last executing test programs: 21m29.374564733s ago: executing program 2 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, &(0x7f0000000040)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) shmat(r2, &(0x7f0000ff8000/0x5000)=nil, 0x7000) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x9, 0x0) r3 = shmat(r2, &(0x7f0000969000/0x1000)=nil, 0x0) shmdt(r3) socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_RMID(r2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 21m28.252646468s ago: executing program 2 (id=694): bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x202d) 21m27.354897057s ago: executing program 2 (id=698): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) sendmsg$can_j1939(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xee) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 21m26.307068781s ago: executing program 2 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x17, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x511}]}, 0x28}}, 0x0) 21m25.889825749s ago: executing program 2 (id=704): syz_open_dev$loop(&(0x7f0000000140), 0x1000007, 0xa382) mkdir(&(0x7f00000020c0)='./file0\x00', 0x40) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000040)="2d00a479fc90", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@dyn}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x36a0}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffbff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x0, 0x1, 0xc, 0x0, 0x8, 0xfffffffffffffff0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000680)='GPL\x00', 0x9, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001700)=[r1, r2, r1], &(0x7f0000001740)=[{0x0, 0x5, 0xe, 0x7}, {0x6, 0x3}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0xa602, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001840)=@generic={&(0x7f0000000440)='./file0\x00', r4}, 0x18) r5 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) tkill(r5, 0x12) ptrace(0x4207, r5) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r7, &(0x7f0000000bc0)=""/194, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) 21m25.190174611s ago: executing program 2 (id=711): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x1, 0x1, {0x7, 0x23, 0x107, 0x1}}) (fail_nth: 1) 21m19.463482513s ago: executing program 3 (id=737): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="a92e4506a797745b7584ebadba", @ANYRES16=0x0, @ANYBLOB="7697a81a00f202aee6d30e2af70358009fcb91ede8efc8b83b0fb71a508794e425370d95e82f4b48d91efbe5ffe651974a2f41cbc40f24f1da6785e411e80da40456e6fc4d9d10b5c1f1cf5bcfc00f9e8c16b586649ba6183911ef54cf8ec4ede6b2d7589023e1c2b25c458b6c8162cb9a9ea10c33208ea4860e510766e73de11e8ad68142f1ba46bf9ee61c3fda9ec4285ea2419fd2f0d751efc27b0f4694f3da127355fa25aa8c63479b5102b3f50d0b21e6561f4fd79e6f43e9f7d95186cdab34834d69edb4a270e057bdca1e6a2573e40e7a7ce400d4caf9448ee6450bb4159866", @ANYRES32=r2, @ANYBLOB="00020800da2c8f80"], 0x20}, 0x1, 0xf000, 0x0, 0x200008c1}, 0x30040) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r4, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8040) r5 = accept(r2, 0x0, &(0x7f00000000c0)) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00') r8 = syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08003e17063801000000000073797a310022a436"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x24004855) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) 21m17.168852832s ago: executing program 3 (id=742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0xf5) 21m16.878007353s ago: executing program 3 (id=745): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x7c80, 0x0) 21m16.397820059s ago: executing program 3 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/54, 0x3be}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x3, 0x40}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) 21m15.649962147s ago: executing program 3 (id=748): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000183b8c20b13ebf6ebdd80b83106d5e7d67989f5c134200165801020301090212283d853f8be27b7bf2b9000100000000090e00000000000000"], 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000004000000050000009f0c0000", @ANYBLOB="0e0000000000a12d62f9943eacb2000000000000a23d"], 0x50) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\b\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_procfs(r2, &(0x7f0000000100)='oom_score_adj\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x881, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) write$sequencer(r0, &(0x7f0000000040)=[@t={0x81, 0x3, 0x0, 0x9}], 0x8) 21m15.393921667s ago: executing program 3 (id=751): r0 = fsopen(&(0x7f0000000280)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0x2, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0x2, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 21m15.225037279s ago: executing program 32 (id=751): r0 = fsopen(&(0x7f0000000280)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0x2, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x1, 0x4}, {0x2, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0x2, 0xe, 0x3, 0x6, 0x5, 0x0, 0x0, 0x615, 0x3, 0x4, 0x3e, 0xa, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 21m10.022139096s ago: executing program 33 (id=711): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x2, 0x1, 0x1, {0x7, 0x23, 0x107, 0x1}}) (fail_nth: 1) 7m28.952220859s ago: executing program 6 (id=3884): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x170c43) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x170c43) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) (async) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503002c00000000002f90780000000000000000000088be0018907804000021000000000800000000000000"], 0x0) socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x2c00, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000000)={0x80000000, 0x1}) bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="eb8f000000000000000007"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r9, &(0x7f0000000040), 0x8) 7m27.993852201s ago: executing program 6 (id=3888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x3, @vbi={0x1, 0x9, 0x5, 0x35315258, [0x92, 0x1], [0xfffffffa, 0xb], 0x1}}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) fcntl$notify(r6, 0x402, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x112, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x6) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r2, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) 7m27.05507568s ago: executing program 6 (id=3891): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$caif_stream(0x25, 0x1, 0x5) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000b00)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0x0, 0x3, {0x5, 0xe, 0x0, {0x1, 0x5, 0x28, 0x0, 0x2, 0x6, 0x1ff, 0x200, 0x917b, 0x1000, 0x3, 0x0, 0x0, 0x8, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000140)=@netrom) 7m25.631612078s ago: executing program 6 (id=3894): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x80800) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080)=0x1, 0x4) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x800, 0x2, 0x6, 0xf, 0xff}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f00000000c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m20.586965604s ago: executing program 6 (id=3913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x3, @vbi={0x1, 0x9, 0x5, 0x35315258, [0x92, 0x1], [0xfffffffa, 0xb], 0x1}}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) fcntl$notify(r6, 0x402, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x112, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x6) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r2, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) 7m19.117789188s ago: executing program 6 (id=3919): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0), 0x0, 0x24000084) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000900)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x8, 0x5, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) 7m18.952811907s ago: executing program 34 (id=3919): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0), 0x0, 0x24000084) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000900)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x8, 0x5, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) 2m55.861809519s ago: executing program 0 (id=4905): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x32, 0x0, @fd_index=0x5, 0x2, 0x0, 0x7837, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f944ff582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000580)="781fd1169bc02decbd902949dd5be7d0f3536e", 0x13}], 0x1) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 2m54.08560866s ago: executing program 0 (id=4909): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10001, 0x40008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m53.149771617s ago: executing program 7 (id=4913): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x1ff, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c7ef3d6c1ca43f80026d1a8554e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xc]}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x0) rename(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000001200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m52.705004197s ago: executing program 0 (id=4914): r0 = socket$inet6(0xa, 0x3, 0x26) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}]) io_destroy(r2) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x21318000, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x4e1f, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x1ff, 0x2fa3840, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x3, 0x4, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4a6, &(0x7f0000000000)={0x0, 0x8a36, 0x80, 0x2, 0x240}, &(0x7f0000000280), &(0x7f0000000100)=0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) (async) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x101400, 0x158) (async) r9 = io_uring_setup(0x1de0, &(0x7f0000001040)={0x0, 0x0, 0x1, 0x0, 0x17}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x1b, 0x20000048, r10) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x58, 0x0, r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x1000, 0x0, {0x0, r10}}) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2m52.410675506s ago: executing program 0 (id=4916): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresuid(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2b5) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x101}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x10000000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x7c62b043, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xce, 0xa, 0xb5, 0x8, 0x2201, 0x12c, 0x3fe0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0x61, 0x72, 0xd1, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x0, 0x0, 0x2}}]}}]}}]}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)) read(r6, &(0x7f0000000180)=""/245, 0xf5) sendto$inet6(r2, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 2m51.346321717s ago: executing program 5 (id=4920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000d00000a68000000060a0b040000000000000000020000010900010073797a30000000000900020073797a32000000003c000480380001800e000100627974656f7264657200000024000280476af0674fce2af25a33f85d08000540000000a30800014000000016080004400000004d0800024000000000140000001100010000000000000000000000000a92de7d02"], 0x90}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m51.242907622s ago: executing program 5 (id=4921): syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x1d, 0xa}, @mptcp=@generic={0x1, 0xe, "d54160000463000000000000"}, @mptcp=@capable={0x1e, 0xc}, @window={0x3, 0x3}, @generic={0x0, 0x2}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "41e35911e54143e31e41c0b652d0feea"}, @fastopen={0x22, 0x8, "40aeb1edd930"}]}}}}}}}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001800), 0x1005, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0xd, 0x1000000, 0x3001, 0xfffffffe, 0x3, 0x0, 0xfffffffc, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_open_dev$dri(0x0, 0x1, 0x20001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x74, 0x0, 0x3}]}}, {0x1, 0x4e20, 0x8}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) write(r1, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c04000f00", 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') fchown(r9, 0x0, 0xee01) 2m50.455931446s ago: executing program 0 (id=4922): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10040, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x4, 0xffff, 0x1000, 0x1, 0x1, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000003d0007010000000005000000017c00000400fc800c00018006000600800a00000c000280080018000b7632fc080009"], 0x9c}}, 0x4010) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000380)=[{r5, 0xc0}], 0x1, 0x0, 0x0, 0x0) iopl(0xc) socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@nested={0x8, 0xcc, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r9 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440)=r8, 0x1) 2m50.257463183s ago: executing program 5 (id=4923): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fanotify_init(0x0, 0x80000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffe23dfb9c6ac70800450000300000000000019078ac1e0001ac1414aa04009078030000004500000000000020a94f71730000000000ffffffffac1414bb72b32e06243091eaa9262bfba63bfb28da4f72235caadf5beae8654b6945892eee05e7f88b6b4ca4f6c1dc48d7f9f48a8d8da3113fcb4be563af2600a54906bceff4567c6024b494cb73eee5d83f40bf3c1912cfb9d9f7880a09fefaa98df9cef31ad5b6fba9e780f2bd7e050e7c32"], 0x0) recvmmsg(r0, &(0x7f0000004440), 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000240)={0x8, 0x0, [0x5, 0x14c720, 0xb, 0x6], 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{0x0, 0xfffffffc}, {}, {}, {}, {0x6, 0x800}, {}, {}, {0x0, 0x41}], 0x0, 0x4}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe0000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d50000000000000011e965ce190abab90000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f36ee024809988ac57031c20de267fb61845768d979b828107f913ce31b800b949589b3ce5162787b0bbc7a26c871ae46e35ed58494fbac2ecc20c30231196bb38"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 2m49.948119194s ago: executing program 7 (id=4925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0xfff}) ioctl(r0, 0x8b22, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) copy_file_range(r1, 0x0, r1, &(0x7f0000000040)=0xfffffffffffffffd, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) ioctl$mixer_OSS_GETVERSION(r3, 0x80044d76, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008c00)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) 2m49.195323261s ago: executing program 0 (id=4926): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000feffffff0000fd00", @ANYRES32=0x0, @ANYBLOB="9b150100000800001c0012800b0001006d616373656300000c000280050003000c00000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r7) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2m48.253600938s ago: executing program 7 (id=4927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) exit(0x1f919) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f00000005c0)="5af6cc864eb6bd732ac2be4d27c54fc68292745574cac98347fdcf1a9d60d1368435c9e475e18c636a937d35b2d284980359e79a19a97f2349e76274d60011336b03146f0600000000000000925408b2027c632c5bab8ba37f7385ecf6232d4c1b247b60ac7f81d95824602f78760903bc67ccffe5a45aa3e2d08f40687b2fb335b4ee7c521935e60e0155cad901b4b28f8772c3dcfda3d513b898b59d9548011a200a91ffa1622860b5c90dfe56f89204bce6e63954801f13728ccf48742539a0c6a9ae0e56c3b056b2fc25000000000000000000000000000000ab91831ca8343a2f4d784461b48c844d044bb46834a481b490", 0xf4) sendfile(r2, r3, &(0x7f0000000000), 0xfffb) fcntl$addseals(r3, 0x409, 0x8) write(r3, 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000200)={0x2}) write$sndseq(r1, &(0x7f0000000000), 0x0) 2m48.151649328s ago: executing program 5 (id=4929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000007000390228bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c0001800800010040000900"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000005e94fa43000000181100009f0305ed4aa37ea753f0bb52e4f66d70ef05d254b010ee88a2e91ff75169c3dc2d201e91e1fc530000f98e0d77"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x111}) mkdirat(r5, &(0x7f0000000280)='./file1\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000240)=0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000fee000/0x12000)=nil, 0x12000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, 0x4000, 0x3}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100"], 0x48}, 0x1, 0x0, 0x0, 0x20010}, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000080)=0x1110c00, 0x4) 2m47.698614304s ago: executing program 5 (id=4933): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c0000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000003c0012800b000100697036746e6c00002c00028014000200fc0100000000000000000000000000001400030008"], 0x5c}}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffc]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0xffffffffffffff33) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0xff32, 0x0, 0x0, &(0x7f0000000000)=""/10, 0x17}}], 0x400000000000078, 0x42, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRES32=r7, @ANYRESDEC=r4, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) fsopen(0x0, 0x80ffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 2m47.191104628s ago: executing program 7 (id=4934): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10001, 0x40008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m45.953947846s ago: executing program 7 (id=4935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000d00000a68000000060a0b040000000000000000020000010900010073797a30000000000900020073797a32000000003c000480380001800e000100627974656f"], 0x90}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m44.522282233s ago: executing program 7 (id=4938): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10001, 0x40008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m44.499426005s ago: executing program 5 (id=4939): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fanotify_init(0x0, 0x80000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffe23dfb9c6ac70800450000300000000000019078ac1e0001ac1414aa04009078030000004500000000000020a94f71730000000000ffffffffac1414bb72b32e06243091eaa9262bfba63bfb28da4f72235caadf5beae8654b6945892eee05e7f88b6b4ca4f6c1dc48d7f9f48a8d8da3113fcb4be563af2600a54906bceff4567c6024b494cb73eee5d83f40bf3c1912cfb9d9f7880a09fefaa98df9cef31ad5b6fba9e780f2bd7e050e7c32"], 0x0) recvmmsg(r0, &(0x7f0000004440), 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000240)={0x8, 0x0, [0x5, 0x14c720, 0xb, 0x6], 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{0x0, 0xfffffffc}, {}, {}, {}, {0x6, 0x800}, {}, {}, {0x0, 0x41}], 0x0, 0x4}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe0000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d50000000000000011e965ce190abab9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f36ee024809988ac57031c20de267fb61845768d979b828107f913ce31b800b949589b3ce5162787b0bbc7a26c871ae46e35ed58494fbac2ecc20c30231196bb38"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 2m40.110717232s ago: executing program 1 (id=4944): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) setpriority(0x2, 0xff, 0x0) getsockopt$inet_int(r0, 0x0, 0x5, 0x0, &(0x7f0000000580)) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x18}, 0xc000) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000480)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r10, 0x89f2, &(0x7f0000000000)) (async, rerun: 32) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000801) (rerun: 32) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb4600000}) (async) r11 = msgget$private(0x0, 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) (async) msgctl$IPC_STAT(r11, 0x2, 0x0) (async) mremap(&(0x7f0000b86000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00004c7000/0x3000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 2m40.021770132s ago: executing program 1 (id=4945): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x1ff, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c7ef3d6c1ca43f80026d1a8554e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xc]}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x0) rename(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000001200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m37.741181757s ago: executing program 1 (id=4948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000d00000a68000000060a0b040000000000000000020000010900010073797a30000000000900020073797a32000000003c000480380001800e000100627974656f7264657200000024000280476af0674fce2af25a33f85d08000540000000a3080001400000001608"], 0x90}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m37.632173615s ago: executing program 1 (id=4949): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x800000800007, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r5, 0x4b71, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x100000, 0x0, 0x32315842, 0x0, 0x0, [{}, {0x0, 0x200}, {}, {0x0, 0x401}, {}, {0xfff}, {0x6}]}}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = syz_open_procfs(0x0, 0x0) bind$pptp(r6, &(0x7f0000000300)={0x18, 0x2, {0xfffe, @rand_addr=0x64010100}}, 0x1e) madvise(&(0x7f00006c5000/0x4000)=nil, 0x4000, 0xb) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x2fc, 0x65, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0xffff}, {0xfff3, 0xfff1}, {0x8, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28c, 0x2, [@TCA_CGROUP_EMATCHES={0x278, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x274, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0xe26, 0x0, 0x40}, "9073edcbab0eaddf3227f4653df2b141424a3e3481f14b430fa32002837fc3ce01d9ba8380f2ed"}}, @TCF_EM_CONTAINER={0xd8, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x15}, "e9f943115d8eb244b6a9afde345eb02e74032b8405b9ae17bd65834b83bf3e1b615edcf479dab53b1c5f69a30a6912178a477400a69533e12e09da74c656d6ae47402a4a604f215c5c3c8533b1bd82be7a176e4eaa0dafd6407a99cc3612fffe76e81684b3a184ccbdeed7a1b120e09cd44e3adf51a35835597544efc846a03f71f26193ea7cd2c2fa2c3e68b3e19a58276aa70aa55bd43402b40d5316ffbef766d5d71583b3bdae2bd54a4980c9be0ea8c1c81740f27145dbf86f19b1f2d705fc02bb75e2d4edae0b"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xff, 0x1, 0x5}, {0xc54e, 0x7ff, 0x800, 0x0, 0x5, 0x1, 0x2}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x7}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="8644f453ff7753d68b12"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5}, {0x7929, 0x8, 0x2}}}]}}, @TCF_EM_IPT={0x11c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0xf0, 0x5, "4c954bb168f10e67dd05d5eaf2b19bfba152b2f1465a4d8a0af176bb787eca9aca5e80c9506bed5abd601197c8a2ca672ca8fbe2a399c02a08e3a070478f0f3f08c3dca8667af7e6ada0955492ac794b3f2b37a314e69005431e732aa69d5a1c291e29d008f98ec8b3d5ae34610f183d3fd41fd8515b5d05b1b43af00a7eb894286c414dd5ca292943f1cd82101e0db218f05940fcd08229d5f1c397e62f330a22c0443b29b23cff2c6cd34e5c14a914078be88c2042c33ea1a442dc5f057882be03dea69213b2c7811655031fe0a1ed36328bcf91b51daac30a60918d5a091481d4546bd2e70396609254ce"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x294}]}]}}, @TCA_RATE={0x6, 0x5, {0x99, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0xfc7}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e22}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0xf8}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20008011}, 0x1) r8 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000080)={0x81, 0xa, 0x3, 0x0, 0xb}) 2m36.678020689s ago: executing program 1 (id=4952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) ppoll(&(0x7f0000000100), 0x2000007f, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04231d00c90001", @ANYRESOCT=0x0, @ANYBLOB="7609dda6ccd65c13fb521fac4424f2bfce9b9ddb13b7efbe50dc4f788830bdd364819da61c89755e6a9e71e17093ce6a495de9bf9a2c44c47781db66968c44b1ba3dade5a6eccb64a22afc39584c41ffde81170f69e709293a0da97fe18d3fc314b690ffaa1ab6a922344bed987e19a594fd4b0b6634084b1d13cc46f436a88570703fc6f7e32cecae876f8816dbd7f7eae55a1503da62986d0b53bac6fbaf0eaf46e25157517d570821748247a3808b4af1906a66f9024209553b5f02eb3af2cff5ad37c444dde8842084475a8fac54fa725a"], 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3e, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) wait4(r6, &(0x7f0000000040), 0x8, &(0x7f0000000200)) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xda) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0x753abf2075600333) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000380)={0x4200000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m35.175076901s ago: executing program 1 (id=4956): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)=@mmap={0x93, 0x3, 0x4, 0x100, 0x5, {}, {0x4, 0x0, 0x83, 0xf9, 0x12, 0xa, "4986c3fd"}, 0xff, 0x1, {}, 0x8}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x2e6a4e048c933a5b, r1, {0x7, 0x1f, 0x0, 0x46ea380, 0x1, 0x0, 0x0, 0x5b5c, 0x0, 0x0, 0x1, 0x40}}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44080}, 0x4004014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) open(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', 0x400141042, 0x10) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x24}}, 0x50) fcntl$setpipe(r2, 0x407, 0x6) 2m28.92037604s ago: executing program 35 (id=4938): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x10001, 0x40008000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m28.876224005s ago: executing program 36 (id=4939): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) fanotify_init(0x0, 0x80000) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000900)=0x400, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffe23dfb9c6ac70800450000300000000000019078ac1e0001ac1414aa04009078030000004500000000000020a94f71730000000000ffffffffac1414bb72b32e06243091eaa9262bfba63bfb28da4f72235caadf5beae8654b6945892eee05e7f88b6b4ca4f6c1dc48d7f9f48a8d8da3113fcb4be563af2600a54906bceff4567c6024b494cb73eee5d83f40bf3c1912cfb9d9f7880a09fefaa98df9cef31ad5b6fba9e780f2bd7e050e7c32"], 0x0) recvmmsg(r0, &(0x7f0000004440), 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000240)={0x8, 0x0, [0x5, 0x14c720, 0xb, 0x6], 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{0x0, 0xfffffffc}, {}, {}, {}, {0x6, 0x800}, {}, {}, {0x0, 0x41}], 0x0, 0x4}}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe0000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d50000000000000011e965ce190abab9000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f36ee024809988ac57031c20de267fb61845768d979b828107f913ce31b800b949589b3ce5162787b0bbc7a26c871ae46e35ed58494fbac2ecc20c30231196bb38"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)="13146000000370", 0x7}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) 2m20.073713104s ago: executing program 37 (id=4956): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)=@mmap={0x93, 0x3, 0x4, 0x100, 0x5, {}, {0x4, 0x0, 0x83, 0xf9, 0x12, 0xa, "4986c3fd"}, 0xff, 0x1, {}, 0x8}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x2e6a4e048c933a5b, r1, {0x7, 0x1f, 0x0, 0x46ea380, 0x1, 0x0, 0x0, 0x5b5c, 0x0, 0x0, 0x1, 0x40}}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44080}, 0x4004014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) open(&(0x7f0000000240)='./file0/file0/file0/file0/file0\x00', 0x400141042, 0x10) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x24}}, 0x50) fcntl$setpipe(r2, 0x407, 0x6) 1.904656643s ago: executing program 4 (id=5323): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r2, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x2ff) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x2, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772fd0e17c9b9101644f8c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) 1.860523695s ago: executing program 4 (id=5324): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r0, 0x409, 0x3f) ftruncate(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r2, r1, 0x0, 0x7ffffffd) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r3, 0x400, 0x0) close(r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mount$9p_fd(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440), 0x1000000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@dfltuid}, {@posixacl}, {@access_client}, {@access_client}, {@version_9p2000}], [{@subj_type={'subj_type', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@fsname}, {@dont_measure}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@permit_directio}, {@fsname}]}}) mount$overlay(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x1, &(0x7f0000001700)={[{@xino_on}, {@xino_auto}, {@userxattr}, {@uuid_null}, {@xino_on}, {@nfs_export_on}, {@workdir={'workdir', 0x3d, './file0'}}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@measure}, {@fowner_lt={'fowner<', r4}}, {@dont_hash}]}) sendmsg$kcm(r2, &(0x7f0000001640)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x7, @remote, 0x9}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000140)="9add981e39ec68eb8433cfe9c12d4021994e20a3c0e911af3c10bcf21cf4341cadd7ef2d16c5a4c3e7e5c3ca16cc0d9321f3e2958b7581acef7abb18acd1be61bfc1bc1bee0a9f73a18e6d98f6b89c92d047dee969313d12e6aba9df3b14d31a1355075412f96027554f327f8ed8ff9fedec59d70abf379135a5c2582dc04a571a0ca980968d34d8cd47425308a2212960ca5e626d760c786673c96085752d710e4827310076a38b324c6c", 0xab}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="dccaaa78d65837aa5c45da33bd21a3a5619026d1768706cc0b231525d7525bcd962450ef0d0d3339071e92df37095a8054fb0a10b3349e321bfa1f9abd3e3bbbbb5e61d9c4c48ccf8d5682c84911d773fb9f5b78b29b513703fe2ecd52146c90b0004b502bad04805065346d237e2979a5b6879b0272ede2bbc7d1c208de85c8eb14f3cd19419992c101f9112461ba76a75a450ca954c7a691d5a7b28c517be5258c12318619b103350527d8766c665a9af6da44eaabee", 0xb7}, {&(0x7f0000000000)="5e30783f1fa69cf81936d5db483a7b2e3c7b0de99a474c5e7e1a", 0x1a}, {&(0x7f00000003c0)="fe5955b940337c4e77de6ac29ff84c990fc57accf475fc9b5eff6862e6ffb716de6d22b9e9081a3452d695086d395d7234a156da04101aa9eb8af7dd00802b6a300b849a29653cb07ba5007d122a4d92c6039c59bbe830801c17ee3e5c998ea3c06edfecd9218a11fda27d5bd46f15a1153e936092631dc4b1e82d6daa00f6c503721989cf3453a3d4b4c7e0cc2f3643464b386451a2b4cac649a5400c567d7c3e9b4d469acc1a3ae7d979c4b057be55bac30ebbee91ed51cc68e6b14b438436fcb3a676bb83daba7e0331d2d7", 0xcd}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="6df438b2c5097fb43d13b7011fe494397e368ea38366f1c9c85c4ae6b9b319cd", 0x20}, {&(0x7f0000001500)="6618d01b8649370f3d787f16f509136d5e5d705c9d307aca6400f72b0af709eca0c303d1b57638f74b7659e48fe0270d944226fe24e062958f21b0ce9161d56bf4f18ef3f4a929ee1d539465ee63bcd8917435f8cc521169da64458f113e617eb44745e0710e22c109b1f48c80a9d8030ab2f30b7a6595f6149aa4e7dde0066c6cf3f8e949be1b688525e7fce9afd2f3963e974c822b4fb56816d27fef8b0e8c", 0xa0}], 0x8}, 0x4008040) 1.817148315s ago: executing program 4 (id=5325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66b, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x6999, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffff, 0x3a7}, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x2800000002}, 0xc) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={0x0, r6}, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x18, 0x2, 0x0) close(r7) 1.772185374s ago: executing program 4 (id=5326): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x33]}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x20000243, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$FUSE(r4, &(0x7f0000004800)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f000000370100000e000000000000003794000000000000", @ANYRES32=r3, @ANYBLOB="010062de19e52ad45c05e3f45327"], 0x1f) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) getrlimit(0x7, &(0x7f00000000c0)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r7) r8 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x100201, 0x0, 0x2, 0x7f, "01a00000000000000034dbb39fe6083a", 0x0, 0x0, 0x0, 0x0, 0xfd}) 883.663281ms ago: executing program 4 (id=5327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x100c000, 0x83e, 0x0, 0x3}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x1c, 0x1d, 0x21, 0x0, 0x0, {0x1d}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) socket(0xa, 0x3, 0x3a) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 0s ago: executing program 4 (id=5328): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1de0, &(0x7f0000000a00)={0x0, 0x7068, 0x400}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000003e, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): power cycle [ 1157.440288][T15585] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1157.464072][T15585] usb 2-1: device descriptor read/8, error -71 [ 1157.603303][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4115'. [ 1157.612801][T21100] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4115'. [ 1157.905288][T15585] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1157.954819][T15585] usb 2-1: device descriptor read/8, error -71 [ 1157.983692][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1158.036320][T21106] netlink: 'syz.0.4116': attribute type 1 has an invalid length. [ 1158.055807][T21106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.061649][ T5831] usb 5-1: USB disconnect, device number 119 [ 1158.073833][T15585] usb usb2-port1: unable to enumerate USB device [ 1158.150550][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 1158.175557][ T25] usb 8-1: config 64 has an invalid interface number: 19 but max is 0 [ 1158.204453][ T25] usb 8-1: config 64 has no interface number 0 [ 1158.211219][ T25] usb 8-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1158.229192][ T25] usb 8-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1158.264953][T21109] 9pnet_fd: Insufficient options for proto=fd [ 1158.289909][ T25] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1158.329518][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.355712][T21114] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1158.395008][ T25] usb 8-1: probing VID:PID(2201:012C) [ 1158.406968][T21114] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1158.413308][ T25] usb 8-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1158.434366][ T25] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1158.474540][T21114] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1158.492222][ T25] vub300 8-1:64.19: probe with driver vub300 failed with error -22 [ 1158.741099][ T5831] usb 8-1: USB disconnect, device number 7 [ 1159.140791][T21129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.253796][T21132] fuse: Bad value for 'fd' [ 1160.202211][T21130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.269248][T21159] tmpfs: Bad value for 'mpol' [ 1162.147157][T21172] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1162.714360][T21172] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1163.176649][T21172] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1163.311943][T21185] fuse: Bad value for 'fd' [ 1163.433471][ T5901] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1163.629044][T15591] IPVS: starting estimator thread 0... [ 1163.663509][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 1163.730249][ T5901] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 1163.755514][T21196] IPVS: using max 33 ests per chain, 79200 per kthread [ 1163.766717][T21194] »»»»»» speed is unknown, defaulting to 1000 [ 1163.772809][ T5901] usb 5-1: config 64 has no interface number 0 [ 1163.789047][ T5901] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1163.810888][ T5901] usb 5-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1163.836008][ T5901] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1163.863633][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.955158][ T5901] usb 5-1: probing VID:PID(2201:012C) [ 1163.971085][ T5901] usb 5-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1163.992493][ T5901] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1164.012797][ T5901] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 1164.179699][ T5831] usb 5-1: USB disconnect, device number 120 [ 1164.330686][T21194] »»»»»» speed is unknown, defaulting to 1000 [ 1164.930881][ T29] audit: type=1326 audit(1741154758.764:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21216 comm="syz.7.4143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x0 [ 1165.137067][T21229] fuse: Bad value for 'fd' [ 1166.162050][ T5907] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1166.215739][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4154'. [ 1166.325084][ T5907] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1166.347246][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.373102][ T5907] usb 1-1: Product: syz [ 1166.423451][ T5907] usb 1-1: Manufacturer: syz [ 1166.432828][ T5907] usb 1-1: SerialNumber: syz [ 1166.472918][ T5907] usb 1-1: config 0 descriptor?? [ 1166.683463][ T5901] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1166.873793][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 1166.886279][ T5901] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 1166.903438][ T5901] usb 2-1: config 64 has no interface number 0 [ 1166.913461][ T5901] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1166.923286][ T5901] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1166.953397][ T5901] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1166.962425][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.969597][ T5907] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1166.986742][ T5907] usb 1-1: Firmware version (0.0) predates our first public release. [ 1166.997215][ T5901] usb 2-1: probing VID:PID(2201:012C) [ 1167.003320][ T5901] usb 2-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1167.005144][ T5907] usb 1-1: Please update to version 0.2 or newer [ 1167.020828][ T5901] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1167.064560][ T5901] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 1167.179867][T21237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.190653][T21237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.228997][ T5901] usb 2-1: USB disconnect, device number 113 [ 1167.243731][ T5907] usb 1-1: USB disconnect, device number 59 [ 1167.660230][T21276] bond0: entered promiscuous mode [ 1167.665365][T21276] bond_slave_0: entered promiscuous mode [ 1167.671501][T21276] bond_slave_1: entered promiscuous mode [ 1169.717884][T21308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4170'. [ 1169.953483][T15591] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1170.113477][T15591] usb 1-1: Using ep0 maxpacket: 8 [ 1170.124781][T15591] usb 1-1: config 64 has an invalid interface number: 19 but max is 0 [ 1170.133070][T15591] usb 1-1: config 64 has no interface number 0 [ 1170.154427][T15591] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1170.167520][T15591] usb 1-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1170.178242][T15591] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1170.213169][T15591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.221559][ T5831] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 1170.270437][T15591] usb 1-1: probing VID:PID(2201:012C) [ 1170.298430][T15591] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1170.331823][T15591] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1170.354350][ T5907] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1171.704457][T15591] vub300 1-1:64.19: probe with driver vub300 failed with error -22 [ 1171.715993][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 1171.732354][ T5907] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1171.733085][T15591] usb 1-1: USB disconnect, device number 60 [ 1172.723155][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.739377][ T5907] usb 2-1: config 0 descriptor?? [ 1173.634630][T21333] syz.5.4172 (21333) used greatest stack depth: 20272 bytes left [ 1173.673762][ T5907] usb 2-1: can't set config #0, error -71 [ 1173.692399][ T5907] usb 2-1: USB disconnect, device number 114 [ 1174.550147][T21348] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1174.558566][T21348] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1174.581798][T21348] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1175.315305][ T29] audit: type=1400 audit(1741154769.144:757): avc: denied { write } for pid=21361 comm="syz.7.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1177.098033][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.223620][ T5901] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1178.656872][ T29] audit: type=1400 audit(1741154772.494:758): avc: denied { write } for pid=21411 comm="syz.7.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1178.676160][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.687184][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 1178.718410][ T5901] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 1178.738207][ T5901] usb 2-1: config 64 has no interface number 0 [ 1178.753647][ T5901] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1178.771212][ T5901] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1178.783454][ T5901] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1178.802650][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.819523][ T5901] usb 2-1: probing VID:PID(2201:012C) [ 1178.834063][ T5901] usb 2-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1178.840574][ T5901] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1178.864079][ T5901] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 1179.030372][ T5907] usb 2-1: USB disconnect, device number 115 [ 1179.270604][T21424] random: crng reseeded on system resumption [ 1179.765419][T21425] »»»»»» speed is unknown, defaulting to 1000 [ 1179.773673][ T29] audit: type=1400 audit(1741154773.104:759): avc: denied { write } for pid=21419 comm="syz.7.4196" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1179.817116][T21425] »»»»»» speed is unknown, defaulting to 1000 [ 1181.383585][ T5874] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1181.417972][ T5901] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1181.554625][ T5874] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1181.563923][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.571974][ T5874] usb 2-1: Product: syz [ 1181.576839][ T5874] usb 2-1: Manufacturer: syz [ 1181.581751][ T5874] usb 2-1: SerialNumber: syz [ 1181.597030][ T5874] usb 2-1: config 0 descriptor?? [ 1181.636518][ T5901] usb 8-1: Using ep0 maxpacket: 8 [ 1181.787931][ T5901] usb 8-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1181.797323][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1181.957764][ T5901] usb 8-1: Product: syz [ 1181.964073][ T5901] usb 8-1: Manufacturer: syz [ 1181.970781][ T5901] usb 8-1: SerialNumber: syz [ 1182.049204][ T5901] usb 8-1: config 0 descriptor?? [ 1182.257239][ T5874] usb 2-1: Firmware version (0.0) predates our first public release. [ 1182.261193][T21444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.282548][ T5874] usb 2-1: Please update to version 0.2 or newer [ 1182.290662][T21444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.383704][ T5874] usb 2-1: USB disconnect, device number 116 [ 1183.973462][ T5874] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1184.176412][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 1184.190973][ T5874] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1184.218638][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.229056][ T5874] usb 1-1: config 0 descriptor?? [ 1184.342716][T16093] usb 8-1: USB disconnect, device number 8 [ 1187.244609][ T5874] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1187.277595][ T5874] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1187.615050][ T5874] usb 1-1: USB disconnect, device number 61 [ 1187.787890][ T29] audit: type=1400 audit(1741154781.614:760): avc: denied { mount } for pid=21510 comm="syz.1.4222" name="/" dev="ramfs" ino=79229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1187.813185][T21511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1187.943497][T16093] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1187.995604][ T5874] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1188.155071][T16093] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 1188.183749][T16093] usb 8-1: config 0 has no interface number 0 [ 1188.266539][T16093] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1188.303768][T16093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.324186][ T5874] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1188.342809][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.357643][T16093] usb 8-1: Product: syz [ 1188.371663][T16093] usb 8-1: Manufacturer: syz [ 1188.383505][ T5874] usb 1-1: Product: syz [ 1188.387796][T16093] usb 8-1: SerialNumber: syz [ 1188.416644][ T5874] usb 1-1: Manufacturer: syz [ 1188.443865][T16093] usb 8-1: config 0 descriptor?? [ 1188.451620][ T5874] usb 1-1: SerialNumber: syz [ 1188.474099][ T5874] usb 1-1: config 0 descriptor?? [ 1188.919174][T16093] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 1188.931201][ T29] audit: type=1400 audit(1741154782.764:761): avc: denied { unmount } for pid=17100 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1188.931920][T16093] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 1189.000306][T16093] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 1189.030819][T16093] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 1189.558263][T21538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.659560][T16093] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1189.674226][T16093] usb 8-1: USB disconnect, device number 9 [ 1189.682744][T16093] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1189.703277][T21538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.714108][T16093] keyspan 8-1:0.133: device disconnected [ 1189.749396][ T5874] usb 1-1: Firmware version (0.0) predates our first public release. [ 1189.757600][ T5874] usb 1-1: Please update to version 0.2 or newer [ 1189.810087][ T5874] usb 1-1: USB disconnect, device number 62 [ 1189.889930][T21542] sch_fq: defrate 0 ignored. [ 1190.321858][T21550] »»»»»» speed is unknown, defaulting to 1000 [ 1190.376409][T21550] »»»»»» speed is unknown, defaulting to 1000 [ 1190.633181][T21541] dccp_close: ABORT with 108 bytes unread [ 1190.968582][T21559] veth0_to_bond: entered promiscuous mode [ 1191.043112][ T29] audit: type=1400 audit(1741154784.874:762): avc: denied { read } for pid=21558 comm="syz.1.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1191.165789][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1191.183730][T16093] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1191.234366][T21565] veth0_to_bond (unregistering): left promiscuous mode [ 1191.377664][T21574] overlay: ./file0 is not a directory [ 1191.385497][T16093] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 1191.396311][T21565] bond0: (slave bond_slave_0): Releasing backup interface [ 1191.407846][T16093] usb 8-1: config 0 has no interface number 0 [ 1191.439823][T16093] usb 8-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1191.577579][T16093] usb 8-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.646927][T16093] usb 8-1: config 0 interface 113 has no altsetting 0 [ 1191.654148][ T5874] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1191.686038][T16093] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1191.703905][T16093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.727691][T16093] usb 8-1: Product: syz [ 1191.752504][T16093] usb 8-1: Manufacturer: syz [ 1191.762635][T16093] usb 8-1: SerialNumber: syz [ 1191.834853][T16093] usb 8-1: config 0 descriptor?? [ 1191.847633][ T5874] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1191.865384][T16093] pn533_usb 8-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1192.098667][T21555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.281395][T21555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.373868][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.410220][ T5874] usb 1-1: config 0 descriptor?? [ 1192.429922][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1192.751444][ T5874] gp8psk: usb in 128 operation failed. [ 1192.753082][T19910] usb 8-1: USB disconnect, device number 10 [ 1193.311774][ T29] audit: type=1400 audit(1741154786.764:763): avc: denied { lock } for pid=21582 comm="syz.5.4243" path="socket:[80088]" dev="sockfs" ino=80088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1193.549591][ T5874] gp8psk: usb in 146 operation failed. [ 1193.555227][ T5874] gp8psk: failed to get FW version [ 1193.615160][ T5874] gp8psk: usb in 149 operation failed. [ 1193.627664][T21596] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1193.641420][ T29] audit: type=1400 audit(1741154787.464:764): avc: denied { mount } for pid=21595 comm="syz.5.4246" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1193.664124][ T5874] gp8psk: failed to get FPGA version [ 1193.671490][ T5874] gp8psk: usb in 138 operation failed. [ 1193.677234][ T5874] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1193.688327][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1193.748386][ T5874] usb 1-1: USB disconnect, device number 63 [ 1193.750727][T21600] overlay: filesystem on ./bus not supported as upperdir [ 1194.023532][T21601] delete_channel: no stack [ 1194.895423][ T29] audit: type=1400 audit(1741154788.734:765): avc: denied { unmount } for pid=19758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1194.920786][T21615] netlink: 'syz.0.4251': attribute type 6 has an invalid length. [ 1195.455926][T21632] ubi: mtd0 is already attached to ubi8 [ 1195.465803][ T5831] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1195.690077][ T5831] usb 2-1: config 3 has an invalid interface number: 187 but max is 0 [ 1195.806954][ T5831] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1195.871165][ T5831] usb 2-1: config 3 has an invalid interface number: 46 but max is 0 [ 1195.889878][ T5831] usb 2-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1195.903415][ T5831] usb 2-1: config 3 has no interface number 0 [ 1195.909702][ T5831] usb 2-1: config 3 has no interface number 1 [ 1195.916347][ T5831] usb 2-1: config 3 interface 187 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1195.936925][ T5831] usb 2-1: config 3 interface 187 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1195.951290][ T5831] usb 2-1: config 3 interface 187 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1195.965367][ T5831] usb 2-1: config 3 interface 187 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1195.976732][ T5831] usb 2-1: config 3 interface 187 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1195.988140][ T5831] usb 2-1: config 3 interface 187 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1195.999515][ T5831] usb 2-1: config 3 interface 187 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 1196.017907][ T5831] usb 2-1: too many endpoints for config 3 interface 46 altsetting 205: 51, using maximum allowed: 30 [ 1196.029120][ T5831] usb 2-1: config 3 interface 46 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 1196.040327][ T5831] usb 2-1: config 3 interface 46 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 1196.052087][ T5831] usb 2-1: config 3 interface 46 altsetting 205 has a duplicate endpoint with address 0x9, skipping [ 1196.066948][ T5831] usb 2-1: config 3 interface 46 altsetting 205 has a duplicate endpoint with address 0x1, skipping [ 1196.142243][ T5831] usb 2-1: config 3 interface 46 altsetting 205 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1196.159403][ T5831] usb 2-1: config 3 interface 46 altsetting 205 has 8 endpoint descriptors, different from the interface descriptor's value: 51 [ 1196.197057][ T5831] usb 2-1: config 3 interface 46 has no altsetting 0 [ 1196.206918][ T5831] usb 2-1: Dual-Role OTG device on HNP port [ 1196.213184][ T5831] usb 2-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=b7.06 [ 1196.223089][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.239742][ T5831] usb 2-1: Product: syz [ 1196.244200][ T5831] usb 2-1: Manufacturer: syz [ 1196.249638][ T5831] usb 2-1: SerialNumber: syz [ 1196.261891][ T5831] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware [ 1196.276014][ T5831] usb 2-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 1196.286625][ T5831] usb 2-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 1196.473468][T16093] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1196.625834][T16093] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.636470][T16093] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1196.645562][T16093] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.654935][T16093] usb 8-1: config 0 descriptor?? [ 1196.662162][T16093] pwc: Askey VC010 type 2 USB webcam detected. [ 1197.590445][T16093] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1197.864422][T16093] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1197.878205][T16093] pwc: recv_control_msg error -71 req 04 val 1000 [ 1197.891549][T16093] pwc: recv_control_msg error -71 req 04 val 1300 [ 1197.900641][T16093] pwc: recv_control_msg error -71 req 04 val 1400 [ 1198.007641][T16093] pwc: recv_control_msg error -71 req 02 val 2000 [ 1198.024652][T16093] pwc: recv_control_msg error -71 req 02 val 2100 [ 1198.035201][T16093] pwc: recv_control_msg error -71 req 04 val 1500 [ 1198.046352][T16093] pwc: recv_control_msg error -71 req 02 val 2500 [ 1198.084069][T16093] pwc: recv_control_msg error -71 req 02 val 2400 [ 1198.115058][T16093] pwc: recv_control_msg error -71 req 02 val 2600 [ 1198.122952][T16093] pwc: recv_control_msg error -71 req 02 val 2900 [ 1198.141438][T16093] pwc: recv_control_msg error -71 req 02 val 2800 [ 1198.178774][T16093] pwc: recv_control_msg error -71 req 04 val 1100 [ 1198.194543][T16093] pwc: recv_control_msg error -71 req 04 val 1200 [ 1198.219116][T16093] pwc: Registered as video103. [ 1198.233822][T16093] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input139 [ 1198.255103][T16093] usb 8-1: USB disconnect, device number 11 [ 1198.646219][T21669] ubi: mtd0 is already attached to ubi8 [ 1199.113242][T21666] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 1200.233467][ T5874] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1200.290661][T21686] overlay: ./file0 is not a directory [ 1200.573188][ T5874] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1200.689875][ T5874] usb 1-1: config 0 has no interface number 0 [ 1200.699738][ T5874] usb 1-1: config 0 interface 89 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1201.109436][ T5874] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=2c.75 [ 1201.139018][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.161214][ T5874] usb 1-1: Product: syz [ 1201.175804][ T5874] usb 1-1: Manufacturer: syz [ 1201.185900][ T5874] usb 1-1: SerialNumber: syz [ 1201.211296][ T5874] usb 1-1: config 0 descriptor?? [ 1201.229542][T21677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1202.434396][ T29] audit: type=1326 audit(1741154796.244:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1202.838869][ T29] audit: type=1326 audit(1741154796.244:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1202.972455][ T5874] kvaser_usb 1-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 1203.003585][ T29] audit: type=1326 audit(1741154796.244:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.038100][ T29] audit: type=1326 audit(1741154796.244:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.175730][ T29] audit: type=1326 audit(1741154796.254:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.195181][ T5874] usb 1-1: USB disconnect, device number 64 [ 1203.527521][ T29] audit: type=1326 audit(1741154796.254:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.682812][ T29] audit: type=1326 audit(1741154796.754:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.721823][ T29] audit: type=1326 audit(1741154796.754:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.820561][ T29] audit: type=1326 audit(1741154796.834:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.844285][T21725] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1203.852437][T21725] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1203.879841][T21725] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1203.919550][ T29] audit: type=1326 audit(1741154796.834:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40b58d169 code=0x7ffc0000 [ 1203.976829][T21729] 9pnet_fd: Insufficient options for proto=fd [ 1204.699114][T21734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.716643][T21734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.751399][T21738] tipc: Started in network mode [ 1204.768818][T21738] tipc: Node identity ac14140f, cluster identity 4711 [ 1204.790129][T21738] tipc: New replicast peer: 255.255.255.255 [ 1204.899151][T21738] tipc: Enabled bearer , priority 10 [ 1204.943632][T15591] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 1205.127885][T15591] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1205.273551][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1205.345901][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1205.367011][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 15722, setting to 8 [ 1205.391100][T15591] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1205.409350][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1205.423089][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1205.439617][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 15722, setting to 8 [ 1205.551489][T15591] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1205.560004][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1205.570607][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1205.581136][T15591] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 15722, setting to 8 [ 1206.013511][ T5874] tipc: Node number set to 2886997007 [ 1206.141429][T15591] usb 8-1: language id specifier not provided by device, defaulting to English [ 1206.806465][T21761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1206.816307][T21761] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1208.358597][T15591] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1208.367967][T15591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.384584][T15591] usb 8-1: can't set config #168, error -71 [ 1208.392494][T15591] usb 8-1: USB disconnect, device number 12 [ 1209.239045][T21775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1209.563702][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1209.574323][T21779] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4300'. [ 1209.663667][T21768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1209.751788][T21768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1210.005844][T21787] overlay: ./file0 is not a directory [ 1211.331161][T21822] usb usb8: usbfs: process 21822 (syz.0.4311) did not claim interface 0 before use [ 1213.466047][T21847] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1213.518215][T21847] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1213.527821][T21847] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1214.114452][T15591] kernel write not supported for file /input/event2 (pid: 15591 comm: kworker/1:7) [ 1214.132094][T21858] loop6: detected capacity change from 0 to 524287999 [ 1214.165737][ T3543] loop: Write error at byte offset 1, length 4096. [ 1214.193297][ T3543] loop: Write error at byte offset 1, length 4096. [ 1214.214117][ T5907] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1214.228093][ C0] blk_print_req_error: 41 callbacks suppressed [ 1214.228108][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 1214.243664][ C0] buffer_io_error: 4 callbacks suppressed [ 1214.243671][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1214.257715][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1214.274677][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 1214.293481][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1214.302702][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 1214.423451][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 1214.498550][ T5907] usb 1-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 1214.511955][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 1214.619931][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1214.652887][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1214.652925][ T29] audit: type=1400 audit(1741154808.474:789): avc: denied { listen } for pid=21869 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1214.704354][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 1214.773007][ T29] audit: type=1400 audit(1741154808.474:790): avc: denied { accept } for pid=21869 comm="syz.1.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1214.801975][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1214.837167][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1215.009374][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1215.055622][ T5907] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 1215.129785][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.160642][ T5907] usb 1-1: config 0 descriptor?? [ 1215.269477][ T5907] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 1215.280827][ T5907] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1215.419756][T16093] usb 1-1: USB disconnect, device number 65 [ 1215.428318][T16093] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1215.458396][T16093] kobil_sct 1-1:0.0: device disconnected [ 1216.533602][ T29] audit: type=1400 audit(1741154810.364:791): avc: denied { unmount } for pid=21906 comm="syz.0.4335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1216.596085][T21908] mkiss: ax0: crc mode is auto. [ 1216.596692][T21912] sch_fq: defrate 0 ignored. [ 1216.809656][T21917] 9pnet_fd: Insufficient options for proto=fd [ 1217.004753][T21924] PKCS7: Unknown OID: [4] (bad) [ 1217.012170][T21923] netlink: 'syz.0.4340': attribute type 1 has an invalid length. [ 1217.016169][T21924] PKCS7: Only support pkcs7_signedData type [ 1218.819643][ T29] audit: type=1400 audit(1741154812.654:792): avc: denied { setattr } for pid=21950 comm="syz.0.4348" name="BNEP" dev="sockfs" ino=81161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1219.293509][ T29] audit: type=1400 audit(1741154813.124:793): avc: denied { create } for pid=21962 comm="syz.5.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1219.367818][ T29] audit: type=1400 audit(1741154813.204:794): avc: denied { map } for pid=21962 comm="syz.5.4350" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1220.274242][T16093] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1220.473479][T16093] usb 1-1: Using ep0 maxpacket: 8 [ 1220.495095][T16093] usb 1-1: config 64 has an invalid interface number: 19 but max is 0 [ 1220.511260][T16093] usb 1-1: config 64 has no interface number 0 [ 1220.527950][T16093] usb 1-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1220.541249][T21986] sch_fq: defrate 0 ignored. [ 1220.563569][T16093] usb 1-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1220.573933][T16093] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1220.583027][T16093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.606969][T16093] usb 1-1: probing VID:PID(2201:012C) [ 1220.614968][T16093] usb 1-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1220.621716][T16093] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1220.654739][T16093] vub300 1-1:64.19: probe with driver vub300 failed with error -22 [ 1220.867751][T16093] usb 1-1: USB disconnect, device number 66 [ 1221.293189][T21981] dccp_close: ABORT with 120 bytes unread [ 1221.367269][ T29] audit: type=1400 audit(1741154815.204:795): avc: denied { ioctl } for pid=21991 comm="syz.5.4358" path="socket:[81234]" dev="sockfs" ino=81234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.930418][ T29] audit: type=1400 audit(1741154815.744:796): avc: denied { write } for pid=22000 comm="syz.7.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.433760][ T29] audit: type=1400 audit(1741154815.744:797): avc: denied { connect } for pid=22000 comm="syz.7.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.461073][ T29] audit: type=1400 audit(1741154815.824:798): avc: denied { listen } for pid=22000 comm="syz.7.4361" lport=52427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.661969][ T29] audit: type=1400 audit(1741154816.494:799): avc: denied { create } for pid=21989 comm="syz.1.4357" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1222.827152][ T29] audit: type=1400 audit(1741154816.494:800): avc: denied { map } for pid=21989 comm="syz.1.4357" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1222.899676][ T29] audit: type=1400 audit(1741154816.494:801): avc: denied { read write } for pid=21989 comm="syz.1.4357" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=82158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1223.300607][ T29] audit: type=1400 audit(1741154817.134:802): avc: denied { ioctl } for pid=22010 comm="syz.0.4363" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=81281 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1224.546422][T22030] befs: (nullb0): No write support. Marking filesystem read-only [ 1224.554420][T22030] befs: (nullb0): invalid magic header [ 1225.447964][T22032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1225.880317][T22045] FAULT_INJECTION: forcing a failure. [ 1225.880317][T22045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.904162][T22028] »»»»»» speed is unknown, defaulting to 1000 [ 1225.928978][T22045] CPU: 1 UID: 0 PID: 22045 Comm: syz.7.4371 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1225.929003][T22045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1225.929013][T22045] Call Trace: [ 1225.929018][T22045] [ 1225.929025][T22045] dump_stack_lvl+0x16c/0x1f0 [ 1225.929051][T22045] should_fail_ex+0x50a/0x650 [ 1225.929079][T22045] _copy_from_user+0x2e/0xd0 [ 1225.929097][T22045] copy_msghdr_from_user+0x99/0x160 [ 1225.929120][T22045] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1225.929152][T22045] ___sys_sendmsg+0xff/0x1e0 [ 1225.929176][T22045] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.929207][T22045] ? __pfx_lock_release+0x10/0x10 [ 1225.929228][T22045] ? trace_lock_acquire+0x14e/0x1f0 [ 1225.929255][T22045] ? __fget_files+0x206/0x3a0 [ 1225.929276][T22045] __sys_sendmsg+0x16e/0x220 [ 1225.929298][T22045] ? __pfx___sys_sendmsg+0x10/0x10 [ 1225.929334][T22045] do_syscall_64+0xcd/0x250 [ 1225.929356][T22045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.929378][T22045] RIP: 0033:0x7ff40b58d169 [ 1225.929395][T22045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1225.929410][T22045] RSP: 002b:00007ff40c3c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.929427][T22045] RAX: ffffffffffffffda RBX: 00007ff40b7a5fa0 RCX: 00007ff40b58d169 [ 1225.929437][T22045] RDX: 000000002008c014 RSI: 0000400000000580 RDI: 0000000000000004 [ 1225.929447][T22045] RBP: 00007ff40c3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.929457][T22045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.929466][T22045] R13: 0000000000000000 R14: 00007ff40b7a5fa0 R15: 00007ffc2b95a398 [ 1225.929488][T22045] [ 1226.364338][T22028] »»»»»» speed is unknown, defaulting to 1000 [ 1226.540636][T22052] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1226.550211][T22052] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1227.221446][T22058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1227.515688][T22071] FAULT_INJECTION: forcing a failure. [ 1227.515688][T22071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.528820][T22071] CPU: 1 UID: 0 PID: 22071 Comm: syz.7.4376 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1227.528842][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1227.528853][T22071] Call Trace: [ 1227.528859][T22071] [ 1227.528866][T22071] dump_stack_lvl+0x16c/0x1f0 [ 1227.528892][T22071] should_fail_ex+0x50a/0x650 [ 1227.528922][T22071] _copy_from_user+0x2e/0xd0 [ 1227.528941][T22071] copy_msghdr_from_user+0x99/0x160 [ 1227.528966][T22071] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1227.529002][T22071] ___sys_sendmsg+0xff/0x1e0 [ 1227.529028][T22071] ? __pfx____sys_sendmsg+0x10/0x10 [ 1227.529061][T22071] ? __pfx_lock_release+0x10/0x10 [ 1227.529084][T22071] ? trace_lock_acquire+0x14e/0x1f0 [ 1227.529112][T22071] ? __fget_files+0x206/0x3a0 [ 1227.529136][T22071] __sys_sendmsg+0x16e/0x220 [ 1227.529160][T22071] ? __pfx___sys_sendmsg+0x10/0x10 [ 1227.529183][T22071] ? __f_unlock_pos+0xd/0x20 [ 1227.529216][T22071] do_syscall_64+0xcd/0x250 [ 1227.529240][T22071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.529264][T22071] RIP: 0033:0x7ff40b58d169 [ 1227.529277][T22071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.529294][T22071] RSP: 002b:00007ff40c382038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.529311][T22071] RAX: ffffffffffffffda RBX: 00007ff40b7a6160 RCX: 00007ff40b58d169 [ 1227.529322][T22071] RDX: 0000000004048010 RSI: 0000400000000080 RDI: 0000000000000009 [ 1227.529333][T22071] RBP: 00007ff40c382090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.529344][T22071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.529354][T22071] R13: 0000000000000000 R14: 00007ff40b7a6160 R15: 00007ffc2b95a398 [ 1227.529377][T22071] [ 1228.278879][T22081] sch_fq: defrate 0 ignored. [ 1229.203410][ T5901] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1229.388081][ T5901] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.715076][ T5901] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.724698][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.759660][ T5901] usb 8-1: config 0 descriptor?? [ 1229.776990][ T5901] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.595076][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.818287][ T5901] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1230.843033][ T5901] pwc: recv_control_msg error -71 req 04 val 1000 [ 1230.866982][ T5901] pwc: recv_control_msg error -71 req 04 val 1300 [ 1230.884841][ T5901] pwc: recv_control_msg error -71 req 04 val 1400 [ 1230.908782][ T5901] pwc: recv_control_msg error -71 req 02 val 2000 [ 1230.929879][ T5901] pwc: recv_control_msg error -71 req 02 val 2100 [ 1230.963381][ T5901] pwc: recv_control_msg error -71 req 04 val 1500 [ 1230.970232][ T5901] pwc: recv_control_msg error -71 req 02 val 2500 [ 1230.990932][ T5901] pwc: recv_control_msg error -71 req 02 val 2400 [ 1231.011045][ T5901] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.088939][ T5901] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.109598][ T5901] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.134861][ T5901] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.173399][ T5901] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.208785][ T5901] pwc: Registered as video103. [ 1231.237964][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input144 [ 1231.343487][ T5901] usb 8-1: USB disconnect, device number 13 [ 1232.581954][T22130] sch_fq: defrate 0 ignored. [ 1233.363833][ T5874] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1233.514802][ T5874] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.524983][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1233.531568][ T5874] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1233.540692][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.964208][ T5874] usb 1-1: config 0 descriptor?? [ 1234.222346][T22144] siw: device registration error -23 [ 1234.233852][T22144] »»»»»»: renamed from lo (while UP) [ 1234.910340][ T5874] hid-rmi 0003:17EF:6085.003B: item fetching failed at offset 2/3 [ 1234.926916][ T5874] hid-rmi 0003:17EF:6085.003B: parse failed [ 1234.949029][ T5874] hid-rmi 0003:17EF:6085.003B: probe with driver hid-rmi failed with error -22 [ 1235.210173][ T29] audit: type=1400 audit(1741154828.904:803): avc: denied { getopt } for pid=22148 comm="syz.7.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1235.216942][ T5874] usb 1-1: USB disconnect, device number 67 [ 1236.220683][T22159] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1236.290689][ T29] audit: type=1400 audit(1741154830.124:804): avc: denied { create } for pid=22158 comm="syz.0.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1236.310073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.400439][ T29] audit: type=1400 audit(1741154830.154:805): avc: denied { connect } for pid=22158 comm="syz.0.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1236.814982][T22160] »»»»»» speed is unknown, defaulting to 1000 [ 1236.887340][T22160] »»»»»» speed is unknown, defaulting to 1000 [ 1237.095233][T22173] sch_fq: defrate 0 ignored. [ 1237.433373][ T29] audit: type=1400 audit(1741154831.254:806): avc: denied { getopt } for pid=22176 comm="syz.0.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1238.538495][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.838278][ T29] audit: type=1400 audit(1741154832.674:807): avc: denied { accept } for pid=22199 comm="syz.0.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1239.015700][T22204] overlay: ./file0 is not a directory [ 1239.193547][T15591] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1239.374805][T15591] usb 8-1: Using ep0 maxpacket: 8 [ 1239.413206][T15591] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1239.454698][T15591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.525673][T15591] usb 8-1: config 0 descriptor?? [ 1241.727569][T15591] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1241.761807][T15591] asix 8-1:0.0: probe with driver asix failed with error -71 [ 1241.783199][T15591] usb 8-1: USB disconnect, device number 14 [ 1242.008153][T22223] sch_fq: defrate 0 ignored. [ 1242.126681][T22234] bridge0: port 3(syz_tun) entered blocking state [ 1242.133475][T22234] bridge0: port 3(syz_tun) entered disabled state [ 1242.140867][T22234] syz_tun: entered allmulticast mode [ 1242.151256][T22234] syz_tun: entered promiscuous mode [ 1242.157347][T22234] bridge0: port 3(syz_tun) entered blocking state [ 1242.163819][T22234] bridge0: port 3(syz_tun) entered forwarding state [ 1243.856584][T22257] »»»»»» speed is unknown, defaulting to 1000 [ 1243.894648][T22257] »»»»»» speed is unknown, defaulting to 1000 [ 1243.919120][T22259] vlan3: entered allmulticast mode [ 1243.934834][T22259] : entered allmulticast mode [ 1243.972594][T22259] bond_slave_0: entered allmulticast mode [ 1243.978744][T22259] bond_slave_1: entered allmulticast mode [ 1244.121055][T22259] : left allmulticast mode [ 1244.133478][T22259] bond_slave_0: left allmulticast mode [ 1244.148258][T22259] bond_slave_1: left allmulticast mode [ 1245.551702][T22281] sch_fq: defrate 0 ignored. [ 1245.783716][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1245.810351][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4438'. [ 1246.271238][T22290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1246.280821][T22290] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1248.254035][T22324] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1248.262336][T16093] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1248.340903][T22327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1248.874863][T16093] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1248.883015][T16093] usb 8-1: config 0 has no interface number 0 [ 1248.889560][T16093] usb 8-1: config 0 interface 89 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1248.900966][T16093] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=2c.75 [ 1248.910136][T16093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.918318][T16093] usb 8-1: Product: syz [ 1248.922615][T16093] usb 8-1: Manufacturer: syz [ 1248.929947][T16093] usb 8-1: SerialNumber: syz [ 1248.937645][T16093] usb 8-1: config 0 descriptor?? [ 1248.943010][T22316] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1250.005191][T22345] sch_fq: defrate 0 ignored. [ 1250.279638][T22351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1250.289498][T22351] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1251.619802][T16093] kvaser_usb 8-1:0.89: error -ENODEV: Cannot get usb endpoint(s) [ 1251.631132][T16093] usb 8-1: USB disconnect, device number 15 [ 1253.043038][T22387] overlayfs: failed to resolve './file1': -2 [ 1253.163708][T22391] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1254.077117][T22405] sch_fq: defrate 0 ignored. [ 1254.251081][T22408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1254.420660][ T29] audit: type=1400 audit(1741154848.254:808): avc: denied { write } for pid=22385 comm="syz.0.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1254.450257][T22390] 9pnet_fd: Insufficient options for proto=fd [ 1254.662540][T22416] /dev/nullb0: Can't lookup blockdev [ 1255.143729][T22424] veth0_vlan: entered allmulticast mode [ 1255.548161][T22422] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4475'. [ 1257.137196][ T29] audit: type=1400 audit(1741154850.974:809): avc: denied { bind } for pid=22469 comm="syz.4.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1257.827862][T22477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4493'. [ 1258.046090][ T29] audit: type=1400 audit(1741154851.874:810): avc: denied { create } for pid=22479 comm="syz.4.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1258.759161][ T29] audit: type=1400 audit(1741154851.874:811): avc: denied { setopt } for pid=22479 comm="syz.4.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1259.021053][ T5831] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1259.042526][ T5831] dvb_usb_dibusb_mb 2-1:3.187: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1259.061739][ T5831] dvb-usb: found a 'KWorld/ADSTech Instant DVB-T USB2.0' in cold state, will try to load a firmware [ 1259.076037][ T5831] usb 2-1: Direct firmware load for dvb-usb-adstech-usb2-02.fw failed with error -2 [ 1259.086175][ T5831] usb 2-1: Falling back to sysfs fallback for: dvb-usb-adstech-usb2-02.fw [ 1260.439645][T22513] openvswitch: netlink: IP tunnel dst address not specified [ 1260.467438][ T29] audit: type=1400 audit(1741154854.294:812): avc: denied { setopt } for pid=22509 comm="syz.4.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1265.308443][ T29] audit: type=1800 audit(1741154859.134:813): pid=22574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4522" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1265.473634][T22577] overlay: ./file0 is not a directory [ 1265.804397][T22584] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1267.891894][T22608] overlayfs: failed to clone upperpath [ 1270.082193][T22634] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1270.091864][T22634] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1271.013563][ T5907] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1271.313516][ T5907] usb 8-1: Using ep0 maxpacket: 32 [ 1271.320854][ T5907] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1271.332008][ T5907] usb 8-1: config 0 has no interface number 0 [ 1271.340737][ T5907] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1271.350183][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.418944][T22661] siw: device registration error -23 [ 1271.428322][T22661] »»»»»»: renamed from lo [ 1271.882516][ T5907] usb 8-1: Product: syz [ 1271.887226][ T5907] usb 8-1: Manufacturer: syz [ 1271.891843][ T5907] usb 8-1: SerialNumber: syz [ 1271.903940][ T5907] usb 8-1: config 0 descriptor?? [ 1271.921141][ T5907] smsc95xx v2.0.0 [ 1273.006918][T22672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.016385][T22672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.740251][T22677] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1273.749879][T22677] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1274.477587][T22681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1274.487231][T22681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1274.656736][ T5907] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1275.084445][ T5907] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1275.098409][ T5907] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1275.109624][ T5907] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1275.126711][ T5907] usb 8-1: USB disconnect, device number 16 [ 1275.364898][T22690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1275.374594][T22690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1276.371806][ T29] audit: type=1800 audit(1741154870.194:814): pid=22703 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4556" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1278.598388][ T29] audit: type=1800 audit(1741154872.434:815): pid=22729 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4562" name="nullb0" dev="tmpfs" ino=604 res=0 errno=0 [ 1278.685172][T22730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1278.695217][T22730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1279.769072][T22748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4568'. [ 1281.186047][ T29] audit: type=1800 audit(1741154874.804:816): pid=22768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4573" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1282.293916][T22783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1282.317048][T22783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1285.914619][ T29] audit: type=1800 audit(1741154879.754:817): pid=22813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4585" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1286.042281][T22816] 9pnet_virtio: no channels available for device syz [ 1286.062013][T22815] 9pnet_virtio: no channels available for device syz [ 1286.302383][T22823] libceph: resolve '400' (ret=-3): failed [ 1289.735896][T22841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1289.745421][T22841] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1291.954352][ T29] audit: type=1800 audit(1741154885.754:818): pid=22864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4596" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1291.982287][T22865] bond0: entered promiscuous mode [ 1292.005488][T22865] bond_slave_0: entered promiscuous mode [ 1292.011298][T22865] bond_slave_1: entered promiscuous mode [ 1292.048728][T22865] bond0: left promiscuous mode [ 1292.053717][T22865] bond_slave_0: left promiscuous mode [ 1292.075227][T22865] bond_slave_1: left promiscuous mode [ 1292.736814][T22881] overlay: ./file0 is not a directory [ 1293.497912][T22894] fuse: Bad value for 'fd' [ 1294.549554][ T29] audit: type=1800 audit(1741154888.354:819): pid=22909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4610" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1294.903797][T22916] xt_nat: multiple ranges no longer supported [ 1295.488203][T22919] siw: device registration error -23 [ 1295.502997][T22919] »»»»»»: renamed from lo (while UP) [ 1296.580707][ T29] audit: type=1400 audit(1741154890.414:820): avc: denied { watch watch_reads } for pid=22932 comm="syz.7.4617" path="/proc/427" dev="proc" ino=86089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1297.869157][ T29] audit: type=1800 audit(1741154891.704:821): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4622" name="nullb0" dev="tmpfs" ino=604 res=0 errno=0 [ 1298.337543][T22958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1299.991250][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.209035][T22972] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1300.376520][T22975] FAULT_INJECTION: forcing a failure. [ 1300.376520][T22975] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.403995][T22975] CPU: 0 UID: 0 PID: 22975 Comm: syz.7.4631 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1300.404012][T22975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1300.404019][T22975] Call Trace: [ 1300.404022][T22975] [ 1300.404027][T22975] dump_stack_lvl+0x16c/0x1f0 [ 1300.404045][T22975] should_fail_ex+0x50a/0x650 [ 1300.404062][T22975] ? fs_reclaim_acquire+0xae/0x150 [ 1300.404079][T22975] ? tomoyo_encode2+0x100/0x3e0 [ 1300.404095][T22975] should_failslab+0xc2/0x120 [ 1300.404108][T22975] __kmalloc_noprof+0xcb/0x510 [ 1300.404119][T22975] ? d_absolute_path+0x137/0x1b0 [ 1300.404135][T22975] tomoyo_encode2+0x100/0x3e0 [ 1300.404153][T22975] tomoyo_encode+0x29/0x50 [ 1300.404168][T22975] tomoyo_realpath_from_path+0x19d/0x720 [ 1300.404188][T22975] tomoyo_mount_acl+0x1af/0x880 [ 1300.404203][T22975] ? hlock_class+0x4e/0x130 [ 1300.404215][T22975] ? __lock_acquire+0x15a9/0x3c40 [ 1300.404233][T22975] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1300.404250][T22975] ? __pfx___lock_acquire+0x10/0x10 [ 1300.404265][T22975] ? stack_trace_save+0x95/0xd0 [ 1300.404278][T22975] ? __pfx_lock_release+0x10/0x10 [ 1300.404299][T22975] ? trace_lock_acquire+0x14e/0x1f0 [ 1300.404312][T22975] ? tomoyo_mount_permission+0x149/0x420 [ 1300.404328][T22975] ? lock_acquire+0x2f/0xb0 [ 1300.404341][T22975] ? tomoyo_mount_permission+0x149/0x420 [ 1300.404358][T22975] tomoyo_mount_permission+0x16e/0x420 [ 1300.404373][T22975] ? tomoyo_mount_permission+0x149/0x420 [ 1300.404388][T22975] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1300.404409][T22975] ? get_current_fs_domain+0x184/0x1f0 [ 1300.404423][T22975] security_sb_mount+0x9b/0x260 [ 1300.404438][T22975] path_mount+0x129/0x1f10 [ 1300.404451][T22975] ? kmem_cache_free+0x2e2/0x4d0 [ 1300.404461][T22975] ? __pfx_path_mount+0x10/0x10 [ 1300.404475][T22975] ? putname+0x13c/0x180 [ 1300.404489][T22975] __x64_sys_mount+0x28f/0x310 [ 1300.404502][T22975] ? __pfx___x64_sys_mount+0x10/0x10 [ 1300.404518][T22975] do_syscall_64+0xcd/0x250 [ 1300.404535][T22975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.404550][T22975] RIP: 0033:0x7ff40b58d169 [ 1300.404560][T22975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.404571][T22975] RSP: 002b:00007ff40c3c4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1300.404582][T22975] RAX: ffffffffffffffda RBX: 00007ff40b7a5fa0 RCX: 00007ff40b58d169 [ 1300.404589][T22975] RDX: 0000400000000000 RSI: 0000400000000240 RDI: 0000000000000000 [ 1300.404596][T22975] RBP: 00007ff40c3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.404602][T22975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.404608][T22975] R13: 0000000000000000 R14: 00007ff40b7a5fa0 R15: 00007ffc2b95a398 [ 1300.404621][T22975] [ 1300.404630][T22975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1302.243456][ T5907] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1302.403447][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 1302.429277][ T5907] usb 8-1: config 150 contains an unexpected descriptor of type 0x2, skipping [ 1302.445897][ T5907] usb 8-1: config 150 has 0 interfaces, different from the descriptor's value: 1 [ 1302.461535][ T5907] usb 8-1: New USB device found, idVendor=04e2, idProduct=1443, bcdDevice=c7.eb [ 1302.471975][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.492270][ T5907] usb 8-1: Product: syz [ 1302.502362][ T5907] usb 8-1: Manufacturer: syz [ 1302.509562][ T5907] usb 8-1: SerialNumber: syz [ 1302.738167][ T5907] usb 8-1: USB disconnect, device number 17 [ 1302.806063][T23006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1302.821650][T23006] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4643'. [ 1302.929075][ T29] audit: type=1800 audit(1741154896.744:822): pid=23008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4644" name="nullb0" dev="tmpfs" ino=2377 res=0 errno=0 [ 1303.024853][T23014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4646'. [ 1303.132283][T23019] syzkaller1: entered promiscuous mode [ 1303.138107][T23019] syzkaller1: entered allmulticast mode [ 1303.452240][T23012] tmpfs: Unknown parameter 'usrquota*‡©fæ´xÕXlÑ{kðŠÑ$Ø;¨“’KxÃ¥žn¿˜G&x°úÎI‡1üŒ_«à%£#ì®>l‹' [ 1303.747145][ T29] audit: type=1400 audit(1741154897.584:823): avc: denied { getopt } for pid=23024 comm="syz.7.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1303.956981][T16093] IPVS: starting estimator thread 0... [ 1304.026152][T23037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4651'. [ 1304.109779][T23034] IPVS: using max 34 ests per chain, 81600 per kthread [ 1304.973394][ T29] audit: type=1800 audit(1741154898.804:824): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4656" name="nullb0" dev="tmpfs" ino=604 res=0 errno=0 [ 1305.570909][T23075] kAFS: unparsable volume name [ 1305.593778][T23075] kAFS: unparsable volume name [ 1306.604592][T23085] fuse: Bad value for 'fd' [ 1307.868162][T23104] »»»»»» speed is unknown, defaulting to 1000 [ 1308.008753][T23104] »»»»»» speed is unknown, defaulting to 1000 [ 1308.072501][T23107] siw: device registration error -23 [ 1308.081352][T23107] »»»»»»: renamed from lo (while UP) [ 1308.693482][ T29] audit: type=1400 audit(1741154902.524:825): avc: denied { ioctl } for pid=23111 comm="syz.5.4669" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1309.156113][T23117] FAULT_INJECTION: forcing a failure. [ 1309.156113][T23117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1309.196681][T23117] CPU: 1 UID: 0 PID: 23117 Comm: syz.5.4671 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1309.196707][T23117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1309.196717][T23117] Call Trace: [ 1309.196723][T23117] [ 1309.196730][T23117] dump_stack_lvl+0x16c/0x1f0 [ 1309.196756][T23117] should_fail_ex+0x50a/0x650 [ 1309.196786][T23117] _copy_from_iter+0x2a1/0x1560 [ 1309.196806][T23117] ? _copy_from_iter+0x15e/0x1560 [ 1309.196824][T23117] ? __pfx__copy_from_iter+0x10/0x10 [ 1309.196843][T23117] ? __pfx__copy_from_iter+0x10/0x10 [ 1309.196859][T23117] ? __virt_addr_valid+0x1a4/0x590 [ 1309.196883][T23117] copy_page_from_iter+0xa5/0x120 [ 1309.196903][T23117] skb_copy_datagram_from_iter+0x29b/0x710 [ 1309.196932][T23117] tun_get_user+0x199c/0x3e50 [ 1309.196969][T23117] ? __pfx_tun_get_user+0x10/0x10 [ 1309.196999][T23117] ? find_held_lock+0x2d/0x110 [ 1309.197023][T23117] ? __pfx_lock_release+0x10/0x10 [ 1309.197057][T23117] tun_chr_write_iter+0xdc/0x210 [ 1309.197085][T23117] vfs_write+0x5ae/0x1150 [ 1309.197112][T23117] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1309.197140][T23117] ? __pfx_vfs_write+0x10/0x10 [ 1309.197167][T23117] ? __fget_files+0x40/0x3a0 [ 1309.197195][T23117] ksys_write+0x12b/0x250 [ 1309.197220][T23117] ? __pfx_ksys_write+0x10/0x10 [ 1309.197252][T23117] do_syscall_64+0xcd/0x250 [ 1309.197275][T23117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.197298][T23117] RIP: 0033:0x7fd01818bc1f [ 1309.197312][T23117] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1309.197329][T23117] RSP: 002b:00007fd01903c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1309.197346][T23117] RAX: ffffffffffffffda RBX: 00007fd0183a5fa0 RCX: 00007fd01818bc1f [ 1309.197358][T23117] RDX: 000000000000fdef RSI: 0000400000000480 RDI: 00000000000000c8 [ 1309.197370][T23117] RBP: 00007fd01903c090 R08: 0000000000000000 R09: 0000000000000000 [ 1309.197381][T23117] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 1309.197392][T23117] R13: 0000000000000001 R14: 00007fd0183a5fa0 R15: 00007fff2d24b758 [ 1309.197415][T23117] [ 1311.324891][T23143] sg_write: data in/out 81/42 bytes for SCSI command 0x0-- guessing data in; [ 1311.324891][T23143] program syz.7.4677 not setting count and/or reply_len properly [ 1311.360847][T23143] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1311.384264][T23149] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4679'. [ 1312.479932][T23160] overlayfs: failed to clone upperpath [ 1313.433617][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1313.642607][T23170] bridge0: port 3(netdevsim2) entered disabled state [ 1313.649503][T23170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.656672][T23170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.754267][T23170] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 1313.803639][T23170] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 1313.821084][ T25] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1313.859269][T23170] bridge0: port 3(netdevsim2) entered disabled state [ 1313.869884][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.906829][ T25] usb 8-1: Product: syz [ 1313.917935][ T25] usb 8-1: Manufacturer: syz [ 1313.922553][ T25] usb 8-1: SerialNumber: syz [ 1313.940991][T23170] bridge_slave_1: left allmulticast mode [ 1313.947812][T23170] bridge_slave_1: left promiscuous mode [ 1313.960568][ T25] usb 8-1: config 0 descriptor?? [ 1313.986289][T23170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.386093][T23170] bridge_slave_0: left allmulticast mode [ 1314.410619][ T25] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1314.420306][T23170] bridge_slave_0: left promiscuous mode [ 1314.426660][ T25] usb 8-1: Firmware version (0.0) predates our first public release. [ 1314.435043][T23170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.442756][ T25] usb 8-1: Please update to version 0.2 or newer [ 1314.619670][T23165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.652534][T23165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.709549][ T25] usb 8-1: USB disconnect, device number 18 [ 1315.212542][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1315.236198][T23192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1315.882568][T23204] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1315.994197][ T29] audit: type=1400 audit(1741154909.814:826): avc: denied { accept } for pid=23205 comm="syz.1.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1317.013588][T15591] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1317.673964][T15591] usb 8-1: Using ep0 maxpacket: 8 [ 1317.686956][T15591] usb 8-1: config 64 has an invalid interface number: 19 but max is 0 [ 1317.718973][T15591] usb 8-1: config 64 has no interface number 0 [ 1317.749498][T15591] usb 8-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1317.836050][T15591] usb 8-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1317.883419][T15591] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1318.245271][T15591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.272043][ T29] audit: type=1400 audit(1741154912.104:827): avc: denied { shutdown } for pid=23236 comm="syz.0.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1318.341170][T15591] usb 8-1: probing VID:PID(2201:012C) [ 1318.351437][T15591] usb 8-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1318.412982][T15591] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1318.430924][T15591] vub300 8-1:64.19: probe with driver vub300 failed with error -22 [ 1318.626851][T23243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1318.635910][T23243] tipc: Started in network mode [ 1318.640855][T23243] tipc: Node identity 3000c, cluster identity 4711 [ 1318.647519][T23243] tipc: Node number set to 196620 [ 1318.720481][ T5874] usb 8-1: USB disconnect, device number 19 [ 1318.821991][T23247] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4709'. [ 1319.083239][T23253] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1319.129557][T23255] fuse: Unknown parameter 'f¬o0x0000000000000003' [ 1319.464649][T23264] sch_fq: defrate 0 ignored. [ 1319.724590][T23266] overlay: ./file0 is not a directory [ 1320.464577][ T5831] dvb-usb: did not find the firmware file 'dvb-usb-adstech-usb2-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.500135][ T5831] dvb_usb_dibusb_mb 2-1:3.46: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1320.520506][ T5831] usb 2-1: USB disconnect, device number 117 [ 1320.865603][ T5831] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1321.045327][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 1321.061452][ T5831] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1321.080451][ T5831] usb 2-1: config 0 has no interface number 0 [ 1321.161895][ T5831] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1321.267086][ T5831] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1321.287303][T23290] xt_hashlimit: size too large, truncated to 1048576 [ 1321.342004][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.439908][ T5831] usb 2-1: Product: syz [ 1321.492984][ T5831] usb 2-1: Manufacturer: syz [ 1321.519254][ T5831] usb 2-1: SerialNumber: syz [ 1321.537320][ T5831] usb 2-1: config 0 descriptor?? [ 1321.590315][ T5831] smsc75xx v1.0.0 [ 1321.595690][ T5831] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1321.633514][ T5831] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1322.224038][ T5831] usb 2-1: USB disconnect, device number 118 [ 1322.401147][T23306] sch_fq: defrate 0 ignored. [ 1323.665592][T23305] dccp_close: ABORT with 128 bytes unread [ 1324.354401][T23339] overlay: ./file0 is not a directory [ 1324.475202][T16093] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1324.637499][T16093] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1324.656283][T16093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.665203][T16093] usb 2-1: Product: syz [ 1324.669999][T16093] usb 2-1: Manufacturer: syz [ 1324.677885][T16093] usb 2-1: SerialNumber: syz [ 1324.686451][T16093] usb 2-1: config 0 descriptor?? [ 1325.096739][T16093] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1325.104762][T16093] usb 2-1: Firmware version (0.0) predates our first public release. [ 1325.112938][T16093] usb 2-1: Please update to version 0.2 or newer [ 1325.789308][T23357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.859432][T23357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.065038][T23368] FAULT_INJECTION: forcing a failure. [ 1326.065038][T23368] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.088964][T16093] usb 2-1: USB disconnect, device number 119 [ 1326.106225][T23368] CPU: 1 UID: 0 PID: 23368 Comm: syz.7.4746 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1326.106250][T23368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1326.106260][T23368] Call Trace: [ 1326.106265][T23368] [ 1326.106272][T23368] dump_stack_lvl+0x16c/0x1f0 [ 1326.106297][T23368] should_fail_ex+0x50a/0x650 [ 1326.106322][T23368] ? fs_reclaim_acquire+0xae/0x150 [ 1326.106348][T23368] should_failslab+0xc2/0x120 [ 1326.106366][T23368] __kmalloc_node_noprof+0xd1/0x510 [ 1326.106383][T23368] ? __pfx_vxlan_setup+0x10/0x10 [ 1326.106402][T23368] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1326.106431][T23368] __kvmalloc_node_noprof+0xad/0x1a0 [ 1326.106457][T23368] ? __pfx_vxlan_setup+0x10/0x10 [ 1326.106477][T23368] alloc_netdev_mqs+0xbbc/0x15d0 [ 1326.106506][T23368] rtnl_create_link+0xc10/0xfa0 [ 1326.106533][T23368] rtnl_newlink+0x14c6/0x1d60 [ 1326.106562][T23368] ? __pfx_rtnl_newlink+0x10/0x10 [ 1326.106591][T23368] ? __pfx___lock_acquire+0x10/0x10 [ 1326.106616][T23368] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1326.106642][T23368] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1326.106671][T23368] ? find_held_lock+0x2d/0x110 [ 1326.106692][T23368] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 1326.106714][T23368] ? __pfx_lock_release+0x10/0x10 [ 1326.106735][T23368] ? trace_lock_acquire+0x14e/0x1f0 [ 1326.106759][T23368] ? __pfx_rtnl_newlink+0x10/0x10 [ 1326.106781][T23368] rtnetlink_rcv_msg+0x95b/0xea0 [ 1326.106806][T23368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1326.106841][T23368] netlink_rcv_skb+0x16b/0x440 [ 1326.106870][T23368] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1326.106894][T23368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1326.106931][T23368] ? netlink_deliver_tap+0x1ae/0xd30 [ 1326.106957][T23368] netlink_unicast+0x53c/0x7f0 [ 1326.106983][T23368] ? __pfx_netlink_unicast+0x10/0x10 [ 1326.107011][T23368] netlink_sendmsg+0x8b8/0xd70 [ 1326.107034][T23368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1326.107065][T23368] ____sys_sendmsg+0xaaf/0xc90 [ 1326.107084][T23368] ? copy_msghdr_from_user+0x10b/0x160 [ 1326.107109][T23368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1326.107125][T23368] ? __lock_acquire+0xcc5/0x3c40 [ 1326.107159][T23368] ___sys_sendmsg+0x135/0x1e0 [ 1326.107184][T23368] ? __pfx____sys_sendmsg+0x10/0x10 [ 1326.107219][T23368] ? trace_lock_acquire+0x14e/0x1f0 [ 1326.107257][T23368] __sys_sendmmsg+0x201/0x420 [ 1326.107286][T23368] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1326.107317][T23368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1326.107349][T23368] ? fput+0x67/0x440 [ 1326.107369][T23368] ? ksys_write+0x1ba/0x250 [ 1326.107389][T23368] ? __pfx_ksys_write+0x10/0x10 [ 1326.107412][T23368] __x64_sys_sendmmsg+0x9c/0x100 [ 1326.107431][T23368] ? lockdep_hardirqs_on+0x7c/0x110 [ 1326.107447][T23368] do_syscall_64+0xcd/0x250 [ 1326.107465][T23368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.107484][T23368] RIP: 0033:0x7ff40b58d169 [ 1326.107496][T23368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.107510][T23368] RSP: 002b:00007ff40c3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1326.107524][T23368] RAX: ffffffffffffffda RBX: 00007ff40b7a6080 RCX: 00007ff40b58d169 [ 1326.107533][T23368] RDX: 0492492492492627 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1326.107541][T23368] RBP: 00007ff40c3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.107548][T23368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.107556][T23368] R13: 0000000000000000 R14: 00007ff40b7a6080 R15: 00007ffc2b95a398 [ 1326.107573][T23368] [ 1327.160785][T23383] overlay: ./file0 is not a directory [ 1327.381367][T23389] FAULT_INJECTION: forcing a failure. [ 1327.381367][T23389] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.405877][T23389] CPU: 0 UID: 0 PID: 23389 Comm: syz.1.4754 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1327.405901][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1327.405911][T23389] Call Trace: [ 1327.405917][T23389] [ 1327.405924][T23389] dump_stack_lvl+0x16c/0x1f0 [ 1327.405951][T23389] should_fail_ex+0x50a/0x650 [ 1327.405975][T23389] ? fs_reclaim_acquire+0xae/0x150 [ 1327.406002][T23389] should_failslab+0xc2/0x120 [ 1327.406021][T23389] __kmalloc_node_noprof+0xd1/0x510 [ 1327.406040][T23389] ? do_raw_spin_lock+0x12d/0x2c0 [ 1327.406056][T23389] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1327.406084][T23389] __kvmalloc_node_noprof+0xad/0x1a0 [ 1327.406111][T23389] simple_xattr_alloc+0x41/0xa0 [ 1327.406133][T23389] shmem_initxattrs+0x127/0x5a0 [ 1327.406149][T23389] ? evm_inode_init_security+0x237/0x320 [ 1327.406178][T23389] security_inode_init_security+0x26c/0x390 [ 1327.406199][T23389] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1327.406216][T23389] ? __pfx_security_inode_init_security+0x10/0x10 [ 1327.406237][T23389] ? shmem_get_inode+0x73a/0xf00 [ 1327.406260][T23389] shmem_mknod+0x22e/0x450 [ 1327.406282][T23389] vfs_mknod+0x5d7/0x8e0 [ 1327.406311][T23389] do_mknodat+0x310/0x5d0 [ 1327.406341][T23389] ? __pfx_do_mknodat+0x10/0x10 [ 1327.406366][T23389] ? getname_flags.part.0+0x1c5/0x550 [ 1327.406393][T23389] __x64_sys_mknod+0x87/0xb0 [ 1327.406411][T23389] do_syscall_64+0xcd/0x250 [ 1327.406434][T23389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.406456][T23389] RIP: 0033:0x7f62b9b8d169 [ 1327.406471][T23389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.406486][T23389] RSP: 002b:00007f62ba9df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1327.406503][T23389] RAX: ffffffffffffffda RBX: 00007f62b9da5fa0 RCX: 00007f62b9b8d169 [ 1327.406514][T23389] RDX: 0000000000000007 RSI: 000000000000c000 RDI: 0000400000000080 [ 1327.406526][T23389] RBP: 00007f62ba9df090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.406536][T23389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.406546][T23389] R13: 0000000000000001 R14: 00007f62b9da5fa0 R15: 00007fff95760048 [ 1327.406570][T23389] [ 1328.503448][T16093] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1328.831938][ T29] audit: type=1400 audit(1741154922.664:828): avc: denied { getattr } for pid=23413 comm="syz.1.4760" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1328.843801][T23414] overlayfs: statfs failed on './file0' [ 1328.887664][T16093] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.999732][T16093] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1329.020105][T16093] usb 8-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1329.035235][T16093] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.048411][T16093] usb 8-1: config 0 descriptor?? [ 1329.528885][T16093] hid-rmi 0003:17EF:6085.003C: item fetching failed at offset 2/3 [ 1329.536974][T16093] hid-rmi 0003:17EF:6085.003C: parse failed [ 1329.543133][T16093] hid-rmi 0003:17EF:6085.003C: probe with driver hid-rmi failed with error -22 [ 1329.785971][T16093] usb 8-1: USB disconnect, device number 20 [ 1329.908934][T23444] overlay: ./file0 is not a directory [ 1330.778020][T23451] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4770'. [ 1331.058680][T23451] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1331.321678][T23461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.023394][ T5901] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1332.101118][T23484] »»»»»» speed is unknown, defaulting to 1000 [ 1332.473455][ T5901] usb 8-1: Using ep0 maxpacket: 8 [ 1332.509112][ T5901] usb 8-1: config 64 has an invalid interface number: 19 but max is 0 [ 1332.529330][ T5901] usb 8-1: config 64 has no interface number 0 [ 1332.603370][ T5901] usb 8-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1332.623483][ T5901] usb 8-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1332.637877][ T5901] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1332.692070][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.715305][ T5901] usb 8-1: probing VID:PID(2201:012C) [ 1332.721586][ T5901] usb 8-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1332.753434][ T5901] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1332.779513][T23484] »»»»»» speed is unknown, defaulting to 1000 [ 1332.779513][T23490] »»»»»» speed is unknown, defaulting to 1000 [ 1332.795135][ T5901] vub300 8-1:64.19: probe with driver vub300 failed with error -22 [ 1332.922532][ T5901] usb 8-1: USB disconnect, device number 21 [ 1332.968083][T23490] »»»»»» speed is unknown, defaulting to 1000 [ 1333.300449][T23502] fuse: Bad value for 'fd' [ 1334.275923][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1334.290789][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1334.290991][T23519] fuse: Bad value for 'fd' [ 1336.980916][ T5874] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1337.193854][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 1337.299353][ T5874] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1337.346769][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.854045][ T5874] usb 2-1: config 0 descriptor?? [ 1340.017439][ T5874] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1340.043620][ T5874] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1340.060251][ T5874] usb 2-1: USB disconnect, device number 120 [ 1340.222985][T23561] fuse: Bad value for 'fd' [ 1341.353262][T23572] overlayfs: failed to clone upperpath [ 1342.209607][ T25] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1343.196182][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1343.232482][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1343.241164][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1343.270089][ T25] usb 2-1: can't read configurations, error -71 [ 1343.707931][T23599] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4812'. [ 1345.528243][T23625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.966582][T23638] XFS (nullb0): Invalid superblock magic number [ 1346.421492][ T29] audit: type=1400 audit(1741154940.244:829): avc: denied { connect } for pid=23657 comm="syz.4.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1346.528711][T23667] veth0_to_bond: entered promiscuous mode [ 1346.577678][T23658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4826'. [ 1346.591974][T23670] netlink: 'syz.1.4830': attribute type 10 has an invalid length. [ 1346.605682][T23670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.738236][T23670] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1346.782665][T23677] FAULT_INJECTION: forcing a failure. [ 1346.782665][T23677] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.796246][T23677] CPU: 0 UID: 0 PID: 23677 Comm: syz.5.4831 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1346.796270][T23677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1346.796280][T23677] Call Trace: [ 1346.796286][T23677] [ 1346.796293][T23677] dump_stack_lvl+0x16c/0x1f0 [ 1346.796319][T23677] should_fail_ex+0x50a/0x650 [ 1346.796345][T23677] ? fs_reclaim_acquire+0xae/0x150 [ 1346.796373][T23677] should_failslab+0xc2/0x120 [ 1346.796393][T23677] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1346.796408][T23677] ? alloc_vfsmnt+0x23/0x6f0 [ 1346.796430][T23677] alloc_vfsmnt+0x23/0x6f0 [ 1346.796449][T23677] clone_mnt+0x6d/0xf90 [ 1346.796472][T23677] ? is_subdir+0x1a8/0x3e0 [ 1346.796495][T23677] copy_tree+0x39e/0x9c0 [ 1346.796520][T23677] copy_mnt_ns+0x1b5/0xa70 [ 1346.796539][T23677] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 1346.796557][T23677] ? create_new_namespaces+0x30/0xad0 [ 1346.796588][T23677] create_new_namespaces+0xd3/0xad0 [ 1346.796614][T23677] ? bpf_lsm_capable+0x9/0x10 [ 1346.796634][T23677] ? security_capable+0x7e/0x260 [ 1346.796662][T23677] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1346.796691][T23677] ksys_unshare+0x45d/0xa40 [ 1346.796710][T23677] ? __pfx_ksys_unshare+0x10/0x10 [ 1346.796729][T23677] ? ksys_write+0x1ba/0x250 [ 1346.796764][T23677] __x64_sys_unshare+0x31/0x40 [ 1346.796792][T23677] do_syscall_64+0xcd/0x250 [ 1346.796817][T23677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.796840][T23677] RIP: 0033:0x7fd01818d169 [ 1346.796855][T23677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.796871][T23677] RSP: 002b:00007fd01901b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1346.796886][T23677] RAX: ffffffffffffffda RBX: 00007fd0183a6080 RCX: 00007fd01818d169 [ 1346.796896][T23677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 1346.796905][T23677] RBP: 00007fd01901b090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.796915][T23677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.796923][T23677] R13: 0000000000000000 R14: 00007fd0183a6080 R15: 00007fff2d24b758 [ 1346.796944][T23677] [ 1347.157185][T23670] tmpfs: Unknown parameter '' [ 1347.840977][T23667] xt_hashlimit: size too large, truncated to 1048576 [ 1348.663471][T23658] veth0_to_bond (unregistering): left promiscuous mode [ 1349.173493][T16093] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1349.376470][T16093] usb 8-1: Using ep0 maxpacket: 8 [ 1349.406216][T16093] usb 8-1: config 64 has an invalid interface number: 19 but max is 0 [ 1349.414863][T16093] usb 8-1: config 64 has no interface number 0 [ 1349.421010][T16093] usb 8-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1349.441058][T16093] usb 8-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1349.461262][T16093] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1349.491048][T23658] bond0: (slave bond_slave_0): Releasing backup interface [ 1349.539729][T16093] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.610812][T16093] usb 8-1: probing VID:PID(2201:012C) [ 1349.641154][T16093] usb 8-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1349.656214][T16093] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 1350.433769][T16093] vub300 8-1:64.19: probe with driver vub300 failed with error -22 [ 1350.712404][ T29] audit: type=1400 audit(1741154944.544:830): avc: denied { name_bind } for pid=23722 comm="syz.4.4843" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1350.758416][T16093] usb 8-1: USB disconnect, device number 22 [ 1352.889027][ T29] audit: type=1400 audit(1741154946.614:831): avc: denied { shutdown } for pid=23738 comm="syz.0.4847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1353.634727][T16093] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1353.878911][T16093] usb 2-1: Using ep0 maxpacket: 8 [ 1354.320184][T16093] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 1354.346114][T16093] usb 2-1: config 64 has no interface number 0 [ 1354.366982][T16093] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.392674][T16093] usb 2-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1354.411331][T16093] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1354.623540][T16093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.765440][T16093] usb 2-1: probing VID:PID(2201:012C) [ 1355.753128][T23767] tty tty34: ldisc open failed (-12), clearing slot 33 [ 1355.760362][T16093] usb 2-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1355.793406][T16093] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1355.916975][T16093] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 1356.116153][ T25] usb 2-1: USB disconnect, device number 123 [ 1356.130347][T23770] sch_fq: defrate 0 ignored. [ 1357.297989][T23796] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4861'. [ 1357.302997][ T29] audit: type=1400 audit(1741154951.134:832): avc: denied { bind } for pid=23794 comm="syz.1.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1358.782185][T23821] loop6: detected capacity change from 0 to 524287999 [ 1358.791110][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.800246][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.808858][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.818020][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.826081][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.827037][ T5874] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1358.835243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.851485][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.858051][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4871'. [ 1358.860657][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.888200][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.897380][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.907590][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.916816][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.925504][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.934693][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.953822][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.962991][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1358.971122][T23821] ldm_validate_partition_table(): Disk read failed. [ 1358.984284][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1358.993430][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1359.002251][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1359.011407][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1359.023114][T23821] Dev loop6: unable to read RDB block 0 [ 1359.032027][T23821] loop6: unable to read partition table [ 1359.037874][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 1359.049717][ T5874] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1359.062563][T23821] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1359.071692][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.092189][ T5874] usb 2-1: config 0 descriptor?? [ 1359.133681][T19910] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1359.313909][T19910] usb 8-1: Using ep0 maxpacket: 8 [ 1360.479841][T19910] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1361.464104][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.567254][T19910] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1361.577670][T19910] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1361.588259][T19910] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1361.601687][T19910] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1361.610937][T19910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.850048][T19910] usb 8-1: usb_control_msg returned -71 [ 1361.857941][T19910] usbtmc 8-1:16.0: can't read capabilities [ 1362.000108][T19910] usb 8-1: USB disconnect, device number 23 [ 1362.395796][ T5874] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1362.447547][ T5874] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1362.489597][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.666797][ T5874] usb 2-1: USB disconnect, device number 124 [ 1364.011910][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): left allmulticast mode [ 1364.283225][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): left promiscuous mode [ 1364.294812][ T12] bridge0: port 1(netdevsim2) entered disabled state [ 1364.353641][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.663191][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.834112][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.915242][T23910] overlay: ./file0 is not a directory [ 1368.805971][T23951] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1368.853659][T23950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1368.938321][ T12] bond0 (unregistering): Released all slaves [ 1368.974523][ T12] bond1 (unregistering): Released all slaves [ 1369.205283][ T5831] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1369.221727][T15591] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1370.115075][ T5831] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.136787][T15591] usb 2-1: Using ep0 maxpacket: 8 [ 1370.143081][ T5831] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1370.159309][T15591] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1370.174533][T15591] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.191829][T15591] usb 2-1: config 0 descriptor?? [ 1370.192318][ T5831] usb 8-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1370.254173][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.265018][ T5831] usb 8-1: config 0 descriptor?? [ 1371.047629][ T5831] hid-rmi 0003:17EF:6085.003D: item fetching failed at offset 2/3 [ 1371.982807][ T5831] hid-rmi 0003:17EF:6085.003D: parse failed [ 1371.989386][ T5831] hid-rmi 0003:17EF:6085.003D: probe with driver hid-rmi failed with error -22 [ 1372.006452][ T5831] usb 8-1: USB disconnect, device number 24 [ 1372.086680][ T29] audit: type=1400 audit(1741154965.924:833): avc: denied { watch_sb } for pid=23984 comm="syz.4.4906" path="/275/file0" dev="tmpfs" ino=1478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1372.121862][T23986] fuse: Bad value for 'fd' [ 1372.282443][T15591] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1372.292560][T15591] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1372.355824][T15591] usb 2-1: USB disconnect, device number 125 [ 1373.497374][ T29] audit: type=1400 audit(1741154967.334:834): avc: denied { ioctl } for pid=23991 comm="syz.5.4908" path="socket:[88895]" dev="sockfs" ino=88895 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1373.500378][T23993] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1373.773552][ T5874] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1373.942384][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.007265][ T5874] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1374.050721][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.110806][ T5874] usb 8-1: config 0 descriptor?? [ 1374.125353][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 1374.488060][ T12] hsr_slave_0: left promiscuous mode [ 1374.518812][ T12] hsr_slave_1: left promiscuous mode [ 1374.528717][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1374.561046][ T12] veth1_macvtap: left promiscuous mode [ 1374.584517][ T12] veth0_macvtap: left promiscuous mode [ 1374.598905][ T12] veth1_vlan: left promiscuous mode [ 1374.609736][ T12] veth0_vlan: left promiscuous mode [ 1374.745490][ T5874] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1374.762844][ T5874] pwc: recv_control_msg error -71 req 04 val 1000 [ 1374.773125][ T5874] pwc: recv_control_msg error -71 req 04 val 1300 [ 1374.819747][ T5874] pwc: recv_control_msg error -71 req 04 val 1400 [ 1374.827038][ T5874] pwc: recv_control_msg error -71 req 02 val 2000 [ 1374.835810][ T5874] pwc: recv_control_msg error -71 req 02 val 2100 [ 1374.842789][ T5874] pwc: recv_control_msg error -71 req 04 val 1500 [ 1374.851061][ T5874] pwc: recv_control_msg error -71 req 02 val 2500 [ 1374.874111][ T5874] pwc: recv_control_msg error -71 req 02 val 2400 [ 1374.887515][ T5874] pwc: recv_control_msg error -71 req 02 val 2600 [ 1374.896107][T24050] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1374.905782][ T5874] pwc: recv_control_msg error -71 req 02 val 2900 [ 1374.916236][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 1374.923152][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 1374.942343][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 1374.984331][ T5874] pwc: Registered as video103. [ 1375.002521][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input149 [ 1375.134691][ T5874] usb 8-1: USB disconnect, device number 25 [ 1375.319980][ T29] audit: type=1400 audit(1741154969.154:835): avc: denied { setattr } for pid=24051 comm="syz.5.4921" name="comm" dev="proc" ino=89516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1375.814126][T24058] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4922'. [ 1378.183535][ T29] audit: type=1800 audit(1741154972.014:836): pid=24087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4929" name="file1" dev="tmpfs" ino=1017 res=0 errno=0 [ 1378.363396][ T5831] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1378.514898][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.547364][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1378.587266][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.730180][ T7871] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1378.733853][T24114] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1379.018489][ T5831] usb 2-1: config 0 descriptor?? [ 1379.036024][ T5831] pwc: Askey VC010 type 2 USB webcam detected. [ 1379.438756][ T5831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1379.871092][T13721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1379.883819][T13721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1379.912976][T13721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1379.934196][T13721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1379.964316][T13721] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1379.978392][T13721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1379.986990][T24112] fuse: Bad value for 'fd' [ 1379.999877][ T5831] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1380.012906][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1380.062838][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1380.073490][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1380.073650][ T5831] pwc: recv_control_msg error -71 req 04 val 1000 [ 1380.104070][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1380.204505][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1380.211850][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1380.297466][T24128] »»»»»» speed is unknown, defaulting to 1000 [ 1380.305805][ T5831] pwc: recv_control_msg error -71 req 04 val 1300 [ 1380.374629][ T5831] pwc: recv_control_msg error -71 req 04 val 1400 [ 1380.420338][ T5831] pwc: recv_control_msg error -71 req 02 val 2000 [ 1380.429768][ T5831] pwc: recv_control_msg error -71 req 02 val 2100 [ 1380.443821][ T5831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1380.461478][ T5831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1380.468671][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4935'. [ 1380.490139][ T5831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1380.500214][T24128] »»»»»» speed is unknown, defaulting to 1000 [ 1380.505993][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4935'. [ 1380.526675][ T5831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1380.574173][ T5831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1380.613126][ T5831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1380.639314][ T5831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1380.655641][ T5831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1380.670422][ T5831] pwc: Registered as video103. [ 1380.679928][ T5831] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input150 [ 1380.757706][ T5831] usb 2-1: USB disconnect, device number 126 [ 1380.794855][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4935'. [ 1380.830038][T24138] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4935'. [ 1381.060382][T24128] chnl_net:caif_netlink_parms(): no params data found [ 1382.461327][T13721] Bluetooth: hci5: command tx timeout [ 1382.932449][T24171] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1382.938543][T24171] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1382.964916][T24128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.972217][T24128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.987373][T24128] bridge_slave_0: entered allmulticast mode [ 1382.996048][T24128] bridge_slave_0: entered promiscuous mode [ 1383.006759][T24128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.017193][T24128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.028256][T24128] bridge_slave_1: entered allmulticast mode [ 1383.055820][T24128] bridge_slave_1: entered promiscuous mode [ 1383.183439][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1383.199538][ T7858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.233770][T24128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.263219][T24128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.364080][ T7858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.945297][T24196] overlayfs: failed to clone upperpath [ 1383.967090][T24128] team0: Port device team_slave_0 added [ 1383.976645][T24128] team0: Port device team_slave_1 added [ 1384.027931][ T7858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.068672][T24128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1384.127042][T24128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.156659][T24128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.305271][ T7858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.846059][T24128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.853196][T24128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.883505][T24128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.943110][T24128] hsr_slave_0: entered promiscuous mode [ 1384.960020][T24128] hsr_slave_1: entered promiscuous mode [ 1384.982129][T24128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1385.001881][T24128] Cannot create hsr debugfs directory [ 1386.448410][ T7858]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.457813][ T7858] bond_slave_0: left promiscuous mode [ 1386.467372][ T7858]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.476228][ T7858] bond_slave_1: left promiscuous mode [ 1386.482363][ T7858]  (unregistering): Released all slaves [ 1386.533537][T19910] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1386.686511][T19910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.727558][T19910] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1386.738904][T19910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.761917][T19910] usb 2-1: config 0 descriptor?? [ 1386.829869][T19910] pwc: Askey VC010 type 2 USB webcam detected. [ 1386.968692][T24230] pimreg: entered allmulticast mode [ 1386.974523][T24231] pimreg: left allmulticast mode [ 1387.009500][ T7858] : left promiscuous mode [ 1387.138361][ T7858] tipc: Disabling bearer [ 1387.155733][ T7858] tipc: Left network mode [ 1387.183556][T19910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1387.390910][T19910] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1387.399879][T19910] pwc: recv_control_msg error -71 req 04 val 1000 [ 1387.409872][T19910] pwc: recv_control_msg error -71 req 04 val 1300 [ 1387.428099][T19910] pwc: recv_control_msg error -71 req 04 val 1400 [ 1387.444390][T19910] pwc: recv_control_msg error -71 req 02 val 2000 [ 1387.453626][T19910] pwc: recv_control_msg error -71 req 02 val 2100 [ 1387.473347][T19910] pwc: recv_control_msg error -71 req 04 val 1500 [ 1387.480078][T19910] pwc: recv_control_msg error -71 req 02 val 2500 [ 1387.493618][T19910] pwc: recv_control_msg error -71 req 02 val 2400 [ 1387.512772][T19910] pwc: recv_control_msg error -71 req 02 val 2600 [ 1387.520209][T19910] pwc: recv_control_msg error -71 req 02 val 2900 [ 1387.532622][T24128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1387.543656][T19910] pwc: recv_control_msg error -71 req 02 val 2800 [ 1387.552399][T24128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1387.554439][T19910] pwc: recv_control_msg error -71 req 04 val 1100 [ 1387.579862][T24128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1387.582887][T19910] pwc: recv_control_msg error -71 req 04 val 1200 [ 1387.596380][T24128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1387.606961][T19910] pwc: Registered as video103. [ 1387.612178][T19910] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151 [ 1387.634586][T19910] usb 2-1: USB disconnect, device number 127 [ 1387.812768][T24128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.178609][T24128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.420240][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.427369][ T7871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.483128][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.490286][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.507414][T24263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4948'. [ 1388.734886][T24128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.301737][T24128] veth0_vlan: entered promiscuous mode [ 1389.449043][T24128] veth1_vlan: entered promiscuous mode [ 1389.509540][T24128] veth0_macvtap: entered promiscuous mode [ 1389.746094][T24128] veth1_macvtap: entered promiscuous mode [ 1390.064755][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.075357][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.085356][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.095903][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.105853][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.116430][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.126717][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.137346][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.147317][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1390.158102][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.168971][T24128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.204707][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.219310][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.229504][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.240211][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.260870][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.284204][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.307948][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.357161][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.377567][T24128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1390.402830][T24128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1390.432172][T24128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.471405][T24128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.490479][T24128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.499715][T24128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.508579][T24128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.107965][T24310] fuse: Bad value for 'fd' [ 1391.913227][T24322] fuse: Bad value for 'fd' [ 1392.144549][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1392.840050][T24328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4959'. [ 1395.642050][T24363] nfs: Unknown parameter 'ntext' [ 1395.651195][T24363] /dev/nullb0: Can't lookup blockdev [ 1397.799758][T24382] xt_bpf: check failed: parse error [ 1397.934096][T24387] fuse: Bad value for 'fd' [ 1398.883948][T24395] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1398.938851][T24399] 9pnet_fd: Insufficient options for proto=fd [ 1398.996809][T24404] vlan2: entered allmulticast mode [ 1399.002434][T24404] bond0: entered allmulticast mode [ 1399.008735][T24404] bond_slave_1: entered allmulticast mode [ 1399.019765][T24404] bond0: left allmulticast mode [ 1399.025849][T24404] bond_slave_1: left allmulticast mode [ 1401.024290][T24424] IPVS: stopping master sync thread 24425 ... [ 1401.699082][T24448] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1403.527366][T24519] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1405.272795][ T29] audit: type=1400 audit(1741154999.104:837): avc: denied { read } for pid=24551 comm="syz.4.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1407.991991][T24565] No control pipe specified [ 1409.413399][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1411.549554][ T29] audit: type=1400 audit(1741155005.364:838): avc: denied { bind } for pid=24587 comm="syz.4.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1413.429057][T24605] Cannot find add_set index 3 as target [ 1413.437469][T24606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1414.269838][T24619] gfs2: gfs2 mount does not exist [ 1414.275601][ T29] audit: type=1400 audit(1741155008.104:839): avc: denied { mounton } for pid=24618 comm="syz.4.5018" path="/349/file0" dev="tmpfs" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1417.652833][T24644] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1417.652833][T24644] The task syz.4.5028 (24644) triggered the difference, watch for misbehavior. [ 1420.287287][T24671] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1420.298517][T24671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1420.309459][T24671] overlayfs: failed to resolve './file0': -2 [ 1422.140368][ T29] audit: type=1804 audit(1741155015.974:840): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.5040" name="file0" dev="tmpfs" ino=1987 res=1 errno=0 [ 1422.162756][ T29] audit: type=1804 audit(1741155015.974:841): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.5040" name="file0" dev="tmpfs" ino=1987 res=1 errno=0 [ 1422.210781][T24684] No source specified [ 1422.855897][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.539196][ T29] audit: type=1400 audit(1741155017.374:842): avc: denied { accept } for pid=24703 comm="syz.4.5045" lport=38026 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1434.558331][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1438.503245][T24822] overlayfs: failed to clone upperpath [ 1444.613423][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1446.054603][T24873] »»»»»» speed is unknown, defaulting to 1000 [ 1446.458293][T24873] »»»»»» speed is unknown, defaulting to 1000 [ 1446.493894][ T29] audit: type=1400 audit(1741155040.274:843): avc: denied { associate } for pid=24869 comm="syz.4.5093" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1449.155427][T24897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5100'. [ 1449.170141][T24897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1449.195489][T24897] macvlan2: entered promiscuous mode [ 1449.200846][T24897] macvlan2: entered allmulticast mode [ 1449.207449][T24897] bond_slave_1: entered promiscuous mode [ 1449.213134][T24897] bond0: entered allmulticast mode [ 1449.218439][T24897] bond_slave_1: entered allmulticast mode [ 1449.224197][T24897] bond0: entered promiscuous mode [ 1449.229648][T24897] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1449.239315][T24897] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1454.968440][T24938] fuse: Bad value for 'fd' [ 1456.146735][T24947] fuse: Unknown parameter 'f$0x0000000000000008' [ 1459.705688][T24967] overlay: ./file0 is not a directory [ 1467.026198][T25026] netlink: 'syz.4.5138': attribute type 33 has an invalid length. [ 1467.039109][T25026] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5138'. [ 1468.131232][T25039] overlay: ./file0 is not a directory [ 1468.799604][T25043] overlayfs: failed to clone upperpath [ 1470.169833][T25052] overlay: ./file0 is not a directory [ 1470.718068][T25054] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1475.348882][T25067] overlayfs: failed to clone upperpath [ 1477.570882][ T29] audit: type=1800 audit(1741155071.404:844): pid=25076 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5156" name="nullb0" dev="tmpfs" ino=604 res=0 errno=0 [ 1477.655651][T25080] No control pipe specified [ 1477.691360][T25082] fuse: Bad value for 'fd' [ 1478.735438][T25088] overlayfs: failed to clone upperpath [ 1481.831497][T25104] No control pipe specified [ 1481.870943][T25106] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1484.294897][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.949637][ T29] audit: type=1326 audit(1741155078.384:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1484.973281][ T29] audit: type=1326 audit(1741155078.384:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1484.997005][ T29] audit: type=1326 audit(1741155078.384:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.020680][ T29] audit: type=1326 audit(1741155078.384:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.044527][ T29] audit: type=1326 audit(1741155078.384:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.068611][ T29] audit: type=1326 audit(1741155078.384:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.092224][ T29] audit: type=1326 audit(1741155078.384:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.115734][ T29] audit: type=1326 audit(1741155078.384:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.139300][ T29] audit: type=1326 audit(1741155078.384:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.204801][ T29] audit: type=1326 audit(1741155078.384:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25123 comm="syz.4.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7ffc0000 [ 1485.237244][T25128] No control pipe specified [ 1487.736393][T25153] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5180'. [ 1490.307954][T25179] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1492.568547][T25187] overlay: Unknown parameter 'pcr' [ 1493.626522][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1493.626537][ T29] audit: type=1326 audit(1741155087.464:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.4.5197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa4d8d169 code=0x7fc00000 [ 1493.660019][T25198] geneve2: entered promiscuous mode [ 1494.352986][ T29] audit: type=1326 audit(1741155088.184:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25196 comm="syz.4.5197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fa4d8d169 code=0x7fc00000 [ 1494.421380][T25202] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1495.772798][T25214] netlink: set zone limit has 4 unknown bytes [ 1497.019400][ T29] audit: type=1400 audit(1741155090.854:923): avc: denied { ioctl } for pid=25227 comm="syz.4.5206" path="socket:[92719]" dev="sockfs" ino=92719 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1497.799452][T25227] delete_channel: no stack [ 1501.127424][ T29] audit: type=1800 audit(1741155094.964:924): pid=25263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5213" name="nullb0" dev="tmpfs" ino=604 res=0 errno=0 [ 1505.081043][T25299] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.5222'. [ 1505.090490][T25299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1506.942006][T25316] overlayfs: failed to resolve './file1': -2 [ 1509.313847][T25338] veth0_to_team: entered promiscuous mode [ 1509.319649][T25338] veth0_to_team: entered allmulticast mode [ 1509.912187][T25341] overlayfs: failed to resolve './file1': -2 [ 1515.023752][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1515.096205][T25388] overlayfs: failed to clone upperpath [ 1520.121809][T25421] 9pnet_fd: Insufficient options for proto=fd [ 1523.294241][T25456] overlayfs: failed to clone upperpath [ 1526.394985][T25470] overlay: ./file0 is not a directory [ 1529.550225][T25493] overlay: ./file0 is not a directory [ 1532.414581][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5293'. [ 1535.310455][T25539] overlayfs: failed to clone upperpath [ 1544.356620][T25610] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1545.813915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.342762][T25623] overlayfs: failed to clone upperpath [ 1546.373431][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 1546.391389][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1546.399565][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.886730][ T30] task:kworker/0:0 state:D stack:20752 pid:8 tgid:8 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1546.898887][ T30] Workqueue: events rfkill_sync_work [ 1546.904262][ T30] Call Trace: [ 1546.907545][ T30] [ 1546.910486][ T30] __schedule+0xf43/0x5890 [ 1546.914956][ T30] ? __pfx_mark_lock+0x10/0x10 [ 1546.919746][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 1546.924987][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1546.930793][ T30] ? find_held_lock+0x2d/0x110 [ 1546.935785][ T30] ? __pfx___schedule+0x10/0x10 [ 1546.940743][ T30] ? schedule+0x298/0x350 [ 1546.945190][ T30] ? __pfx_lock_release+0x10/0x10 [ 1546.950243][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.955574][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1546.960777][ T30] schedule+0xe7/0x350 [ 1546.964912][ T30] schedule_preempt_disabled+0x13/0x30 [ 1546.970372][ T30] __mutex_lock+0x6bd/0xb10 [ 1546.974911][ T30] ? rfkill_sync_work+0x1b/0x40 [ 1546.979787][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1546.984911][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1546.990115][ T30] ? process_one_work+0x921/0x1ba0 [ 1546.995465][ T30] ? rfkill_sync_work+0x1b/0x40 [ 1547.000328][ T30] ? rcu_is_watching+0x12/0xc0 [ 1547.005182][ T30] rfkill_sync_work+0x1b/0x40 [ 1547.009894][ T30] process_one_work+0x9c5/0x1ba0 [ 1547.015016][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1547.020676][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1547.026136][ T30] ? assign_work+0x1a0/0x250 [ 1547.030733][ T30] worker_thread+0x6c8/0xf00 [ 1547.035382][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1547.040497][ T30] kthread+0x3af/0x750 [ 1547.044638][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.049247][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.054174][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.058792][ T30] ret_from_fork+0x45/0x80 [ 1547.063493][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.068732][ T30] ret_from_fork_asm+0x1a/0x30 [ 1547.073715][ T30] [ 1547.076837][ T30] INFO: task kworker/0:5:5874 blocked for more than 144 seconds. [ 1547.084911][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1547.092533][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.101614][ T30] task:kworker/0:5 state:D stack:22400 pid:5874 tgid:5874 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1547.113864][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1547.120604][ T30] Call Trace: [ 1547.124327][ T30] [ 1547.127341][ T30] __schedule+0xf43/0x5890 [ 1547.131776][ T30] ? __pfx_mark_lock+0x10/0x10 [ 1547.136781][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1547.142211][ T30] ? find_held_lock+0x2d/0x110 [ 1547.147086][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.151933][ T30] ? schedule+0x298/0x350 [ 1547.156308][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.163277][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1547.168494][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1547.173879][ T30] schedule+0xe7/0x350 [ 1547.177948][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.183453][ T30] __mutex_lock+0x6bd/0xb10 [ 1547.189431][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.194033][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1547.200369][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1547.205435][ T30] ? rcu_is_watching+0x12/0xc0 [ 1547.210197][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1547.215502][ T30] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1547.221850][ T30] rfkill_global_led_trigger_worker+0x1b/0x160 [ 1547.228044][ T30] process_one_work+0x9c5/0x1ba0 [ 1547.233001][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1547.238872][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1547.244331][ T30] ? assign_work+0x1a0/0x250 [ 1547.248942][ T30] worker_thread+0x6c8/0xf00 [ 1547.253664][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1547.258789][ T30] kthread+0x3af/0x750 [ 1547.262867][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.267508][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.272014][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.276704][ T30] ret_from_fork+0x45/0x80 [ 1547.281135][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.285767][ T30] ret_from_fork_asm+0x1a/0x30 [ 1547.290539][ T30] [ 1547.293705][ T30] INFO: task kworker/u8:13:7858 blocked for more than 144 seconds. [ 1547.301595][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1547.309335][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.318104][ T30] task:kworker/u8:13 state:D stack:22224 pid:7858 tgid:7858 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1547.330216][ T30] Workqueue: netns cleanup_net [ 1547.335225][ T30] Call Trace: [ 1547.338502][ T30] [ 1547.341420][ T30] __schedule+0xf43/0x5890 [ 1547.346069][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.351276][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.356549][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.361401][ T30] ? schedule+0x298/0x350 [ 1547.365808][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.370846][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1547.376398][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.380975][ T30] ? schedule+0x1fd/0x350 [ 1547.385398][ T30] schedule+0xe7/0x350 [ 1547.389513][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.397073][ T30] __mutex_lock+0x6bd/0xb10 [ 1547.401605][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1547.406733][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1547.411760][ T30] ? device_del+0x6b6/0x9f0 [ 1547.416375][ T30] ? __pfx_device_del+0x10/0x10 [ 1547.421231][ T30] ? rfkill_unregister+0xde/0x2c0 [ 1547.426378][ T30] rfkill_unregister+0xde/0x2c0 [ 1547.431233][ T30] wiphy_unregister+0x134/0xc20 [ 1547.436141][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 1547.441542][ T30] ? rate_control_deinitialize+0x113/0x160 [ 1547.447421][ T30] ieee80211_unregister_hw+0x248/0x3a0 [ 1547.452932][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 1547.457868][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1547.463084][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 1547.468541][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 1547.474334][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1547.479537][ T30] ops_exit_list+0xb0/0x180 [ 1547.484170][ T30] cleanup_net+0x5c6/0xb30 [ 1547.488605][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1547.493636][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.498150][ T30] ? process_one_work+0x921/0x1ba0 [ 1547.503349][ T30] process_one_work+0x9c5/0x1ba0 [ 1547.508294][ T30] ? __pfx_rds_connect_worker+0x10/0x10 [ 1547.513916][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1547.519332][ T30] ? assign_work+0x1a0/0x250 [ 1547.524004][ T30] worker_thread+0x6c8/0xf00 [ 1547.528624][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1547.533849][ T30] kthread+0x3af/0x750 [ 1547.537933][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.542522][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.547115][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.551728][ T30] ret_from_fork+0x45/0x80 [ 1547.556190][ T30] ? __pfx_kthread+0x10/0x10 [ 1547.560777][ T30] ret_from_fork_asm+0x1a/0x30 [ 1547.565803][ T30] [ 1547.569039][ T30] INFO: task syz-executor:24128 blocked for more than 144 seconds. [ 1547.577046][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1547.601603][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.612130][ T30] task:syz-executor state:D stack:23424 pid:24128 tgid:24128 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1547.624260][ T30] Call Trace: [ 1547.627535][ T30] [ 1547.630493][ T30] __schedule+0xf43/0x5890 [ 1547.635086][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.640411][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.645925][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.650778][ T30] ? schedule+0x298/0x350 [ 1547.657164][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.662190][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1547.667704][ T30] ? lock_acquire+0x2f/0xb0 [ 1547.672208][ T30] ? schedule+0x1fd/0x350 [ 1547.676666][ T30] schedule+0xe7/0x350 [ 1547.680745][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.686330][ T30] __mutex_lock+0x6bd/0xb10 [ 1547.690835][ T30] ? rfkill_fop_open+0x13b/0x750 [ 1547.695845][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1547.700877][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 1547.706406][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1547.711693][ T30] ? rfkill_fop_open+0x13b/0x750 [ 1547.716666][ T30] rfkill_fop_open+0x13b/0x750 [ 1547.721430][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1547.727196][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1547.732497][ T30] misc_open+0x35a/0x420 [ 1547.739628][ T30] ? __pfx_misc_open+0x10/0x10 [ 1547.744468][ T30] chrdev_open+0x237/0x6a0 [ 1547.748886][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.753870][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1547.760651][ T30] do_dentry_open+0x735/0x1c40 [ 1547.765488][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.770434][ T30] ? inode_permission+0xdd/0x5f0 [ 1547.775502][ T30] vfs_open+0x82/0x3f0 [ 1547.779595][ T30] ? may_open+0x1f2/0x400 [ 1547.784006][ T30] path_openat+0x1e88/0x2d80 [ 1547.788611][ T30] ? __pfx_path_openat+0x10/0x10 [ 1547.793638][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.798854][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1547.804227][ T30] ? find_held_lock+0x2d/0x110 [ 1547.808996][ T30] do_filp_open+0x20c/0x470 [ 1547.813584][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1547.818605][ T30] ? find_held_lock+0x2d/0x110 [ 1547.823413][ T30] ? alloc_fd+0x41f/0x760 [ 1547.827752][ T30] do_sys_openat2+0x17a/0x1e0 [ 1547.832411][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.837667][ T30] ? kmem_cache_free+0x179/0x4d0 [ 1547.842600][ T30] ? security_file_free+0xb9/0x180 [ 1547.847749][ T30] ? __fput+0x68d/0xb70 [ 1547.851904][ T30] __x64_sys_openat+0x175/0x210 [ 1547.856867][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1547.862261][ T30] do_syscall_64+0xcd/0x250 [ 1547.866806][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.872703][ T30] RIP: 0033:0x7f1be818bad0 [ 1547.877154][ T30] RSP: 002b:00007fffa88f4b40 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1547.885606][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1be818bad0 [ 1547.893663][ T30] RDX: 0000000000000002 RSI: 00007f1be820ed21 RDI: 00000000ffffff9c [ 1547.901643][ T30] RBP: 00007f1be820ed21 R08: 0000000000000000 R09: 0000000000000000 [ 1547.909666][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 1547.917687][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1547.925728][ T30] [ 1547.928865][ T30] INFO: task syz.7.4938:24163 blocked for more than 144 seconds. [ 1547.936888][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1547.944797][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.954760][ T30] task:syz.7.4938 state:D stack:24208 pid:24163 tgid:24163 ppid:20416 task_flags:0x400040 flags:0x00004004 [ 1547.966759][ T30] Call Trace: [ 1547.970033][ T30] [ 1547.972946][ T30] __schedule+0xf43/0x5890 [ 1547.977504][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1547.982721][ T30] ? __pfx_lockdep_lock+0x10/0x10 [ 1547.987845][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.992697][ T30] ? schedule+0x298/0x350 [ 1547.997071][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.002100][ T30] ? lock_acquire+0x2f/0xb0 [ 1548.006689][ T30] ? schedule+0x1fd/0x350 [ 1548.011031][ T30] schedule+0xe7/0x350 [ 1548.015168][ T30] schedule_timeout+0x244/0x280 [ 1548.020043][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1548.025509][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1548.030708][ T30] __wait_for_common+0x3e1/0x600 [ 1548.035691][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1548.041093][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1548.046653][ T30] ? lock_acquire+0x2f/0xb0 [ 1548.051157][ T30] ? __flush_work+0x4db/0xcd0 [ 1548.055988][ T30] ? __flush_work+0x4db/0xcd0 [ 1548.060683][ T30] __flush_work+0x7d8/0xcd0 [ 1548.065290][ T30] ? nfc_unregister_device+0x60/0x330 [ 1548.070691][ T30] ? __pfx___flush_work+0x10/0x10 [ 1548.075795][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 1548.081095][ T30] ? __pfx___might_resched+0x10/0x10 [ 1548.086489][ T30] __cancel_work_sync+0x10c/0x130 [ 1548.091542][ T30] rfkill_unregister+0x95/0x2c0 [ 1548.096517][ T30] nfc_unregister_device+0x94/0x330 [ 1548.101729][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1548.107549][ T30] virtual_ncidev_close+0x4b/0xa0 [ 1548.112579][ T30] __fput+0x3ff/0xb70 [ 1548.116594][ T30] task_work_run+0x14e/0x250 [ 1548.121199][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1548.126429][ T30] ? __pfx___do_sys_close_range+0x10/0x10 [ 1548.132169][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1548.138352][ T30] do_syscall_64+0xda/0x250 [ 1548.142878][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.148859][ T30] RIP: 0033:0x7ff40b58d169 [ 1548.153301][ T30] RSP: 002b:00007ffc2b95a4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1548.161717][ T30] RAX: 0000000000000000 RBX: 00007ff40b7a7ba0 RCX: 00007ff40b58d169 [ 1548.169773][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1548.177806][ T30] RBP: 00007ff40b7a7ba0 R08: 00000000000011d0 R09: 000000162b95a7ef [ 1548.185867][ T30] R10: 00007ff40b7a7ac0 R11: 0000000000000246 R12: 000000000015188b [ 1548.193882][ T30] R13: 00007ff40b7a6320 R14: ffffffffffffffff R15: 00007ffc2b95a610 [ 1548.201841][ T30] [ 1548.209481][ T30] INFO: task syz.5.4939:24171 blocked for more than 145 seconds. [ 1548.218387][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1548.226461][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1548.235227][ T30] task:syz.5.4939 state:D stack:27520 pid:24171 tgid:24170 ppid:19758 task_flags:0x400140 flags:0x00004006 [ 1548.247274][ T30] Call Trace: [ 1548.250549][ T30] [ 1548.254703][ T30] __schedule+0xf43/0x5890 [ 1548.259120][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.264558][ T30] ? __pfx___schedule+0x10/0x10 [ 1548.269412][ T30] ? schedule+0x298/0x350 [ 1548.278248][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.283926][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1548.289412][ T30] ? lock_acquire+0x2f/0xb0 [ 1548.294224][ T30] ? schedule+0x1fd/0x350 [ 1548.298565][ T30] schedule+0xe7/0x350 [ 1548.302617][ T30] schedule_preempt_disabled+0x13/0x30 [ 1548.308175][ T30] __mutex_lock+0x6bd/0xb10 [ 1548.312690][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 1548.317394][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1548.322424][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1548.327795][ T30] ? rfkill_set_block+0x198/0x560 [ 1548.332825][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.337938][ T30] ? nfc_dev_down+0x2d/0x2e0 [ 1548.342541][ T30] nfc_dev_down+0x2d/0x2e0 [ 1548.347046][ T30] nfc_rfkill_set_block+0x39/0xe0 [ 1548.352077][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1548.357859][ T30] rfkill_set_block+0x203/0x560 [ 1548.362717][ T30] rfkill_fop_write+0x2ce/0x570 [ 1548.368704][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1548.374705][ T30] ? __pfx_bpf_lsm_inode_getlsmprop+0x10/0x10 [ 1548.380787][ T30] ? security_file_permission+0x71/0x210 [ 1548.387523][ T30] ? rw_verify_area+0xcf/0x680 [ 1548.392308][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1548.397773][ T30] vfs_writev+0x6da/0xdd0 [ 1548.402109][ T30] ? futex_wait+0x121/0x380 [ 1548.406702][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 1548.411588][ T30] ? find_held_lock+0x2d/0x110 [ 1548.416444][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.421484][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1548.426766][ T30] ? __fget_files+0x206/0x3a0 [ 1548.431447][ T30] ? do_writev+0x297/0x340 [ 1548.435933][ T30] do_writev+0x297/0x340 [ 1548.440181][ T30] ? __pfx_do_writev+0x10/0x10 [ 1548.445034][ T30] do_syscall_64+0xcd/0x250 [ 1548.449543][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.455731][ T30] RIP: 0033:0x7fd01818d169 [ 1548.460158][ T30] RSP: 002b:00007fd01903c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1548.468719][ T30] RAX: ffffffffffffffda RBX: 00007fd0183a5fa0 RCX: 00007fd01818d169 [ 1548.476890][ T30] RDX: 0000000000000001 RSI: 0000400000000440 RDI: 000000000000000d [ 1548.484996][ T30] RBP: 00007fd01820e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.492970][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.501053][ T30] R13: 0000000000000000 R14: 00007fd0183a5fa0 R15: 00007fff2d24b758 [ 1548.509139][ T30] [ 1548.512402][ T30] INFO: task syz.1.4956:24309 blocked for more than 145 seconds. [ 1548.520727][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1548.528534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1548.537570][ T30] task:syz.1.4956 state:D stack:28416 pid:24309 tgid:24308 ppid:17100 task_flags:0x400040 flags:0x00004004 [ 1548.549556][ T30] Call Trace: [ 1548.552852][ T30] [ 1548.555894][ T30] __schedule+0xf43/0x5890 [ 1548.560313][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.565576][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.570790][ T30] ? __pfx___schedule+0x10/0x10 [ 1548.575769][ T30] ? schedule+0x298/0x350 [ 1548.580100][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.585182][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1548.590649][ T30] ? lock_acquire+0x2f/0xb0 [ 1548.595290][ T30] ? schedule+0x1fd/0x350 [ 1548.599624][ T30] schedule+0xe7/0x350 [ 1548.604212][ T30] schedule_preempt_disabled+0x13/0x30 [ 1548.609689][ T30] __mutex_lock+0x6bd/0xb10 [ 1548.615518][ T30] ? misc_open+0x63/0x420 [ 1548.619859][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1548.625660][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1548.630970][ T30] ? chrdev_open+0x10e/0x6a0 [ 1548.635680][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.640714][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1548.647135][ T30] ? __pfx_misc_open+0x10/0x10 [ 1548.651906][ T30] ? misc_open+0x63/0x420 [ 1548.656341][ T30] misc_open+0x63/0x420 [ 1548.660495][ T30] ? __pfx_misc_open+0x10/0x10 [ 1548.665321][ T30] chrdev_open+0x237/0x6a0 [ 1548.669734][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1548.674774][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1548.681563][ T30] do_dentry_open+0x735/0x1c40 [ 1548.686369][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1548.691306][ T30] ? inode_permission+0xdd/0x5f0 [ 1548.696367][ T30] vfs_open+0x82/0x3f0 [ 1548.700438][ T30] ? may_open+0x1f2/0x400 [ 1548.704811][ T30] path_openat+0x1e88/0x2d80 [ 1548.709422][ T30] ? __pfx_path_openat+0x10/0x10 [ 1548.714485][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.719706][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1548.725067][ T30] ? find_held_lock+0x2d/0x110 [ 1548.729830][ T30] do_filp_open+0x20c/0x470 [ 1548.734490][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1548.739515][ T30] ? find_held_lock+0x2d/0x110 [ 1548.744360][ T30] ? alloc_fd+0x41f/0x760 [ 1548.748689][ T30] do_sys_openat2+0x17a/0x1e0 [ 1548.753482][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1548.758683][ T30] ? putname+0x13c/0x180 [ 1548.762924][ T30] __x64_sys_openat+0x175/0x210 [ 1548.769628][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1548.778743][ T30] do_syscall_64+0xcd/0x250 [ 1548.783364][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.789267][ T30] RIP: 0033:0x7f62b9b8d169 [ 1548.793808][ T30] RSP: 002b:00007f62ba9df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1548.802235][ T30] RAX: ffffffffffffffda RBX: 00007f62b9da5fa0 RCX: 00007f62b9b8d169 [ 1548.810247][ T30] RDX: 0000000000000042 RSI: 0000400000000300 RDI: ffffffffffffff9c [ 1548.818323][ T30] RBP: 00007f62b9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.826360][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.834451][ T30] R13: 0000000000000000 R14: 00007f62b9da5fa0 R15: 00007fff95760048 [ 1548.842424][ T30] [ 1548.845555][ T30] INFO: task syz.1.4956:24310 blocked for more than 145 seconds. [ 1548.853388][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1548.861029][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1548.869759][ T30] task:syz.1.4956 state:D stack:28416 pid:24310 tgid:24308 ppid:17100 task_flags:0x400140 flags:0x00000004 [ 1548.881745][ T30] Call Trace: [ 1548.885077][ T30] [ 1548.888023][ T30] __schedule+0xf43/0x5890 [ 1548.892450][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.897765][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1548.902989][ T30] ? __pfx___schedule+0x10/0x10 [ 1548.907898][ T30] ? schedule+0x298/0x350 [ 1548.912231][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.917324][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1548.922805][ T30] ? lock_acquire+0x2f/0xb0 [ 1548.927357][ T30] ? schedule+0x1fd/0x350 [ 1548.931708][ T30] schedule+0xe7/0x350 [ 1548.935872][ T30] schedule_preempt_disabled+0x13/0x30 [ 1548.941337][ T30] __mutex_lock+0x6bd/0xb10 [ 1548.946010][ T30] ? misc_open+0x63/0x420 [ 1548.950448][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1548.955661][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1548.961028][ T30] ? chrdev_open+0x10e/0x6a0 [ 1548.965727][ T30] ? __pfx_lock_release+0x10/0x10 [ 1548.970762][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1548.976477][ T30] ? __pfx_misc_open+0x10/0x10 [ 1548.981241][ T30] ? misc_open+0x63/0x420 [ 1548.985621][ T30] misc_open+0x63/0x420 [ 1548.989776][ T30] ? __pfx_misc_open+0x10/0x10 [ 1548.994597][ T30] chrdev_open+0x237/0x6a0 [ 1548.999013][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.004003][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1549.010773][ T30] do_dentry_open+0x735/0x1c40 [ 1549.015689][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.020644][ T30] ? inode_permission+0xdd/0x5f0 [ 1549.025644][ T30] vfs_open+0x82/0x3f0 [ 1549.029722][ T30] ? may_open+0x1f2/0x400 [ 1549.034637][ T30] path_openat+0x1e88/0x2d80 [ 1549.039252][ T30] ? __pfx_path_openat+0x10/0x10 [ 1549.044240][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.049456][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1549.054873][ T30] ? find_held_lock+0x2d/0x110 [ 1549.059640][ T30] do_filp_open+0x20c/0x470 [ 1549.064198][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1549.069254][ T30] ? find_held_lock+0x2d/0x110 [ 1549.074158][ T30] ? alloc_fd+0x41f/0x760 [ 1549.078516][ T30] do_sys_openat2+0x17a/0x1e0 [ 1549.083188][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1549.088440][ T30] ? fput+0x67/0x440 [ 1549.092329][ T30] ? __sys_sendmsg+0x19a/0x220 [ 1549.097313][ T30] __x64_sys_openat+0x175/0x210 [ 1549.102176][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1549.107623][ T30] do_syscall_64+0xcd/0x250 [ 1549.112133][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.118120][ T30] RIP: 0033:0x7f62b9b8d169 [ 1549.122533][ T30] RSP: 002b:00007f62ba9be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1549.130997][ T30] RAX: ffffffffffffffda RBX: 00007f62b9da6080 RCX: 00007f62b9b8d169 [ 1549.139056][ T30] RDX: 0000000000000000 RSI: 0000400000000340 RDI: ffffffffffffff9c [ 1549.147156][ T30] RBP: 00007f62b9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.155250][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.163278][ T30] R13: 0000000000000000 R14: 00007f62b9da6080 R15: 00007fff95760048 [ 1549.171286][ T30] [ 1549.174554][ T30] INFO: task syz-executor:24378 blocked for more than 146 seconds. [ 1549.182728][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1549.190732][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1549.199500][ T30] task:syz-executor state:D stack:28416 pid:24378 tgid:24378 ppid:1 task_flags:0x400040 flags:0x00000000 [ 1549.211494][ T30] Call Trace: [ 1549.214857][ T30] [ 1549.217788][ T30] __schedule+0xf43/0x5890 [ 1549.222200][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.227491][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.232728][ T30] ? __pfx___schedule+0x10/0x10 [ 1549.237652][ T30] ? schedule+0x298/0x350 [ 1549.242001][ T30] ? __pfx_lock_release+0x10/0x10 [ 1549.247086][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1549.252569][ T30] ? lock_acquire+0x2f/0xb0 [ 1549.257256][ T30] ? schedule+0x1fd/0x350 [ 1549.261592][ T30] schedule+0xe7/0x350 [ 1549.265720][ T30] schedule_preempt_disabled+0x13/0x30 [ 1549.271185][ T30] __mutex_lock+0x6bd/0xb10 [ 1549.275737][ T30] ? misc_open+0x63/0x420 [ 1549.280081][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1549.285164][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1549.290460][ T30] ? chrdev_open+0x10e/0x6a0 [ 1549.295151][ T30] ? __pfx_lock_release+0x10/0x10 [ 1549.300203][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1549.306139][ T30] ? __pfx_misc_open+0x10/0x10 [ 1549.310925][ T30] ? misc_open+0x63/0x420 [ 1549.315305][ T30] misc_open+0x63/0x420 [ 1549.319468][ T30] ? __pfx_misc_open+0x10/0x10 [ 1549.324308][ T30] chrdev_open+0x237/0x6a0 [ 1549.328749][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.333815][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1549.340608][ T30] do_dentry_open+0x735/0x1c40 [ 1549.345414][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.350361][ T30] ? inode_permission+0xdd/0x5f0 [ 1549.355344][ T30] vfs_open+0x82/0x3f0 [ 1549.359415][ T30] ? may_open+0x1f2/0x400 [ 1549.363803][ T30] path_openat+0x1e88/0x2d80 [ 1549.368406][ T30] ? __pfx_path_openat+0x10/0x10 [ 1549.373414][ T30] ? handle_mm_fault+0x497/0xaa0 [ 1549.378371][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.383637][ T30] do_filp_open+0x20c/0x470 [ 1549.388149][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1549.393156][ T30] ? find_held_lock+0x2d/0x110 [ 1549.398003][ T30] ? alloc_fd+0x41f/0x760 [ 1549.402335][ T30] do_sys_openat2+0x17a/0x1e0 [ 1549.407079][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1549.412286][ T30] ? fd_install+0x242/0x750 [ 1549.416906][ T30] __x64_sys_openat+0x175/0x210 [ 1549.421764][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1549.427221][ T30] do_syscall_64+0xcd/0x250 [ 1549.431751][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.437794][ T30] RIP: 0033:0x7f79fe58ba51 [ 1549.442261][ T30] RSP: 002b:00007ffd006d57b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1549.450735][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f79fe58ba51 [ 1549.458783][ T30] RDX: 0000000000000002 RSI: 00007f79fe60ec76 RDI: 00000000ffffff9c [ 1549.466795][ T30] RBP: 00007f79fe60ec76 R08: 0000000000000000 R09: 00007f79ff2dd6c0 [ 1549.474860][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1549.482828][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1549.490853][ T30] [ 1549.493964][ T30] INFO: task syz-executor:24380 blocked for more than 146 seconds. [ 1549.501863][ T30] Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1549.509604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1549.518357][ T30] task:syz-executor state:D stack:28416 pid:24380 tgid:24380 ppid:1 task_flags:0x400040 flags:0x00000000 [ 1549.530299][ T30] Call Trace: [ 1549.533671][ T30] [ 1549.536617][ T30] __schedule+0xf43/0x5890 [ 1549.541020][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.546278][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.551497][ T30] ? __pfx___schedule+0x10/0x10 [ 1549.556422][ T30] ? schedule+0x298/0x350 [ 1549.560753][ T30] ? __pfx_lock_release+0x10/0x10 [ 1549.565826][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1549.571302][ T30] ? lock_acquire+0x2f/0xb0 [ 1549.576249][ T30] ? schedule+0x1fd/0x350 [ 1549.580593][ T30] schedule+0xe7/0x350 [ 1549.585019][ T30] schedule_preempt_disabled+0x13/0x30 [ 1549.590489][ T30] __mutex_lock+0x6bd/0xb10 [ 1549.595087][ T30] ? misc_open+0x63/0x420 [ 1549.599418][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1549.604698][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 1549.610020][ T30] ? chrdev_open+0x10e/0x6a0 [ 1549.615339][ T30] ? __pfx_lock_release+0x10/0x10 [ 1549.620381][ T30] ? kobject_get_unless_zero+0x157/0x1e0 [ 1549.626085][ T30] ? __pfx_misc_open+0x10/0x10 [ 1549.630848][ T30] ? misc_open+0x63/0x420 [ 1549.635255][ T30] misc_open+0x63/0x420 [ 1549.639418][ T30] ? __pfx_misc_open+0x10/0x10 [ 1549.644219][ T30] chrdev_open+0x237/0x6a0 [ 1549.648634][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.653850][ T30] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1549.660648][ T30] do_dentry_open+0x735/0x1c40 [ 1549.665502][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1549.670439][ T30] ? inode_permission+0xdd/0x5f0 [ 1549.675435][ T30] vfs_open+0x82/0x3f0 [ 1549.679515][ T30] ? may_open+0x1f2/0x400 [ 1549.683885][ T30] path_openat+0x1e88/0x2d80 [ 1549.688480][ T30] ? __pfx_path_openat+0x10/0x10 [ 1549.693468][ T30] ? handle_mm_fault+0x497/0xaa0 [ 1549.698424][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1549.703674][ T30] do_filp_open+0x20c/0x470 [ 1549.708185][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1549.713212][ T30] ? find_held_lock+0x2d/0x110 [ 1549.718053][ T30] ? alloc_fd+0x41f/0x760 [ 1549.722399][ T30] do_sys_openat2+0x17a/0x1e0 [ 1549.727133][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1549.732337][ T30] ? fd_install+0x242/0x750 [ 1549.736914][ T30] __x64_sys_openat+0x175/0x210 [ 1549.741772][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1549.747211][ T30] do_syscall_64+0xcd/0x250 [ 1549.751725][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.757673][ T30] RIP: 0033:0x7f17c498ba51 [ 1549.762085][ T30] RSP: 002b:00007fff04d85e60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1549.770530][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f17c498ba51 [ 1549.778534][ T30] RDX: 0000000000000002 RSI: 00007f17c4a0ec76 RDI: 00000000ffffff9c [ 1549.786524][ T30] RBP: 00007f17c4a0ec76 R08: 0000000000000000 R09: 00007f17c56dd6c0 [ 1549.794543][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1549.802513][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1549.810535][ T30] [ 1549.816716][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1549.825828][ T30] [ 1549.825828][ T30] Showing all locks held in the system: [ 1549.833592][ T30] 3 locks held by kworker/0:0/8: [ 1549.838530][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1549.849130][ T30] #1: ffffc900000d7d18 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1549.860965][ T30] #2: ffffffff9039aec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 1549.870983][ T30] 1 lock held by khungtaskd/30: [ 1549.875874][ T30] #0: ffffffff8e1bccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1549.885843][ T30] 2 locks held by getty/5572: [ 1549.890511][ T30] #0: ffff8880315730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1549.900326][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1549.910571][ T30] 3 locks held by kworker/0:5/5874: [ 1549.915905][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1549.926410][ T30] #1: ffffc9000442fd18 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1549.939317][ T30] #2: ffffffff9039aec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 1549.950767][ T30] 4 locks held by kworker/u8:13/7858: [ 1549.956199][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1549.966630][ T30] #1: ffffc9000ee9fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1549.976681][ T30] #2: ffffffff8fee1a90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 1549.986111][ T30] #3: ffffffff9039aec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xde/0x2c0 [ 1549.996330][ T30] 2 locks held by syz-executor/24128: [ 1550.001699][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.010212][ T30] #1: ffffffff9039aec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x13b/0x750 [ 1550.020292][ T30] 1 lock held by syz.7.4938/24163: [ 1550.025648][ T30] #0: ffff88804dfc1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 1550.035593][ T30] 2 locks held by syz.5.4939/24171: [ 1550.040781][ T30] #0: ffffffff9039aec8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x168/0x570 [ 1550.050967][ T30] #1: ffff88804dfc1100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 1550.060008][ T30] 1 lock held by syz.1.4956/24309: [ 1550.065161][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.073694][ T30] 1 lock held by syz.1.4956/24310: [ 1550.078810][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.087305][ T30] 1 lock held by syz-executor/24378: [ 1550.092589][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.101090][ T30] 1 lock held by syz-executor/24380: [ 1550.106394][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.114907][ T30] 1 lock held by syz-executor/24558: [ 1550.120184][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.128719][ T30] 1 lock held by syz-executor/24814: [ 1550.134105][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.142584][ T30] 1 lock held by syz-executor/24958: [ 1550.147918][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.156412][ T30] 1 lock held by syz-executor/24960: [ 1550.161682][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.170166][ T30] 1 lock held by syz-executor/25024: [ 1550.175486][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.183974][ T30] 1 lock held by syz-executor/25235: [ 1550.189253][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.197747][ T30] 1 lock held by syz-executor/25399: [ 1550.203029][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.211539][ T30] 1 lock held by syz-executor/25400: [ 1550.217270][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.227231][ T30] 1 lock held by syz-executor/25472: [ 1550.232526][ T30] #0: ffffffff8eec3368 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1550.241034][ T30] 2 locks held by dhcpcd/25630: [ 1550.245928][ T30] #0: ffff888063af2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1550.255694][ T30] #1: ffffffff8e1c8138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 1550.265778][ T30] [ 1550.268112][ T30] ============================================= [ 1550.268112][ T30] [ 1550.281934][ T30] NMI backtrace for cpu 1 [ 1550.281952][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1550.281971][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1550.281978][ T30] Call Trace: [ 1550.281981][ T30] [ 1550.281986][ T30] dump_stack_lvl+0x116/0x1f0 [ 1550.282012][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1550.282031][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1550.282050][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1550.282078][ T30] watchdog+0xf62/0x12b0 [ 1550.282108][ T30] ? __pfx_watchdog+0x10/0x10 [ 1550.282131][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1550.282147][ T30] ? __kthread_parkme+0x148/0x220 [ 1550.282159][ T30] ? __pfx_watchdog+0x10/0x10 [ 1550.282176][ T30] kthread+0x3af/0x750 [ 1550.282189][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.282205][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.282218][ T30] ret_from_fork+0x45/0x80 [ 1550.282233][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.282246][ T30] ret_from_fork_asm+0x1a/0x30 [ 1550.282265][ T30] [ 1550.282269][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1550.394107][ C0] NMI backtrace for cpu 0 [ 1550.394120][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1550.394137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1550.394146][ C0] Workqueue: bat_events batadv_nc_worker [ 1550.394170][ C0] RIP: 0010:__lock_acquire+0xd3b/0x3c40 [ 1550.394190][ C0] Code: c2 29 c1 c1 c2 06 31 ca 01 d8 29 d3 89 d9 89 d3 01 c2 c1 c3 08 31 cb 89 d9 29 d8 01 d3 c1 c1 10 89 de 31 c8 89 c1 29 c2 01 d8 c9 0d 31 d1 89 ca 29 ce 01 c8 c1 c2 04 89 c0 31 f2 48 c1 e2 20 [ 1550.394203][ C0] RSP: 0018:ffffc90000117880 EFLAGS: 00000003 [ 1550.394214][ C0] RAX: 00000000144d8fcb RBX: 00000000a0d9d0e6 RCX: 000000007373bee5 [ 1550.394222][ C0] RDX: 00000000077668e5 RSI: 00000000a0d9d0e6 RDI: ffffffff96ec4ae8 [ 1550.394231][ C0] RBP: ffffffff96f1fe08 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 1550.394240][ C0] R10: ffffffff96ec2cc7 R11: 0000000000000002 R12: ffffed1003a5fa6d [ 1550.394248][ C0] R13: ffff88801d2fc880 R14: 0000000000000005 R15: ffff88801d2fd3c0 [ 1550.394262][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1550.394275][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1550.394284][ C0] CR2: 000055bf62f98600 CR3: 000000002a154000 CR4: 00000000003526f0 [ 1550.394293][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1550.394300][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1550.394308][ C0] Call Trace: [ 1550.394313][ C0] [ 1550.394318][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1550.394340][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1550.394357][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1550.394376][ C0] ? __lock_acquire+0xd3b/0x3c40 [ 1550.394393][ C0] ? default_do_nmi+0x6a/0x160 [ 1550.394412][ C0] ? exc_nmi+0x170/0x1e0 [ 1550.394430][ C0] ? end_repeat_nmi+0xf/0x53 [ 1550.394450][ C0] ? __lock_acquire+0xd3b/0x3c40 [ 1550.394467][ C0] ? __lock_acquire+0xd3b/0x3c40 [ 1550.394484][ C0] ? __lock_acquire+0xd3b/0x3c40 [ 1550.394501][ C0] [ 1550.394505][ C0] [ 1550.394513][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1550.394529][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1550.394545][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1550.394563][ C0] lock_acquire.part.0+0x11b/0x380 [ 1550.394581][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 1550.394599][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1550.394617][ C0] ? rcu_is_watching+0x12/0xc0 [ 1550.394631][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1550.394645][ C0] ? mark_held_locks+0x9f/0xe0 [ 1550.394660][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 1550.394678][ C0] ? lock_acquire+0x2f/0xb0 [ 1550.394694][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 1550.394712][ C0] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1550.394728][ C0] batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 [ 1550.394746][ C0] ? batadv_nc_process_nc_paths.part.0+0xde/0x3e0 [ 1550.394765][ C0] batadv_nc_worker+0xcc8/0x1060 [ 1550.394784][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1550.394801][ C0] ? rcu_is_watching+0x12/0xc0 [ 1550.394824][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1550.394838][ C0] ? process_one_work+0x921/0x1ba0 [ 1550.394856][ C0] ? lock_acquire+0x2f/0xb0 [ 1550.394871][ C0] ? process_one_work+0x921/0x1ba0 [ 1550.394889][ C0] process_one_work+0x9c5/0x1ba0 [ 1550.394907][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1550.394924][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1550.394942][ C0] ? assign_work+0x1a0/0x250 [ 1550.394957][ C0] worker_thread+0x6c8/0xf00 [ 1550.394976][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1550.394992][ C0] kthread+0x3af/0x750 [ 1550.395008][ C0] ? __pfx_kthread+0x10/0x10 [ 1550.395022][ C0] ? lock_acquire+0x2f/0xb0 [ 1550.395039][ C0] ? __pfx_kthread+0x10/0x10 [ 1550.395053][ C0] ret_from_fork+0x45/0x80 [ 1550.395071][ C0] ? __pfx_kthread+0x10/0x10 [ 1550.395086][ C0] ret_from_fork_asm+0x1a/0x30 [ 1550.395104][ C0] [ 1550.396106][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1550.784917][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 1550.795399][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1550.805436][ T30] Call Trace: [ 1550.808697][ T30] [ 1550.811612][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1550.816193][ T30] panic+0x71d/0x800 [ 1550.820075][ T30] ? __pfx_panic+0x10/0x10 [ 1550.824473][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1550.829835][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1550.835799][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1550.841159][ T30] ? watchdog+0xdcc/0x12b0 [ 1550.845563][ T30] ? watchdog+0xdbf/0x12b0 [ 1550.849971][ T30] watchdog+0xddd/0x12b0 [ 1550.854207][ T30] ? __pfx_watchdog+0x10/0x10 [ 1550.858878][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1550.864067][ T30] ? __kthread_parkme+0x148/0x220 [ 1550.869077][ T30] ? __pfx_watchdog+0x10/0x10 [ 1550.873742][ T30] kthread+0x3af/0x750 [ 1550.877798][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.882375][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.886950][ T30] ret_from_fork+0x45/0x80 [ 1550.891353][ T30] ? __pfx_kthread+0x10/0x10 [ 1550.895942][ T30] ret_from_fork_asm+0x1a/0x30 [ 1550.900699][ T30] [ 1550.903932][ T30] Kernel Offset: disabled [ 1550.908250][ T30] Rebooting in 86400 seconds..