last executing test programs: 22m18.356098661s ago: executing program 0 (id=305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="18010000003f568fba7d0000000000002a6f54896bdf61f8fd14466a79ded08241d1f0117fc00a76f55e1cd33a5e528615c3e1ff58dfd9203d951b0219fd952a8324536fc07b108f362c3a5579f18a8f04a71c019689ca43504515e2661122e29b08cb045ef45ae0ac4a98540d454369a8b6677e5b54e878c71d78b6283d640acfa55e8702ccdb8f78987121b15489ce40205df4ecf44a5b89d96de6fe80ab463d560a9a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4678117c}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000), 0x65) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) read$FUSE(r3, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 22m17.190125175s ago: executing program 0 (id=308): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008000}], 0x1, 0x40040) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0xffff, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 22m16.388452876s ago: executing program 0 (id=312): syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r1 = socket$inet(0x2, 0x80001, 0x84) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) mlock(&(0x7f0000852000/0x2000)=nil, 0x2000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffffffff000, 0x2) 22m14.736919328s ago: executing program 0 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f00000002c0)=""/200, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r5 = gettid() (async, rerun: 32) r6 = open(0x0, 0x60840, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r8, 0x1, 0x20000000, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0xffffffff, 0x405}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000"], 0xf8}}, 0x0) 22m14.352131145s ago: executing program 0 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'autofs\x00', 0x3a, ')', 0x3a, './bus', 0x3a, [0x4f, 0x1f, 0x46, 0x50, 0x50, 0x4a]}, 0x33) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./bus\x00', 0x741880, 0x9b) 22m14.156485531s ago: executing program 0 (id=326): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000050014001a80100004800c000580"], 0x34}}, 0x0) 21m59.146422882s ago: executing program 32 (id=326): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="008400000000050014001a80100004800c000580"], 0x34}}, 0x0) 18m22.435846354s ago: executing program 2 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x31, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x1c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) close(0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0xfff, 0x3}}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_newneigh={0x54, 0x1c, 0x800, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, r4, 0x4, 0xe5, 0x3}, [@NDA_MASTER={0x8, 0x9, 0x4}, @NDA_FDB_EXT_ATTRS={0x24, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x40}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18m21.724512086s ago: executing program 2 (id=958): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x48001, 0x0, 0x800000000000009, 0x402, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000240)={0x6, 'veth1_to_batadv\x00', {0x40000006}, 0xb329}) socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) set_mempolicy(0xc005, 0x0, 0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x92) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket(0x28, 0x3, 0xef7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x9, 0xa, 0xf, 0x1, 0x4, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x2, 0x6]}}]}]}, 0x64}}, 0x48000) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x7a5, 0xd2, 0x0, 0x4}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) 18m20.512447437s ago: executing program 2 (id=967): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x4, @mcast2, 0x3}, 0x1b, 0x0}}], 0x1, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d40)={r2, &(0x7f0000000c40)="d607", 0x0}, 0x20) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000180)={{'\x00', 0x3}, {0x401}, 0x48, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)="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", 0x115, 0x0, &(0x7f0000000d80)={0x2, 0x10f5, {0x0, 0xc, 0xe8, "808c8f24d9b94db79646d9d08eb8de4dc9f623b1d52c3fd0f1d98af7c1d7f13dddc967f155018db62dd0e13c9321941fd7b2daa96ba007df37a55c6d7c842a9d3247b06621a1d2d56ca44dc50ea9c0a47be756fdba4933cc12e77fa6f6bd2f14da3079d9b3ec83958fb2b5a82433cefd35fd2fb0aa310ec9cac868786acb0ce51df13bfcc6c68a981eb142cc946215558ce2bc03338460b8453d4d136a37271c5d595389fa81374842a021108ea57345a0a7f336b09a5c7baa1eb43ec2210b48443a7a60b934a08e939da3d606193bc0f8cef866f42962059db9f17933faaee37e8a371f14d3b38d", 0x1000, "8c7e000512e967067d92c6696da7aa203970a70cd99fa75738498b6be612bd4d60e17b273160c6ddb79eda3e873d5b6665e31e245418be2429bf0ab1dd2247b65cde67565f74889fa7ecb318db2358a4bcde16b5a203f52abae82c4ab68c7c95e00ec319a9409b1974ecfa5a9d801bafcaeddd42f9ac290898514ac42ba3ae952b3b96868ce27464602ac08a94819e26f864280df5424ded750cdf2e74f29fac3bd40ce870b3dd47178e3f5e8d5a71bf5e289b9240368f0dd62565846d3d6c6af07cafeb7f76bc3ae471fa2d236799a47d4804a1fd9948d241b3779682236c423a80885a3b4bcb18d7443559cd99fd5606d6ac8f9083f859de4353d07288151616c0d64babcc20c5f21f5b9daa5de7294c79a4983d36e337f899aec71c992b9325e2608c82ba14f2774926609cbe651fac1901988434e794dc8706ee70a001e0714435671eaa494d0c5b3a4473a7b7561a1dcbe0c682d589f56dc6a5c8bb8ec3c1f2c456f784268d257dc72afe34661c87522acf012acd2a3e4ea6471233c7f57f59a6bb90c3a34cba6e7e8a951d7d388dec1387c369abdb55b52c4d41c2527f638b86bc2dcdf42897e1ace60eab98fc1ab8583686a3fa8ead382f1133f9febf856dd25b37bb1ee60b906f99518024ec11e739deff5aa73514985d7ec2b31a4f4ca17bd29e33977883ebe4865f4cecd4baa44c953f583d07149e0bc0f1ec4a40229a38c1e41d66b55d12c8b389b7c6632a80f7fe680925734eeca192e6edfd083ada1f18dededdd66da8340b42c7b8e0d2e8046cd4c6f48f53317dc6ee305c08f6b3333c587c03e0fbd1b168f30e5af359a53ee44b9d35806d212eeed1722f44d51a22ddc92e88531bbbd7334c73dbc83468ff9ef69edc5fd7b0e8ae3cbc82c6fe027a5b2fc70784c8188c2d856d9a2cd89d7dfad44ee8cc0bc41f5bacdcd3da16f54372fc4c0952c809ce077099670e5d7a4128c023f7af10c32c63728a41780addd1027721bd6f7aa893cc924ea8c9ad62b0cb0860c4b73856549a3cff165028a76dc5c074be075fd423f20061da12b374af7014ec210d84621a5979fff928a8c68dbd481d9f549654fc981a63aca968be2d78f8742b3cdac39736f0f622b7dfd96b767524430ae54919c5f97f927a513e7b1db226b11e8ae53fb62faf0af2615a423fb7a0deccd3888a4a60ec8762dea242c4c051d6e1234ea123f1092470b330f0eab06b6227a0c8bfd84bb89b7cbe7ab36013ac6581ecca83f3cc780700aa94f581590a9054a8fe10856ca2db2fe0009bfe90175ce40ccf06fcce874d0b700e049ca41e9cf428460893026433edf7e2d509f5d2d6ffc08fae97c3ff5d290122d039ade6b11d2dd8ee2b98d9a7c8cb35acd32c444cfbbd21efa50059432723531d418eacac7f25b6e0eab7ba37a33d3b2f312f6c4f14bd8c2264b452e13e9e3a31dc3d0914b8ee3149280512fc13e001fd136042ab4d8cc6652f91192231163a196434175a36cc495ce8b715e2339f18b76bd11d5a58a243c8dc7814cede1ccc101a50499f340a6f6c9f021b83c597adef8298f4a8f26ade487c37aa2caafd166426e1260633f3ec022bdbb86c4ef1aa2f58f3d6dfb113415aa5c649c1d656dd92913ef083d32a20d6c6bb8559d9e9af00ca474e99e38525c5ffb5c8aad1e2133cf47b93f757b5bd38fa0a287aa6b0aff24f39d99f0a165635da0532a809081abf9e377d25f2bb97c2fb0a9ec7919100c1c6d78a4588ce16872be71a9fa5ca4691dc9b33c91513494f74129a851cc4a14df2907679b84344118cc68a954e9880ae2c7e39bf181d8b9393fe1c613fb8e063f1ff35b9257b1b94bcb3478b07f0b20475351db226f51f93f77e3ae3cf93c70622c4f9ce928c21e499e7cd650adb0cde77df9025ba2dc536c93e53268253cb3d25077157239724c8e69ffc432c8c246a379f38483f46667763dfe35395682a8f5d9b0d62e0f78b22f221fd704b275d21a57d37e0c4fb2d06542558c41214d2fa44b8f00f0db96ad60675c577ba332befb86b261a6c6c0f7025eb3d2b897424d7fc4551751ba556e12a032f992dd7a09aa3ba9c013fd2d52f8193a1ae6683bb7ad34b9dff12bd3e8b8f74129f722587811ad168deee87df9bf3cdc3497fa5664421f4f717d5e41a461dfc5fa5f62ac93ef2102c6ba1ff4cd813f0fa788d306d8aa3fe54397fa7cc2357935b456361891910d8b053e6fe6a462d955a0f573c9d8530b981197047e5c49351c2620623b10894ce7178f3486d0b9b541e70a2460a3e0ee42fa4e2464f2aea1c1f91c5bd85a77b2f1c2a4555e04dcef89b0f242d8938cb7a4a85d505ac96097c01146ad0818fc474f5442f2a5473da0804300f64dfc9f3c2d78f8308c40a7f68f437e0df25ed4b8e57251a7c2609d921f98a0f6723ad87ad1419844bb48ba8d017e728a0d94bb9234b856907a882bce26f7d8bd807f98d79994e15812d7af5ca54770444154cb9c4ce712a3293044714cdec88212652c9696a4b63144cde51bc78952b93e25abfb5eb4fcd931c145146760656a61d1877ccaf3781f73427dd46990380a7f00cc2212446f4176ac82df55aecd7632350f19a1e3921fc85952d473500da9dcd7a206483962cba965ad62dd7df26a870a4980b472abc385af9d226e96c0923f436bc48a348c26edae328077d5e4aa62077a7b1e841a561ea9d001583a300d631fe6de82d717bf499a4154360d1a832d6a454bd4288d1510eed5aa76e0f0c1c4357a983e791bc493e8d48d38f768aac1c4af4bde57bbc3e450ca8d565251633d25a4dc0f55360ebc2176a8b24ad4f533036e6c7862c7cf42a9aa3b953baa5e9faac76c45a5e4a428881a04e8f678cd63f5a04aad3dc2b9409997a0c8c881fb411debdf083d7b7728471ca8ee80109506bdf9f112b06f52374471780e0a4def740c0d314ceef095727b5ba7ff4ff873b22c3576020360333a3f93c4094cd125ee53d2159790cc001977962f091b5a540e1ef6e187c597b4601b45636d3cd0aefe663b4c577e92909106eeacd9e769d77ad9735108123ef8f913176844ce0c0d3bf304f5704cf3f10a717325b25dadf9d5c62b8ef019db860b92cf5d8a566f45a3b6b73c63636d13e5ca94178181155165a513bd928c9d80c7329a9686555340f53987a10e82bd09d8c140444e58953a06c9dd59845ca590c81cb946ca08e7dd1e2f4aadc0bb556d06704a3a8ea631f84b2ee6f4e54dd670e4d08ea94857046b1c48be85bcfed59519de3bb73979bf04362998bd20908226cfe2c42e27511a2e29b2502eb96950e9da6302a87fe6b7de5f0ce3a6d63e37036d21d800ef6f8449d88dc8826d14a689738eb0e0a2c1def39b1afa78ba4dc210cdfe936db85bd48889aa1a5596749ec985a52facc3d2a7427085d3064fcf8e15e30eeb483d11e1e8d8370b85957763a5957be26d1712344e323b0cb6d9126cbc5a5d55f675bff77ad177dc73c862e574fba8f5accb7cc0e65fed477bbf0f36e2b382fd02be521344a4d169ade21ea38b2f09c3027c6affb5486fb4963528d8cba3a8c2987e7e560849fd9860209c1bff2b1970ff43e48c1537537b2ed65dc0665bec2ab11b7f67f62db5c7156df1126a59b96db790b0f1c63fcb848cdd68b2c9f5d46b92099aecfc29daf59812569f4e58469b8668fc464d21982ec88181389383749ea7d42a4557892679294ccad26f8b8726b0f7583cf83f78c865c03fcdf7231b2f79a924cd100186e9f2a625c4fa57eaa771edc8f0db4673ab3d0605c6d60df72d3da711b21b5e8dc72fe5306500813ea6ea883585a4051dbd0d98f5ba9de5393ffbb9e848229214409447a5127633e08c5f01d0140599d859543950174580411c62e9ac1bcf4c9b39aeea41afc7f9a22fc6ea28399e2e182271b01107ac9e367207c088683ba85d6524e32919d34d16de84e62c783bce758c9889fc222781fa76fb55b32a3fcbfe9fde823361b630e003bc4230d0dd9b417359920b81e99ce45fe41cf3f1f70fb76c831f8a729b9b3628a9eaaec4e3b6072479f4c7f7676b118d658f50c9547c6c45ff83e6fe4f13cdbf1d4e06129076601b5e67233bb7300a206f080bc34940edfe855495d4e7d56ec268f36838f3399a341a93385c84dd2c08ced2f7e72a9d96a2549656ef9139109fad246ee0012832349d5e2c43d222694f865a1c7f6e21cd902a124f8f2e1c9619e2bd98ebd33d9c8d0ae219b5e074c75e34bae6589dafb42dffd8d819acfabfede03580fe9c552fa1797e785782c6e4ea6ce8dc0101d529adb7e913c6ad1880a3892a04c6aa66b5144e374fd57430930d5434ed9759b3aae944fb6f712dd087a7426826a98a1d036a4eddb92625393de2b20e557575af04ef55784586a0e36ff6cc4f0ca93a66b44d91bbe84616346dde972840a71ee15e67551600b72280dc10d14a1b6600b7e78b1c4d545d4a3b3e8eda9cb60c40564d75795f798d85709dc1c11009c1f304c57acbfe176fcabc30f0dbf3d05452ce3f2256613286b4db78b261bb194518b2cc6f33d5defa7315d7b873c779b67937a15b7158308bdf59491a46ee8714aed6ea335059e036b2494c1fc3077ab8ed5a278f3320b7041dcb1c494c0dabc19f115ae124059fbe279427fd94f1f7ac4d1a1c5f96b9d378e8b17dcf62a26e70162f822736bda3b1abd6587c6d71622768beb7595bf359c61964bcf21f2448e331221cff22a512b5016eecea80ee83e5f62556a244807d811fc76904dcda47f3a38dd1869f667fe214e75577b744b7385187dbe920bac5cb933d12e2b4c3907c75846de6e1413828491cf7c76684744b21ff47b61d5faf0a9e2a3eeac10b6d83a781c9a71784d1532a79c081deb50200d1aa71588a5660a2fb00d4eaeb8ab8b41a59f2b9271e6899e1c668de31b2847db174f8bbe32ac41e1e30c4f50689ea0a3cd942ffc29483f7bbe989a82242a1c0559cc57f87f62ec80c111ba5032b306df2879e32227b8d4be149d3db1c43f4c66f35b3bf878ae530e73833c52203e208d47f4eb9bdb2fda59b420104198f11cca1e3bfbc49763cc1de41e03b29f65d4565053bb24b65b93a3ae0b2e1bd058cd692e5400cc7facebfbfc14ccd2011dd103b25c6c010bce8004804a1d5eda8eb59c8dd2b996fb32d2d0aa59aee91bc1b61af069c1a2070904a0c263a6717926aea20106db2e250c255f8c0c43a3f8d3e0e6835699693d675d433cc1cf0f92680d332ac611f1f5d1b72468a608cc0eb6e4c6785f8030472ac76d758df7c032c31c79568c147cf27d58b1abdd73a285d289535a90004f937780e595ccfaf81bc862a508a5ecc4f4c22196859ab4ac82c14a4d52b07916d9f65f9843d01f798d38f933c21b9e4a354f2321759fc459635890d892b94f78556755846cee0b79c9bca5b3075cac001ee3edd0ed45c47e2a0a3c0a39c17000639acef0b1a61b342a4af4a9f8c846ee2f279c7055729feff58c71bf7edd6740267b8e653e7bee1bf17ce1a2a57755d89f435c0c1c5d414785c28f1795b0462470374d8f35311f86003e38410565ff80d7a36b9aeb928598b60859c1c4d1f9057f505d3b4e5bb5528b3732423bee7ae271157959bacc0e9db411a24611422f0859f4f3069abf227d18823bfd4336f28cdda4e3fa3ea4b943fa3a8b74c035fb29907501e9812854dceac984a948d5f2d64a8320638884780aaef402dac2a21664110af4c8328db8a0fda2ce64f467381f7ce4250fa6927fd72419799fd3eead1030beed40870383e081ab34a7"}, 0x1d, "77812597493991bb3e7318696072473659d6495e5fab6888c8e8a9460f"}, 0x111e}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100010092eabef76f9b08458ad7f360657515b190a8d13109cf86050c800a0301d803010902120000000b0400002079e6"], 0x0) 18m17.224441903s ago: executing program 2 (id=975): madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mincore(&(0x7f000013a000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/238) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000100)=""/39, 0x27) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000132000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x2, {0x0, 0x0, 0x12, 0x0, {}, {0xfff3, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x47, [0x5, 0x8, 0x0, 0x6, 0x3, 0xd, 0x9, 0x6, 0x6, 0x5, 0xc, 0xd, 0x9, 0x4, 0x3, 0xd], 0x1, [0x9, 0xd, 0x101, 0x7, 0x688, 0x8001, 0x4, 0x5, 0x7, 0x0, 0xb, 0x3, 0x6c9a, 0x9, 0x6, 0xbd], [0xc, 0x9, 0xf9a9, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x7, 0x4b7e, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) syz_emit_ethernet(0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd60"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r0, &(0x7f00000002c0)=0x7fffffffffffffff, 0xab83) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8a4020, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000180)="3bf7728ac17905a926c6a3f2c1da317cfc7655810771e0dbb53aab", 0x1b) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100031624c1085e0475076ddd0102030109021200010708e04209048e0000fff216f6"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) 18m15.322187632s ago: executing program 2 (id=985): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03002bbd7000ffdbdf25010000000800010003000000340004800501030001000000050003000600000005000310000000000500030006000000050003000600000005000300020000000800020002"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000b, 0xc3072, 0xffffffffffffffff, 0x14aa5000) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000140)={0x2, 0x8}, 0x2) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x16a2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff0a, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x2004c8d8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x800) (async) socket(0x27, 0x2, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18m14.656348988s ago: executing program 2 (id=988): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r6) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r8 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r8, &(0x7f0000000880)=[{&(0x7f0000002840)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd7981dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c", 0x27}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f00000006c0)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104e5c5d935b5d8b1da382a1608675c881d3e6dfdff36e5", 0x59}], 0x5) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58000000100001002dbd7000ffdbdf2500000000d56d333008102505514f87b32eedb5cd71797bd46f57f623430c837ad717aba2448efcd05dbd6fc77250da0f9277f9277d098a066f9fd00f0774032f7b0be1989d393130fd195a2259405a00b5ac781dd37cbb6b5b00656b068751c283f51e08485faadd951506e03f4bf65a3164fec76d3589aa9f8b5137405b3c744aecb4864db9e5cce8a42390a357dfa73e50ec99e08596", @ANYRES32=0x0, @ANYBLOB="1c43010004000000140003007866726d30000000000000000000000024001a8020000a80050008000200000014000700fe8000000000000000000000000000bb"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700010000000000000000000000000a20000000000a070000"], 0x8f}}, 0x0) 18m14.00703119s ago: executing program 33 (id=988): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000a00300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r6) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r8 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r8, &(0x7f0000000880)=[{&(0x7f0000002840)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd7981dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c", 0x27}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f00000006c0)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104e5c5d935b5d8b1da382a1608675c881d3e6dfdff36e5", 0x59}], 0x5) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="58000000100001002dbd7000ffdbdf2500000000d56d333008102505514f87b32eedb5cd71797bd46f57f623430c837ad717aba2448efcd05dbd6fc77250da0f9277f9277d098a066f9fd00f0774032f7b0be1989d393130fd195a2259405a00b5ac781dd37cbb6b5b00656b068751c283f51e08485faadd951506e03f4bf65a3164fec76d3589aa9f8b5137405b3c744aecb4864db9e5cce8a42390a357dfa73e50ec99e08596", @ANYRES32=0x0, @ANYBLOB="1c43010004000000140003007866726d30000000000000000000000024001a8020000a80050008000200000014000700fe8000000000000000000000000000bb"], 0x58}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700010000000000000000000000000a20000000000a070000"], 0x8f}}, 0x0) 17m4.376113864s ago: executing program 5 (id=1248): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x0, 0x1, 0x0, &(0x7f0000000c40), &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0x4a, 0xfffffffffffffffd]}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, r4, r5, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200420000000000000000030000000002000000020000002000008000000000000000010500000008000000000000000100000500000040000000000100"], 0x0, 0x5a}, 0x28) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8000000000000001, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0xffffffffffffffff, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r6, 0x2}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) 17m2.78046113s ago: executing program 5 (id=1255): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd_index=0x4, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x600) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, r3, 0xd, {0x7, 0xa42}, 0x2}, 0x1) 17m2.54374476s ago: executing program 5 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x25, 0x800, 0x5) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="8513d381d567cdfc7c6f08f3ad", 0xd) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x15001}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x44}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 17m1.411810194s ago: executing program 5 (id=1262): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000004000000000000001f0003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 17m0.42802127s ago: executing program 5 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0/file0\x00', 0x61) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES64=r1, @ANYBLOB="2c726f6f746d6f64657e303030303030303030303030303030303034303030302c757365725f69643d712a8fdfc99dc77cd5daea9aa8372aa3d65c8ed8d5f32226c1b4b9d2d0c80a36636c2c000e41cb602c1a2fd59c9c793c8304069f74d2563e4733f79a8c05782b4edc9e7af1cb98f030aa488a52948ec5eb0b068bce7d436c827def4e5a4831cb41090e0dd893327549cd9c67111e64184a51370635b028824b5ec723bbcacf670ae96fad6f9f78fffcea9c8aaa4e362c4eabe89a37f946def8998d01ef6571a02e636f7e62a89855230a8a27e95651295b1cdba4bc7abd7e6228b4691f79701bb73957344884b90551ced90000000000000000000000000094a38e8515deea8045bbb89d73b4ff543c05e9ff3ec5c0f9c0d851e7a80ddfbaf2fbbacefd41d2f61d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b000ff90b139488d65570000000000007000000", @ANYRES32=0x0, @ANYBLOB="010064060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x2000, 0x3, 0x0, 0x0, 0xfffffffe, 0x400}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x100, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0) 16m59.24008799s ago: executing program 5 (id=1267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=0x0], 0xa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000e00"], 0x10b8}, 0x200008c0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000032c0), 0x0, 0x0) recvmmsg(r5, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) socket(0xf, 0x5, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc19b1003912ccffe, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) close(0x4) r8 = io_uring_setup(0x3dfc, &(0x7f00000002c0)={0x0, 0xb7ca, 0x10, 0x2, 0x5f}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026030000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 16m42.932603081s ago: executing program 34 (id=1267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01422006020607f6", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8=0x0], 0xa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100100000e00"], 0x10b8}, 0x200008c0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000032c0), 0x0, 0x0) recvmmsg(r5, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) socket(0xf, 0x5, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc19b1003912ccffe, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) close(0x4) r8 = io_uring_setup(0x3dfc, &(0x7f00000002c0)={0x0, 0xb7ca, 0x10, 0x2, 0x5f}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026030000fcdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) 2m54.611920307s ago: executing program 7 (id=4942): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x8, 0x7, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0xa9, 0x0, 0x8, [0x7, 0x9f6, 0x5, 0x80000000, 0x2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x9a, [@private=0xa010101, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xb, [{@empty, 0x10001}, {@broadcast, 0x3800}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0xff}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x2000000) 2m54.373542277s ago: executing program 7 (id=4945): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b0800034000000008"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e00000000003f0000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) 2m54.208359022s ago: executing program 7 (id=4947): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) rt_sigqueueinfo(0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) pread64(r3, 0x0, 0x0, 0x200000000000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1688, 0x3, 0x0, 0x0, 0xdf3, 0x0, 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffb, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x20000000000003, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x6, 0x80000001, 0x0, 0xfffffffe, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, 0x0) 2m51.217497806s ago: executing program 7 (id=4962): r0 = epoll_create1(0x0) (async, rerun: 64) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xb6a0, 0x3}, 0x18, 0x0) (rerun: 64) landlock_restrict_self(r1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) close_range(r0, r2, 0x0) 2m51.076496081s ago: executing program 7 (id=4965): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x10000000}, 0x94) 2m51.060646219s ago: executing program 7 (id=4966): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x40002, 0x0) sync() sync() 2m36.680002432s ago: executing program 35 (id=4966): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x40002, 0x0) sync() sync() 26.608281642s ago: executing program 8 (id=5484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x5, 0x176, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000006a2f3e670000000088be7866726d3000000000000000000000006e6963766630000000000000000000007465616d5f736c6176655f31000000006d6163766c616e31000000000000000000000000000000ffffffffffffffffffffffff00ffffff006e0000006e000000e6003b006e666c6f670000000000f6b0187bb50f9a0000000000000000000000000000000000000000000050000000000000000400000005000f0000000000ef652907f60d61eca9e2324deddd4d58886fee93bec8e163bed2e6f755ece2acf34c20cdcb306707c92895c963de0f1f5739d9d9d978ab6b037bc1ceea04e0edf1b70469450e4a3fe5ae501579000000000000000000000000000000000000000000000000000000000000000000000000000000d6"]}, 0x1ee) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000500)={0x1, 0x0, [{0x80000000, 0xbd67, 0x2, 0x2, 0x5, 0x100, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_udplite(0x2, 0x2, 0x88) quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x1f, 0x1e, 0x94, &(0x7f00000007c0)}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x3) 23.977007101s ago: executing program 8 (id=5492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "8c712460c50af154889c0cacaa78cf33562d55329f79c6c586fcd9bb6e69447b308aac8479c6872f6a68e9d2c9ad6b79e3b9b333913d3d78565043b7f4e8c243d8a43fb7be384ecbc0119eea601698722e3860e1d0d64d1f5ff96e6232ebbd575b6c0d22c60b1a623b693ec3838780979d91ff4b2f1b4e7438721a0ac5bc44c466893ddbb8517a498531f532dae15e12527b770aaa8ae0542568ad8e5cdbf740fdc5d32adf8a024c46af3eaca10878369797a2a0909ec66c760e56cbd44187b6fe3e91d91a7562cf7f5591b785196846c74fe88fdf91d372dc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x1d, 0x6, "0ad33e1072bd1d45a871066774d6117d29457bfae738ae5210"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x200}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x170, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xc0, 0x6, "af119d4f08ced653ad5126ec45a19d91b5b93c9e7b1458d876c001908e5a2e149ac1cd50f60f5a9f4434b1e60778cd368026c728c8c45f3d4041affe8e65319d5a0d85deb6fe030c9512bf70399779576cbcc54f092002da8a479ea20d63f446d219d8351fa3c557ed2cd32fd7700aaad4451ce9476b99ba090212ad4079155d89355b92b55f060ad052c58f9430aa1d134ee7fa061110c38e964b3f29c8a7102452963f5427624923dc13f2bd50f3c761fa0feb9b87b8e096e337fa"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x68, 0x6, "42a36938573a1f2fd21766d62a9968a2866fcf5c7d7953e050a8796f8db086aa5478a12793cb5082990b14cc03a26aa3398a5fd58e5d7b563a4ca6a436d1a07bef70c687c9fa2d32c6e6a8bfa42e1f4839648b8edc93d54a8ed079a07babedc211edb134"}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}}, @NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x7c, 0x6, "5a697231d3128d78d4218773920decddf7afe20f56eba17fce34b835bc0094822576caac9cfb4db76b2d918b1ea656f41859632283142459e9ef7d9e6760626a97e3cf2d105a3372ce7367a2a435922d2178250600db19c3acfa6fa5a65577fc417cae7421c8385bdefac66df52cd92eadf7483dd5bdca2f"}]}, @NFT_MSG_NEWFLOWTABLE={0x11c, 0x16, 0xa, 0x904, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x85e4}]}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c0}, 0x1, 0x0, 0x0, 0xe345be95c796919b}, 0x4008000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) syz_usb_connect$uac1(0x5, 0x97, &(0x7f00000048c0)={{0x12, 0x1, 0xf7fa9394a4340302, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x80, 0x50, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xa, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x5, 0x81, 0xe, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x7, "f9920d75"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x6, 0x2, {0x7, 0x25, 0x1, 0x81, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x4, 0x9, {0x7, 0x25, 0x1, 0x3, 0x1, 0x2}}}}}}}]}}, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x29, 0x5, 0x0) 21.440115423s ago: executing program 8 (id=5500): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(r2, r2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, &(0x7f0000000100)) 14.447584873s ago: executing program 8 (id=5511): gettid() sched_setscheduler(0x0, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) syz_emit_vhci(&(0x7f0000001880)=ANY=[@ANYBLOB="04000000000000000e"], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESDEC=r2, @ANYRESOCT=0x0, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000140)='./file1\x00', 0xfffffffffffffff7) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x8, 0x0, &(0x7f0000000300)=[0xbfd, 0x6, 0x5, 0x4, 0xc8, 0x9, 0x9, 0x7], 0x9b37}}, 0x30) dup3(r3, r5, 0x80000) pipe2$9p(&(0x7f0000000280), 0x80080) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0x0) setpgid(r6, r6) creat(&(0x7f0000000000)='./file0\x00', 0x135) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 14.040170081s ago: executing program 8 (id=5514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x40, 0x9, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_restrict_self(r1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) getpid() ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4002090) setns(0xffffffffffffffff, 0x24020080) open_tree(0xffffffffffffffff, 0x0, 0x89901) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0xcf, 0x10, 0xf2, 0x40, 0x72f, 0x2200, 0xf820, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0xdc, 0x0, 0x6, [{{0x9, 0x4, 0x17, 0x8, 0x2, 0x4e, 0x97, 0x71, 0x6c, [], [{{0x9, 0x5, 0xe, 0x2, 0x20, 0x6, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x9, 0x3}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0xae, &(0x7f0000000040)=@string={0xae, 0x3, "af32f8713586160f8b3d11b5991d2133d67a37367843d39de5d34fcb30b03ebbcc84d4043dfe106214414eb828900879c921b620be95fe00c711fb39ba9fc42ec1a034a7085cea8aa4384ac194e10994e793b627b572fc60397a89dec6c774b3929d1cf00c8901d82c3dc9b5033659d5275cdf7d7fbfffe5a80d8e760df82bbc250d36247f4cb502ce4f4f374c8f56fa0e0f0721d6bbca1bc99dcfbc69765a435c49cb4069a0e9ba0fe5da5c"}}, {0x6, &(0x7f0000000100)=@string={0x6, 0x3, "9baddbd5"}}, {0x98, &(0x7f0000000140)=@string={0x98, 0x3, "847404616891ac264e3150385b32fbcefa16bfb131f3d058f89d4a9078139cdc502b8c003effeac7bea5c7505374258d2f9cfbd911cac9b4fddacf5cbb7235d39e3546e0ab7f71e2e89a1a83f2c9fb8f07bd3f3b65f9b16436e6b8e4e3b52d7246b269920afa1c6eb2e8e34a058bb23e2b80adf83dbdc6f06fdae78a319d3ba30fbd331b93553e6d1f70e3bd8b1be5c8ba639465bfdc"}}, {0x55, &(0x7f0000000200)=@string={0x55, 0x3, "38bccd7df6ed3d1158371085e7527b18802bad0f77b597465cc3c54a4c63cfef6734b69b42d71dd6b09960e65d484c8e92ac173b0397068b1df88d7fdbf77a215106bc39bf72f20a5087710489e98561a61846"}}]}) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000003020007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13.720333388s ago: executing program 8 (id=5517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f000000b000/0x4000)=nil, 0x4000, 0xa, 0x110, r2, 0x100000000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000280)={0x1, @output={0x0, 0x0, {0x1730, 0xfff}, 0x1, 0x3}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000210000000900030073797a32000000000900010073797a3100000000080007006e617400d2fd04800800014000000003080002400ce0556228000000000a05000000000000000000010000080900010073797a3100000000080002400000000114"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x7) r4 = syz_open_dev$I2C(0x0, 0x6dea, 0x452500) ioctl$I2C_RDWR(r4, 0x707, 0x0) mbind(&(0x7f0000d74000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2, 0x1) 13.503133897s ago: executing program 36 (id=5517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f000000b000/0x4000)=nil, 0x4000, 0xa, 0x110, r2, 0x100000000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000280)={0x1, @output={0x0, 0x0, {0x1730, 0xfff}, 0x1, 0x3}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000210000000900030073797a32000000000900010073797a3100000000080007006e617400d2fd04800800014000000003080002400ce0556228000000000a05000000000000000000010000080900010073797a3100000000080002400000000114"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x7) r4 = syz_open_dev$I2C(0x0, 0x6dea, 0x452500) ioctl$I2C_RDWR(r4, 0x707, 0x0) mbind(&(0x7f0000d74000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2, 0x1) 10.743232988s ago: executing program 6 (id=5533): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_usb_connect(0x4, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="39d54be863ecd106000000d1bcdd5f0fac569d2f1b682d20a32c7209037561bc7dadd89d304080a06c1a8160", @ANYBLOB="bbaf05f2e7b67f425e1739a7af6e068b8c107576895e558b", @ANYRESOCT=r0], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x62280, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1d08004608002c0000e00000059078ac1414ffac1414bb9402000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00bbb1d2c28db2eb319377000090780000c4b24857334f84ac"], 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x31, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000001c0)={0x50, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x5, 0xfffb, 0xa}, 0x0, 0x0}}) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000002900)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x800) 8.840683185s ago: executing program 1 (id=5542): socket$igmp(0x2, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x181000, 0x21) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0xa0}}, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000000480)={0x48, 0x140d, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xffffffff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x10) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) lseek(r4, 0xfff7ffffffffffff, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@arm64={0x8, 0x4, 0x0, '\x00', 0x56a}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000380)=@arm64) sendmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/299], 0x120}, 0x90) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.252532974s ago: executing program 4 (id=5546): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.686836739s ago: executing program 1 (id=5550): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x10}, 0x28) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000004) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e200007"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0xfc9e) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 5.505257247s ago: executing program 4 (id=5551): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2d8}}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 5.454922318s ago: executing program 6 (id=5552): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000040)={0x1, {0x0, 0x6, 0x8613, 0x8f21}}) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)={0x10, 0x0, 0x3}, 0x10) 5.338149213s ago: executing program 4 (id=5553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}, 0x1, 0x0, 0x20000000}, 0x80) 5.337570718s ago: executing program 6 (id=5554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400}, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.095628546s ago: executing program 4 (id=5555): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040000d0ff000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 4.303419515s ago: executing program 1 (id=5556): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400008008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.57002958s ago: executing program 6 (id=5559): mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) r1 = getpid() getpgrp(r1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x4, 0x101000) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) gettid() ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast2}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 3.17171256s ago: executing program 3 (id=5560): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000004) r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.104272593s ago: executing program 1 (id=5561): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="0000080e00", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) 3.062477501s ago: executing program 3 (id=5562): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x10}, 0x28) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000004) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e200007"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0xfc9e) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 2.91107207s ago: executing program 1 (id=5563): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a700000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000440003801c0000800c00018006007b00d10300000c000440000000002df31ab3240000800c00044000000000000000050800034000000002"], 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040040) 1.866720225s ago: executing program 1 (id=5564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2552181b080d29428f0e1ac6e7049b3468959b189a242a9b3ff3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799ecb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b13a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7cee65802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x50, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xec, 0x66, 0x7d, 0x40, 0x4dd, 0x9032, 0xfd0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}]}}]}}]}}, 0x0) 1.658187182s ago: executing program 3 (id=5565): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x0, 0x2, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x10}, 0x28) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000004) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x3, 0xfffffffc, 0x8}) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a00000000641100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e200007"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0xfc9e) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x8000000000000000}}, 0x28) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 1.403982555s ago: executing program 4 (id=5566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8ea3a}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x500}}}}]}]}, 0x74}}, 0x10) 1.370053526s ago: executing program 3 (id=5567): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 1.255710867s ago: executing program 3 (id=5568): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) write$binfmt_register(r1, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xffffffff, 0x3a, '/dev/comedi3\x00', 0x3a, '-})\x00', 0x3a, './file0'}, 0x38) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb00020000000000}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x541b, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 1.184404078s ago: executing program 4 (id=5569): io_setup(0x4, &(0x7f00000003c0)) sendmsg(0xffffffffffffffff, 0x0, 0x8010) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) io_setup(0x4, &(0x7f00000003c0)) (async) sendmsg(0xffffffffffffffff, 0x0, 0x8010) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d000000040902"], 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) (async) 1.112568101s ago: executing program 3 (id=5570): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(r2, r2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$pptp(0x18, 0x1, 0x2) getpeername(r5, 0x0, &(0x7f0000000100)) 772.157907ms ago: executing program 6 (id=5571): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4f17d77487ced52f, 0x0, @private=0xa010101, @dev, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc989}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300)={0x9}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x2) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r4, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c0000040019840100000000140000000000000000000000fe8000000000000000000000070000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 0s ago: executing program 6 (id=5572): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) write$binfmt_register(r1, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xffffffff, 0x3a, '/dev/comedi3\x00', 0x3a, '-})\x00', 0x3a, './file0'}, 0x38) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x800000000000000}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x541b, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) kernel console output (not intermixed with test programs): , changing to 7 [ 1296.156523][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1296.191323][T23727] bond7: entered promiscuous mode [ 1296.199750][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.241577][ T10] usb 5-1: Product: syz [ 1296.267259][T23727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1296.275716][ T10] usb 5-1: Manufacturer: syz [ 1296.294326][ T10] usb 5-1: SerialNumber: syz [ 1296.316518][ T10] usb 5-1: config 0 descriptor?? [ 1296.354620][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1296.383743][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1296.924750][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1296.943266][ T10] em28xx 5-1:0.0: Config register raw data: 0x41 [ 1297.035895][T23735] tipc: Enabling of bearer rejected, already enabled [ 1297.390953][ T29] audit: type=1400 audit(2000000121.503:2199): avc: denied { accept } for pid=23738 comm="syz.1.4827" path="socket:[75935]" dev="sockfs" ino=75935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.092526][ T10] usb 5-1: USB disconnect, device number 11 [ 1299.108534][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 1299.124847][T23766] xt_hashlimit: max too large, truncated to 1048576 [ 1299.337192][ T10] em28xx 5-1:0.0: Freeing device [ 1299.609606][T23772] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4837'. [ 1300.012570][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4837'. [ 1300.050438][T15356] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1300.364134][T15356] usb 7-1: Using ep0 maxpacket: 8 [ 1300.381719][T15356] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.391925][T15356] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1300.411220][T15356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.453856][T15356] usb 7-1: config 0 descriptor?? [ 1300.676793][ T9606] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1300.861171][ T9606] usb 5-1: Using ep0 maxpacket: 16 [ 1300.874836][ T9606] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1300.903748][ T9606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.921424][ T9606] usb 5-1: config 0 has no interface number 0 [ 1300.927649][ T9606] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1300.939478][ T9606] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1300.971610][ T9606] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1300.974011][ T29] audit: type=1400 audit(2000000125.251:2200): avc: denied { setopt } for pid=23780 comm="syz.1.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1300.982602][ T9606] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1301.038668][ T9606] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1301.048835][ T9606] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1301.062164][ T9606] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1301.074467][ T9606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.102989][ T29] audit: type=1400 audit(2000000125.251:2201): avc: denied { ioctl } for pid=23780 comm="syz.1.4841" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1301.103999][ T9606] usb 5-1: config 0 descriptor?? [ 1301.135320][T23776] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1301.145668][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1301.474375][ T9606] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1301.635828][T23794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23794 comm=syz.4.4839 [ 1301.650483][ T29] audit: type=1400 audit(2000000125.965:2202): avc: denied { getopt } for pid=23775 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1301.757648][ T9606] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 1301.828488][T23803] veth0: entered promiscuous mode [ 1301.842060][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4845'. [ 1302.253413][T15356] usb 7-1: string descriptor 0 read error: -71 [ 1302.272124][T15356] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1302.281844][T15356] usb 7-1: USB disconnect, device number 37 [ 1302.764760][T15356] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1302.917638][T15356] usb 7-1: Using ep0 maxpacket: 16 [ 1302.938173][T15356] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1302.965953][T15356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.986372][T15356] usb 7-1: Product: syz [ 1302.990590][T15356] usb 7-1: Manufacturer: syz [ 1303.005850][T15356] usb 7-1: SerialNumber: syz [ 1303.017615][T15356] usb 7-1: config 0 descriptor?? [ 1303.033540][T15356] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1303.186244][T21256] usb 5-1: USB disconnect, device number 12 [ 1303.198888][ T29] audit: type=1400 audit(2000000127.603:2203): avc: denied { ioctl } for pid=23822 comm="syz.4.4852" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1303.224748][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.233341][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.241605][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.250105][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.258443][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.267220][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.275541][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.284192][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.292533][T23812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.301076][T23812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.327078][T15356] ssu100 7-1:0.0: probe with driver ssu100 failed with error -32 [ 1303.344294][ T29] audit: type=1400 audit(2000000127.603:2204): avc: denied { setopt } for pid=23822 comm="syz.4.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1303.409117][ T10] usb 7-1: USB disconnect, device number 38 [ 1303.445765][ T29] audit: type=1400 audit(2000000127.603:2205): avc: denied { getopt } for pid=23822 comm="syz.4.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1303.560496][T23830] xt_hashlimit: max too large, truncated to 1048576 [ 1303.625108][T23831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4854'. [ 1304.253658][T23838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4857'. [ 1304.285743][T23838] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4857'. [ 1304.445359][T23845] binder_alloc: 23844: binder_alloc_buf, no vma [ 1304.803016][T23852] cgroup: No subsys list or none specified [ 1305.648319][T23862] cgroup: No subsys list or none specified [ 1306.645419][T23873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4868'. [ 1308.395652][T23895] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=31393 sclass=netlink_xfrm_socket pid=23895 comm=syz.3.4874 [ 1308.820830][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4878'. [ 1308.829785][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'. [ 1308.838790][T23909] netlink: 'syz.3.4878': attribute type 13 has an invalid length. [ 1308.847325][T23909] netlink: 'syz.3.4878': attribute type 12 has an invalid length. [ 1309.886067][T23925] tipc: Enabling of bearer rejected, already enabled [ 1310.371694][T23936] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4887'. [ 1310.720130][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4889'. [ 1310.904257][T23949] netlink: 'syz.4.4892': attribute type 1 has an invalid length. [ 1310.912266][T23949] netlink: 'syz.4.4892': attribute type 2 has an invalid length. [ 1312.266197][T23967] xt_CT: No such helper "snmp_trap" [ 1312.671298][ T9606] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1312.844235][T23989] xt_hashlimit: max too large, truncated to 1048576 [ 1312.884882][T23991] xt_hashlimit: max too large, truncated to 1048576 [ 1312.892546][ T9606] usb 7-1: config 0 has no interfaces? [ 1312.898149][ T9606] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1312.928120][ T9606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.947227][ T9606] usb 7-1: config 0 descriptor?? [ 1314.281680][ T29] audit: type=1400 audit(2000000139.234:2206): avc: denied { read } for pid=23998 comm="syz.4.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1314.421384][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4909'. [ 1314.492748][ T9606] usb 7-1: USB disconnect, device number 39 [ 1314.662112][T24007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1314.691869][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1315.113069][T24014] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4912'. [ 1316.552521][T24026] netlink: 'syz.1.4916': attribute type 16 has an invalid length. [ 1316.560388][T24026] netlink: 'syz.1.4916': attribute type 17 has an invalid length. [ 1316.572730][T24026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.579838][T24026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.587187][T24026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.594252][T24026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.643558][T24026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1316.733702][T24039] xt_hashlimit: max too large, truncated to 1048576 [ 1317.795604][T24053] No such timeout policy "syz1" [ 1317.805497][T24053] No control pipe specified [ 1318.401416][ T29] audit: type=1326 audit(2000000143.570:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.520406][ T29] audit: type=1326 audit(2000000143.644:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.596319][ T29] audit: type=1326 audit(2000000143.654:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.682408][ T29] audit: type=1326 audit(2000000143.654:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.771315][ T29] audit: type=1326 audit(2000000143.654:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.840685][ T29] audit: type=1326 audit(2000000143.654:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.920010][ T29] audit: type=1326 audit(2000000143.654:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1318.993106][ T29] audit: type=1326 audit(2000000143.665:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.025051][ T10] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1319.072594][ T29] audit: type=1326 audit(2000000143.665:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.130108][ T29] audit: type=1326 audit(2000000143.665:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.196332][ T29] audit: type=1326 audit(2000000143.665:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.229980][ T10] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1319.253853][ T10] usb 7-1: config 0 has no interface number 0 [ 1319.262963][ T10] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1319.291947][ T29] audit: type=1326 audit(2000000143.665:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.320253][ T10] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1319.339184][ T10] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1319.359775][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1319.377615][ T10] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1319.377624][ T29] audit: type=1326 audit(2000000143.675:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.377663][ T29] audit: type=1326 audit(2000000143.675:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.385751][ T10] usb 7-1: Product: syz [ 1319.438998][ T10] usb 7-1: SerialNumber: syz [ 1319.485034][ T10] usb 7-1: config 0 descriptor?? [ 1319.529604][ T29] audit: type=1326 audit(2000000143.675:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.580341][ T10] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1319.615093][ T29] audit: type=1326 audit(2000000143.675:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.658503][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input53 [ 1319.705364][ T29] audit: type=1326 audit(2000000143.675:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.776724][ T29] audit: type=1326 audit(2000000143.675:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1319.832756][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1319.877131][T24070] cgroup: No subsys list or none specified [ 1320.060844][T24073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1320.522742][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1320.706891][ T10] usb 5-1: device descriptor read/64, error -71 [ 1320.987334][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1321.149107][ T10] usb 5-1: device descriptor read/64, error -71 [ 1321.266384][ T10] usb usb5-port1: attempt power cycle [ 1321.606159][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1321.698665][ T10] usb 5-1: device descriptor read/8, error -71 [ 1321.903522][ T9606] usb 7-1: USB disconnect, device number 40 [ 1321.959146][ T9606] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1322.154885][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1322.216103][ T10] usb 5-1: device descriptor read/8, error -71 [ 1322.330719][ T10] usb usb5-port1: unable to enumerate USB device [ 1323.231971][T24099] No such timeout policy "syz1" [ 1323.311411][T24103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1323.340283][T24103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4942'. [ 1323.476179][T24107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1323.584493][T24111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1323.597213][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 30 seconds [ 1323.609930][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 30 seconds [ 1323.628306][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 30 seconds [ 1323.639628][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 30 seconds [ 1323.771283][T24116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24116 comm=syz.3.4949 [ 1323.922336][T24116] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 1323.987803][T21256] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1324.043984][T24120] bond8: (slave gretap1): making interface the new active one [ 1324.070029][T24120] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1324.101101][T24125] tipc: Enabled bearer , priority 0 [ 1324.115866][T24116] vlan2: entered allmulticast mode [ 1324.121219][T24116] bond8: entered allmulticast mode [ 1324.127068][T24116] gretap1: entered allmulticast mode [ 1324.133741][T21256] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1324.141784][T21256] usb 7-1: config 0 has no interface number 0 [ 1324.148447][T24116] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1324.164622][T21256] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1324.176160][T21256] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1324.187251][T21256] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1324.199294][T21256] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1324.209190][T21256] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1324.220665][T21256] usb 7-1: Product: syz [ 1324.224939][T21256] usb 7-1: SerialNumber: syz [ 1324.232179][T21256] usb 7-1: config 0 descriptor?? [ 1324.240248][T21256] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1324.249119][T21256] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input54 [ 1324.267975][T24125] syzkaller0: entered promiscuous mode [ 1324.282923][T24125] syzkaller0: entered allmulticast mode [ 1324.288654][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1324.303026][T24125] tipc: Resetting bearer [ 1324.331740][T24124] tipc: Resetting bearer [ 1324.437721][ T10] usb 5-1: device descriptor read/64, error -71 [ 1324.452062][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1324.664819][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1324.797475][ T10] usb 5-1: device descriptor read/64, error -71 [ 1324.918254][ T10] usb usb5-port1: attempt power cycle [ 1325.248497][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1325.274383][ T10] usb 5-1: device descriptor read/8, error -71 [ 1325.502175][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1325.521649][ T10] usb 5-1: device descriptor read/8, error -71 [ 1325.645528][ T10] usb usb5-port1: unable to enumerate USB device [ 1326.420330][T24124] tipc: Disabling bearer [ 1326.623274][ T9606] usb 7-1: USB disconnect, device number 41 [ 1326.636999][ T9606] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1326.772378][T24162] cgroup: No subsys list or none specified [ 1329.921221][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1329.921240][ T29] audit: type=1400 audit(2000000155.653:2247): avc: denied { append } for pid=24245 comm="syz.4.4983" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1329.962301][T24246] fuse: Bad value for 'fd' [ 1330.491446][T24254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1330.945851][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.952861][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.019730][T24277] No such timeout policy "syz1" [ 1333.028794][T24277] No control pipe specified [ 1335.335908][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1335.363031][ T29] audit: type=1400 audit(2000000161.343:2248): avc: denied { bind } for pid=24304 comm="syz.4.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1335.384404][T24305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1335.835898][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4999'. [ 1335.845855][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4999'. [ 1336.267925][T24305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1336.325713][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1337.101714][T24315] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1337.154368][T24316] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5001'. [ 1337.532217][T24321] netlink: 'syz.6.5000': attribute type 13 has an invalid length. [ 1338.407777][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5003'. [ 1338.416757][T24329] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5003'. [ 1338.425789][T24329] netlink: 'syz.6.5003': attribute type 13 has an invalid length. [ 1338.433765][T24329] netlink: 'syz.6.5003': attribute type 12 has an invalid length. [ 1339.051242][T24336] 9pnet_fd: Insufficient options for proto=fd [ 1339.068142][T24336] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1339.251737][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5007'. [ 1339.699750][T24346] tipc: Enabling of bearer rejected, failed to enable media [ 1339.940541][T24355] xt_hashlimit: max too large, truncated to 1048576 [ 1340.279979][ T29] audit: type=1400 audit(2000000166.540:2249): avc: denied { map } for pid=24358 comm="syz.6.5014" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1340.316725][ T29] audit: type=1400 audit(2000000166.561:2250): avc: denied { setopt } for pid=24358 comm="syz.6.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1341.201691][T24390] io-wq is not configured for unbound workers [ 1341.217959][T24390] loop6: detected capacity change from 0 to 7 [ 1341.491198][ T9606] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1341.522711][T24398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1341.542549][T24398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1341.558532][T24398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1341.567438][T24398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1341.687348][T24398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1341.747452][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1341.747952][ T9606] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.766375][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1341.779915][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1341.788162][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1341.793612][ T9606] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1341.795695][T24390] buffer_io_error: 138 callbacks suppressed [ 1341.795709][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.819156][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.830739][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1341.862999][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.880273][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.927141][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.943758][ T9606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.951749][ T9606] usb 5-1: Product: syz [ 1341.973644][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1341.986762][ T9606] usb 5-1: Manufacturer: syz [ 1341.994108][ T9606] usb 5-1: SerialNumber: syz [ 1342.055535][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1342.074632][T24390] ldm_validate_partition_table(): Disk read failed. [ 1342.095709][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1342.120489][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1342.142201][T24390] Buffer I/O error on dev loop6, logical block 0, async page read [ 1342.151030][T24390] Dev loop6: unable to read RDB block 0 [ 1342.156719][T24390] loop6: unable to read partition table [ 1342.162828][T24390] loop6: partition table beyond EOD, truncated [ 1342.169186][T24390] loop_reread_partitions: partition scan of loop6 ( DŸiXK׉jÌ”S{³ÑáÎ<ÚB/ŽøØc¼:Šé¦ÛßÝ¡>C(Îí¨z£ìU-1`¶\ uRtœÇOÒ¯öj) failed (rc=-5) [ 1342.277425][ C0] blk_print_req_error: 138 callbacks suppressed [ 1342.277440][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1342.297568][T24396] chnl_net:caif_netlink_parms(): no params data found [ 1342.298928][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1342.319487][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1342.337189][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1342.349700][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1342.360459][ T9606] usb 5-1: USB disconnect, device number 21 [ 1342.436075][ T29] audit: type=1400 audit(2000000168.797:2251): avc: denied { name_bind } for pid=24404 comm="syz.1.5018" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1342.470778][ T29] audit: type=1400 audit(2000000168.828:2252): avc: denied { ioctl } for pid=24404 comm="syz.1.5018" path="socket:[78100]" dev="sockfs" ino=78100 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1342.551051][T24396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.584884][T24396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.606410][T24396] bridge_slave_0: entered allmulticast mode [ 1342.632226][T24396] bridge_slave_0: entered promiscuous mode [ 1342.656346][T24396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.676144][T24396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.694244][T24396] bridge_slave_1: entered allmulticast mode [ 1342.711196][T24396] bridge_slave_1: entered promiscuous mode [ 1342.760544][T24396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1342.769532][ T29] audit: type=1326 audit(2000000169.133:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.799773][T24396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.809002][ T29] audit: type=1326 audit(2000000169.133:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.809051][ T29] audit: type=1326 audit(2000000169.175:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.809096][ T29] audit: type=1326 audit(2000000169.175:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.809133][ T29] audit: type=1326 audit(2000000169.175:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.809169][ T29] audit: type=1326 audit(2000000169.175:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24418 comm="syz.3.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9afd9bf79 code=0x7ffc0000 [ 1342.853589][T24396] team0: Port device team_slave_0 added [ 1343.107011][T24396] team0: Port device team_slave_1 added [ 1343.152555][T24396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.159990][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.186040][T24396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.198236][T24396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.205495][T24396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.270549][T24396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.671210][T24396] hsr_slave_0: entered promiscuous mode [ 1343.683863][T24396] hsr_slave_1: entered promiscuous mode [ 1343.700408][T24396] debugfs: 'hsr0' already exists in 'hsr' [ 1343.709300][T24396] Cannot create hsr debugfs directory [ 1343.820070][ T5807] Bluetooth: hci4: command tx timeout [ 1343.910289][T24438] xt_hashlimit: max too large, truncated to 1048576 [ 1344.094252][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5027'. [ 1344.456604][T24396] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1344.519718][T24396] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1344.548634][T24396] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1344.652449][T24396] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1344.899296][T24396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.948559][T24396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1344.976316][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.983411][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.019250][T20550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.026398][T20550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1345.812240][ T5807] Bluetooth: hci4: command tx timeout [ 1346.272726][T15363] dvb-usb: did not find the firmware file 'dvb-usb-bluebird-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1346.299539][T24396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1346.328628][T15363] dvb_usb_cxusb 2-1:0.39: probe with driver dvb_usb_cxusb failed with error -22 [ 1346.394788][T15363] usb 2-1: USB disconnect, device number 108 [ 1346.632118][T24478] syzkaller0: entered promiscuous mode [ 1346.637728][T24478] syzkaller0: entered allmulticast mode [ 1346.654600][T24478] tipc: Enabled bearer , priority 0 [ 1347.035393][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1347.035409][ T29] audit: type=1400 audit(2000000173.626:2283): avc: denied { accept } for pid=24481 comm="syz.3.5035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1347.069550][T24477] tipc: Resetting bearer [ 1347.128632][T24477] tipc: Disabling bearer [ 1347.214491][T24396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.294349][T24487] netlink: 'syz.6.5036': attribute type 1 has an invalid length. [ 1347.339653][T24487] bond4: entered promiscuous mode [ 1347.345516][T24487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1347.361999][T24487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1347.472486][T24487] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1347.490543][T24487] bond4: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1347.552701][T24487] bond4: (slave wireguard1): making interface the new active one [ 1347.560761][T24487] wireguard1: entered promiscuous mode [ 1347.596066][T24487] bond4: (slave wireguard1): Enslaving as an active interface with an up link [ 1347.686000][T24504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.745484][T24504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.755439][T24501] xt_CT: No such helper "snmp_trap" [ 1347.792760][ T5807] Bluetooth: hci4: command tx timeout [ 1348.303067][T24396] veth0_vlan: entered promiscuous mode [ 1348.322913][T24396] veth1_vlan: entered promiscuous mode [ 1348.359045][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5043'. [ 1348.389369][T24396] veth0_macvtap: entered promiscuous mode [ 1348.412571][T24396] veth1_macvtap: entered promiscuous mode [ 1348.582278][T24396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.613423][T24396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.651467][ T9819] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.673996][ T9819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.699548][T24526] tipc: Enabling of bearer rejected, already enabled [ 1348.740148][ T9819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.759108][ T9819] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.889320][T24532] netlink: 'syz.1.5050': attribute type 3 has an invalid length. [ 1348.922707][T24532] netlink: 'syz.1.5050': attribute type 3 has an invalid length. [ 1349.033698][T24538] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5051'. [ 1349.191297][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.220236][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.356030][T20550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.378810][T20550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.400821][T24545] tipc: Enabled bearer , priority 0 [ 1349.424967][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5052'. [ 1349.659583][T24545] syzkaller0: entered promiscuous mode [ 1349.674544][T24545] syzkaller0: entered allmulticast mode [ 1349.689865][T24545] tipc: Resetting bearer [ 1349.719865][T24543] tipc: Resetting bearer [ 1349.765310][ T5807] Bluetooth: hci4: command tx timeout [ 1350.600859][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5057'. [ 1350.620869][T24573] cgroup: No subsys list or none specified [ 1350.706931][ T9606] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1350.999259][ T9606] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.111505][ T9606] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1351.136123][ T9606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.167183][ T9606] usb 9-1: Product: syz [ 1351.171523][ T9606] usb 9-1: Manufacturer: syz [ 1351.202838][ T9606] usb 9-1: SerialNumber: syz [ 1351.233134][ T9606] usb 9-1: config 0 descriptor?? [ 1351.246724][ T9606] imon_raw 9-1:0.0: IR endpoint missing [ 1352.560908][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 60 seconds [ 1352.571703][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 60 seconds [ 1352.582612][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 60 seconds [ 1352.593559][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 60 seconds [ 1355.039960][T24543] tipc: Disabling bearer [ 1355.089263][T21256] usb 9-1: USB disconnect, device number 2 [ 1355.361261][T24613] vlan2: entered promiscuous mode [ 1355.374911][T24613] bridge0: entered promiscuous mode [ 1355.385561][T24613] bridge0: port 1(hsr0) entered blocking state [ 1355.391885][T24613] bridge0: port 1(hsr0) entered disabled state [ 1355.398491][T24613] hsr0: entered allmulticast mode [ 1355.404241][T24613] hsr_slave_0: entered allmulticast mode [ 1355.410082][T24613] hsr_slave_1: entered allmulticast mode [ 1355.418533][T24613] hsr0: entered promiscuous mode [ 1355.562214][T24612] xt_hashlimit: max too large, truncated to 1048576 [ 1355.914007][T15363] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1356.172117][T15363] usb 5-1: config 4 has an invalid interface number: 118 but max is 0 [ 1356.251649][T15363] usb 5-1: config 4 has no interface number 0 [ 1356.279907][T15363] usb 5-1: config 4 interface 118 has no altsetting 0 [ 1356.308922][T15363] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 1356.336808][T15363] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1356.381310][T15363] usb 5-1: Product: syz [ 1356.573232][T24626] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5075'. [ 1356.630379][ T5916] usb 5-1: USB disconnect, device number 22 [ 1356.809044][T24634] vti0: entered promiscuous mode [ 1356.841120][T24634] vti0: entered allmulticast mode [ 1356.893376][T24637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5076'. [ 1357.351997][T24632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5069'. [ 1357.361221][T24632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5069'. [ 1357.702224][T24644] netlink: 'syz.4.5079': attribute type 4 has an invalid length. [ 1358.382639][ T5916] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1358.864549][T24664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1359.239464][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.266736][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.284267][ T5916] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1359.304291][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.651801][ T5916] usb 7-1: config 0 descriptor?? [ 1359.747956][T24680] futex_wake_op: syz.1.5089 tries to shift op by 32; fix this program [ 1359.892682][T24683] netlink: 'syz.1.5089': attribute type 4 has an invalid length. [ 1360.061262][T24683] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1360.253062][ T5916] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 1360.292378][ T5916] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1360.492257][ T5916] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 1360.506692][ T9606] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1360.716590][ T5916] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 1360.744280][ T9606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.840104][ T5955] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1360.861757][ T5916] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -5 [ 1360.901650][ T9606] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1360.956277][ T9606] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1360.981837][ T9606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.990946][ T5955] usb 9-1: device descriptor read/64, error -71 [ 1361.034399][ T9606] usb 5-1: config 0 descriptor?? [ 1361.617882][ T5955] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1361.778349][ T5955] usb 9-1: device descriptor read/64, error -71 [ 1361.929840][ T5955] usb usb9-port1: attempt power cycle [ 1362.319324][T24702] 9p: Bad value for 'wfdno' [ 1362.324109][ T5955] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1362.356054][ T5955] usb 9-1: device descriptor read/8, error -71 [ 1362.497729][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1362.523116][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1362.591010][ T5916] usb 7-1: USB disconnect, device number 42 [ 1362.633675][ T5955] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1362.677327][ T5955] usb 9-1: device descriptor read/8, error -71 [ 1362.820324][ T5955] usb usb9-port1: unable to enumerate USB device [ 1363.342295][T21256] usb 5-1: USB disconnect, device number 23 [ 1363.348533][T24681] delete_channel: no stack [ 1363.778025][T24717] overlayfs: failed to clone lowerpath [ 1364.312252][T24719] fuse: Bad value for 'fd' [ 1364.748340][T24727] No such timeout policy "syz1" [ 1364.821111][T24726] netlink: 'syz.4.5105': attribute type 1 has an invalid length. [ 1365.121838][T24726] netlink: 'syz.4.5105': attribute type 2 has an invalid length. [ 1365.156490][T21256] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1365.387212][T21256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.487571][T21256] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1365.504486][T24733] overlayfs: overlapping lowerdir path [ 1365.544069][T21256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.600315][T21256] usb 2-1: config 0 descriptor?? [ 1365.616242][ T5955] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1365.826304][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 1365.853009][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.883477][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.905481][ T5955] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1365.914543][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.953185][ T5955] usb 5-1: config 0 descriptor?? [ 1365.968309][ T5955] hub 5-1:0.0: USB hub found [ 1366.078371][T21256] cherry 0003:046A:0023.0019: unbalanced collection at end of report description [ 1366.106499][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5113'. [ 1366.159613][T21256] cherry 0003:046A:0023.0019: probe with driver cherry failed with error -22 [ 1366.221417][ T5955] hub 5-1:0.0: 1 port detected [ 1366.291273][ T9606] usb 2-1: USB disconnect, device number 109 [ 1366.301238][ T29] audit: type=1400 audit(2000000192.977:2284): avc: denied { read } for pid=24713 comm="syz.1.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1367.747906][ T5955] hub 5-1:0.0: activate --> -90 [ 1368.180346][T15363] usb 5-1: USB disconnect, device number 24 [ 1368.461079][T24772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'. [ 1368.470197][T24772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5121'. [ 1368.766079][T24774] syzkaller0: entered promiscuous mode [ 1368.881377][T24774] syzkaller0: entered allmulticast mode [ 1368.904419][T24774] tipc: Enabled bearer , priority 0 [ 1368.934319][T24773] tipc: Resetting bearer [ 1368.989317][T24773] tipc: Disabling bearer [ 1369.290520][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5116'. [ 1369.432911][T15363] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1369.633160][T15363] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1369.666122][T15363] usb 7-1: config 0 has no interface number 0 [ 1369.712972][T15363] usb 7-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1369.865030][T15363] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1369.919123][T15363] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1370.054516][T15363] usb 7-1: Product: syz [ 1370.200950][T15363] usb 7-1: SerialNumber: syz [ 1370.471506][T15363] usb 7-1: config 0 descriptor?? [ 1370.486102][T15363] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1370.512872][ T29] audit: type=1400 audit(2000000196.934:2285): avc: denied { append } for pid=24792 comm="syz.8.5128" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1370.622097][T24797] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5130'. [ 1371.335665][T15364] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1371.496145][T15364] usb 5-1: Using ep0 maxpacket: 32 [ 1371.502938][T15364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.513967][T15364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.523832][T15364] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1371.532986][T15364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.550250][T15364] usb 5-1: config 0 descriptor?? [ 1371.566707][T15364] hub 5-1:0.0: USB hub found [ 1371.780082][T15364] hub 5-1:0.0: 1 port detected [ 1372.394066][T15364] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1372.511388][T21256] hub 5-1:0.0: activate --> -90 [ 1372.652874][T15364] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1372.698847][T15364] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.713362][T15364] usb 2-1: config 220 has no interface number 2 [ 1372.720113][T15364] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1372.741972][T15364] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1372.750414][T15364] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1372.757333][T15364] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1372.759118][T24827] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525290536 (5050581072 ns) > initial count (447779868 ns). Using initial count to start timer. [ 1372.767633][T15364] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1372.792348][T15364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.803097][T15364] usb 2-1: Product: syz [ 1372.807311][T15364] usb 2-1: Manufacturer: syz [ 1372.812014][T15364] usb 2-1: SerialNumber: syz [ 1372.911994][T24831] No such timeout policy "syz1" [ 1372.956731][T15363] usb 5-1: USB disconnect, device number 25 [ 1373.108591][T15364] usb 2-1: selecting invalid altsetting 0 [ 1373.127515][T15364] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1373.141703][T15364] uvcvideo 2-1:220.0: No valid video chain found. [ 1373.157765][T15364] usb 2-1: selecting invalid altsetting 0 [ 1373.168120][T15364] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1373.223675][T15364] usb 2-1: USB disconnect, device number 110 [ 1373.273934][ T5955] usb 7-1: USB disconnect, device number 43 [ 1373.339586][T24840] netlink: 'syz.6.5144': attribute type 1 has an invalid length. [ 1373.541513][T24840] bond5: entered promiscuous mode [ 1373.546815][T24840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1373.762414][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5145'. [ 1373.932533][T24844] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1373.940603][T24844] bond5: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1373.954169][T24844] bond5: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 1374.799724][T24844] bond5: (slave wireguard2): making interface the new active one [ 1374.808434][T24844] wireguard2: entered promiscuous mode [ 1374.816907][T24844] bond5: (slave wireguard2): Enslaving as an active interface with an up link [ 1375.675219][T24865] netlink: 'syz.8.5150': attribute type 13 has an invalid length. [ 1376.185193][T24871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5153'. [ 1376.200701][T24871] macsec1: entered promiscuous mode [ 1376.206389][T24871] erspan0: entered promiscuous mode [ 1376.821271][T24875] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1376.895607][T24875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1377.585039][ T29] audit: type=1326 audit(2000000203.173:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1377.675505][ T29] audit: type=1326 audit(2000000203.183:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1377.701391][ T29] audit: type=1326 audit(2000000203.183:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1377.728048][ T29] audit: type=1326 audit(2000000203.585:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1377.754233][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5148'. [ 1377.754435][ T29] audit: type=1326 audit(2000000203.585:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24876 comm="syz.6.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x7ffc0000 [ 1377.792947][T21256] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1377.942749][ T29] audit: type=1400 audit(2000000203.791:2291): avc: denied { create } for pid=24894 comm="syz.3.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1378.090100][ T29] audit: type=1400 audit(2000000204.015:2292): avc: denied { sys_admin } for pid=24894 comm="syz.3.5159" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1378.118712][T24904] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5162'. [ 1378.145603][T21256] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1378.179398][T21256] usb 9-1: config 0 has no interface number 0 [ 1378.185531][T21256] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1378.281820][T21256] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1378.364700][T21256] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1378.405024][T21256] usb 9-1: Product: syz [ 1378.420289][T21256] usb 9-1: SerialNumber: syz [ 1378.444413][T24908] netlink: 'syz.1.5164': attribute type 1 has an invalid length. [ 1378.454762][T24908] netlink: 'syz.1.5164': attribute type 2 has an invalid length. [ 1378.455462][T21256] usb 9-1: config 0 descriptor?? [ 1378.514098][T21256] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1378.687110][ T5916] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1379.646488][T24900] delete_channel: no stack [ 1379.724844][ T5916] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1379.724864][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.724875][ T5916] usb 7-1: Product: syz [ 1379.724884][ T5916] usb 7-1: Manufacturer: syz [ 1379.724894][ T5916] usb 7-1: SerialNumber: syz [ 1380.650956][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.661915][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.583350][T24921] No such timeout policy "syz1" [ 1381.592544][T24921] No control pipe specified [ 1382.355711][T21256] usb 9-1: USB disconnect, device number 7 [ 1382.451838][ T5916] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1382.487278][ T5916] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1382.511135][ T5916] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1382.550172][ T5916] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1382.560375][ T5916] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1382.600602][ T5916] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 1382.647175][ T5916] usb 7-1: USB disconnect, device number 44 [ 1382.715799][ T29] audit: type=1400 audit(2000000208.346:2293): avc: denied { listen } for pid=24940 comm="syz.1.5173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1383.350151][T24959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5178'. [ 1383.385928][T24962] xt_hashlimit: size too large, truncated to 1048576 [ 1383.733885][T24969] FAULT_INJECTION: forcing a failure. [ 1383.733885][T24969] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.901187][T24969] CPU: 0 UID: 0 PID: 24969 Comm: syz.4.5180 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.901219][T24969] Tainted: [L]=SOFTLOCKUP [ 1383.901225][T24969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1383.901236][T24969] Call Trace: [ 1383.901243][T24969] [ 1383.901250][T24969] dump_stack_lvl+0x100/0x190 [ 1383.901284][T24969] should_fail_ex.cold+0x5/0xa [ 1383.901308][T24969] should_failslab+0xc2/0x120 [ 1383.901335][T24969] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1383.901354][T24969] ? drm_gem_fb_create+0x4e/0xd0 [ 1383.901382][T24969] drm_gem_fb_create+0x4e/0xd0 [ 1383.901405][T24969] drm_internal_framebuffer_create+0xfc3/0x16f0 [ 1383.901446][T24969] drm_mode_cursor_universal+0x8cb/0xe20 [ 1383.901473][T24969] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 1383.901504][T24969] ? __pfx_drm_lease_held+0x10/0x10 [ 1383.901524][T24969] ? modeset_lock+0x114/0x6d0 [ 1383.901546][T24969] drm_mode_cursor_common+0x308/0x970 [ 1383.901571][T24969] ? __schedule+0x1000/0x60e0 [ 1383.901592][T24969] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 1383.901614][T24969] ? __pfx___schedule+0x10/0x10 [ 1383.901660][T24969] drm_mode_cursor_ioctl+0xd4/0x110 [ 1383.901683][T24969] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1383.901704][T24969] ? do_raw_spin_lock+0x128/0x260 [ 1383.901723][T24969] ? find_held_lock+0x2b/0x80 [ 1383.901749][T24969] ? do_raw_spin_unlock+0x145/0x1e0 [ 1383.901772][T24969] drm_ioctl_kernel+0x1f3/0x3e0 [ 1383.901790][T24969] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1383.901813][T24969] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1383.901840][T24969] drm_ioctl+0x5e6/0xc60 [ 1383.901863][T24969] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1383.901886][T24969] ? __pfx_drm_ioctl+0x10/0x10 [ 1383.901916][T24969] ? selinux_file_ioctl+0x139/0x290 [ 1383.901941][T24969] ? selinux_file_ioctl+0xb4/0x290 [ 1383.901968][T24969] ? __pfx_drm_ioctl+0x10/0x10 [ 1383.901988][T24969] __x64_sys_ioctl+0x18e/0x210 [ 1383.902019][T24969] do_syscall_64+0x106/0xf80 [ 1383.902040][T24969] ? clear_bhb_loop+0x40/0x90 [ 1383.902063][T24969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.902081][T24969] RIP: 0033:0x7f264cf9bf79 [ 1383.902096][T24969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.902114][T24969] RSP: 002b:00007f264df31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.902131][T24969] RAX: ffffffffffffffda RBX: 00007f264d215fa0 RCX: 00007f264cf9bf79 [ 1383.902143][T24969] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 1383.902154][T24969] RBP: 00007f264df31090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.902164][T24969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.902174][T24969] R13: 00007f264d216038 R14: 00007f264d215fa0 R15: 00007ffdcfdbfbc8 [ 1383.902201][T24969] [ 1384.321189][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 90 seconds [ 1384.335267][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 90 seconds [ 1384.346212][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 90 seconds [ 1384.357118][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 90 seconds [ 1384.546268][T24982] cgroup: No subsys list or none specified [ 1384.774176][T21256] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1385.002261][T21256] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1385.037808][T21256] usb 9-1: config 0 has no interface number 0 [ 1385.062410][T21256] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1385.098662][T21256] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1385.115742][T21256] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1385.138215][T21256] usb 9-1: Product: syz [ 1385.149029][T21256] usb 9-1: SerialNumber: syz [ 1385.166625][T21256] usb 9-1: config 0 descriptor?? [ 1385.189615][T21256] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1385.534782][T24998] cgroup: No subsys list or none specified [ 1385.613651][T25000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1385.652968][T25000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.509870][ T29] audit: type=1400 audit(2000000211.901:2294): avc: denied { write } for pid=25010 comm="syz.6.5190" name="cgroup.subtree_control" dev="cgroup2" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1387.091707][T25016] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 1387.535509][ T29] audit: type=1400 audit(2000000211.919:2295): avc: denied { open } for pid=25010 comm="syz.6.5190" path="" dev="cgroup2" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1387.750652][ T29] audit: type=1400 audit(2000000212.452:2296): avc: denied { relabelto } for pid=25010 comm="syz.6.5190" name="cgroup.subtree_control" dev="cgroup2" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 1387.804514][ T29] audit: type=1400 audit(2000000212.452:2297): avc: denied { associate } for pid=25010 comm="syz.6.5190" name="cgroup.subtree_control" dev="cgroup2" ino=383 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:initrc_exec_t:s0" [ 1388.364779][T25028] netlink: 'syz.1.5194': attribute type 3 has an invalid length. [ 1388.372755][T25028] netlink: 'syz.1.5194': attribute type 3 has an invalid length. [ 1388.387516][T25030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5195'. [ 1388.398580][T25030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5195'. [ 1388.618124][T25040] set match dimension is over the limit! [ 1388.634336][T25040] xt_TCPMSS: Only works on TCP SYN packets [ 1389.103476][ T5955] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1389.128437][ T9606] usb 9-1: USB disconnect, device number 8 [ 1389.264848][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 1389.273416][ T5955] usb 7-1: config 14 has an invalid interface number: 37 but max is 0 [ 1389.282652][ T5955] usb 7-1: config 14 has no interface number 0 [ 1389.290356][ T5955] usb 7-1: config 14 interface 37 has no altsetting 0 [ 1389.298909][ T5955] usb 7-1: language id specifier not provided by device, defaulting to English [ 1389.312246][ T5955] usb 7-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=a7.4a [ 1389.322685][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.331100][ T5955] usb 7-1: Product: 鹸ïžçŽ è¡¯Üšé«¼ì‚ºãª†î•—ᾅڗᶩ [ 1389.338050][ T5955] usb 7-1: SerialNumber: syz [ 1389.880055][T25056] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1390.629537][T25032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.672920][T25061] xt_recent: Unsupported userspace flags (000000de) [ 1390.680341][T25032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.843318][T25067] netlink: 'syz.1.5206': attribute type 39 has an invalid length. [ 1391.597444][ T5955] uvcvideo 7-1:14.37: Found UVC 0.00 device 鹸ïžçŽ è¡¯Üšé«¼ì‚ºãª†î•—ᾅڗᶩ (152d:0310) [ 1391.653267][ T5955] uvcvideo 7-1:14.37: No valid video chain found. [ 1391.710510][ T5955] usb 7-1: USB disconnect, device number 45 [ 1393.071817][T25111] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1393.140174][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1393.146946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1394.316978][T25128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5223'. [ 1394.730136][T25130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1394.748334][T25130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5224'. [ 1395.070429][ T5955] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1395.352325][ T5955] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1395.400978][ T5955] usb 7-1: config 0 has no interface number 0 [ 1395.454656][ T5955] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1395.555903][ T5955] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1395.646316][ T5955] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1395.719320][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1396.271676][ T5955] usb 7-1: Product: syz [ 1396.276029][ T5955] usb 7-1: SerialNumber: syz [ 1396.460603][ T5955] usb 7-1: config 0 descriptor?? [ 1396.486491][ T5955] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1397.910855][T25165] team0 (unregistering): Port device team_slave_0 removed [ 1397.912116][T25165] team0 (unregistering): Port device team_slave_1 removed [ 1397.913546][T25165] team0 (unregistering): Port device batadv1 removed [ 1398.825126][T25177] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 1398.875968][T25177] bond9: entered promiscuous mode [ 1398.881301][T25177] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1398.960673][T25181] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1398.981096][T25181] bond9: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1398.992046][ T5955] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1399.002823][T25181] bond9: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 1399.019989][T25181] bond9: (slave wireguard3): making interface the new active one [ 1399.040257][T25181] wireguard3: entered promiscuous mode [ 1399.051293][T25181] bond9: (slave wireguard3): Enslaving as an active interface with an up link [ 1399.164772][ T5955] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1399.177030][ T5955] usb 5-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 1399.191883][ T5955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1399.201147][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 19245, setting to 64 [ 1399.223037][ T5955] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1399.234181][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1399.243200][ T5955] usb 5-1: Product: syz [ 1399.247598][ T5955] usb 5-1: Manufacturer: syz [ 1399.247751][T25189] tipc: Started in network mode [ 1399.257744][T25189] tipc: Node identity 0a5dfd23a027, cluster identity 4711 [ 1399.262337][ T5955] cdc_wdm 5-1:1.0: skipping garbage [ 1399.265263][T25189] tipc: Enabled bearer , priority 0 [ 1399.272524][ T5955] cdc_wdm 5-1:1.0: skipping garbage [ 1399.285028][ T5955] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1399.321267][T25189] syzkaller0: entered promiscuous mode [ 1399.326869][T25189] syzkaller0: entered allmulticast mode [ 1399.333047][T25189] tipc: Resetting bearer [ 1399.342391][T25188] tipc: Resetting bearer [ 1399.534650][T15364] usb 5-1: USB disconnect, device number 26 [ 1399.551459][ T29] audit: type=1400 audit(2000000224.098:2298): avc: denied { map } for pid=25170 comm="syz.4.5234" path="cgroup:[4026532883]" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1399.600368][ T29] audit: type=1400 audit(2000000224.098:2299): avc: denied { execute } for pid=25170 comm="syz.4.5234" path="cgroup:[4026532883]" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1399.631002][ T29] audit: type=1400 audit(2000000224.098:2300): avc: denied { create } for pid=25170 comm="syz.4.5234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1399.933597][T15364] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1400.075533][T24399] usb 7-1: USB disconnect, device number 46 [ 1400.116823][T15364] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1400.138205][T15364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.164533][T15364] usb 5-1: config 0 descriptor?? [ 1400.182441][T15364] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1400.193081][T15364] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1400.416667][T15364] usb 5-1: USB disconnect, device number 27 [ 1400.442445][T15364] ftdi_sio 5-1:0.0: device disconnected [ 1401.015477][T25188] tipc: Disabling bearer [ 1401.176934][T24399] tipc: Node number set to 2860186915 [ 1401.435368][T25216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5243'. [ 1402.228555][T25223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.115800][T25232] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5244'. [ 1403.493105][T24399] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1403.729033][T24399] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.748667][T24399] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1403.793996][T24399] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1403.827652][T24399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.882964][T24399] usb 5-1: config 0 descriptor?? [ 1403.969576][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5256'. [ 1404.010363][T25255] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1404.106886][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1404.813785][T25271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5260'. [ 1406.600625][T15359] usb 5-1: USB disconnect, device number 28 [ 1406.718970][T25292] macsec1: entered promiscuous mode [ 1406.742085][T25292] erspan0: entered promiscuous mode [ 1406.765354][T25292] erspan0: left promiscuous mode [ 1407.631301][T25310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5274'. [ 1407.676591][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5273'. [ 1408.095405][T25326] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1408.113031][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 1408.136165][T25326] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1408.474976][T15359] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1408.624629][T15359] usb 2-1: device descriptor read/64, error -71 [ 1408.763556][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1408.923908][T15359] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1408.977464][ T5955] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1409.084201][T15359] usb 2-1: device descriptor read/64, error -71 [ 1409.173018][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.696876][T15359] usb usb2-port1: attempt power cycle [ 1409.709894][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1409.770552][ T5955] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1409.802386][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.824344][ T5955] usb 5-1: config 0 descriptor?? [ 1409.910244][ T29] audit: type=1400 audit(2000000233.789:2301): avc: denied { mount } for pid=25356 comm="syz.3.5284" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1409.943660][T25359] xt_nfacct: accounting object `syz1' does not exist [ 1409.961526][T25357] overlayfs: failed to clone lowerpath [ 1410.008753][T25361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5287'. [ 1410.100500][T15359] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1410.166417][T15359] usb 2-1: device descriptor read/8, error -71 [ 1410.442981][T15359] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1410.497888][T15359] usb 2-1: device descriptor read/8, error -71 [ 1410.892694][T15359] usb usb2-port1: unable to enumerate USB device [ 1411.429270][ T10] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1412.047568][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5294'. [ 1412.443072][T21256] usb 5-1: USB disconnect, device number 29 [ 1412.591122][ T29] audit: type=1400 audit(2000000236.296:2302): avc: denied { bind } for pid=25392 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1412.612177][ T29] audit: type=1400 audit(2000000236.296:2303): avc: denied { bind } for pid=25392 comm="syz.1.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1412.731520][ T10] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1412.741977][ T10] usb 7-1: config 0 has no interface number 0 [ 1412.752900][ T10] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1412.785072][ T10] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1412.796581][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.810643][ T10] usb 7-1: Product: syz [ 1412.818292][ T10] usb 7-1: Manufacturer: syz [ 1412.827587][ T10] usb 7-1: SerialNumber: syz [ 1412.850372][ T10] usb 7-1: config 0 descriptor?? [ 1412.856053][T25378] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1412.879072][ T10] usb-storage 7-1:0.20: USB Mass Storage device detected [ 1412.908233][ T10] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1414.266076][T25401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1414.275243][T25401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1414.284238][T25401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5298'. [ 1414.425284][ T10] scsi host1: usb-storage 7-1:0.20 [ 1414.477677][ T10] usb 7-1: USB disconnect, device number 47 [ 1414.697871][ T29] audit: type=1400 audit(2000000238.213:2304): avc: denied { getopt } for pid=25412 comm="syz.8.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1414.930296][T25416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25416 comm=syz.6.5301 [ 1415.348902][T24399] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1415.356514][ T10] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1415.562746][ T10] usb 2-1: device descriptor read/64, error -71 [ 1415.585431][T24399] usb 9-1: config index 0 descriptor too short (expected 7768, got 18) [ 1415.594169][T24399] usb 9-1: config 0 has an invalid interface number: 32 but max is 0 [ 1415.612772][T24399] usb 9-1: config 0 has no interface number 0 [ 1415.628601][T24399] usb 9-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1415.638006][ T9606] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1415.658028][T24399] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.705233][T24399] usb 9-1: config 0 descriptor?? [ 1415.732538][T24399] ftdi_sio 9-1:0.32: FTDI USB Serial Device converter detected [ 1415.750085][T25432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5308'. [ 1415.752854][T24399] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1415.832491][ T10] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 1415.849770][ T9606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.862879][ T9606] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1415.918698][ T9606] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1415.965546][ T9606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.971430][T15356] usb 9-1: USB disconnect, device number 9 [ 1415.989273][T15356] ftdi_sio 9-1:0.32: device disconnected [ 1416.001086][ T10] usb 2-1: device descriptor read/64, error -71 [ 1416.015764][ T9606] usb 5-1: config 0 descriptor?? [ 1416.119578][ T10] usb usb2-port1: attempt power cycle [ 1416.535625][ T10] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1416.622541][ T10] usb 2-1: device descriptor read/8, error -71 [ 1416.889551][ T10] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1416.953130][ T10] usb 2-1: device descriptor read/8, error -71 [ 1417.140821][ T10] usb usb2-port1: unable to enumerate USB device [ 1417.155989][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 120 seconds [ 1417.167138][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 120 seconds [ 1417.178656][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 120 seconds [ 1417.190033][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 120 seconds [ 1418.392572][T25464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5316'. [ 1418.665870][ T29] audit: type=1400 audit(2000000241.974:2305): avc: denied { create } for pid=25465 comm="syz.1.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1418.718146][ T10] usb 5-1: USB disconnect, device number 30 [ 1418.738886][T25475] netlink: 'syz.1.5318': attribute type 1 has an invalid length. [ 1418.822567][T25475] bond3: entered promiscuous mode [ 1418.925269][T25475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1420.482788][T25488] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1420.496748][T25489] cgroup: No subsys list or none specified [ 1420.509321][T25488] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1420.739772][ T29] audit: type=1400 audit(2000000243.919:2306): avc: denied { listen } for pid=25491 comm="syz.4.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1420.763165][T25492] bridge2: entered promiscuous mode [ 1420.768393][T25492] bridge2: entered allmulticast mode [ 1422.135164][ T29] audit: type=1400 audit(2000000245.107:2307): avc: denied { bind } for pid=25498 comm="syz.6.5326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1422.402478][ T29] audit: type=1400 audit(2000000245.107:2308): avc: denied { write } for pid=25498 comm="syz.6.5326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1422.772169][T21256] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1422.971312][T21256] usb 5-1: device descriptor read/64, error -71 [ 1422.991743][T25507] cgroup: No subsys list or none specified [ 1423.238678][T21256] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1423.391557][T21256] usb 5-1: device descriptor read/64, error -71 [ 1423.506209][T25512] netlink: 'syz.6.5330': attribute type 1 has an invalid length. [ 1423.514355][T21256] usb usb5-port1: attempt power cycle [ 1423.788965][T25512] bond6: entered promiscuous mode [ 1423.794289][T25512] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1423.901366][T21256] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1424.003375][T25517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1424.032177][T21256] usb 5-1: device descriptor read/8, error -71 [ 1424.524831][T25517] bond6: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1424.580455][T25517] bond6: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 1424.590850][T24399] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1424.639459][T21256] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1424.650688][ T10] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1424.737911][T21256] usb 5-1: device descriptor read/8, error -71 [ 1424.830062][ T10] usb 9-1: config 0 has an invalid interface number: 148 but max is 0 [ 1424.842156][T24399] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.860995][ T10] usb 9-1: config 0 has no interface number 0 [ 1424.861058][T21256] usb usb5-port1: unable to enumerate USB device [ 1424.879845][T25517] bond6: (slave wireguard3): making interface the new active one [ 1424.891926][T25517] wireguard3: entered promiscuous mode [ 1424.898645][T25517] bond6: (slave wireguard3): Enslaving as an active interface with an up link [ 1424.934698][T24399] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1424.949707][ T10] usb 9-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 1424.968922][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.979804][T24399] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1424.991592][ T10] usb 9-1: Product: syz [ 1424.995933][T24399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.006345][ T10] usb 9-1: Manufacturer: syz [ 1425.011107][ T10] usb 9-1: SerialNumber: syz [ 1425.032051][T24399] usb 2-1: config 0 descriptor?? [ 1425.039246][ T10] usb 9-1: config 0 descriptor?? [ 1425.064379][ T10] kobil_sct 9-1:0.148: KOBIL USB smart card terminal converter detected [ 1425.092378][ T10] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1425.311212][T25524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.320437][T25524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.272953][ T29] audit: type=1400 audit(2000000249.083:2309): avc: denied { read } for pid=25528 comm="syz.6.5333" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1426.300836][ T29] audit: type=1400 audit(2000000249.092:2310): avc: denied { open } for pid=25528 comm="syz.6.5333" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1427.152602][T21256] usb 9-1: USB disconnect, device number 10 [ 1427.544258][T21256] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1427.954048][T21256] kobil_sct 9-1:0.148: device disconnected [ 1428.144925][T24399] usb 2-1: USB disconnect, device number 119 [ 1428.203792][T25557] cgroup: No subsys list or none specified [ 1428.211947][ T29] audit: type=1400 audit(2000000250.907:2311): avc: denied { append } for pid=25554 comm="syz.8.5341" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1429.284859][T25573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5344'. [ 1429.357057][T25575] wg1: entered promiscuous mode [ 1429.362029][T25575] wg1: entered allmulticast mode [ 1429.552033][ T29] audit: type=1400 audit(2000000252.160:2312): avc: denied { mounton } for pid=25576 comm="syz.6.5346" path="/345/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1429.658847][ T29] audit: type=1400 audit(2000000252.207:2313): avc: denied { read } for pid=25576 comm="syz.6.5346" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1429.707870][ T29] audit: type=1400 audit(2000000252.254:2314): avc: denied { unmount } for pid=18881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1430.120297][T25588] netlink: 'syz.4.5349': attribute type 1 has an invalid length. [ 1430.163358][T25588] netlink: 'syz.4.5349': attribute type 2 has an invalid length. [ 1431.224657][T25613] No such timeout policy "syz1" [ 1431.259537][ T9606] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1431.556750][ T9606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.874917][ T9606] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1431.927100][ T9606] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1432.011633][ T9606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.043606][ T9606] usb 5-1: config 0 descriptor?? [ 1432.061688][T25625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5357'. [ 1432.447502][T25632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1432.544881][T25632] cgroup: No subsys list or none specified [ 1433.436033][T25644] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1433.693445][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1433.701614][T25644] CIFS mount error: No usable UNC path provided in device string! [ 1433.701614][T25644] [ 1433.723460][T25644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1433.933751][ T9606] usb 5-1: USB disconnect, device number 35 [ 1435.374950][T25678] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1435.388785][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1435.395856][T25680] lo speed is unknown, defaulting to 1000 [ 1435.404103][T25680] lo speed is unknown, defaulting to 1000 [ 1435.906230][T25680] lo speed is unknown, defaulting to 1000 [ 1435.926740][ T29] audit: type=1400 audit(2000000257.698:2315): avc: denied { bind } for pid=25673 comm="syz.4.5374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1436.059298][T25680] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1436.259824][ T9606] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1436.462874][ T9606] usb 7-1: Using ep0 maxpacket: 32 [ 1436.469300][T25680] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1436.469580][ T9606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.516430][ T9606] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.537073][ T9606] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1436.551914][ T9606] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.568303][ T29] audit: type=1400 audit(2000000258.717:2316): avc: denied { write } for pid=25688 comm="syz.1.5372" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1436.613194][ T9606] usb 7-1: config 0 descriptor?? [ 1436.639933][ T9606] hub 7-1:0.0: USB hub found [ 1436.679497][ T29] audit: type=1400 audit(2000000258.745:2317): avc: denied { ioctl } for pid=25688 comm="syz.1.5372" path="/dev/usbmon9" dev="devtmpfs" ino=743 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1436.870977][ T9606] hub 7-1:0.0: 1 port detected [ 1436.907437][T25693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1437.005976][T25696] cgroup: No subsys list or none specified [ 1437.152895][T25680] lo speed is unknown, defaulting to 1000 [ 1437.213328][T25680] lo speed is unknown, defaulting to 1000 [ 1437.265829][T25680] lo speed is unknown, defaulting to 1000 [ 1437.284245][T25680] lo speed is unknown, defaulting to 1000 [ 1437.940547][ T9606] hub 7-1:0.0: activate --> -90 [ 1438.302684][T25680] lo speed is unknown, defaulting to 1000 [ 1438.346275][T25680] lo speed is unknown, defaulting to 1000 [ 1438.583328][ T9606] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1438.584471][T21256] usb 7-1: USB disconnect, device number 48 [ 1439.303613][ T29] audit: type=1400 audit(2000000260.953:2318): avc: denied { ioctl } for pid=25716 comm="syz.1.5386" path="socket:[82329]" dev="sockfs" ino=82329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1440.675832][T25730] binder: BINDER_SET_CONTEXT_MGR already set [ 1440.681862][T25730] binder: 25725:25730 ioctl 4018620d 200000000040 returned -16 [ 1440.860234][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5391'. [ 1440.877075][T25732] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5391'. [ 1443.140957][T25765] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1443.381249][T25771] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5399'. [ 1443.408112][ T29] audit: type=1400 audit(2000000265.116:2319): avc: denied { mount } for pid=25768 comm="syz.1.5401" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1443.412183][T25769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1443.691871][ T29] audit: type=1400 audit(2000000265.116:2320): avc: denied { mounton } for pid=25768 comm="syz.1.5401" path="/379/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1443.949610][T25780] FAULT_INJECTION: forcing a failure. [ 1443.949610][T25780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.962809][T25780] CPU: 0 UID: 0 PID: 25780 Comm: syz.6.5405 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.962841][T25780] Tainted: [L]=SOFTLOCKUP [ 1443.962848][T25780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1443.962858][T25780] Call Trace: [ 1443.962865][T25780] [ 1443.962872][T25780] dump_stack_lvl+0x100/0x190 [ 1443.962905][T25780] should_fail_ex.cold+0x5/0xa [ 1443.962928][T25780] _copy_from_user+0x2e/0xd0 [ 1443.962950][T25780] do_ipt_set_ctl+0x86b/0xb90 [ 1443.962977][T25780] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1443.963009][T25780] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1443.963036][T25780] ? sockopt_release_sock+0x57/0x70 [ 1443.963056][T25780] ? __local_bh_enable_ip+0x9e/0x120 [ 1443.963079][T25780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1443.963117][T25780] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1443.963144][T25780] nf_setsockopt+0x8d/0xf0 [ 1443.963172][T25780] ip_setsockopt+0xcb/0xf0 [ 1443.963201][T25780] raw_setsockopt+0x60/0x1b0 [ 1443.963226][T25780] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1443.963253][T25780] do_sock_setsockopt+0xf3/0x1d0 [ 1443.963280][T25780] __sys_setsockopt+0x195/0x220 [ 1443.963305][T25780] __x64_sys_setsockopt+0xbd/0x160 [ 1443.963323][T25780] ? do_syscall_64+0x95/0xf80 [ 1443.963344][T25780] ? lockdep_hardirqs_on+0x78/0x100 [ 1443.963366][T25780] do_syscall_64+0x106/0xf80 [ 1443.963385][T25780] ? clear_bhb_loop+0x40/0x90 [ 1443.963408][T25780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.963426][T25780] RIP: 0033:0x7f6cbf59bf79 [ 1443.963441][T25780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.963457][T25780] RSP: 002b:00007f6cc03c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1443.963476][T25780] RAX: ffffffffffffffda RBX: 00007f6cbf815fa0 RCX: 00007f6cbf59bf79 [ 1443.963487][T25780] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1443.963498][T25780] RBP: 00007f6cc03c1090 R08: 0000000000000370 R09: 0000000000000000 [ 1443.963509][T25780] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 1443.963520][T25780] R13: 00007f6cbf816038 R14: 00007f6cbf815fa0 R15: 00007ffe5a613e38 [ 1443.963545][T25780] [ 1444.328627][ T29] audit: type=1400 audit(2000000265.976:2321): avc: denied { unmount } for pid=18214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1444.379681][T25782] xt_hashlimit: max too large, truncated to 1048576 [ 1444.508991][ T29] audit: type=1400 audit(2000000266.144:2322): avc: denied { write } for pid=25787 comm="syz.1.5403" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1446.673156][ T29] audit: type=1400 audit(2000000266.144:2323): avc: denied { ioctl } for pid=25787 comm="syz.1.5403" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1447.023011][T25801] cgroup: No subsys list or none specified [ 1449.046355][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1449.207320][ T10] usb 2-1: config 0 has no interfaces? [ 1449.212910][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1449.223952][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.259525][ T9606] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1449.268972][ T10] usb 2-1: config 0 descriptor?? [ 1449.482756][ T9606] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1449.490613][ T9606] usb 9-1: can't read configurations, error -61 [ 1449.719468][ T9606] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1449.949134][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 150 seconds [ 1449.962849][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 150 seconds [ 1449.973953][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 150 seconds [ 1449.985070][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 150 seconds [ 1450.607436][ T9606] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1450.629567][ T9606] usb 9-1: can't read configurations, error -61 [ 1450.883583][ T9606] usb usb9-port1: attempt power cycle [ 1450.958270][T25849] netlink: 'syz.3.5424': attribute type 10 has an invalid length. [ 1451.110323][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5423'. [ 1451.141090][T21256] usb 2-1: USB disconnect, device number 121 [ 1451.216679][ T29] audit: type=1326 audit(2000000272.421:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264cf9bf79 code=0x7ffc0000 [ 1451.258680][ T9606] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1451.268896][T25854] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1451.275399][T25854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1451.283713][ T29] audit: type=1326 audit(2000000272.421:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f264cf9d83a code=0x7ffc0000 [ 1451.309882][T25854] vhci_hcd vhci_hcd.0: Device attached [ 1451.320321][ T9606] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1451.328030][ T9606] usb 9-1: can't read configurations, error -61 [ 1451.336670][ T29] audit: type=1326 audit(2000000272.430:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f264cf5c84e code=0x7ffc0000 [ 1451.376457][ T29] audit: type=1326 audit(2000000272.430:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f264cf5c84e code=0x7ffc0000 [ 1451.407462][ T29] audit: type=1326 audit(2000000272.571:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f264cf5c84e code=0x7ffc0000 [ 1451.432061][ T29] audit: type=1326 audit(2000000272.571:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264cf9bf79 code=0x7ffc0000 [ 1451.455884][ T29] audit: type=1326 audit(2000000272.571:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264cf9bf79 code=0x7ffc0000 [ 1451.492397][T25853] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1451.493926][ T9606] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1451.498915][T25853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1451.526107][ T29] audit: type=1326 audit(2000000272.711:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f264cf5c84e code=0x7ffc0000 [ 1451.528325][T25853] vhci_hcd vhci_hcd.0: Device attached [ 1451.554081][ T9606] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1451.564218][T21256] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1451.576036][ T9606] usb 9-1: can't read configurations, error -61 [ 1451.595608][ T9606] usb usb9-port1: unable to enumerate USB device [ 1451.618636][ T29] audit: type=1326 audit(2000000272.739:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f264cf9bc0b code=0x7ffc0000 [ 1451.663860][T21256] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1451.727186][ T29] audit: type=1326 audit(2000000272.739:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25852 comm="syz.4.5425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f264cf9bc0b code=0x7ffc0000 [ 1451.835969][ T9606] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1452.026556][T25864] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1452.549265][ T9606] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.559550][ T9606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1452.568733][ T9606] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1452.596774][ T9606] usb 5-1: string descriptor 0 read error: -22 [ 1452.604265][ T9606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1452.621189][ T9606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.830907][T15359] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1452.965255][ T9606] usb 5-1: USB disconnect, device number 36 [ 1452.983360][T25858] vhci_hcd: connection closed [ 1452.990162][ T122] vhci_hcd vhci_hcd.4: stop threads [ 1453.002377][T15359] usb 9-1: Using ep0 maxpacket: 32 [ 1453.011967][T25856] vhci_hcd: connection reset by peer [ 1453.022064][T15359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.043935][ T122] vhci_hcd vhci_hcd.4: release socket [ 1453.054751][ T122] vhci_hcd vhci_hcd.4: disconnect device [ 1453.082499][ T122] vhci_hcd vhci_hcd.4: stop threads [ 1453.084580][T15359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.105978][ T122] vhci_hcd vhci_hcd.4: release socket [ 1453.126895][T15359] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1453.146908][ T122] vhci_hcd vhci_hcd.4: disconnect device [ 1453.153063][T15359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.211752][T15359] usb 9-1: config 0 descriptor?? [ 1453.240635][T15359] hub 9-1:0.0: USB hub found [ 1453.444808][T15359] hub 9-1:0.0: 1 port detected [ 1453.474210][T25881] cgroup: No subsys list or none specified [ 1453.741710][T25883] No such timeout policy "syz1" [ 1454.681650][T15359] hub 9-1:0.0: activate --> -90 [ 1455.487361][T25890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5437'. [ 1455.802210][ T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1455.876497][T15356] usb 9-1: USB disconnect, device number 15 [ 1455.978833][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1455.994676][ T10] usb 7-1: config 0 has no interface number 0 [ 1456.012084][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.048467][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.076778][ T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1456.098303][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.131105][ T10] usb 7-1: config 0 descriptor?? [ 1456.761897][ T10] usbhid 7-1:0.1: can't add hid device: -71 [ 1456.770143][ T10] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1456.814514][ T10] usb 7-1: USB disconnect, device number 49 [ 1456.859530][T25911] lo speed is unknown, defaulting to 1000 [ 1457.193156][T21256] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1457.567917][T25928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.127174][T25928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.315610][T25928] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 1458.326896][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1458.326910][ T29] audit: type=1400 audit(2000000279.053:2369): avc: denied { relabelfrom } for pid=25926 comm="syz.1.5447" name="NETLINK" dev="sockfs" ino=83350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1458.878217][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.891826][ T9606] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1458.916202][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.949352][ T29] audit: type=1400 audit(2000000279.081:2370): avc: denied { relabelto } for pid=25926 comm="syz.1.5447" name="NETLINK" dev="sockfs" ino=83350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:cron_log_t:s0" [ 1459.095056][ T9606] usb 2-1: device descriptor read/64, error -71 [ 1459.267101][T25944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5450'. [ 1459.497038][T25943] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1459.576231][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1459.584895][ T9606] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1459.758033][ T9606] usb 2-1: device descriptor read/64, error -71 [ 1459.779031][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1459.787304][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.810490][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.847170][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1459.870712][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.879025][ T9606] usb usb2-port1: attempt power cycle [ 1459.919100][ T10] usb 9-1: config 0 descriptor?? [ 1459.947299][ T10] hub 9-1:0.0: USB hub found [ 1461.074807][ T10] hub 9-1:0.0: 1 port detected [ 1461.137168][ T9606] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1461.759730][T25967] tipc: Enabled bearer , priority 0 [ 1461.842598][ T9606] usb 2-1: device descriptor read/8, error -71 [ 1461.852790][T25967] syzkaller0: entered promiscuous mode [ 1461.876102][T25967] syzkaller0: entered allmulticast mode [ 1461.880222][T24399] hub 9-1:0.0: activate --> -90 [ 1461.889589][T25967] tipc: Resetting bearer [ 1461.903901][T25969] cgroup: No subsys list or none specified [ 1461.981360][T15359] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1462.021731][T25966] tipc: Resetting bearer [ 1462.335167][T15359] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1462.375769][T15359] usb 7-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1462.385116][T15359] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.420139][T15359] usb 7-1: Product: syz [ 1462.428327][T15359] usb 7-1: Manufacturer: syz [ 1462.469857][T15359] usb 7-1: SerialNumber: syz [ 1462.477503][T15359] usb 7-1: config 0 descriptor?? [ 1462.500108][T15359] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1462.862681][ T10] usb 7-1: USB disconnect, device number 50 [ 1463.522577][T24399] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 1463.533472][T24399] usb 9-1-port1: cannot disable (err = -32) [ 1464.772349][T25992] FAULT_INJECTION: forcing a failure. [ 1464.772349][T25992] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.825241][T25992] CPU: 1 UID: 0 PID: 25992 Comm: syz.1.5466 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.825271][T25992] Tainted: [L]=SOFTLOCKUP [ 1464.825277][T25992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.825287][T25992] Call Trace: [ 1464.825293][T25992] [ 1464.825300][T25992] dump_stack_lvl+0x100/0x190 [ 1464.825332][T25992] should_fail_ex.cold+0x5/0xa [ 1464.825355][T25992] should_failslab+0xc2/0x120 [ 1464.825382][T25992] __kvmalloc_node_noprof+0xfa/0xa00 [ 1464.825405][T25992] ? xt_alloc_table_info+0x44/0xa0 [ 1464.825438][T25992] xt_alloc_table_info+0x44/0xa0 [ 1464.825464][T25992] do_ipt_set_ctl+0x504/0xb90 [ 1464.825493][T25992] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1464.825522][T25992] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1464.825547][T25992] ? sockopt_release_sock+0x57/0x70 [ 1464.825565][T25992] ? __local_bh_enable_ip+0x9e/0x120 [ 1464.825587][T25992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1464.825623][T25992] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1464.825651][T25992] nf_setsockopt+0x8d/0xf0 [ 1464.825679][T25992] ip_setsockopt+0xcb/0xf0 [ 1464.825709][T25992] raw_setsockopt+0x60/0x1b0 [ 1464.825737][T25992] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1464.825763][T25992] do_sock_setsockopt+0xf3/0x1d0 [ 1464.825797][T25992] __sys_setsockopt+0x195/0x220 [ 1464.825822][T25992] __x64_sys_setsockopt+0xbd/0x160 [ 1464.825840][T25992] ? do_syscall_64+0x95/0xf80 [ 1464.825860][T25992] ? lockdep_hardirqs_on+0x78/0x100 [ 1464.825882][T25992] do_syscall_64+0x106/0xf80 [ 1464.825902][T25992] ? clear_bhb_loop+0x40/0x90 [ 1464.825923][T25992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.825942][T25992] RIP: 0033:0x7fd01ab9bf79 [ 1464.825958][T25992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.825975][T25992] RSP: 002b:00007fd01ba6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1464.825992][T25992] RAX: ffffffffffffffda RBX: 00007fd01ae15fa0 RCX: 00007fd01ab9bf79 [ 1464.826004][T25992] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1464.826014][T25992] RBP: 00007fd01ba6a090 R08: 0000000000000370 R09: 0000000000000000 [ 1464.826024][T25992] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 1464.826034][T25992] R13: 00007fd01ae16038 R14: 00007fd01ae15fa0 R15: 00007ffc0af83548 [ 1464.826059][T25992] [ 1465.868331][T26000] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1465.868331][T26000] The task syz.3.5468 (26000) triggered the difference, watch for misbehavior. [ 1465.901392][T26000] overlayfs: failed to clone upperpath [ 1465.949353][T26000] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5468'. [ 1466.086548][T15356] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1466.268306][T15356] usb 7-1: Using ep0 maxpacket: 32 [ 1466.288915][T15356] usb 7-1: config 2 has an invalid interface number: 230 but max is 0 [ 1466.301795][T15356] usb 7-1: config 2 has no interface number 0 [ 1466.308217][T15356] usb 7-1: config 2 interface 230 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 1466.332678][T15356] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 1466.350431][T15356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.372966][T25999] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1466.608705][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.617753][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.654042][T15356] usb 7-1: string descriptor 0 read error: -71 [ 1466.661092][T15356] cypress_m8 7-1:2.230: HID->COM RS232 Adapter converter detected [ 1466.698582][T15356] usb 7-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1466.739824][T15356] usb 7-1: USB disconnect, device number 51 [ 1466.767610][T15356] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1466.787980][T15356] cypress_m8 7-1:2.230: device disconnected [ 1467.820956][T25966] tipc: Disabling bearer [ 1467.835174][T25994] macsec1: entered promiscuous mode [ 1467.840582][T25994] erspan0: entered promiscuous mode [ 1467.848311][T25994] erspan0: left promiscuous mode [ 1467.957619][T15356] usb 9-1: USB disconnect, device number 16 [ 1468.055802][T26015] cgroup: No subsys list or none specified [ 1468.418704][T24399] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1468.805189][T24399] usb 2-1: config 0 has no interfaces? [ 1468.815630][T24399] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1468.838938][T24399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.863125][T24399] usb 2-1: config 0 descriptor?? [ 1469.997698][T26038] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1470.683520][T21256] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1470.909780][T21256] usb 5-1: Using ep0 maxpacket: 32 [ 1470.931667][T21256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.970362][T21256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.991226][T21256] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1471.003566][T15356] usb 2-1: USB disconnect, device number 126 [ 1471.011863][T21256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.027211][T21256] usb 5-1: config 0 descriptor?? [ 1471.051701][T21256] hub 5-1:0.0: USB hub found [ 1471.277952][T21256] hub 5-1:0.0: 1 port detected [ 1472.537828][T26063] netlink: 'syz.1.5487': attribute type 2 has an invalid length. [ 1472.959127][T24398] Bluetooth: hci4: command 0x0406 tx timeout [ 1472.965229][T21256] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1473.550229][T24399] usb 5-1: USB disconnect, device number 37 [ 1473.963583][ T29] audit: type=1400 audit(2000000293.673:2371): avc: denied { setopt } for pid=26075 comm="syz.6.5491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1474.213623][T26080] cgroup: No subsys list or none specified [ 1474.297650][T24399] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1474.502296][T26083] No such timeout policy "syz1" [ 1474.564199][T24399] usb 9-1: Using ep0 maxpacket: 32 [ 1474.585780][T24399] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1474.601944][T24399] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1474.622133][T24399] usb 9-1: config 1 has no interface number 1 [ 1474.633504][T24399] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1474.663741][T24399] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1474.678946][T24399] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.696660][T24399] usb 9-1: Product: syz [ 1474.706769][T24399] usb 9-1: Manufacturer: syz [ 1474.718716][T24399] usb 9-1: SerialNumber: syz [ 1474.910521][ T29] audit: type=1326 audit(2000000294.590:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.6.5497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cbf59bf79 code=0x0 [ 1475.666548][T24399] usb 9-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1475.716361][T24399] usb 9-1: USB disconnect, device number 17 [ 1476.140980][T23807] udevd[23807]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1477.167100][T15356] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1477.336386][T15356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1477.361428][T15356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1477.387548][T15356] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1477.406585][T15356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.438420][T15356] usb 7-1: Product: syz [ 1477.460865][T15356] usb 7-1: Manufacturer: syz [ 1477.472015][T15356] usb 7-1: SerialNumber: syz [ 1477.483470][T15356] usb 7-1: config 0 descriptor?? [ 1477.741108][T26103] lo speed is unknown, defaulting to 1000 [ 1478.316769][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1478.497619][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.540366][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1478.704595][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1478.721240][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.760532][ T10] usb 9-1: config 0 descriptor?? [ 1479.551304][T15356] usb 7-1: USB disconnect, device number 52 [ 1479.964090][T26135] cgroup: No subsys list or none specified [ 1480.069917][T15356] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1480.272975][T15356] usb 7-1: Using ep0 maxpacket: 32 [ 1480.289668][T15356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.736978][T15356] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.747408][T15356] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1480.756695][T15356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.784773][T15356] usb 7-1: config 0 descriptor?? [ 1480.805530][T15356] hub 7-1:0.0: USB hub found [ 1481.197721][ T29] audit: type=1400 audit(2000000300.446:2373): avc: denied { mounton } for pid=26142 comm="syz.1.5508" path="/proc/1320/cgroup" dev="proc" ino=82932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1482.432551][ T2631] block nbd1: Possible stuck request ffff888027da0000: control (read@0,1024B). Runtime 180 seconds [ 1482.453984][ T2631] block nbd1: Possible stuck request ffff888027da0200: control (read@1024,1024B). Runtime 180 seconds [ 1482.465034][ T2631] block nbd1: Possible stuck request ffff888027da0400: control (read@2048,1024B). Runtime 180 seconds [ 1482.474374][T15356] hub 7-1:0.0: 1 port detected [ 1482.476343][ T2631] block nbd1: Possible stuck request ffff888027da0600: control (read@3072,1024B). Runtime 180 seconds [ 1482.568277][ T29] audit: type=1400 audit(2000000301.746:2374): avc: denied { unmount } for pid=18214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1482.656417][T21256] usb 9-1: USB disconnect, device number 18 [ 1483.305456][T15356] hub 7-1:0.0: activate --> -90 [ 1483.550181][ T5807] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1483.630740][T26155] fuse: Bad value for 'user_id' [ 1483.635740][T26155] fuse: Bad value for 'user_id' [ 1483.740082][T15356] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1483.742635][ T10] usb 7-1: USB disconnect, device number 53 [ 1484.036217][T26165] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1484.375104][ T122] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.559467][T26065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1484.572591][T26065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1484.584713][T26065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1484.599058][T26065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1484.640390][T26065] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1484.892123][T26185] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1485.242670][T15356] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1485.367064][ T122] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.408006][T15356] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1485.425987][T26166] lo speed is unknown, defaulting to 1000 [ 1485.447266][T15356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.547653][T15356] usb 7-1: Product: syz [ 1485.551855][T15356] usb 7-1: Manufacturer: syz [ 1485.568654][T15356] usb 7-1: SerialNumber: syz [ 1485.570069][T26196] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5523'. [ 1485.581072][T26178] lo speed is unknown, defaulting to 1000 [ 1485.582401][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5523'. [ 1485.604684][T15356] usb 7-1: config 0 descriptor?? [ 1485.799212][ T122] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.019138][ T122] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.040892][T26204] syzkaller0: entered promiscuous mode [ 1486.040915][T26204] syzkaller0: entered allmulticast mode [ 1486.048986][T26204] tipc: Enabled bearer , priority 0 [ 1486.075211][T26203] tipc: Resetting bearer [ 1486.105124][T26203] tipc: Disabling bearer [ 1486.289774][T15356] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 1486.289801][T15356] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1486.289826][T15356] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 1486.294216][T15356] usb 7-1: USB disconnect, device number 54 [ 1486.296645][T26178] chnl_net:caif_netlink_parms(): no params data found [ 1486.956503][T26065] Bluetooth: hci4: command tx timeout [ 1487.040486][ T122] bridge_slave_1: left allmulticast mode [ 1487.053981][ T122] bridge_slave_1: left promiscuous mode [ 1487.060542][ T122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.087127][ T122] bridge_slave_0: left allmulticast mode [ 1487.098684][ T122] bridge_slave_0: left promiscuous mode [ 1487.105363][ T122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.403254][T26241] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1487.994613][ T122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1488.022061][ T122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.065862][ T122] bond0 (unregistering): Released all slaves [ 1488.156084][T26245] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5533'. [ 1488.183323][T26178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.208891][T26178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.235960][T26178] bridge_slave_0: entered allmulticast mode [ 1488.266976][T26178] bridge_slave_0: entered promiscuous mode [ 1488.289159][T26178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.308039][T26178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.325485][T26178] bridge_slave_1: entered allmulticast mode [ 1488.337508][T26178] bridge_slave_1: entered promiscuous mode [ 1488.346275][ T122] tipc: Left network mode [ 1488.491123][T26178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.514806][T26178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.111995][T26178] team0: Port device team_slave_0 added [ 1489.143465][T26178] team0: Port device team_slave_1 added [ 1489.180159][T26065] Bluetooth: hci4: command tx timeout [ 1489.641508][ T122] hsr_slave_0: left promiscuous mode [ 1489.708245][ T122] hsr_slave_1: left promiscuous mode [ 1489.721623][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.865009][ T122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.908491][ T122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.988156][ T122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.015990][ T29] audit: type=1400 audit(2000000308.714:2375): avc: denied { execute } for pid=26292 comm="syz.1.5542" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1490.483239][ T122] veth1_macvtap: left promiscuous mode [ 1490.488769][ T122] veth0_macvtap: left promiscuous mode [ 1490.511989][ T122] veth1_vlan: left promiscuous mode [ 1490.613670][ T122] veth0_vlan: left promiscuous mode [ 1491.535780][T26065] Bluetooth: hci4: command tx timeout [ 1492.135115][ T122] team0 (unregistering): Port device team_slave_1 removed [ 1492.154134][ T122] team0 (unregistering): Port device team_slave_0 removed [ 1492.265271][T15364] lo speed is unknown, defaulting to 1000 [ 1492.271472][T15364] syz0: Port: 1 Link DOWN [ 1492.327429][T26178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1492.337173][T26178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.367249][T26178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.392395][T26178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.403239][T26178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.446693][T26178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.556990][T26178] hsr_slave_0: entered promiscuous mode [ 1492.563552][T26178] hsr_slave_1: entered promiscuous mode [ 1492.569979][T26178] debugfs: 'hsr0' already exists in 'hsr' [ 1492.575828][T26178] Cannot create hsr debugfs directory [ 1493.684344][T26345] macsec1: entered promiscuous mode [ 1493.695292][T26345] erspan0: entered promiscuous mode [ 1493.759756][T26065] Bluetooth: hci4: command tx timeout [ 1493.893564][T26345] erspan0: left promiscuous mode [ 1494.174995][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5558'. [ 1494.183921][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5558'. [ 1494.192803][T26355] netlink: 'syz.3.5558': attribute type 13 has an invalid length. [ 1494.200617][T26355] netlink: 'syz.3.5558': attribute type 12 has an invalid length. [ 1494.813819][T26178] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1494.865421][T26178] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1494.968785][T26178] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1495.511899][T26374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5563'. [ 1495.967505][T26367] 9p: Bad value for 'wfdno' [ 1495.994984][T26178] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1496.311122][T26178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.344250][T26391] 9p: Bad value for 'wfdno' [ 1496.398099][T26178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.415116][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.422275][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.488787][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.495929][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.928941][T15359] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1497.009562][T26178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.121673][T15359] usb 5-1: Using ep0 maxpacket: 8 [ 1497.285308][T15359] usb 5-1: config 0 has no interfaces? [ 1497.441452][T15359] usb 5-1: config 0 has no interfaces? [ 1497.455432][T15359] usb 5-1: config 0 has no interfaces? [ 1497.456349][T15359] usb 5-1: config 0 has no interfaces? [ 1497.456378][T15359] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1497.456401][T15359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.469211][T15359] usb 5-1: config 0 descriptor?? [ 1497.817371][ T30] INFO: task syz.7.4966:24165 blocked for more than 143 seconds. [ 1497.817395][ T30] Tainted: G L syzkaller #0 [ 1497.817406][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1497.817415][ T30] task:syz.7.4966 state:D stack:29000 pid:24165 tgid:24164 ppid:20668 task_flags:0x400040 flags:0x00080002 [ 1497.817476][ T30] Call Trace: [ 1497.817484][ T30] [ 1497.817496][ T30] __schedule+0xfee/0x60e0 [ 1497.817522][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1497.817566][ T30] ? __pfx___schedule+0x10/0x10 [ 1497.817585][ T30] ? find_held_lock+0x2b/0x80 [ 1497.817608][ T30] ? schedule+0x2bf/0x390 [ 1497.817633][ T30] schedule+0xdd/0x390 [ 1497.817653][ T30] schedule_preempt_disabled+0x13/0x30 [ 1497.817675][ T30] __mutex_lock+0xc9a/0x1b90 [ 1497.817706][ T30] ? sync_bdevs+0x153/0x480 [ 1497.817735][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1497.817760][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1497.817794][ T30] ? iput.part.0+0x1a0/0xf50 [ 1497.817821][ T30] ? sync_bdevs+0x153/0x480 [ 1497.817843][ T30] sync_bdevs+0x153/0x480 [ 1497.817869][ T30] ksys_sync+0xb0/0xf0 [ 1497.817890][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1497.817913][ T30] ? do_syscall_64+0x95/0xf80 [ 1497.817938][ T30] __do_sys_sync+0xe/0x20 [ 1497.817956][ T30] do_syscall_64+0x106/0xf80 [ 1497.817977][ T30] ? clear_bhb_loop+0x40/0x90 [ 1497.818001][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.818021][ T30] RIP: 0033:0x7f46b1f9bf79 [ 1497.818037][ T30] RSP: 002b:00007f46b2eef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1497.818056][ T30] RAX: ffffffffffffffda RBX: 00007f46b2215fa0 RCX: 00007f46b1f9bf79 [ 1497.818069][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.818081][ T30] RBP: 00007f46b2215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.818093][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.818105][ T30] R13: 00007f46b2216038 R14: 00007f46b2215fa0 R15: 00007ffd5e983218 [ 1497.818133][ T30] [ 1497.818141][ T30] INFO: task syz.7.4966:24166 blocked for more than 143 seconds. [ 1497.818155][ T30] Tainted: G L syzkaller #0 [ 1497.818166][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1497.818174][ T30] task:syz.7.4966 state:D stack:28136 pid:24166 tgid:24164 ppid:20668 task_flags:0x400040 flags:0x00080002 [ 1497.818231][ T30] Call Trace: [ 1497.818238][ T30] [ 1497.818248][ T30] __schedule+0xfee/0x60e0 [ 1497.818270][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1497.818319][ T30] ? __pfx_do_writepages+0x10/0x10 [ 1497.818354][ T30] ? __pfx___schedule+0x10/0x10 [ 1497.818373][ T30] ? find_held_lock+0x2b/0x80 [ 1497.818396][ T30] ? schedule+0x2bf/0x390 [ 1497.819102][ T30] schedule+0xdd/0x390 [ 1497.819127][ T30] schedule_preempt_disabled+0x13/0x30 [ 1497.819149][ T30] __mutex_lock+0xc9a/0x1b90 [ 1497.819279][ T30] ? sync_bdevs+0x153/0x480 [ 1497.819309][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1497.819333][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1497.819368][ T30] ? iput.part.0+0x1a0/0xf50 [ 1497.819395][ T30] ? sync_bdevs+0x153/0x480 [ 1497.819417][ T30] sync_bdevs+0x153/0x480 [ 1497.819442][ T30] ksys_sync+0xb0/0xf0 [ 1497.819461][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1497.819479][ T30] ? kcov_ioctl+0x16a/0x720 [ 1497.819508][ T30] ? do_syscall_64+0x95/0xf80 [ 1497.819532][ T30] __do_sys_sync+0xe/0x20 [ 1497.819550][ T30] do_syscall_64+0x106/0xf80 [ 1497.819572][ T30] ? clear_bhb_loop+0x40/0x90 [ 1497.819596][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.819615][ T30] RIP: 0033:0x7f46b1f9bf79 [ 1497.819631][ T30] RSP: 002b:00007f46b2ece028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1497.819649][ T30] RAX: ffffffffffffffda RBX: 00007f46b2216090 RCX: 00007f46b1f9bf79 [ 1497.819662][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.819674][ T30] RBP: 00007f46b2216090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.819692][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.819704][ T30] R13: 00007f46b2216128 R14: 00007f46b2216090 R15: 00007ffd5e983218 [ 1497.819730][ T30] [ 1497.828445][ T30] [ 1497.828445][ T30] Showing all locks held in the system: [ 1497.828461][ T30] 1 lock held by khungtaskd/30: [ 1497.828474][ T30] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1497.828541][ T30] 2 locks held by kworker/u8:3/49: [ 1497.828553][ T30] #0: ffff88801ef37948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1497.828612][ T30] #1: ffffc90000b97d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1497.828667][ T30] 6 locks held by kworker/u8:8/1140: [ 1497.828679][ T30] #0: ffff88813fe9c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1497.828763][ T30] #1: ffffc900044efd08 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1497.828809][ T30] #2: ffff88801ba820b8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x34/0x730 [ 1497.828861][ T30] #3: ffff88805cfcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x21/0x90 [ 1497.828910][ T30] #4: ffff88805cfcb2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x85/0x1980 [ 1497.828957][ T30] #5: ffffc9000ed6c380 (&ldata->output_lock){+.+.}-{4:4}, at: commit_echoes+0x50/0x260 [ 1497.829025][ T30] 2 locks held by kworker/u8:10/3570: [ 1497.829039][ T30] 2 locks held by getty/5570: [ 1497.829049][ T30] #0: ffff888033dd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1497.829098][ T30] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1497.829147][ T30] 6 locks held by kworker/1:30/15364: [ 1497.829158][ T30] #0: ffff888021292548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1497.829204][ T30] #1: ffffc9000d36fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1497.829250][ T30] #2: ffff88802acae198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1497.829298][ T30] #3: ffff88802acc6518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1497.829351][ T30] #4: ffff88802a554c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1497.829403][ T30] #5: ffffffff8fbadc50 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a5/0x1c60 [ 1497.829460][ T30] 1 lock held by udevd/23223: [ 1497.829470][ T30] #0: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa5/0x740 [ 1497.829521][ T30] 1 lock held by udevd/23232: [ 1497.829531][ T30] #0: ffff888027d01358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1497.829579][ T30] 1 lock held by udevd/23807: [ 1497.829590][ T30] #0: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa5/0x740 [ 1497.829650][ T30] 1 lock held by udevd/23810: [ 1497.829661][ T30] #0: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa5/0x740 [ 1497.829718][ T30] 1 lock held by udevd/23825: [ 1497.829730][ T30] 1 lock held by syz.7.4966/24165: [ 1497.829741][ T30] #0: ffff888027d01358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1497.829789][ T30] 1 lock held by syz.7.4966/24166: [ 1497.829800][ T30] #0: ffff888027d01358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1497.829849][ T30] 2 locks held by kworker/u8:11/24377: [ 1497.829861][ T30] #0: ffff88813fe9c948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1497.829912][ T30] #1: ffffc9000ce4fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1497.829960][ T30] 3 locks held by kworker/0:4/24399: [ 1497.829972][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1497.830019][ T30] #1: ffffc9000da7fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1497.830066][ T30] #2: ffff888032929240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1497.830125][ T30] 1 lock held by syz.4.5569/26402: [ 1497.830136][ T30] #0: ffff88801cac8188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x38/0x850 [ 1497.830188][ T30] 6 locks held by syz.1.5564/26426: [ 1497.830200][ T30] 4 locks held by dhcpcd-run-hook/26433: [ 1497.830211][ T30] [ 1497.830217][ T30] ============================================= [ 1497.830217][ T30] [ 1497.830226][ T30] NMI backtrace for cpu 1 [ 1497.830238][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.830262][ T30] Tainted: [L]=SOFTLOCKUP [ 1497.830268][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.830277][ T30] Call Trace: [ 1497.830283][ T30] [ 1497.830290][ T30] dump_stack_lvl+0x100/0x190 [ 1497.830319][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1497.830338][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1497.830366][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1497.830398][ T30] sys_info+0x141/0x190 [ 1497.830422][ T30] watchdog+0xd25/0x1050 [ 1497.830450][ T30] ? __pfx_watchdog+0x10/0x10 [ 1497.830473][ T30] ? __kthread_parkme+0x18c/0x230 [ 1497.830500][ T30] ? kthread+0x13a/0x450 [ 1497.830514][ T30] ? __pfx_watchdog+0x10/0x10 [ 1497.830534][ T30] kthread+0x370/0x450 [ 1497.830549][ T30] ? __pfx_kthread+0x10/0x10 [ 1497.830567][ T30] ret_from_fork+0x754/0xd80 [ 1497.830585][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.830605][ T30] ? __switch_to+0x7b4/0x1120 [ 1497.830627][ T30] ? __pfx_kthread+0x10/0x10 [ 1497.830645][ T30] ret_from_fork_asm+0x1a/0x30 [ 1497.830676][ T30] [ 1497.830689][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1497.830712][ C0] NMI backtrace for cpu 0 [ 1497.830723][ C0] CPU: 0 UID: 0 PID: 5167 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.830741][ C0] Tainted: [L]=SOFTLOCKUP [ 1497.830746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.830754][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1497.830775][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 2b 8f e4 f5 cc [ 1497.830790][ C0] RSP: 0018:ffffc900038f77b8 EFLAGS: 00000293 [ 1497.830802][ C0] RAX: 0000000000000000 RBX: ffffffff8bb06381 RCX: ffffffff8b8a95f9 [ 1497.830811][ C0] RDX: 0000000000000063 RSI: 000000000000002a RDI: ffff8880374fc900 [ 1497.830819][ C0] RBP: ffffc900038f7860 R08: 0000000000000001 R09: 000000000000002a [ 1497.830828][ C0] R10: 0000000000000063 R11: 00000000000c1f18 R12: 0000000000000063 [ 1497.830836][ C0] R13: ffffc900038f78f0 R14: ffffffff8bb06380 R15: 0000000000000033 [ 1497.830845][ C0] FS: 00007fb890180c80(0000) GS:ffff888124352000(0000) knlGS:0000000000000000 [ 1497.830859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1497.830868][ C0] CR2: 0000557f5642c300 CR3: 0000000036d56000 CR4: 00000000003526f0 [ 1497.830877][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1497.830885][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1497.830893][ C0] Call Trace: [ 1497.830897][ C0] [ 1497.830902][ C0] format_decode+0x319/0xcd0 [ 1497.830915][ C0] ? __pfx_format_decode+0x10/0x10 [ 1497.830935][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1497.830952][ C0] ? is_bpf_text_address+0x94/0x1a0 [ 1497.830971][ C0] vsnprintf+0x1c0/0x1240 [ 1497.830987][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 1497.831002][ C0] ? __asan_memcpy+0x3c/0x60 [ 1497.831018][ C0] snprintf+0xc7/0x100 [ 1497.831032][ C0] ? __pfx_snprintf+0x10/0x10 [ 1497.831045][ C0] ? __pfx_sprintf+0x10/0x10 [ 1497.831060][ C0] ? lock_acquire+0x1cf/0x380 [ 1497.831077][ C0] ? get_data+0x3cd/0x520 [ 1497.831099][ C0] info_print_prefix+0x134/0x350 [ 1497.831119][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 1497.831139][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 1497.831160][ C0] record_print_text+0x143/0x3c0 [ 1497.831182][ C0] ? __pfx_record_print_text+0x10/0x10 [ 1497.831202][ C0] ? __pfx_prb_read_valid+0x10/0x10 [ 1497.831216][ C0] syslog_print+0x46c/0x620 [ 1497.831236][ C0] ? __pfx_syslog_print+0x10/0x10 [ 1497.831256][ C0] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1497.831273][ C0] ? avc_has_perm+0x135/0x1e0 [ 1497.831294][ C0] do_syslog+0x5bd/0x6d0 [ 1497.831307][ C0] ? __pfx_do_syslog+0x10/0x10 [ 1497.831327][ C0] __x64_sys_syslog+0x74/0xb0 [ 1497.831340][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1497.831357][ C0] do_syscall_64+0x106/0xf80 [ 1497.831372][ C0] ? clear_bhb_loop+0x40/0x90 [ 1497.831388][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.831401][ C0] RIP: 0033:0x7fb89034aa37 [ 1497.831412][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 1497.831424][ C0] RSP: 002b:00007fffd2e18938 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 1497.831441][ C0] RAX: ffffffffffffffda RBX: 00007fb8904ea490 RCX: 00007fb89034aa37 [ 1497.831449][ C0] RDX: 00000000000003ff RSI: 00007fb8904ea490 RDI: 0000000000000002 [ 1497.831457][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1497.831465][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fb8904ea490 [ 1497.831473][ C0] R13: 00007fb8904c7dfe R14: 00007fb8904ea886 R15: 00007fb8904ea886 [ 1497.831488][ C0] [ 1497.831710][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1497.831724][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.831748][ T30] Tainted: [L]=SOFTLOCKUP [ 1497.831755][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.831764][ T30] Call Trace: [ 1497.831770][ T30] [ 1497.831777][ T30] dump_stack_lvl+0x100/0x190 [ 1497.831805][ T30] vpanic+0x552/0x970 [ 1497.831823][ T30] ? __pfx_vpanic+0x10/0x10 [ 1497.831840][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1497.831866][ T30] ? rcu_is_watching+0x12/0xc0 [ 1497.831889][ T30] panic+0xd1/0xe0 [ 1497.831907][ T30] ? __pfx_panic+0x10/0x10 [ 1497.831926][ T30] ? wq_watchdog_touch+0xec/0x1a0 [ 1497.831953][ T30] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 1497.831979][ T30] ? watchdog.cold+0x198/0x1ca [ 1497.831999][ T30] ? watchdog+0xd35/0x1050 [ 1497.832022][ T30] watchdog.cold+0x1a9/0x1ca [ 1497.832050][ T30] ? __pfx_watchdog+0x10/0x10 [ 1497.832074][ T30] ? __kthread_parkme+0x18c/0x230 [ 1497.832102][ T30] ? kthread+0x13a/0x450 [ 1497.832118][ T30] ? __pfx_watchdog+0x10/0x10 [ 1497.832138][ T30] kthread+0x370/0x450 [ 1497.832154][ T30] ? __pfx_kthread+0x10/0x10 [ 1497.832171][ T30] ret_from_fork+0x754/0xd80 [ 1497.832189][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.832208][ T30] ? __switch_to+0x7b4/0x1120 [ 1497.832229][ T30] ? __pfx_kthread+0x10/0x10 [ 1497.832246][ T30] ret_from_fork_asm+0x1a/0x30 [ 1497.832277][ T30] [ 1497.832566][ T30] Kernel Offset: disabled