][T27857] netlink_sendmsg+0x8b0/0xda0 [ 1575.138646][T27857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1575.138681][T27857] sock_write_iter+0x566/0x610 [ 1575.138711][T27857] ? __pfx_sock_write_iter+0x10/0x10 [ 1575.138748][T27857] ? __pfx_file_has_perm+0x10/0x10 [ 1575.138776][T27857] do_iter_readv_writev+0x6ee/0x920 [ 1575.138803][T27857] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1575.138825][T27857] ? selinux_file_permission+0x8f/0x6d0 [ 1575.138856][T27857] ? bpf_lsm_file_permission+0x9/0x10 [ 1575.138879][T27857] ? security_file_permission+0x76/0x210 [ 1575.138908][T27857] ? rw_verify_area+0xce/0x6d0 [ 1575.138932][T27857] vfs_writev+0x360/0xe10 [ 1575.138962][T27857] ? __pfx_vfs_writev+0x10/0x10 [ 1575.138986][T27857] ? find_held_lock+0x2b/0x80 [ 1575.139027][T27857] ? __fget_files+0x21f/0x3d0 [ 1575.139061][T27857] ? do_writev+0x28a/0x340 [ 1575.139082][T27857] do_writev+0x28a/0x340 [ 1575.139104][T27857] ? __pfx_do_writev+0x10/0x10 [ 1575.139134][T27857] do_syscall_64+0x106/0xf80 [ 1575.139158][T27857] ? clear_bhb_loop+0x40/0x90 [ 1575.139182][T27857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.139201][T27857] RIP: 0033:0x7f7a16f9bf79 [ 1575.139223][T27857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.139242][T27857] RSP: 002b:00007f7a17e71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1575.139262][T27857] RAX: ffffffffffffffda RBX: 00007f7a17215fa0 RCX: 00007f7a16f9bf79 [ 1575.139273][T27857] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 1575.139284][T27857] RBP: 00007f7a17e71090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.139296][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.139306][T27857] R13: 00007f7a17216038 R14: 00007f7a17215fa0 R15: 00007ffc186be618 [ 1575.139333][T27857] [ 1575.971935][ T791] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1576.131676][ T791] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1576.168626][ T791] usb 4-1: config 0 has no interface number 0 [ 1576.234709][ T791] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1576.259334][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.270357][ T791] usb 4-1: Product: syz [ 1576.276770][ T791] usb 4-1: Manufacturer: syz [ 1576.281728][ T791] usb 4-1: SerialNumber: syz [ 1576.378627][ T791] usb 4-1: config 0 descriptor?? [ 1577.005025][ T29] audit: type=1326 audit(1771188197.014:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27877 comm="syz.1.5907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d80b9bf79 code=0x7ffc0000 [ 1577.251906][ T5924] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1577.301572][T27888] kvm_pr_unimpl_wrmsr: 158 callbacks suppressed [ 1577.301595][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.318790][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.330400][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.344249][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.382622][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.395334][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.410414][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1577.421483][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.435015][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.449296][ T791] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1577.450010][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 1577.474700][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.490829][T27888] kvm_intel: kvm [27887]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1577.502343][T27710] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1577.637916][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1577.738121][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1577.798259][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1577.816538][T27710] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1577.870747][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1577.884928][T27710] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.933179][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1577.980992][T27710] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1578.028825][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1578.045023][T27710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.082223][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.293708][ T791] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1579.165519][T27710] usb 5-1: usb_control_msg returned -32 [ 1579.233089][T27710] usbtmc 5-1:16.0: can't read capabilities [ 1579.605296][ T791] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1579.622230][ T791] usb 4-1: USB disconnect, device number 124 [ 1579.644998][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 1579.650646][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 1581.267747][T25428] usb 5-1: USB disconnect, device number 9 [ 1581.353415][ T5924] usb 3-1: USB disconnect, device number 8 [ 1581.403165][T27909] xt_hashlimit: size too large, truncated to 1048576 [ 1581.537076][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1581.537096][ T29] audit: type=1400 audit(1771188201.604:1785): avc: denied { write } for pid=27912 comm="syz.2.5916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1581.562831][ T1003] Bluetooth: (null): Invalid header checksum [ 1581.571956][T27710] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1581.652108][ T1003] Bluetooth: (null): Invalid header checksum [ 1581.769881][T21827] Bluetooth: (null): Invalid header checksum [ 1581.770064][T27710] usb 2-1: Using ep0 maxpacket: 32 [ 1581.786248][T27920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5919'. [ 1581.795809][T27920] bridge: RTM_NEWNEIGH with invalid ether address [ 1581.843569][T27710] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1581.870528][T27710] usb 2-1: config 0 has no interface number 0 [ 1581.890237][ T1003] Bluetooth: (null): Invalid header checksum [ 1581.897041][T25428] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1581.995821][T21827] Bluetooth: (null): Invalid header checksum [ 1582.071629][T27710] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1582.073498][T25428] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1582.081177][T27710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.098987][T25428] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.099701][T21827] Bluetooth: (null): Invalid header checksum [ 1582.148188][T27710] usb 2-1: Product: syz [ 1582.149150][T25428] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1582.162846][T27710] usb 2-1: Manufacturer: syz [ 1582.183074][T25428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.183226][T27710] usb 2-1: SerialNumber: syz [ 1582.214213][ T993] Bluetooth: (null): Invalid header checksum [ 1582.257549][T27710] usb 2-1: config 0 descriptor?? [ 1582.269179][T27710] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1582.572956][T25428] usb 5-1: usb_control_msg returned -32 [ 1582.579621][T25428] usbtmc 5-1:16.0: can't read capabilities [ 1582.742169][T27710] usb 2-1: selecting invalid altsetting 1 [ 1582.760591][T27710] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1582.772196][T27926] FAULT_INJECTION: forcing a failure. [ 1582.772196][T27926] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.789097][T27710] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1582.790395][T27926] CPU: 1 UID: 0 PID: 27926 Comm: syz.2.5921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1582.790421][T27926] Tainted: [L]=SOFTLOCKUP [ 1582.790426][T27926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1582.790436][T27926] Call Trace: [ 1582.790442][T27926] [ 1582.790448][T27926] dump_stack_lvl+0x100/0x190 [ 1582.790478][T27926] should_fail_ex.cold+0x5/0xa [ 1582.790499][T27926] should_failslab+0xc2/0x120 [ 1582.790523][T27926] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1582.790540][T27926] ? kobject_uevent_env+0x263/0x18b0 [ 1582.790566][T27926] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1582.790590][T27926] kobject_uevent_env+0x263/0x18b0 [ 1582.790621][T27926] lo_ioctl+0xb44/0x1bc0 [ 1582.790646][T27926] ? __pfx_lo_ioctl+0x10/0x10 [ 1582.790664][T27926] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 1582.790684][T27926] ? kasan_quarantine_put+0x104/0x240 [ 1582.790703][T27926] ? blk_get_meta_cap+0xd4/0x6c0 [ 1582.790724][T27926] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1582.790749][T27926] ? blkdev_common_ioctl+0x515/0x2ba0 [ 1582.790772][T27926] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1582.790798][T27926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1582.790820][T27926] ? do_vfs_ioctl+0x226/0x13e0 [ 1582.790840][T27926] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1582.790860][T27926] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1582.790889][T27926] ? __fget_files+0x215/0x3d0 [ 1582.790912][T27926] ? __pfx_lo_ioctl+0x10/0x10 [ 1582.790931][T27926] blkdev_ioctl+0x5ad/0x6f0 [ 1582.790951][T27926] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1582.790969][T27926] ? selinux_file_ioctl+0x139/0x290 [ 1582.790989][T27926] ? selinux_file_ioctl+0xb4/0x290 [ 1582.791012][T27926] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1582.791033][T27926] __x64_sys_ioctl+0x18e/0x210 [ 1582.791054][T27926] do_syscall_64+0x106/0xf80 [ 1582.791071][T27926] ? clear_bhb_loop+0x40/0x90 [ 1582.791097][T27926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.791113][T27926] RIP: 0033:0x7f101499bf79 [ 1582.791127][T27926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.791142][T27926] RSP: 002b:00007f1015900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1582.791159][T27926] RAX: ffffffffffffffda RBX: 00007f1014c15fa0 RCX: 00007f101499bf79 [ 1582.791169][T27926] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 1582.791178][T27926] RBP: 00007f1015900090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.791187][T27926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.791196][T27926] R13: 00007f1014c16038 R14: 00007f1014c15fa0 R15: 00007ffe9c2173e8 [ 1582.791218][T27926] [ 1583.200766][ T29] audit: type=1326 audit(1771188203.264:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1583.224602][ T29] audit: type=1326 audit(1771188203.264:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1584.201537][T27710] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1584.210792][T27710] usb 2-1: media controller created [ 1584.344823][T25428] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1585.068606][ T29] audit: type=1326 audit(1771188204.314:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.071382][T27710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1585.142000][ T29] audit: type=1326 audit(1771188204.314:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.305190][T25428] usb 3-1: Using ep0 maxpacket: 16 [ 1585.507842][T25428] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1585.523939][T25428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.526261][ T29] audit: type=1326 audit(1771188204.314:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.542187][T25428] usb 3-1: Product: syz [ 1585.563440][T27710] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1585.573470][T25428] usb 3-1: Manufacturer: syz [ 1585.575632][T27710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1585.578277][T25428] usb 3-1: SerialNumber: syz [ 1585.589076][T27710] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1585.608494][ T29] audit: type=1326 audit(1771188204.314:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.680107][T27710] usb 2-1: USB disconnect, device number 3 [ 1585.688489][ T29] audit: type=1326 audit(1771188204.314:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.748480][ T29] audit: type=1326 audit(1771188204.314:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.807468][ T29] audit: type=1326 audit(1771188204.314:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.3.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1585.836735][T25428] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1586.015085][T25428] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1586.120332][T25428] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1586.217916][T25428] usb 3-1: media controller created [ 1586.302510][T27710] usb 5-1: USB disconnect, device number 10 [ 1586.353229][T25428] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.404206][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 420 seconds [ 1586.406041][T25428] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1586.415997][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 420 seconds [ 1586.439986][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 420 seconds [ 1586.461572][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 420 seconds [ 1586.645554][T27948] kvm_pr_unimpl_wrmsr: 211 callbacks suppressed [ 1586.645576][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.653256][T25428] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1586.698006][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.708200][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.729786][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.747370][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.770669][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.789446][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.805059][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.847342][T25428] usb 3-1: USB disconnect, device number 9 [ 1586.919707][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1586.941455][T27948] kvm_intel: kvm [27947]: vcpu0, guest rIP: 0x9100 Unhandled WRMSR(0x1d9) = 0x3 [ 1589.824237][T27978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1590.475848][T27980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1590.491130][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1591.171912][ T5926] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1591.428300][T27977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.471937][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1591.479211][ T5926] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 1591.545602][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1591.562652][ T5926] usb 5-1: can't read configurations, error -61 [ 1591.712088][ T5926] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1591.872278][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1591.880963][ T5926] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 1591.898634][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1591.906915][ T5926] usb 5-1: can't read configurations, error -61 [ 1591.934566][ T5926] usb usb5-port1: attempt power cycle [ 1592.312125][ T5926] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1592.330773][T27996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1592.372899][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1592.378788][ T5926] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 1592.394619][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1592.412414][ T5926] usb 5-1: can't read configurations, error -61 [ 1592.542421][ T5926] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1592.595119][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1592.607943][ T5926] usb 5-1: too many configurations: 115, using maximum allowed: 8 [ 1592.624386][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1592.638041][ T5926] usb 5-1: can't read configurations, error -61 [ 1592.652514][ T5926] usb usb5-port1: unable to enumerate USB device [ 1592.672188][ T5908] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1592.759988][T28008] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5942'. [ 1592.970355][ T5908] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1592.989630][ T5908] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1593.016951][ T5908] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1593.037408][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.135252][T16378] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1593.276305][ T5908] usb 4-1: usb_control_msg returned -32 [ 1593.283872][ T5908] usbtmc 4-1:16.0: can't read capabilities [ 1593.444636][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1593.613553][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.628729][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.639789][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1593.738678][ T5908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1593.751905][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.764961][ T5908] usb 5-1: config 0 descriptor?? [ 1594.143838][T28016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.555870][ T5924] usb 4-1: USB disconnect, device number 126 [ 1595.622347][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.374957][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 1596.380931][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1596.422265][T27710] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1596.484439][ T5908] usb 5-1: USB disconnect, device number 15 [ 1596.773505][T27710] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1596.782868][T27710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.794120][T27710] usb 2-1: config 0 descriptor?? [ 1596.845184][T27710] usb 2-1: Invalid firmware size=18. [ 1597.469704][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1597.469721][ T29] audit: type=1400 audit(1771188217.534:1921): avc: denied { bind } for pid=28022 comm="syz.1.5947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1597.558941][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1597.768701][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1597.908792][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1597.946330][T28052] tipc: Enabling of bearer rejected, already enabled [ 1597.969445][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.995711][ T24] usb 3-1: config 0 descriptor?? [ 1598.008984][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1598.211975][T27710] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1598.393095][T27710] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4361, setting to 64 [ 1598.405080][T27710] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1598.413586][T27710] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1598.422861][T27710] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1598.431032][T27710] usb 4-1: Product: syz [ 1598.435419][T27710] usb 4-1: Manufacturer: syz [ 1598.440052][T27710] usb 4-1: SerialNumber: syz [ 1598.446632][T27710] usb 4-1: config 0 descriptor?? [ 1598.452137][T28059] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1598.462568][T27710] usb 4-1: selecting invalid altsetting 0 [ 1598.667507][T27710] usb 4-1: USB disconnect, device number 127 [ 1599.329295][ T24] usb 2-1: USB disconnect, device number 4 [ 1600.164935][T28084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5961'. [ 1600.367888][T28089] kvm: kvm [28088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1600.376889][T28089] kvm: kvm [28088]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1600.457524][T28092] tipc: Can't bind to reserved service type 0 [ 1600.458445][ T29] audit: type=1400 audit(1771188220.524:1922): avc: denied { getattr } for pid=28088 comm="syz.3.5962" path="socket:[109169]" dev="sockfs" ino=109169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1600.502528][ T5908] usb 3-1: USB disconnect, device number 10 [ 1600.559077][ T29] audit: type=1400 audit(1771188220.524:1923): avc: denied { map } for pid=28088 comm="syz.3.5962" path="socket:[109167]" dev="sockfs" ino=109167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1600.608072][ T29] audit: type=1400 audit(1771188220.614:1924): avc: denied { mount } for pid=28090 comm="syz.0.5963" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1600.638042][ T29] audit: type=1400 audit(1771188220.614:1925): avc: denied { search } for pid=28090 comm="syz.0.5963" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1600.847630][T28104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39153 sclass=netlink_route_socket pid=28104 comm=syz.2.5964 [ 1600.952430][T28105] 9p: Bad value for 'rfdno' [ 1601.500239][T28117] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1602.097043][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.103494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.208708][T28112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1602.220201][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1604.352217][T28144] syz_tun: entered allmulticast mode [ 1604.651585][T28141] syz_tun: left allmulticast mode [ 1604.810835][T28156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1604.983087][T25428] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1605.176868][T25428] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.241138][T25428] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1605.280156][T25428] usb 3-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1605.290929][T25428] usb 3-1: Product: syz [ 1605.296454][T25428] usb 3-1: Manufacturer: syz [ 1605.301194][T25428] usb 3-1: SerialNumber: syz [ 1605.477933][T28161] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9746 sclass=netlink_xfrm_socket pid=28161 comm=syz.0.5982 [ 1605.501515][T25428] usb 3-1: config 0 descriptor?? [ 1605.520718][T25428] comedi comedi5: Wrong number of endpoints [ 1605.533792][T25428] ni6501 3-1:0.0: driver 'ni6501' failed to auto-configure device. [ 1605.782761][T27710] usb 3-1: USB disconnect, device number 11 [ 1606.161901][T27710] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1606.234113][T28177] fuseblk: Bad value for 'fd' [ 1606.328896][T25428] libceph: connect (1)[c::]:6789 error -101 [ 1606.337445][T25428] libceph: mon0 (1)[c::]:6789 connect error [ 1606.352911][T28178] ceph: No mds server is up or the cluster is laggy [ 1606.362649][T28181] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1606.571030][T27710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.632745][T27710] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1606.653848][ T29] audit: type=1400 audit(1771188226.714:1926): avc: denied { append } for pid=28184 comm="syz.2.5989" name="sg0" dev="devtmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1606.683213][T27710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.712801][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1606.827924][T27710] usb 2-1: config 0 descriptor?? [ 1606.872564][T27710] pwc: Askey VC010 type 2 USB webcam detected. [ 1606.982052][ T5926] usb 4-1: device descriptor read/64, error -71 [ 1607.053466][T28191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1607.232479][ T5908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1607.240376][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1607.284364][T27710] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1607.301718][T27710] pwc: recv_control_msg error -32 req 02 val 2700 [ 1607.308884][T27710] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1607.319525][T27710] pwc: recv_control_msg error -32 req 04 val 1000 [ 1607.383212][ T5926] usb 4-1: device descriptor read/64, error -71 [ 1607.404048][ T5908] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1607.413251][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.423603][ T5908] usb 3-1: config 0 descriptor?? [ 1607.430927][ T5908] usb 3-1: Invalid firmware size=18. [ 1607.493163][ T5926] usb usb4-port1: attempt power cycle [ 1607.529130][T27710] pwc: recv_control_msg error -32 req 04 val 1400 [ 1607.858502][T27710] pwc: recv_control_msg error -32 req 02 val 2100 [ 1607.869184][T27710] pwc: recv_control_msg error -32 req 04 val 1500 [ 1607.922029][ T5926] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1608.010835][ T5926] usb 4-1: device descriptor read/8, error -71 [ 1608.076956][T27710] pwc: recv_control_msg error -71 req 02 val 2400 [ 1608.312135][ T5926] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1608.529372][T27710] pwc: recv_control_msg error -71 req 02 val 2600 [ 1608.539521][T27710] pwc: recv_control_msg error -71 req 02 val 2900 [ 1608.552853][T27710] pwc: recv_control_msg error -71 req 02 val 2800 [ 1608.559633][ T5926] usb 4-1: device descriptor read/8, error -71 [ 1608.569101][T27710] pwc: recv_control_msg error -71 req 04 val 1100 [ 1608.581214][T27710] pwc: recv_control_msg error -71 req 04 val 1200 [ 1608.595017][T27710] pwc: Registered as video103. [ 1608.612916][T27710] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input97 [ 1608.675418][T27710] usb 2-1: USB disconnect, device number 5 [ 1608.682163][ T5926] usb usb4-port1: unable to enumerate USB device [ 1608.705751][T15671] udevd[15671]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 1608.939617][T28220] input: syz1 as /devices/virtual/input/input98 [ 1610.062316][ T5926] usb 3-1: USB disconnect, device number 12 [ 1610.514385][T28240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.784755][T28252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28252 comm=syz.2.6010 [ 1610.912133][ T5926] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1611.511745][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1611.531431][ T5926] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1611.540898][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.549187][ T5926] usb 5-1: Product: syz [ 1611.554701][ T5926] usb 5-1: Manufacturer: syz [ 1611.559395][ T5926] usb 5-1: SerialNumber: syz [ 1611.574816][ T5926] usb 5-1: config 0 descriptor?? [ 1612.389678][ T5926] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1612.412125][ T5926] usb 5-1: USB disconnect, device number 16 [ 1612.485955][T28280] FAULT_INJECTION: forcing a failure. [ 1612.485955][T28280] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.498950][T28280] CPU: 1 UID: 0 PID: 28280 Comm: syz.4.6020 Tainted: G L syzkaller #0 PREEMPT(full) [ 1612.498983][T28280] Tainted: [L]=SOFTLOCKUP [ 1612.498991][T28280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1612.499002][T28280] Call Trace: [ 1612.499010][T28280] [ 1612.499018][T28280] dump_stack_lvl+0x100/0x190 [ 1612.499057][T28280] should_fail_ex.cold+0x5/0xa [ 1612.499083][T28280] should_failslab+0xc2/0x120 [ 1612.499112][T28280] __kvmalloc_node_noprof+0xfa/0xa00 [ 1612.499136][T28280] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1612.499172][T28280] proc_sys_call_handler+0x2c7/0x5a0 [ 1612.499201][T28280] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1612.499236][T28280] vfs_write+0x6ac/0x1070 [ 1612.499264][T28280] ? __pfx_proc_sys_write+0x10/0x10 [ 1612.499292][T28280] ? __pfx_vfs_write+0x10/0x10 [ 1612.499334][T28280] ksys_write+0x12a/0x250 [ 1612.499360][T28280] ? __pfx_ksys_write+0x10/0x10 [ 1612.499393][T28280] do_syscall_64+0x106/0xf80 [ 1612.499418][T28280] ? clear_bhb_loop+0x40/0x90 [ 1612.499442][T28280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.499463][T28280] RIP: 0033:0x7f5510f9bf79 [ 1612.499480][T28280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.499498][T28280] RSP: 002b:00007f5511f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1612.499518][T28280] RAX: ffffffffffffffda RBX: 00007f5511215fa0 RCX: 00007f5510f9bf79 [ 1612.499530][T28280] RDX: 0000000000000012 RSI: 0000200000001200 RDI: 0000000000000006 [ 1612.499541][T28280] RBP: 00007f5511f40090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.499551][T28280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.499562][T28280] R13: 00007f5511216038 R14: 00007f5511215fa0 R15: 00007ffc98deb098 [ 1612.499589][T28280] [ 1613.208683][T28278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6021'. [ 1613.218245][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6021'. [ 1613.391888][ T5908] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1613.524101][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1613.690257][T28283] syz.2.6019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1613.714375][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.2.6019 Tainted: G L syzkaller #0 PREEMPT(full) [ 1613.714417][T28283] Tainted: [L]=SOFTLOCKUP [ 1613.714424][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1613.714437][T28283] Call Trace: [ 1613.714444][T28283] [ 1613.714453][T28283] dump_stack_lvl+0x100/0x190 [ 1613.714488][T28283] warn_alloc.cold+0x95/0x1c1 [ 1613.714526][T28283] ? __pfx_warn_alloc+0x10/0x10 [ 1613.714560][T28283] ? kasan_save_stack+0x3f/0x50 [ 1613.714583][T28283] ? kasan_save_stack+0x30/0x50 [ 1613.714605][T28283] ? kasan_save_track+0x14/0x30 [ 1613.714632][T28283] ? xskq_create+0xfb/0x1d0 [ 1613.714652][T28283] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1613.714680][T28283] ? xskq_create+0xfb/0x1d0 [ 1613.714704][T28283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1613.714734][T28283] ? xskq_create+0xfb/0x1d0 [ 1613.714752][T28283] vmalloc_user_noprof+0x9e/0xe0 [ 1613.714770][T28283] ? xskq_create+0xfb/0x1d0 [ 1613.714789][T28283] xskq_create+0xfb/0x1d0 [ 1613.714809][T28283] xsk_setsockopt+0x743/0xab0 [ 1613.714841][T28283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1613.714870][T28283] ? find_held_lock+0x2b/0x80 [ 1613.714893][T28283] ? __fget_files+0x215/0x3d0 [ 1613.714924][T28283] ? selinux_socket_setsockopt+0x6a/0x80 [ 1613.714951][T28283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1613.714980][T28283] do_sock_setsockopt+0xf3/0x1d0 [ 1613.715008][T28283] __sys_setsockopt+0x195/0x220 [ 1613.715034][T28283] __x64_sys_setsockopt+0xbd/0x160 [ 1613.715053][T28283] ? do_syscall_64+0x95/0xf80 [ 1613.715075][T28283] ? lockdep_hardirqs_on+0x78/0x100 [ 1613.715098][T28283] do_syscall_64+0x106/0xf80 [ 1613.715119][T28283] ? clear_bhb_loop+0x40/0x90 [ 1613.715143][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.715162][T28283] RIP: 0033:0x7f101499bf79 [ 1613.715178][T28283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.715196][T28283] RSP: 002b:00007f10158df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1613.715214][T28283] RAX: ffffffffffffffda RBX: 00007f1014c16090 RCX: 00007f101499bf79 [ 1613.715226][T28283] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 1613.715237][T28283] RBP: 00007f1014a327e0 R08: 0000000000000004 R09: 0000000000000000 [ 1613.715248][T28283] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.715258][T28283] R13: 00007f1014c16128 R14: 00007f1014c16090 R15: 00007ffe9c2173e8 [ 1613.715284][T28283] [ 1613.715330][T28283] Mem-Info: [ 1613.966056][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1613.976481][T28283] active_anon:15972 inactive_anon:2 isolated_anon:0 [ 1613.976481][T28283] active_file:20406 inactive_file:43901 isolated_file:0 [ 1613.976481][T28283] unevictable:768 dirty:84 writeback:0 [ 1613.976481][T28283] slab_reclaimable:11134 slab_unreclaimable:105760 [ 1613.976481][T28283] mapped:37478 shmem:5521 pagetables:1829 [ 1613.976481][T28283] sec_pagetables:0 bounce:0 [ 1613.976481][T28283] kernel_misc_reclaimable:0 [ 1613.976481][T28283] free:1060824 free_pcp:24398 free_cma:0 [ 1614.041996][T28283] Node 0 active_anon:65688kB inactive_anon:8kB active_file:81560kB inactive_file:175400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143456kB dirty:336kB writeback:0kB shmem:22348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12664kB pagetables:7200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1614.151906][T28283] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8256kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1614.151952][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1614.210007][T28283] Node 0 DMA free:13240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:72kB free_cma:0kB [ 1614.342418][ T5908] usb usb2-port1: attempt power cycle [ 1614.350823][T28283] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1614.356875][T28283] Node 0 DMA32 free:362876kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70872kB inactive_anon:8kB active_file:81560kB inactive_file:175400kB unevictable:1548kB writepending:416kB zspages:4kB present:3129332kB managed:2537364kB mlocked:12kB bounce:0kB free_pcp:40204kB local_pcp:22948kB free_cma:0kB [ 1614.419003][T28283] lowmem_reserve[]: 0 0 1 1 1 [ 1614.449771][T28283] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1614.482818][T28283] lowmem_reserve[]: 0 0 0 0 0 [ 1614.487659][T28283] Node 1 Normal free:3868484kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:47172kB local_pcp:21188kB free_cma:0kB [ 1614.522170][T28283] lowmem_reserve[]: 0 0 0 0 0 [ 1614.526872][T28283] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 13240kB [ 1614.543338][T28283] Node 0 DMA32: 4796*4kB (UME) 4374*8kB (UME) 2549*16kB (UME) 182*32kB (UME) 194*64kB (UME) 211*128kB (UME) 282*256kB (UME) 100*512kB (UME) 60*1024kB (UM) 10*2048kB (UM) 6*4096kB (UM) = 370096kB [ 1614.562722][T28283] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1614.579305][T28283] Node 1 Normal: 6*4kB (UME) 10*8kB (UM) 17*16kB (UME) 14*32kB (UM) 9*64kB (UME) 8*128kB (UME) 8*256kB (UM) 9*512kB (UM) 9*1024kB (UM) 12*2048kB (UME) 934*4096kB (UM) = 3868536kB [ 1614.597316][T28283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1614.612855][T28283] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1614.624875][T28283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1614.647526][T28283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1614.657789][T28283] 68556 total pagecache pages [ 1614.662883][T28283] 2 pages in swap cache [ 1614.667214][T28283] Free swap = 124984kB [ 1614.692231][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1614.695562][T28283] Total swap = 124996kB [ 1614.704537][T28283] 2097051 pages RAM [ 1614.708731][T28283] 0 pages HighMem/MovableOnly [ 1614.724821][T28303] FAULT_INJECTION: forcing a failure. [ 1614.724821][T28303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.744411][T28303] CPU: 1 UID: 0 PID: 28303 Comm: syz.4.6026 Tainted: G L syzkaller #0 PREEMPT(full) [ 1614.744444][T28303] Tainted: [L]=SOFTLOCKUP [ 1614.744448][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1614.744455][T28303] Call Trace: [ 1614.744460][T28303] [ 1614.744466][T28303] dump_stack_lvl+0x100/0x190 [ 1614.744498][T28303] should_fail_ex.cold+0x5/0xa [ 1614.744520][T28303] _copy_from_iter+0x1f4/0x1690 [ 1614.744542][T28303] ? alloc_pages_mpol+0x25a/0x550 [ 1614.744560][T28303] ? __pfx__copy_from_iter+0x10/0x10 [ 1614.744573][T28303] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1614.744595][T28303] copy_page_from_iter+0xde/0x180 [ 1614.744612][T28303] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 1614.744647][T28303] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1614.744670][T28303] ? unwind_get_return_address+0x59/0xa0 [ 1614.744694][T28303] ? find_held_lock+0x2b/0x80 [ 1614.744717][T28303] tun_get_user+0x16d0/0x3e10 [ 1614.744741][T28303] ? __pfx_tun_get_user+0x10/0x10 [ 1614.744763][T28303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1614.744792][T28303] ? find_held_lock+0x2b/0x80 [ 1614.744810][T28303] ? tun_get+0x191/0x370 [ 1614.744831][T28303] ? tun_get+0x191/0x370 [ 1614.744851][T28303] tun_chr_write_iter+0xdc/0x200 [ 1614.744870][T28303] vfs_write+0x6ac/0x1070 [ 1614.744886][T28303] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1614.744910][T28303] ? __pfx_vfs_write+0x10/0x10 [ 1614.744930][T28303] ? find_held_lock+0x2b/0x80 [ 1614.744964][T28303] ksys_write+0x12a/0x250 [ 1614.744983][T28303] ? __pfx_ksys_write+0x10/0x10 [ 1614.745002][T28303] do_syscall_64+0x106/0xf80 [ 1614.745016][T28303] ? clear_bhb_loop+0x40/0x90 [ 1614.745031][T28303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.745044][T28303] RIP: 0033:0x7f5510f5c84e [ 1614.745061][T28303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1614.745077][T28303] RSP: 002b:00007f5511f3ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1614.745094][T28303] RAX: ffffffffffffffda RBX: 00007f5511f406c0 RCX: 00007f5510f5c84e [ 1614.745105][T28303] RDX: 000000000000002a RSI: 0000200000000040 RDI: 00000000000000c8 [ 1614.745114][T28303] RBP: 00007f5511f40090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.745124][T28303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.745130][T28303] R13: 00007f5511216038 R14: 00007f5511215fa0 R15: 00007ffc98deb098 [ 1614.745145][T28303] [ 1614.991640][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1615.001930][T28283] 430831 pages reserved [ 1615.029558][T28283] 0 pages cma reserved [ 1615.226526][T28307] tmpfs: Unknown parameter 'fsuuid' [ 1615.296311][ T29] audit: type=1400 audit(1771188235.354:1927): avc: denied { accept } for pid=28304 comm="syz.1.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1615.609362][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1615.622421][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1615.632772][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1615.648751][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1615.657898][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1616.968734][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 450 seconds [ 1616.979483][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 450 seconds [ 1616.990672][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 450 seconds [ 1617.001717][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 450 seconds [ 1617.017298][T28327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6032'. [ 1617.068430][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6032'. [ 1617.126095][T28318] chnl_net:caif_netlink_parms(): no params data found [ 1617.403562][T28336] 9pnet_fd: Insufficient options for proto=fd [ 1617.684078][T16378] Bluetooth: hci3: command tx timeout [ 1617.929762][T28318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.938677][T28318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.946075][T28318] bridge_slave_0: entered allmulticast mode [ 1617.956843][T28318] bridge_slave_0: entered promiscuous mode [ 1618.035591][T28318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.045181][T28318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.056718][T28318] bridge_slave_1: entered allmulticast mode [ 1618.065579][T28318] bridge_slave_1: entered promiscuous mode [ 1618.142136][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1618.191109][T28318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.204491][T28318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.211896][ T29] audit: type=1400 audit(1771188238.274:1928): avc: denied { ioctl } for pid=28341 comm="syz.4.6038" path="socket:[110421]" dev="sockfs" ino=110421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1618.235296][T28318] team0: Port device team_slave_0 added [ 1618.258292][T28344] trusted_key: encrypted_key: master key parameter 'ḣ,\mXÐ1ÕŠh–²' is invalid [ 1618.272334][T28318] team0: Port device team_slave_1 added [ 1618.296679][T28318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.306342][T28318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.337121][T28318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.349840][T28318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1618.358349][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.369572][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1618.379592][ T30] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1618.393545][T28318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.422135][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.446946][ T30] usb 4-1: config 0 descriptor?? [ 1618.458186][T28318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.526116][T28318] hsr_slave_0: entered promiscuous mode [ 1619.538418][T28318] hsr_slave_1: entered promiscuous mode [ 1619.558248][T28318] debugfs: 'hsr0' already exists in 'hsr' [ 1619.564333][T28318] Cannot create hsr debugfs directory [ 1619.763078][T16378] Bluetooth: hci3: command tx timeout [ 1619.782885][ T12] bridge_slave_1: left allmulticast mode [ 1619.788971][ T12] bridge_slave_1: left promiscuous mode [ 1619.795422][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.812847][ T12] bridge_slave_0: left allmulticast mode [ 1619.828156][ T12] bridge_slave_0: left promiscuous mode [ 1619.840259][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.882927][T25428] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 1620.097015][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.110772][ T12] bond_slave_0: left promiscuous mode [ 1620.126653][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1620.140862][ T12] bond_slave_1: left promiscuous mode [ 1620.149826][ T12] bond0 (unregistering): Released all slaves [ 1620.194897][T28361] tipc: Enabling of bearer rejected, already enabled [ 1620.389425][ T12] tipc: Disabling bearer [ 1620.399192][ T12] tipc: Left network mode [ 1620.423093][ T12] IPVS: stopping backup sync thread 26550 ... [ 1620.527624][ T29] audit: type=1400 audit(1771188240.564:1929): avc: denied { map } for pid=28364 comm="syz.1.6043" path="/598/file0" dev="tmpfs" ino=3193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1621.243459][ T30] usbhid 4-1:0.0: can't add hid device: -71 [ 1621.249440][ T30] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1621.294646][ T30] usb 4-1: USB disconnect, device number 6 [ 1621.603350][T28378] fuseblk: Bad value for 'fd' [ 1621.861965][T16378] Bluetooth: hci3: command tx timeout [ 1622.015298][ T12] hsr_slave_0: left promiscuous mode [ 1622.024547][ T12] hsr_slave_1: left promiscuous mode [ 1622.035665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.079404][ T12] team0 (unregistering): Port device batadv1 removed [ 1622.855052][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1622.872237][T28384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1622.882868][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1623.402954][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1623.926460][T16378] Bluetooth: hci3: command tx timeout [ 1623.926910][T28407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1624.412436][T28318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1624.454316][T28318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1624.530197][T28318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1624.673728][T28318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1624.714313][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.738956][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.767872][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.789559][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.852274][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1624.908324][T28422] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1625.123845][T28431] sctp: [Deprecated]: syz.4.6055 (pid 28431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1625.123845][T28431] Use struct sctp_sack_info instead [ 1626.156464][T28447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1626.206897][T28453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6057'. [ 1626.305289][T28318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.347805][T28421] chnl_net:caif_netlink_parms(): no params data found [ 1626.431927][ T791] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1626.476559][T28318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.503860][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.510976][T16361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.535159][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.542320][T16361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.572279][T28421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.579629][T28421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.587264][T28421] bridge_slave_0: entered allmulticast mode [ 1626.595167][T28421] bridge_slave_0: entered promiscuous mode [ 1626.602064][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1626.613771][T28421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.621008][T28421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.628485][T28421] bridge_slave_1: entered allmulticast mode [ 1626.636579][T28421] bridge_slave_1: entered promiscuous mode [ 1626.649561][ T791] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1626.659827][T28318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1626.672851][T28318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1626.683594][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.708423][ T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.730070][T28421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.732649][ T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1626.746124][T28421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.766790][ T791] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1626.770417][ T12] IPVS: stop unused estimator thread 0... [ 1626.781858][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1626.781961][ T791] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1626.822074][ T24] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1626.831156][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.835741][T28421] team0: Port device team_slave_0 added [ 1626.841844][ T791] usb 2-1: Manufacturer: syz [ 1626.865837][ T24] usb 5-1: config 0 descriptor?? [ 1626.874058][ T791] usb 2-1: config 0 descriptor?? [ 1626.893914][T28421] team0: Port device team_slave_1 added [ 1626.976038][T28421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.992658][T28421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.051830][T28421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.083847][T28421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1627.090819][T28421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.117568][ T5818] Bluetooth: hci1: command tx timeout [ 1627.151450][T28421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1627.240231][T28469] fuseblk: Bad value for 'fd' [ 1627.478148][ T791] appleir 0003:05AC:8243.00AF: unknown main item tag 0x0 [ 1627.495572][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.545342][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.571104][ T791] appleir 0003:05AC:8243.00AF: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1627.588102][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.595804][T28318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.602921][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.618018][T28421] hsr_slave_0: entered promiscuous mode [ 1627.626752][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.632796][T28421] hsr_slave_1: entered promiscuous mode [ 1627.636596][ T24] uclogic 0003:5543:0781.00AE: unknown main item tag 0x0 [ 1627.642060][T28421] debugfs: 'hsr0' already exists in 'hsr' [ 1627.652451][T28421] Cannot create hsr debugfs directory [ 1627.659571][ T24] uclogic 0003:5543:0781.00AE: hidraw1: USB HID vff.fc Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 1627.715257][ T24] usb 5-1: USB disconnect, device number 17 [ 1627.751312][ T791] usb 2-1: USB disconnect, device number 10 [ 1627.814054][T28470] fido_id[28470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1627.839378][T28471] fido_id[28471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1627.970543][T28318] veth0_vlan: entered promiscuous mode [ 1628.348469][T28318] veth1_vlan: entered promiscuous mode [ 1628.496255][T28484] veth1_macvtap: left promiscuous mode [ 1628.501928][T28484] macsec0: entered promiscuous mode [ 1628.524930][T28318] veth0_macvtap: entered promiscuous mode [ 1628.565755][T28318] veth1_macvtap: entered promiscuous mode [ 1628.859219][T28421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1628.886432][T28484] veth1_macvtap: entered promiscuous mode [ 1628.896286][T28484] macsec0: left promiscuous mode [ 1628.903871][T28421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1628.914970][T28421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1628.966983][T28318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.984875][T28421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1629.006602][T28490] loop5: detected capacity change from 0 to 4096 [ 1629.013758][T28490] FAULT_INJECTION: forcing a failure. [ 1629.013758][T28490] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1629.063506][T28490] CPU: 0 UID: 0 PID: 28490 Comm: syz.1.6065 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.063545][T28490] Tainted: [L]=SOFTLOCKUP [ 1629.063551][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1629.063563][T28490] Call Trace: [ 1629.063570][T28490] [ 1629.063579][T28490] dump_stack_lvl+0x100/0x190 [ 1629.063618][T28490] should_fail_ex.cold+0x5/0xa [ 1629.063641][T28490] ? prepare_alloc_pages+0x16d/0x5f0 [ 1629.063675][T28490] should_fail_alloc_page+0xeb/0x140 [ 1629.063706][T28490] prepare_alloc_pages+0x1f0/0x5f0 [ 1629.063741][T28490] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1629.063778][T28490] ? put_dec+0x2e/0xc0 [ 1629.063804][T28490] ? put_dec_trunc8+0x28b/0x370 [ 1629.063829][T28490] ? widen_string+0xdb/0x2f0 [ 1629.063860][T28490] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1629.063899][T28490] ? lock_acquire+0x1cf/0x380 [ 1629.063929][T28490] ? find_held_lock+0x2b/0x80 [ 1629.063949][T28490] ? page_table_check_set+0x49a/0xa10 [ 1629.063971][T28490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1629.063989][T28490] ? policy_nodemask+0xed/0x4f0 [ 1629.064008][T28490] alloc_pages_mpol+0x1fb/0x550 [ 1629.064027][T28490] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1629.064050][T28490] folio_alloc_mpol_noprof+0x36/0x340 [ 1629.064072][T28490] vma_alloc_folio_noprof+0xed/0x1d0 [ 1629.064093][T28490] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1629.064119][T28490] do_anonymous_page+0xb3a/0x1fb0 [ 1629.064138][T28490] __handle_mm_fault+0x1d42/0x2b60 [ 1629.064157][T28490] ? __pfx___handle_mm_fault+0x10/0x10 [ 1629.064171][T28490] ? pte_offset_map_lock+0x174/0x320 [ 1629.064190][T28490] ? find_held_lock+0x2b/0x80 [ 1629.064210][T28490] ? follow_page_pte+0x5b3/0x1400 [ 1629.064233][T28490] handle_mm_fault+0x36d/0xa20 [ 1629.064250][T28490] __get_user_pages+0xf9c/0x34d0 [ 1629.064273][T28490] ? down_read_killable+0x30e/0x4c0 [ 1629.064298][T28490] ? __pfx___get_user_pages+0x10/0x10 [ 1629.064316][T28490] ? __lock_acquire+0x4a5/0x2630 [ 1629.064339][T28490] __gup_longterm_locked+0x87d/0x16f0 [ 1629.064363][T28490] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1629.064385][T28490] ? find_held_lock+0x2b/0x80 [ 1629.064400][T28490] ? gup_fast_fallback+0x7e5/0x2460 [ 1629.064418][T28490] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1629.064440][T28490] gup_fast_fallback+0x18c6/0x2460 [ 1629.064472][T28490] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1629.064491][T28490] ? kasan_save_stack+0x30/0x50 [ 1629.064506][T28490] ? kasan_save_track+0x14/0x30 [ 1629.064521][T28490] ? __kasan_slab_alloc+0x89/0x90 [ 1629.064537][T28490] ? mempool_alloc_noprof+0x1b7/0x310 [ 1629.064557][T28490] ? bvec_alloc+0x197/0x210 [ 1629.064576][T28490] ? bio_alloc_bioset+0x59e/0x850 [ 1629.064595][T28490] ? blkdev_read_iter+0x225/0x4f0 [ 1629.064610][T28490] ? vfs_read+0x825/0xb30 [ 1629.064625][T28490] ? ksys_read+0x12a/0x250 [ 1629.064640][T28490] ? do_syscall_64+0x106/0xf80 [ 1629.064655][T28490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.064670][T28490] pin_user_pages_fast+0xa7/0xf0 [ 1629.064691][T28490] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1629.064715][T28490] iov_iter_extract_pages+0xa0d/0x1ef0 [ 1629.064736][T28490] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1629.064753][T28490] ? find_held_lock+0x2b/0x80 [ 1629.064768][T28490] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 1629.064786][T28490] iov_iter_extract_bvecs+0x10e/0xf40 [ 1629.064800][T28490] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 1629.064818][T28490] ? bio_associate_blkg+0x137/0x2a0 [ 1629.064832][T28490] ? bio_associate_blkg+0x137/0x2a0 [ 1629.064848][T28490] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 1629.064863][T28490] ? bio_init+0x404/0x610 [ 1629.064883][T28490] bio_iov_iter_get_pages+0x26a/0x970 [ 1629.064901][T28490] blkdev_direct_IO+0x1302/0x1fb0 [ 1629.064925][T28490] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1629.064944][T28490] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1629.064959][T28490] ? touch_atime+0xa5/0x7a0 [ 1629.064978][T28490] blkdev_read_iter+0x225/0x4f0 [ 1629.064996][T28490] ? __pfx_blkdev_read_iter+0x10/0x10 [ 1629.065013][T28490] vfs_read+0x825/0xb30 [ 1629.065031][T28490] ? __pfx_vfs_read+0x10/0x10 [ 1629.065046][T28490] ? find_held_lock+0x2b/0x80 [ 1629.065071][T28490] ksys_read+0x12a/0x250 [ 1629.065087][T28490] ? __pfx_ksys_read+0x10/0x10 [ 1629.065108][T28490] do_syscall_64+0x106/0xf80 [ 1629.065123][T28490] ? clear_bhb_loop+0x40/0x90 [ 1629.065138][T28490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.065151][T28490] RIP: 0033:0x7f5d80b9bf79 [ 1629.065163][T28490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1629.065175][T28490] RSP: 002b:00007f5d81af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1629.065188][T28490] RAX: ffffffffffffffda RBX: 00007f5d80e15fa0 RCX: 00007f5d80b9bf79 [ 1629.065196][T28490] RDX: 00000000ffffff0a RSI: 0000200000003c40 RDI: 0000000000000005 [ 1629.065203][T28490] RBP: 00007f5d81af5090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.065210][T28490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1629.065217][T28490] R13: 00007f5d80e16038 R14: 00007f5d80e15fa0 R15: 00007ffe9dc824c8 [ 1629.065233][T28490] [ 1629.122987][ T5818] Bluetooth: hci1: command tx timeout [ 1629.590379][T28318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.691448][T21827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.732032][T21827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.785162][T21827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.825312][T21827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.961892][T26230] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1629.992249][T28421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.059813][ T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.080026][ T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.633316][T26230] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1630.649347][T28421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.657997][T26230] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1630.780528][T28502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1630.795908][T26230] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1630.894749][T28505] overlayfs: failed to resolve './file0': -2 [ 1630.942795][T26230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.957108][T28498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1631.051346][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.058550][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1631.093681][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.100880][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.134814][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.146572][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.166327][T26230] usb 2-1: usb_control_msg returned -32 [ 1631.191945][T26230] usbtmc 2-1:16.0: can't read capabilities [ 1631.226631][T28421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1631.446026][T28421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.512537][ T30] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1631.692658][ T5818] Bluetooth: hci1: command tx timeout [ 1631.701163][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 1631.741486][ T30] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1631.763417][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.777275][ T30] usb 5-1: Product: syz [ 1631.781576][ T30] usb 5-1: Manufacturer: syz [ 1631.800342][ T30] usb 5-1: SerialNumber: syz [ 1631.843467][ T30] usb 5-1: config 0 descriptor?? [ 1631.877690][ T30] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1631.900597][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1631.939468][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1631.982266][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1631.988036][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1632.068020][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1632.108182][T28520] overlayfs: failed to resolve './file0': -2 [ 1632.197649][T28509] dvb-usb: bulk message failed: -22 (7/0) [ 1632.225132][T28509] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1632.271900][T26230] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1632.309168][T28509] ttusb2: i2c transfer failed. [ 1632.437842][T28528] block device autoloading is deprecated and will be removed. [ 1632.446112][T26230] usb 3-1: Using ep0 maxpacket: 32 [ 1632.464490][T26230] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1632.494586][T26230] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1632.543817][T26230] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1632.560056][T26230] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1632.571890][T26230] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1632.585725][T26230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1632.596932][T26230] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1632.606667][T26230] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1632.803071][ T30] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1632.811179][ T30] usb 5-1: media controller created [ 1632.905248][T28532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1633.037502][T26230] usb 3-1: Product: syz [ 1633.038575][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1633.047407][T26230] usb 3-1: Manufacturer: syz [ 1633.090187][T26230] usb 3-1: SerialNumber: syz [ 1633.187609][T26230] usb 3-1: config 0 descriptor?? [ 1633.231552][ T30] usb 5-1: selecting invalid altsetting 3 [ 1633.237201][T26230] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1633.241857][ T30] ttusb2: set interface to alts=3 failed [ 1633.270972][T26230] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1633.374363][ T30] DVB: Unable to find symbol tda10086_attach() [ 1633.391285][ T30] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1633.405703][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1633.431333][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1633.451145][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1633.473077][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1633.480311][T28421] veth0_vlan: entered promiscuous mode [ 1633.500515][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1634.183254][ T5818] Bluetooth: hci1: command tx timeout [ 1634.204643][ T29] audit: type=1326 audit(1771188253.744:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28524 comm="syz.2.6072" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd52179bf79 code=0x0 [ 1634.261844][ T30] usb 5-1: USB disconnect, device number 18 [ 1634.262863][T28549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1634.842137][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1634.880921][ T5926] usb 2-1: USB disconnect, device number 11 [ 1634.943450][T28421] veth1_vlan: entered promiscuous mode [ 1635.066312][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1635.102918][T28421] veth0_macvtap: entered promiscuous mode [ 1635.129978][T28421] veth1_macvtap: entered promiscuous mode [ 1635.169713][T28421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.195662][T28421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.271847][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.280994][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.324712][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.355988][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.538008][T21827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.578893][T21827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.126522][ T30] usb 3-1: USB disconnect, device number 13 [ 1636.158519][ T30] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 1636.203158][T21827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.212974][T21827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.575646][T28565] syzkaller0: entered promiscuous mode [ 1636.581131][T28565] syzkaller0: entered allmulticast mode [ 1637.039218][T16378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1637.074348][T16378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1637.083116][T16378] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1637.090652][T16378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1637.098548][T16378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1637.392683][T28580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1637.629367][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1639.843233][T16378] Bluetooth: hci6: command tx timeout [ 1640.108766][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1640.261980][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1640.277505][ T30] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 1640.285948][ T30] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1640.303610][ T30] usb 6-1: config 3 has an invalid descriptor of length 52, skipping remainder of the config [ 1640.323645][ T30] usb 6-1: config 3 has no interface number 0 [ 1640.340975][ T30] usb 6-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 49, changing to 9 [ 1640.359965][ T30] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1640.382875][ T30] usb 6-1: config 3 interface 45 has no altsetting 0 [ 1640.391642][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1640.409270][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.426079][ T30] usb 6-1: Product: syz [ 1640.430298][ T30] usb 6-1: Manufacturer: syz [ 1640.444325][ T30] usb 6-1: SerialNumber: syz [ 1641.354899][ T30] usb 6-1: USB disconnect, device number 2 [ 1641.381561][T15671] udevd[15671]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1641.922509][T16378] Bluetooth: hci6: command tx timeout [ 1643.049588][T28598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6086'. [ 1643.100469][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6086'. [ 1643.638700][T28574] chnl_net:caif_netlink_parms(): no params data found [ 1643.994061][T28574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.002940][T16378] Bluetooth: hci6: command tx timeout [ 1644.034990][T28574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.062346][T28574] bridge_slave_0: entered allmulticast mode [ 1644.078155][T28574] bridge_slave_0: entered promiscuous mode [ 1644.096602][T28574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.112269][T28574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.127866][T28574] bridge_slave_1: entered allmulticast mode [ 1644.142946][T28574] bridge_slave_1: entered promiscuous mode [ 1644.299426][T28574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.312300][T28574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.349168][T28574] team0: Port device team_slave_0 added [ 1644.366291][T28574] team0: Port device team_slave_1 added [ 1644.396754][T28574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.406191][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.432366][T28574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.441902][ T5821] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1644.444736][T28574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.457806][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.484890][T28574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.554375][T28574] hsr_slave_0: entered promiscuous mode [ 1644.561633][T28574] hsr_slave_1: entered promiscuous mode [ 1644.568691][T28574] debugfs: 'hsr0' already exists in 'hsr' [ 1644.575056][T28574] Cannot create hsr debugfs directory [ 1644.582185][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1644.603328][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.614387][ T5821] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1644.624954][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.653097][ T5821] usb 6-1: config 0 descriptor?? [ 1644.666467][ T5821] pwc: Askey VC010 type 2 USB webcam detected. [ 1644.842050][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1644.908676][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1644.918744][ T24] usb 4-1: config 179 has no interface number 0 [ 1644.926257][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1644.950066][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1644.974189][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1645.000574][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1645.020687][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1645.060336][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1645.091714][T28574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.110647][ T5821] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1645.117308][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.136938][ T5821] pwc: recv_control_msg error -32 req 02 val 2700 [ 1645.168912][T28620] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1645.177252][ T5821] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1645.187553][ T5821] pwc: recv_control_msg error -32 req 04 val 1000 [ 1645.234226][T28574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.274074][T28629] FAULT_INJECTION: forcing a failure. [ 1645.274074][T28629] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.289918][T28629] CPU: 1 UID: 0 PID: 28629 Comm: syz.4.6093 Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.289944][T28629] Tainted: [L]=SOFTLOCKUP [ 1645.289948][T28629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1645.289956][T28629] Call Trace: [ 1645.289960][T28629] [ 1645.289965][T28629] dump_stack_lvl+0x100/0x190 [ 1645.289989][T28629] should_fail_ex.cold+0x5/0xa [ 1645.290005][T28629] should_failslab+0xc2/0x120 [ 1645.290022][T28629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1645.290037][T28629] ? __kernfs_new_node+0xd2/0x960 [ 1645.290051][T28629] ? kstrdup+0xb3/0xe0 [ 1645.290067][T28629] __kernfs_new_node+0xd2/0x960 [ 1645.290083][T28629] ? __pfx___kernfs_new_node+0x10/0x10 [ 1645.290101][T28629] ? find_held_lock+0x2b/0x80 [ 1645.290115][T28629] ? kernfs_root+0xee/0x2a0 [ 1645.290128][T28629] ? kernfs_root+0xee/0x2a0 [ 1645.290144][T28629] kernfs_new_node+0x11b/0x1a0 [ 1645.290163][T28629] kernfs_create_dir_ns+0x4c/0x1a0 [ 1645.290181][T28629] sysfs_create_dir_ns+0x13a/0x2b0 [ 1645.290200][T28629] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1645.290213][T28629] ? find_held_lock+0x2b/0x80 [ 1645.290226][T28629] ? kobject_add_internal+0x25f/0x930 [ 1645.290243][T28629] ? kobject_add_internal+0x25f/0x930 [ 1645.290260][T28629] ? class_dir_child_ns_type+0xd/0x60 [ 1645.290274][T28629] kobject_add_internal+0x2c8/0x930 [ 1645.290293][T28629] kobject_add+0x16a/0x1e0 [ 1645.290310][T28629] ? __pfx_kobject_add+0x10/0x10 [ 1645.290329][T28629] ? kobject_put+0xb9/0x640 [ 1645.290344][T28629] ? device_add+0xc48/0x1950 [ 1645.290358][T28629] device_add+0x294/0x1950 [ 1645.290370][T28629] ? __pfx_dev_set_name+0x10/0x10 [ 1645.290383][T28629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1645.290399][T28629] ? __pfx_device_add+0x10/0x10 [ 1645.290411][T28629] ? lockdep_init_map_type+0x5c/0x250 [ 1645.290430][T28629] ? __init_waitqueue_head+0xca/0x150 [ 1645.290446][T28629] wakeup_source_device_create+0x243/0x2e0 [ 1645.290461][T28629] wakeup_source_sysfs_add+0x1c/0x90 [ 1645.290473][T28629] wakeup_source_register+0x154/0x3e0 [ 1645.290491][T28629] ep_create_wakeup_source+0x1df/0x2e0 [ 1645.290510][T28629] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 1645.290531][T28629] ? find_held_lock+0x2b/0x80 [ 1645.290544][T28629] ? do_epoll_ctl+0x26dc/0x36a0 [ 1645.290555][T28629] ? do_epoll_ctl+0x26dc/0x36a0 [ 1645.290568][T28629] do_epoll_ctl+0x1eee/0x36a0 [ 1645.290585][T28629] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1645.290596][T28629] ? find_held_lock+0x2b/0x80 [ 1645.290611][T28629] ? __might_fault+0xc5/0x140 [ 1645.290625][T28629] ? __might_fault+0xc5/0x140 [ 1645.290644][T28629] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1645.290655][T28629] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1645.290667][T28629] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1645.290683][T28629] do_syscall_64+0x106/0xf80 [ 1645.290697][T28629] ? clear_bhb_loop+0x40/0x90 [ 1645.290712][T28629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.290725][T28629] RIP: 0033:0x7f5510f9bf79 [ 1645.290737][T28629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.290749][T28629] RSP: 002b:00007f5511f40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1645.290764][T28629] RAX: ffffffffffffffda RBX: 00007f5511215fa0 RCX: 00007f5510f9bf79 [ 1645.290772][T28629] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000005 [ 1645.290779][T28629] RBP: 00007f5511f40090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.290787][T28629] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000002 [ 1645.290795][T28629] R13: 00007f5511216038 R14: 00007f5511215fa0 R15: 00007ffc98deb098 [ 1645.290811][T28629] [ 1645.290873][T28629] kobject: kobject_add_internal failed for wakeup11 (error: -12 parent: wakeup) [ 1645.443365][T28620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.532052][ T5821] pwc: recv_control_msg error -32 req 04 val 1400 [ 1645.673917][T28620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.844525][ T5821] pwc: recv_control_msg error -32 req 02 val 2100 [ 1645.956896][ T5821] pwc: recv_control_msg error -32 req 04 val 1500 [ 1646.003137][T28574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.048551][ T5821] pwc: recv_control_msg error -71 req 02 val 2500 [ 1646.057625][ T5821] pwc: recv_control_msg error -71 req 02 val 2400 [ 1646.072295][ T5821] pwc: recv_control_msg error -71 req 02 val 2600 [ 1646.081438][ T5821] pwc: recv_control_msg error -71 req 02 val 2900 [ 1646.287494][T16378] Bluetooth: hci6: command tx timeout [ 1646.418746][ T5821] pwc: recv_control_msg error -71 req 02 val 2800 [ 1646.437079][ T5821] pwc: recv_control_msg error -71 req 04 val 1100 [ 1646.445470][ T5821] pwc: recv_control_msg error -71 req 04 val 1200 [ 1646.457743][ T5821] pwc: Registered as video103. [ 1646.466398][ T5821] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input100 [ 1646.486017][ T5821] usb 6-1: USB disconnect, device number 3 [ 1646.675301][T28642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=28642 comm=syz.2.6096 [ 1646.887820][T28643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1646.921675][T28648] bond0: entered promiscuous mode [ 1646.932001][T28648] bond_slave_0: entered promiscuous mode [ 1646.938139][T28648] bond_slave_1: entered promiscuous mode [ 1646.948649][T28648] batadv0: entered promiscuous mode [ 1646.973978][T28648] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1647.065215][T28574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1647.142359][T28574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1647.175480][T28574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1647.205977][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 480 seconds [ 1647.217305][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 480 seconds [ 1647.228587][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 480 seconds [ 1647.240592][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 480 seconds [ 1647.258149][T28574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1647.289756][T26230] usb 4-1: USB disconnect, device number 7 [ 1647.289778][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1647.295796][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1647.303980][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1647.458824][T28659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1647.482557][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1647.508142][ T5926] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1647.527311][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.551688][ T5926] usb 3-1: Product: syz [ 1647.563405][ T5926] usb 3-1: Manufacturer: syz [ 1647.572242][ T5926] usb 3-1: SerialNumber: syz [ 1647.590878][ T5926] usb 3-1: config 0 descriptor?? [ 1647.603169][ T5926] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1647.733279][T26230] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1647.752053][T28574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.807750][ T5926] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 1647.818652][T28574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.859869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.867063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.899093][T26230] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1647.910584][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.917770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.931957][T26230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.939995][T26230] usb 6-1: Product: syz [ 1647.951636][T26230] usb 6-1: Manufacturer: syz [ 1647.962871][T26230] usb 6-1: SerialNumber: syz [ 1647.978318][T26230] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1647.998150][ T5926] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1648.016243][T28676] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1648.265551][T28574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.331707][T28574] veth0_vlan: entered promiscuous mode [ 1648.347863][T28574] veth1_vlan: entered promiscuous mode [ 1648.497415][T28574] veth0_macvtap: entered promiscuous mode [ 1648.507018][T25428] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1648.512345][T28574] veth1_macvtap: entered promiscuous mode [ 1648.543641][T28574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.564534][T28574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.675476][T25428] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.713434][T25428] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1648.778043][T25428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.812945][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d831800: rx timeout, send abort [ 1648.865709][T25428] usb 5-1: config 0 descriptor?? [ 1648.943551][T25428] pwc: Askey VC010 type 2 USB webcam detected. [ 1649.048241][T13532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.060373][ T5926] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1649.068128][T13532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.076193][ T5926] ath9k_htc: Failed to initialize the device [ 1649.087614][T16361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.114860][T16361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.130699][T16361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.138287][ T5926] usb 6-1: ath9k_htc: USB layer deinitialized [ 1649.141863][T16361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.161561][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.170623][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.298629][T25428] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1649.305784][T25428] pwc: recv_control_msg error -32 req 02 val 2700 [ 1649.313232][T25428] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1649.320527][T25428] pwc: recv_control_msg error -32 req 04 val 1000 [ 1649.327024][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d831800: abort rx timeout. Force session deactivation [ 1649.604879][T25428] pwc: recv_control_msg error -32 req 04 val 1400 [ 1649.646012][T27710] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1649.816132][T27710] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1649.825675][T27710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.893795][T27710] usb 4-1: config 0 descriptor?? [ 1649.895058][T25428] pwc: recv_control_msg error -32 req 02 val 2100 [ 1649.918217][T27710] usb 4-1: Invalid firmware size=18. [ 1650.176472][T28700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1650.216535][T25428] pwc: recv_control_msg error -71 req 02 val 2500 [ 1650.364963][T25428] pwc: recv_control_msg error -71 req 02 val 2400 [ 1650.385829][T25428] pwc: recv_control_msg error -71 req 02 val 2600 [ 1650.395499][T27710] usb 3-1: USB disconnect, device number 14 [ 1650.396217][T25428] pwc: recv_control_msg error -71 req 02 val 2900 [ 1650.509832][ T10] usb 6-1: USB disconnect, device number 4 [ 1650.549573][T25428] pwc: recv_control_msg error -71 req 02 val 2800 [ 1650.556643][T25428] pwc: recv_control_msg error -71 req 04 val 1100 [ 1650.571182][T25428] pwc: recv_control_msg error -71 req 04 val 1200 [ 1650.587849][T25428] pwc: Registered as video103. [ 1650.600255][T25428] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input101 [ 1651.122986][T25428] usb 5-1: USB disconnect, device number 19 [ 1652.285442][ T29] audit: type=1400 audit(1771188272.354:1931): avc: denied { lock } for pid=28722 comm="syz.2.6117" path="socket:[113660]" dev="sockfs" ino=113660 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1652.325619][T28723] rdma_op ffff8880323e31f0 conn xmit_rdma 0000000000000000 [ 1652.505423][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1652.530024][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1652.540886][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054603c00: rx timeout, send abort [ 1652.549984][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1652.806962][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1652.830203][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1653.040975][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026b7a800: rx timeout, send abort [ 1653.051996][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054603c00: abort rx timeout. Force session deactivation [ 1653.075077][T27710] usb 4-1: USB disconnect, device number 8 [ 1653.171989][T28734] comedi comedi0: adq12b: I/O port conflict (0x8001,16) [ 1653.549198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026b7a800: abort rx timeout. Force session deactivation [ 1654.305759][T28725] chnl_net:caif_netlink_parms(): no params data found [ 1654.628632][T28725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.661925][T28725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.669192][T28725] bridge_slave_0: entered allmulticast mode [ 1654.696425][T28725] bridge_slave_0: entered promiscuous mode [ 1654.907802][T28725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.938590][T28725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.949634][T28725] bridge_slave_1: entered allmulticast mode [ 1654.957847][T28725] bridge_slave_1: entered promiscuous mode [ 1654.966965][ T5818] Bluetooth: hci2: command tx timeout [ 1655.184337][T28725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.463358][T28725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.522045][T28725] team0: Port device team_slave_0 added [ 1656.529722][T28725] team0: Port device team_slave_1 added [ 1656.547208][T28725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.556891][T28725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.666367][T28725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.878644][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1656.904433][T28725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.016762][T28725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.051720][T28795] FAULT_INJECTION: forcing a failure. [ 1657.051720][T28795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1657.065338][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1657.072013][T28795] CPU: 1 UID: 0 PID: 28795 Comm: syz.1.6133 Tainted: G L syzkaller #0 PREEMPT(full) [ 1657.072042][T28795] Tainted: [L]=SOFTLOCKUP [ 1657.072048][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1657.072058][T28795] Call Trace: [ 1657.072060][ T5818] Bluetooth: hci2: command tx timeout [ 1657.072065][T28795] [ 1657.072072][T28795] dump_stack_lvl+0x100/0x190 [ 1657.072102][T28795] should_fail_ex.cold+0x5/0xa [ 1657.072119][T28795] ? prepare_alloc_pages+0x16d/0x5f0 [ 1657.072146][T28795] should_fail_alloc_page+0xeb/0x140 [ 1657.072171][T28795] prepare_alloc_pages+0x1f0/0x5f0 [ 1657.072198][T28795] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1657.072224][T28795] ? stack_trace_save+0x8e/0xc0 [ 1657.072244][T28795] ? __pfx_stack_trace_save+0x10/0x10 [ 1657.072263][T28795] ? stack_depot_save_flags+0x27/0x9d0 [ 1657.072283][T28795] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1657.072304][T28795] ? __lock_acquire+0x4a5/0x2630 [ 1657.072327][T28795] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1657.072345][T28795] ? ptlock_alloc+0x1f/0x70 [ 1657.072361][T28795] ? pte_alloc_one+0x84/0x3e0 [ 1657.072379][T28795] ? __pte_alloc+0x6d/0x3f0 [ 1657.072399][T28795] ? do_anonymous_page+0x13cc/0x1fb0 [ 1657.072414][T28795] ? __handle_mm_fault+0x1d42/0x2b60 [ 1657.072430][T28795] ? handle_mm_fault+0x36d/0xa20 [ 1657.072451][T28795] ? __lock_acquire+0x4a5/0x2630 [ 1657.072474][T28795] ? __lock_acquire+0x4a5/0x2630 [ 1657.072496][T28795] ? css_rstat_updated+0x1ce/0x5a0 [ 1657.072517][T28795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1657.072538][T28795] ? policy_nodemask+0xed/0x4f0 [ 1657.072563][T28795] alloc_pages_mpol+0x1fb/0x550 [ 1657.072587][T28795] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1657.072615][T28795] folio_alloc_mpol_noprof+0x36/0x340 [ 1657.072641][T28795] vma_alloc_folio_noprof+0xed/0x1d0 [ 1657.072665][T28795] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1657.072688][T28795] ? rcu_read_unlock+0x2d/0xb0 [ 1657.072705][T28795] ? rcu_read_unlock+0x2d/0xb0 [ 1657.072728][T28795] do_wp_page+0xf28/0x4f00 [ 1657.072766][T28795] ? __pfx_do_wp_page+0x10/0x10 [ 1657.072791][T28795] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1657.072814][T28795] __handle_mm_fault+0x1ac8/0x2b60 [ 1657.072838][T28795] ? __pfx___handle_mm_fault+0x10/0x10 [ 1657.072857][T28795] ? pte_offset_map_lock+0x174/0x320 [ 1657.072877][T28795] ? vm_normal_page+0x1b6/0x330 [ 1657.072898][T28795] ? find_held_lock+0x2b/0x80 [ 1657.072924][T28795] ? follow_page_pte+0x5b3/0x1400 [ 1657.072953][T28795] handle_mm_fault+0x36d/0xa20 [ 1657.072974][T28795] __get_user_pages+0xf9c/0x34d0 [ 1657.073003][T28795] ? down_read_killable+0x30e/0x4c0 [ 1657.073027][T28795] ? __pfx___get_user_pages+0x10/0x10 [ 1657.073049][T28795] ? __kernel_text_address+0xd/0x30 [ 1657.073065][T28795] ? unwind_get_return_address+0x59/0xa0 [ 1657.073090][T28795] __gup_longterm_locked+0x279/0x16f0 [ 1657.073119][T28795] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1657.073148][T28795] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 1657.073175][T28795] gup_fast_fallback+0x18c6/0x2460 [ 1657.073200][T28795] ? v4l2_ioctl+0x1bd/0x250 [ 1657.073233][T28795] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1657.073268][T28795] pin_user_pages_fast+0xa7/0xf0 [ 1657.073291][T28795] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1657.073315][T28795] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1657.073333][T28795] ? frame_vector_create+0x61/0x110 [ 1657.073361][T28795] get_vaddr_frames+0x89/0x190 [ 1657.073386][T28795] vb2_create_framevec+0x64/0xd0 [ 1657.073406][T28795] vb2_vmalloc_get_userptr+0x137/0x510 [ 1657.073432][T28795] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 1657.073457][T28795] __prepare_userptr.constprop.0+0x3a7/0x1560 [ 1657.073487][T28795] ? __pfx___prepare_userptr.constprop.0+0x10/0x10 [ 1657.073541][T28795] ? __mutex_lock+0x26a/0x1b90 [ 1657.073560][T28795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1657.073583][T28795] __buf_prepare+0x352/0x790 [ 1657.073609][T28795] vb2_core_prepare_buf+0xa9/0x260 [ 1657.073632][T28795] vb2_prepare_buf+0x22f/0x300 [ 1657.073656][T28795] vb2_ioctl_prepare_buf+0x10a/0x150 [ 1657.073680][T28795] v4l_prepare_buf+0x93/0xc0 [ 1657.073704][T28795] __video_do_ioctl+0xaf8/0xdc0 [ 1657.073726][T28795] ? __might_fault+0xc5/0x140 [ 1657.073743][T28795] ? __pfx___video_do_ioctl+0x10/0x10 [ 1657.073775][T28795] video_usercopy+0x47a/0x1740 [ 1657.073795][T28795] ? __pfx___video_do_ioctl+0x10/0x10 [ 1657.073814][T28795] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1657.073838][T28795] ? __pfx_video_usercopy+0x10/0x10 [ 1657.073871][T28795] v4l2_ioctl+0x1bd/0x250 [ 1657.073890][T28795] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1657.073911][T28795] __x64_sys_ioctl+0x18e/0x210 [ 1657.073933][T28795] do_syscall_64+0x106/0xf80 [ 1657.073951][T28795] ? clear_bhb_loop+0x40/0x90 [ 1657.073970][T28795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.073987][T28795] RIP: 0033:0x7fddc8d9bf79 [ 1657.074001][T28795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.074016][T28795] RSP: 002b:00007fddc9c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.074033][T28795] RAX: ffffffffffffffda RBX: 00007fddc9015fa0 RCX: 00007fddc8d9bf79 [ 1657.074044][T28795] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 1657.074053][T28795] RBP: 00007fddc9c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.074063][T28795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.074072][T28795] R13: 00007fddc9016038 R14: 00007fddc9015fa0 R15: 00007ffe0fbc3c78 [ 1657.074094][T28795] [ 1657.618900][T28725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.639100][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1657.651881][ T10] usb 3-1: config 179 has no interface number 0 [ 1657.658177][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1657.687833][T28725] hsr_slave_0: entered promiscuous mode [ 1657.701687][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1657.712874][T28725] hsr_slave_1: entered promiscuous mode [ 1657.713127][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1657.719198][T28725] debugfs: 'hsr0' already exists in 'hsr' [ 1657.729645][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1657.729677][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1657.729717][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1657.729743][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.732490][T28780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1657.784970][T28725] Cannot create hsr debugfs directory [ 1657.902823][T28801] netlink: 199100 bytes leftover after parsing attributes in process `syz.5.6135'. [ 1658.333635][T28780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1658.636817][T28725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.883494][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1658.891907][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1658.903213][T26230] usb 3-1: USB disconnect, device number 15 [ 1659.010508][ T29] audit: type=1400 audit(1771188279.074:1932): avc: denied { bind } for pid=28815 comm="syz.5.6139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1659.055166][ T29] audit: type=1400 audit(1771188279.074:1933): avc: denied { name_bind } for pid=28815 comm="syz.5.6139" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1659.090318][ T29] audit: type=1400 audit(1771188279.074:1934): avc: denied { node_bind } for pid=28815 comm="syz.5.6139" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1659.175666][T28725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.257152][ T29] audit: type=1326 audit(1771188279.324:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1659.309219][ T29] audit: type=1326 audit(1771188279.324:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1659.381292][ T29] audit: type=1326 audit(1771188279.324:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1659.407304][ T29] audit: type=1326 audit(1771188279.324:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a16f9bf79 code=0x7ffc0000 [ 1659.766640][ T5818] Bluetooth: hci2: command tx timeout [ 1659.793624][T28725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.828347][T28835] tipc: Started in network mode [ 1659.846921][T28835] tipc: Node identity 56636320c988, cluster identity 4711 [ 1659.907717][T28835] tipc: Enabled bearer , priority 0 [ 1659.948139][T28838] program syz.2.6145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1659.987683][T28828] syzkaller0: entered promiscuous mode [ 1660.019341][T28828] syzkaller0: entered allmulticast mode [ 1660.622352][T28843] tipc: Resetting bearer [ 1660.762434][ T791] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1660.821504][T28725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1660.831996][ T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1660.846911][T28725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1660.928902][ T791] usb 2-1: Using ep0 maxpacket: 32 [ 1661.004078][ T10] tipc: Node number set to 2683003680 [ 1661.005122][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.165681][T28725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1661.172624][ T791] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1661.181292][ T791] usb 2-1: config 0 has no interface number 0 [ 1661.191108][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.215368][ T791] usb 2-1: config 0 interface 119 has no altsetting 0 [ 1661.223146][T28725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1661.773682][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1661.793410][ T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1661.803407][ T791] usb 2-1: New USB device found, idVendor=0809, idProduct=ac30, bcdDevice=da.f9 [ 1661.812700][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.820681][ T791] usb 2-1: Product: syz [ 1661.825017][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.833101][ T791] usb 2-1: Manufacturer: syz [ 1661.837983][ T791] usb 2-1: SerialNumber: syz [ 1661.847823][ T5818] Bluetooth: hci2: command tx timeout [ 1661.856223][ T30] usb 6-1: config 0 descriptor?? [ 1661.865082][ T791] usb 2-1: config 0 descriptor?? [ 1661.984683][T28725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.005062][T28725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.022104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.029317][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.045968][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.053232][T16361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1662.201994][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1662.236537][T28725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.317130][ T30] plantronics 0003:047F:FFFF.00B0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1662.362983][T27710] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1662.371955][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1662.383482][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.405451][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1662.417444][ T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1662.436909][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.466810][ T24] usb 4-1: config 0 descriptor?? [ 1662.487346][T28725] veth0_vlan: entered promiscuous mode [ 1662.499062][ T10] usb 6-1: USB disconnect, device number 5 [ 1662.515632][T28725] veth1_vlan: entered promiscuous mode [ 1662.548360][T28725] veth0_macvtap: entered promiscuous mode [ 1662.557922][T28725] veth1_macvtap: entered promiscuous mode [ 1662.563627][T27710] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1662.578418][T27710] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1662.581027][T28725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.605311][T27710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1662.608695][T28725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.622974][T27710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.634766][T13532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.644101][T13532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.662884][T13532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.673062][T13532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.756721][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.770650][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.799950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.809540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.857777][T27710] usb 3-1: usb_control_msg returned -32 [ 1662.873291][T27710] usbtmc 3-1:16.0: can't read capabilities [ 1662.911977][ T24] nzxt-smart2 0003:1E71:2009.00B1: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1663.088964][T28892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.096549][T28892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.165816][ T24] usb 2-1: USB disconnect, device number 12 [ 1663.172492][T28892] bridge0: entered allmulticast mode [ 1663.250018][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.256508][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.328211][T28844] tipc: Resetting bearer [ 1663.355282][T28844] tipc: Disabling bearer [ 1663.384172][T28893] bridge_slave_1: left allmulticast mode [ 1663.402066][T28893] bridge_slave_1: left promiscuous mode [ 1663.431405][T27710] usb 4-1: USB disconnect, device number 9 [ 1663.442317][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.545318][T28893] bridge_slave_0: left allmulticast mode [ 1663.549950][ T29] audit: type=1326 audit(1771188283.614:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28904 comm="syz.1.6157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddc8d9bf79 code=0x0 [ 1663.578212][T28893] bridge_slave_0: left promiscuous mode [ 1663.587006][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.157944][T28914] comedi comedi0: pcl724: I/O port conflict (0x6,4) [ 1664.174653][T28901] dummy0: entered allmulticast mode [ 1664.278415][T28871] dummy0: left allmulticast mode [ 1665.525333][ T5924] usb 3-1: USB disconnect, device number 16 [ 1665.718578][T28927] xt_hashlimit: size too large, truncated to 1048576 [ 1665.928358][ T29] audit: type=1326 audit(1771188285.974:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28928 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52179bf79 code=0x7ffc0000 [ 1665.953810][ T29] audit: type=1326 audit(1771188285.994:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28928 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd52179bf79 code=0x7ffc0000 [ 1666.108602][ T791] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1666.743465][ T29] audit: type=1326 audit(1771188285.994:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28928 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52179bf79 code=0x7ffc0000 [ 1666.767459][T28940] tipc: Started in network mode [ 1666.773384][ T29] audit: type=1326 audit(1771188285.994:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28928 comm="syz.2.6162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd52179bf79 code=0x7ffc0000 [ 1666.800485][ T791] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 1666.839687][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.852356][ T791] usb 5-1: config 0 descriptor?? [ 1666.939105][T28940] tipc: Node identity ac1414aa, cluster identity 4711 [ 1666.946775][T28940] tipc: New replicast peer: 100.1.1.1 [ 1666.952824][T28940] tipc: Enabled bearer , priority 10 [ 1667.390732][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.432086][ T12] Bluetooth: Error in BCSP hdr checksum [ 1667.449771][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.477580][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.491617][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.533052][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.571958][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.599090][ T29] audit: type=1404 audit(1771188287.664:1944): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1667.619528][ T791] logitech 0003:046D:C218.00B2: unknown main item tag 0x0 [ 1667.679662][ T29] audit: type=1400 audit(1771188287.744:1945): avc: denied { create } for pid=28926 comm="syz.4.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1667.701203][ T12] Bluetooth: Error in BCSP hdr checksum [ 1667.711831][ T791] logitech 0003:046D:C218.00B2: hidraw0: USB HID v0.03 Device [HID 046d:c218] on usb-dummy_hcd.4-1/input0 [ 1667.741980][ T791] logitech 0003:046D:C218.00B2: no inputs found [ 1667.814259][ T29] audit: type=1400 audit(1771188287.764:1946): avc: denied { create } for pid=28926 comm="syz.4.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 1667.912274][ T29] audit: type=1400 audit(1771188287.774:1947): avc: denied { execmem } for pid=28926 comm="syz.4.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1668.009753][ T29] audit: type=1400 audit(1771188287.874:1948): avc: denied { read } for pid=28947 comm="syz.1.6168" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1668.033877][ T29] audit: type=1400 audit(1771188287.874:1949): avc: denied { create } for pid=28947 comm="syz.1.6168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 1668.071919][ T5926] tipc: Node number set to 2886997162 [ 1669.220590][T28972] Bluetooth: hci4: command 0x1003 tx timeout [ 1669.258641][ T791] usb 5-1: USB disconnect, device number 20 [ 1669.266802][ T5818] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1670.402358][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 1671.149750][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 1671.149768][ T29] audit: type=1400 audit(1771188291.214:2015): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1671.192868][ T29] audit: type=1400 audit(1771188291.264:2016): avc: denied { read write } for pid=28421 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1671.222552][ T29] audit: type=1400 audit(1771188291.294:2017): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1673.421167][ T5178] udevd[5178]: worker [15682] /devices/virtual/block/nbd1 timeout; kill it [ 1673.430548][ T5178] udevd[5178]: seq 30916 '/devices/virtual/block/nbd1' killed [ 1674.642605][ T29] audit: type=1400 audit(1771188294.714:2018): avc: denied { recv } for pid=26230 comm="kworker/0:0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1674.733564][ T29] audit: type=1400 audit(1771188294.804:2019): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1677.285589][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 510 seconds [ 1677.296428][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 510 seconds [ 1677.307426][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 510 seconds [ 1677.318414][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 510 seconds [ 1679.205001][ T29] audit: type=1400 audit(1771188299.274:2020): avc: denied { egress } for pid=16361 comm="kworker/u8:3" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1680.493307][ T29] audit: type=1400 audit(1771188300.564:2021): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1681.650312][ T29] audit: type=1400 audit(1771188301.714:2022): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1681.763895][ T29] audit: type=1400 audit(1771188301.834:2023): avc: denied { recv } for pid=21827 comm="kworker/u8:4" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1686.243465][ T29] audit: type=1400 audit(1771188306.314:2024): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1688.804635][ T29] audit: type=1400 audit(1771188308.874:2025): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1692.654336][ T29] audit: type=1400 audit(1771188312.724:2026): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1694.563369][ T29] audit: type=1400 audit(1771188314.634:2027): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1695.214107][ T29] audit: type=1400 audit(1771188315.284:2028): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1695.853539][ T29] audit: type=1400 audit(1771188315.924:2029): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1699.044059][ T29] audit: type=1400 audit(1771188319.114:2030): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1704.172822][ T29] audit: type=1400 audit(1771188324.244:2031): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1707.362945][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 540 seconds [ 1707.373950][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 540 seconds [ 1707.385014][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 540 seconds [ 1707.396042][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 540 seconds [ 1711.202926][ T29] audit: type=1400 audit(1771188331.274:2032): avc: denied { egress } for pid=24 comm="kworker/1:0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1718.242806][ T29] audit: type=1400 audit(1771188338.314:2033): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1722.349701][ T29] audit: type=1400 audit(1771188342.414:2034): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1723.367058][ T29] audit: type=1400 audit(1771188343.434:2035): avc: denied { recv } for pid=5908 comm="kworker/0:5" saddr=10.128.0.169 src=30006 daddr=10.128.1.120 dest=37672 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1724.003138][ T29] audit: type=1400 audit(1771188344.074:2036): avc: denied { recv } for pid=12 comm="kworker/u8:0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1724.653946][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.660271][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1725.843462][ T29] audit: type=1400 audit(1771188345.914:2037): avc: denied { recv } for pid=12 comm="kworker/u8:0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1729.603271][ T29] audit: type=1400 audit(1771188349.674:2038): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1734.884695][ T29] audit: type=1400 audit(1771188354.954:2039): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1737.442381][T23906] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 570 seconds [ 1737.453391][T23906] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 570 seconds [ 1737.465118][T23906] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 570 seconds [ 1737.476402][T23906] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 570 seconds [ 1742.093909][T16378] Bluetooth: hci3: command 0x0406 tx timeout [ 1747.214593][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 1748.962658][ T29] audit: type=1400 audit(1771188369.034:2040): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1750.254016][ T29] audit: type=1400 audit(1771188370.324:2041): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1755.365541][ T29] audit: type=1400 audit(1771188375.434:2042): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1760.495272][ T29] audit: type=1400 audit(1771188380.564:2043): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 1762.572024][T16378] Bluetooth: hci6: command 0x0406 tx timeout [ 1766.883002][ T29] audit: type=1400 audit(1771188386.954:2044): avc: denied { recv } for pid=28868 comm="napi/wg2-0" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1767.522699][ T2726] block nbd1: Possible stuck request ffff888027d90000: control (read@0,1024B). Runtime 600 seconds [ 1767.534660][ T2726] block nbd1: Possible stuck request ffff888027d90200: control (read@1024,1024B). Runtime 600 seconds [ 1767.545699][ T2726] block nbd1: Possible stuck request ffff888027d90400: control (read@2048,1024B). Runtime 600 seconds [ 1767.557257][ T2726] block nbd1: Possible stuck request ffff888027d90600: control (read@3072,1024B). Runtime 600 seconds [ 1773.922432][ T31] INFO: task syz.0.6001:28225 blocked for more than 143 seconds. [ 1773.930180][ T31] Tainted: G L syzkaller #0 [ 1773.936874][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1773.945680][ T31] task:syz.0.6001 state:D stack:26712 pid:28225 tgid:28224 ppid:16377 task_flags:0x400140 flags:0x00080002 [ 1773.957785][ T31] Call Trace: [ 1773.961071][ T31] [ 1773.964125][ T31] __schedule+0xfee/0x60e0 [ 1773.968533][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1773.973512][ T31] ? __pfx___schedule+0x10/0x10 [ 1773.978370][ T31] ? find_held_lock+0x2b/0x80 [ 1773.983104][ T31] ? schedule+0x2bf/0x390 [ 1773.987451][ T31] schedule+0xdd/0x390 [ 1773.991503][ T31] schedule_preempt_disabled+0x13/0x30 [ 1773.996993][ T31] __mutex_lock+0xc9a/0x1b90 [ 1774.001584][ T31] ? sync_bdevs+0x153/0x480 [ 1774.007045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1774.012131][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1774.017771][ T31] ? iput.part.0+0x1a0/0xf50 [ 1774.022394][ T31] ? sync_bdevs+0x153/0x480 [ 1774.026891][ T31] sync_bdevs+0x153/0x480 [ 1774.031203][ T31] ksys_sync+0xb0/0xf0 [ 1774.035307][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1774.040067][ T31] ? do_syscall_64+0x95/0xf80 [ 1774.044843][ T31] __do_sys_sync+0xe/0x20 [ 1774.049171][ T31] do_syscall_64+0x106/0xf80 [ 1774.053862][ T31] ? clear_bhb_loop+0x40/0x90 [ 1774.058541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.064628][ T31] RIP: 0033:0x7fb512b9bf79 [ 1774.069029][ T31] RSP: 002b:00007fb513a38028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1774.077510][ T31] RAX: ffffffffffffffda RBX: 00007fb512e15fa0 RCX: 00007fb512b9bf79 [ 1774.087524][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.095570][ T31] RBP: 00007fb512e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.103554][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.111972][ T31] R13: 00007fb512e16038 R14: 00007fb512e15fa0 R15: 00007ffc9badaf28 [ 1774.119976][ T31] [ 1774.123128][ T31] [ 1774.123128][ T31] Showing all locks held in the system: [ 1774.130839][ T31] 5 locks held by kworker/u8:0/12: [ 1774.136121][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1774.146097][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 1774.154834][ T31] #2: ffff8880b8526358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 1774.164247][ T31] #3: ffffffff9b376238 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 1774.174754][ T31] #4: ffffffff8e69fd28 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1774.185230][ T31] 1 lock held by khungtaskd/31: [ 1774.190066][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1774.199950][ T31] 2 locks held by getty/5563: [ 1774.204654][ T31] #0: ffff88823bfb88a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1774.214943][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1774.225128][ T31] 1 lock held by udevd/15682: [ 1774.229790][ T31] #0: ffff8880207c0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1774.239169][ T31] 1 lock held by syz.0.6001/28225: [ 1774.244451][ T31] #0: ffff8880207c0358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1774.253921][ T31] [ 1774.256238][ T31] ============================================= [ 1774.256238][ T31] [ 1774.264653][ T31] NMI backtrace for cpu 0 [ 1774.264667][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.264694][ T31] Tainted: [L]=SOFTLOCKUP [ 1774.264700][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1774.264710][ T31] Call Trace: [ 1774.264717][ T31] [ 1774.264723][ T31] dump_stack_lvl+0x100/0x190 [ 1774.264754][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1774.264774][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1774.264804][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1774.264835][ T31] sys_info+0x141/0x190 [ 1774.264859][ T31] watchdog+0xd25/0x1050 [ 1774.264889][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.264912][ T31] ? __kthread_parkme+0x18c/0x230 [ 1774.264940][ T31] ? kthread+0x13a/0x450 [ 1774.264955][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.264975][ T31] kthread+0x370/0x450 [ 1774.264990][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.265018][ T31] ret_from_fork+0x754/0xd80 [ 1774.265037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.265057][ T31] ? __switch_to+0x7b4/0x1120 [ 1774.265078][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.265102][ T31] ret_from_fork_asm+0x1a/0x30 [ 1774.265132][ T31] [ 1774.265138][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1774.390657][ C1] NMI backtrace for cpu 1 [ 1774.390679][ C1] CPU: 1 UID: 0 PID: 16361 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.390699][ C1] Tainted: [L]=SOFTLOCKUP [ 1774.390704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1774.390713][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1774.390740][ C1] RIP: 0010:__rcu_read_lock+0x29/0x70 [ 1774.390757][ C1] Code: 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 53 65 48 8b 1d 71 c7 1f 12 48 8d bb 84 04 00 00 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 2c 8b 83 84 04 00 [ 1774.390771][ C1] RSP: 0018:ffffc9001c9bf948 EFLAGS: 00000807 [ 1774.390782][ C1] RAX: dffffc0000000000 RBX: ffff888032720000 RCX: 0000000000000000 [ 1774.390791][ C1] RDX: 0000000000000000 RSI: ffff88801e6aa480 RDI: ffff888032720484 [ 1774.390800][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff21b25e2 [ 1774.390808][ C1] R10: ffffffff90d92f17 R11: 0000000000000008 R12: ffff88801e6aa480 [ 1774.390817][ C1] R13: ffffffff8e10abe0 R14: ffff88801e6aa480 R15: ffff8880b853b140 [ 1774.390827][ C1] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 1774.390841][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1774.390850][ C1] CR2: 000055ea9a585168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1774.390860][ C1] Call Trace: [ 1774.390866][ C1] [ 1774.390872][ C1] __update_idle_core+0x48/0x650 [ 1774.390892][ C1] set_next_task_idle+0x5dc/0xb80 [ 1774.390910][ C1] __schedule+0x1715/0x60e0 [ 1774.390930][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1774.390955][ C1] ? __pfx___schedule+0x10/0x10 [ 1774.390969][ C1] ? find_held_lock+0x2b/0x80 [ 1774.390985][ C1] ? schedule+0x2bf/0x390 [ 1774.391001][ C1] schedule+0xdd/0x390 [ 1774.391015][ C1] toggle_allocation_gate+0x218/0x2d0 [ 1774.391032][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1774.391050][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1774.391070][ C1] ? rcu_is_watching+0x12/0xc0 [ 1774.391086][ C1] process_one_work+0x9d7/0x1920 [ 1774.391105][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1774.391122][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1774.391140][ C1] worker_thread+0x5da/0xe40 [ 1774.391156][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1774.391170][ C1] ? kthread+0x13a/0x450 [ 1774.391181][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1774.391193][ C1] kthread+0x370/0x450 [ 1774.391204][ C1] ? __pfx_kthread+0x10/0x10 [ 1774.391224][ C1] ret_from_fork+0x754/0xd80 [ 1774.391238][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.391252][ C1] ? __switch_to+0x7b4/0x1120 [ 1774.391267][ C1] ? __pfx_kthread+0x10/0x10 [ 1774.391286][ C1] ret_from_fork_asm+0x1a/0x30 [ 1774.391307][ C1] [ 1774.660850][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1774.667704][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.678372][ T31] Tainted: [L]=SOFTLOCKUP [ 1774.682685][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1774.692714][ T31] Call Trace: [ 1774.695978][ T31] [ 1774.698887][ T31] dump_stack_lvl+0x100/0x190 [ 1774.703554][ T31] vpanic+0x552/0x970 [ 1774.707530][ T31] ? __pfx_vpanic+0x10/0x10 [ 1774.712028][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1774.718195][ T31] panic+0xd1/0xe0 [ 1774.721902][ T31] ? __pfx_panic+0x10/0x10 [ 1774.726313][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1774.732453][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1774.738589][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1774.744720][ T31] ? watchdog.cold+0x198/0x1ca [ 1774.749462][ T31] ? watchdog+0xd35/0x1050 [ 1774.753856][ T31] watchdog.cold+0x1a9/0x1ca [ 1774.758438][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.763126][ T31] ? __kthread_parkme+0x18c/0x230 [ 1774.768172][ T31] ? kthread+0x13a/0x450 [ 1774.772407][ T31] ? __pfx_watchdog+0x10/0x10 [ 1774.777069][ T31] kthread+0x370/0x450 [ 1774.781122][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.785707][ T31] ret_from_fork+0x754/0xd80 [ 1774.790280][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.795375][ T31] ? __switch_to+0x7b4/0x1120 [ 1774.800037][ T31] ? __pfx_kthread+0x10/0x10 [ 1774.804617][ T31] ret_from_fork_asm+0x1a/0x30 [ 1774.809374][ T31] [ 1774.812701][ T31] Kernel Offset: disabled [ 1774.817026][ T31] Rebooting in 86400 seconds..