last executing test programs: 31m22.022920989s ago: executing program 3 (id=344): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x28) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc985, 0x10000, 0x2, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000240000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x0, 0x4, 0x9, 0x4}, 0x0, 0x401a, 0x0, 0x6, 0x0, 0x8}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x80a0000, 0x968, 0x1, 0x1ff, 0x0, [{0x7f, 0x2, 0x3, '\x00', 0x5}, {0x30, 0xfc, 0x8}, {0xb, 0xfd, 0x4d, '\x00', 0x4}, {0x6, 0x9, 0x3, '\x00', 0x71}, {0x1, 0x1, 0x5, '\x00', 0xe1}, {0xa, 0x81, 0x7, '\x00', 0x40}, {0x4e, 0x3, 0xb, '\x00', 0x7}, {0x3, 0xd, 0x4, '\x00', 0x1}, {0x6, 0xd, 0x9, '\x00', 0xb}, {0x6, 0x9, 0xed, '\x00', 0x80}, {0x2, 0x7f, 0xd2, '\x00', 0x1}, {0x4, 0x6, 0x3, '\x00', 0xd3}, {0x24, 0x6, 0x10, '\x00', 0xd}, {0x0, 0x8, 0x8, '\x00', 0x81}, {0xe9, 0xff, 0xfe, '\x00', 0x2}, {0xf, 0x2, 0x4, '\x00', 0x1}, {0x2, 0x3, 0x7f, '\x00', 0x4}, {0x70, 0x0, 0x5}, {0x10, 0x7}, {0xb, 0x7, 0xfb, '\x00', 0x8}, {0x5, 0xa, 0xae, '\x00', 0xfe}, {0x7, 0x96, 0x7}, {0x1, 0x81, 0x1, '\x00', 0x80}, {0x81, 0x4, 0x6}]}}) io_uring_enter(r0, 0x4e14, 0x912a, 0x41, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a", @ANYBLOB="a4"], 0x0) 31m18.713805465s ago: executing program 3 (id=353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c822}, 0x8000) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) readv(r8, &(0x7f0000000780)=[{&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000400)=""/102, 0x66}, {0x0}], 0x3) close_range(r5, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x4401, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_usb_connect(0x2, 0x36, &(0x7f0000002240)=ANY=[@ANYBLOB="120150024f470640f0fff0ffb4420102030109022400010902a00809047cc3028192010109050508000407010b09050b75"], &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0}) 31m14.998951149s ago: executing program 3 (id=360): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x92842, 0x0) epoll_create1(0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xe64}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f4, 0x0, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002400)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x0, &(0x7f0000002540)=""/134, 0x86, 0x0, 0x19}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x5, 0x1, 0x21}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 31m13.881075099s ago: executing program 3 (id=366): io_uring_setup(0x40b3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x12400, 0x49) read$msr(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setpgid(r0, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0xf) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gSoup_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0xb, r8, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0xffffffff, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 31m12.846631775s ago: executing program 3 (id=368): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x123702, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xee01, 0x0, 0x100, 0x8}, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x2, 0x2, 0xed, 0x201, r0, r0}) preadv(r3, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x15c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, &(0x7f00000001c0)='discard') 31m11.49084041s ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, 0x0) keyctl$chown(0x4, r4, r6, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d0000000003000000030000000000000003000000040000000300000000000000000000050000000000", @ANYRES32], 0x0, 0x5e, 0x0, 0x1}, 0x28) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, r6, &(0x7f0000000100)='./file0\x00') stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e3d3970323030302c00748395daee9cffffe1fcfdc3ea5fb51fe60f6e0d37a0c23aee7a1084a7fb55ce"]) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600044000040000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r10, 0x0, &(0x7f0000000000)='LLLLlLLLLLLLLLLLLLLLLLLLLZLL(', 0x1d, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r10, 0x2, 0x1c}) (async) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="15b11d1800ffff000000", @ANYRESDEC=r3, @ANYRES16], 0x15) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000480)='wg1\x00', 0x4) 30m56.379038503s ago: executing program 32 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "3215ee5299c6f92fe43dd9c925e421d383d95c7d40a0dc64eb3897e609000000cd1ae9cfd5bb7cd51e2a1550b5699a6fffc50001af1f91341326b8cb0100", 0x12}, 0x24, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, 0x0) keyctl$chown(0x4, r4, r6, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d0000000003000000030000000000000003000000040000000300000000000000000000050000000000", @ANYRES32], 0x0, 0x5e, 0x0, 0x1}, 0x28) (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, r6, &(0x7f0000000100)='./file0\x00') stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e3d3970323030302c00748395daee9cffffe1fcfdc3ea5fb51fe60f6e0d37a0c23aee7a1084a7fb55ce"]) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600044000040000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, 0x0) (async) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r10, 0x0, &(0x7f0000000000)='LLLLlLLLLLLLLLLLLLLLLLLLLZLL(', 0x1d, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f0000000340)={0x18, r10, 0x2, 0x1c}) (async) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="15b11d1800ffff000000", @ANYRESDEC=r3, @ANYRES16], 0x15) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000480)='wg1\x00', 0x4) 31.182434486s ago: executing program 5 (id=6507): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000940)={0xe, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r9, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x600, 0x0, 0xffff, 0x10, 0x0, {0x5, 0x10040}, {0x0, 0x200002, 0xffffffff}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fe, 0x0, 0x0, 0x21, 0x0, 0x3, 0x7}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000002, 0x3, 0x7f, 0x0, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x1a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x8, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120020, 0x9, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x90, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 29.239455822s ago: executing program 5 (id=6513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000040), 0x80880) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf251c0000005a000300", @ANYRES32=r5, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000030a00afbed14a25237ea08000300b0417a", @ANYRES32=r5, @ANYBLOB="0c000600020000000200000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000000000000"], 0x74}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0xeb, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040400) 26.060738668s ago: executing program 5 (id=6518): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x28f6c81d26a0207, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x4934f000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdb720eefa3bf4d3e}, 0xc, &(0x7f0000000540)={&(0x7f0000001900)={0x1284, 0x40, 0x204, 0x70bd29, 0x25dfdbfe, {0x1f}, [@generic="a8a197f9b89ac9fd223a7b4a90049655126cbb17bbea44ef6bed57cfb1ff88a1242aa2b7377461a85dd528e5aab06139e871891decdf7ffee632e05063c58b9f707b0539be2f65c75331405c916e4bf53414fabbb5e01e1ae13ae476d6e8312b6e5fdbfaf852a979f85c0997bbb40053873bb92e132a17812d20542aaa426c9570e8460d8a7721ea3641a8e1cca4f0f79fbd1f110fd1cd168c961bc8ede634", @nested={0x1b3, 0xe7, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x158}, @generic="6784940844f0c384d7881c4768f5a83b2bce29a571f291919fd84d72f0d726cbbe891903b0e49cce194dee8f4fbb275fcb24b50036114cea41e2a3475157081b84acf272a78d34c7fb34ad755d9c781a54d7f268e6802b8ac34429cca825d20ceb5a9e8142b54b94326d0fc8419cd5977ec5cbb82ac9603a25f5e68262ca83c4b04fecb540fac25df146df918f4150aaaad3aefc5094d5525cb23d9c9e79", @nested={0x4, 0x92}, @nested={0x4, 0x6b}, @generic="24c59775f523e91cd5f7a987bbdaaddafa3bac8178386d1ea1d25b2deca2dab14f36b0082238ee65c91eac6530c73c1572a3cbfed6c38d32a93ebec1dbded0d0df29957c1b1996219003fcd38975b62dcb2deaa829433f479436c376a65b2914d8487222711fdc605583c3628e9026360bed65b0b56158b12f684e735b0aa53dda12939678", @typed={0x8, 0x11a, 0x0, 0x0, @uid}, @generic="c33fa057dc7f39a23c537e8539b9f14c59dc2fef443e89ceecdb14cf7fd26b3f26a735fbae14edcf87641876be7ecedf1819519498e822177ee976a3550375e4b621ab383138e3e7a3626e78fa73cf519dedb7d3f1b1e572926df5cfe4bdd2d152401ca6a796aa9bd1709c95213e885e52e099e7"]}, @nested={0xc, 0x4e, 0x0, 0x1, [@nested={0x4, 0x11f}, @nested={0x4, 0xfd}]}, @generic="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", @typed={0x8, 0x11b, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x132, 0x0, 0x0, @uid}]}, 0x1284}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000081) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) 24.375366264s ago: executing program 5 (id=6528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1a00fe00000000bfa101000000010027010000f8ffffffb702000008000000b703000003000000850000004300000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000eddbdf255c00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) gettid() openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x210041, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r6, &(0x7f00000009c0)={&(0x7f0000000340)=@generic, 0x80, 0x0}, 0x2) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0x6, 0x6, "277f15c3a9a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000000)=ANY=[], 0x118) close_range(r5, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x18}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0), 0x65) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000840)={0x36c, 0x40, 0x9, 0x6}) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) 21.25477387s ago: executing program 5 (id=6538): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0}, 0x94) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)={0x28f6c81d26a0207, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x20010, r1, 0x4934f000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xdb720eefa3bf4d3e}, 0xc, &(0x7f0000000540)={&(0x7f0000001900)={0x1284, 0x40, 0x204, 0x70bd29, 0x25dfdbfe, {0x1f}, [@generic="a8a197f9b89ac9fd223a7b4a90049655126cbb17bbea44ef6bed57cfb1ff88a1242aa2b7377461a85dd528e5aab06139e871891decdf7ffee632e05063c58b9f707b0539be2f65c75331405c916e4bf53414fabbb5e01e1ae13ae476d6e8312b6e5fdbfaf852a979f85c0997bbb40053873bb92e132a17812d20542aaa426c9570e8460d8a7721ea3641a8e1cca4f0f79fbd1f110fd1cd168c961bc8ede634", @nested={0x1b3, 0xe7, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x158}, @generic="6784940844f0c384d7881c4768f5a83b2bce29a571f291919fd84d72f0d726cbbe891903b0e49cce194dee8f4fbb275fcb24b50036114cea41e2a3475157081b84acf272a78d34c7fb34ad755d9c781a54d7f268e6802b8ac34429cca825d20ceb5a9e8142b54b94326d0fc8419cd5977ec5cbb82ac9603a25f5e68262ca83c4b04fecb540fac25df146df918f4150aaaad3aefc5094d5525cb23d9c9e79", @nested={0x4, 0x92}, @nested={0x4, 0x6b}, @generic="24c59775f523e91cd5f7a987bbdaaddafa3bac8178386d1ea1d25b2deca2dab14f36b0082238ee65c91eac6530c73c1572a3cbfed6c38d32a93ebec1dbded0d0df29957c1b1996219003fcd38975b62dcb2deaa829433f479436c376a65b2914d8487222711fdc605583c3628e9026360bed65b0b56158b12f684e735b0aa53dda12939678", @typed={0x8, 0x11a, 0x0, 0x0, @uid}, @generic="c33fa057dc7f39a23c537e8539b9f14c59dc2fef443e89ceecdb14cf7fd26b3f26a735fbae14edcf87641876be7ecedf1819519498e822177ee976a3550375e4b621ab383138e3e7a3626e78fa73cf519dedb7d3f1b1e572926df5cfe4bdd2d152401ca6a796aa9bd1709c95213e885e52e099e7"]}, @nested={0xc, 0x4e, 0x0, 0x1, [@nested={0x4, 0x11f}, @nested={0x4, 0xfd}]}, @generic="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", @typed={0x8, 0x11b, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x132, 0x0, 0x0, @uid}]}, 0x1284}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000081) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffffffff, 0x3, 0x22}, 0x7}) 17.819503263s ago: executing program 5 (id=6546): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_io_uring_setup(0x525f, &(0x7f00000001c0)={0x0, 0x8837, 0x25, 0x0, 0x30e, 0x0, r4}, &(0x7f0000000000), &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r5, r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f0000000140)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000010}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x20000081, 0x7a7, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x4, 0x100022}) 11.735663592s ago: executing program 0 (id=6563): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x15) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449d, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d31eea03ddc3caa801dd0569e3e261e9510d7b300b4a83e6b7e8c6c93750a6778986716d7b5d6", @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read$FUSE(r5, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.798709916s ago: executing program 2 (id=6569): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000300060808004149004001040800", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x10, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x0, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000080)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000019380), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.061478601s ago: executing program 0 (id=6572): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = msgget$private(0x0, 0xa4) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r0, &(0x7f0000001040)={0x0, ""/100}, 0x6c, 0x0, 0x208be586909acbb4) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r2 = fsopen(&(0x7f0000000340)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 6.920525206s ago: executing program 1 (id=6576): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18f0000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220040c1}, 0x0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 6.416671344s ago: executing program 1 (id=6577): r0 = socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = epoll_create1(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r6, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0x14}) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd700005000000020000000900010073797a30000000000900030073797a310000000000000000776c616e3000"/58], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x58, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x54, &(0x7f0000000180)={0xa, 0x0, 0x10000, @mcast2, 0xfffffffa, 0x4}, 0x20) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r12, &(0x7f0000000200)={&(0x7f0000000100)={0x1d, r13}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "81db5cd328d82eb6cf910b7095a2deb5b61bc74704b717179e1cf69d99585d1ac9b1fe66db7c02c79dc7699f631f6dbb3c5acabb01ef1d1f5c1b7e857bcb1f1c"}, 0x48}, 0x1, 0x0, 0x0, 0x891}, 0x4000080) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1816000007140100004900000000000005006000000900000000000000b3e6dce01941097fba44f4faee4d3f5b91c94579babc6d20817783df6ab6bbe4a717fb83e4ada60ab976c22c9ae07d0149dde63a29d2876febccb5ebffe77bc72b3dfcb45cfceffa0a46b3b691b675fadd6561b7137baadec3ee68d867ea25071725cbbd99729a848035d4e9d8f325ed390ca098bc907c1e1a30481541fdef45139ed0bf99c9234f0e62909c8cd8819d7bf28aa195b081bd0139ae055cd5e1"], 0x18}}, 0x0) listen(r0, 0x5) accept(r0, 0x0, 0x0) 6.342662423s ago: executing program 0 (id=6578): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 6.210893978s ago: executing program 2 (id=6579): write$proc_mixer(0xffffffffffffffff, 0x0, 0x33) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4e24, 0x5c6b, 0x4e23, 0x5, 0x2, 0x20, 0xa0, 0x11, 0x0, r3}, {0x200, 0x3, 0xffffffffffffffff, 0x6, 0x9, 0x4, 0x10, 0x200}, {0xfffffffffffffffc, 0x8, 0xc, 0x7}, 0x4, 0x6e6bb3, 0x2, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x5, 0x0, 0xfc, 0x400, 0x100, 0x5}}, 0xe8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x8a201, &(0x7f00000000c0)={@_ha_fsid={[0x80000000, 0x1e]}, {0x0, 0xd7, 0x6, 0x7fff}}, 0x1, 0x0, 0x0}, {[0x8, 0xffffff81, 0xffffff2d, 0x4b79]}, 0x101, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000840000000500000013"], 0x18, 0x20000000}], 0x1, 0x8002) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r8, 0x8800000) 6.051047939s ago: executing program 1 (id=6580): r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x83482, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x10001, 'syz1\x00', @null, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default]}) ioctl$SIOCNRDECOBS(r1, 0x89e2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f00)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="84169074878540002265e11a661507947e59b2735f9b2a990460b65d74a8fa49b42858c168bd307a038bcc2705939536d63561dd7dbdded2b1d7f5c65e27b37f545869a018", 0x45}], 0x1, 0x0, 0x0, 0x4001}}, {{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000480)="f244f557c7b4208a2ae600800d99a79f94a6deff611048ca4cfe8635973319b62c6cf2fefdc50540cfe31cc74b24c01e2e250af4f16ef626f90c43ec99b3889cf8d1fa0358e34cf258725f6b5c43eae41de47bdc292424", 0x57}, {&(0x7f0000000500)="74753f83662ef1f365a28ee7b0f66a68cc516eeabc0c78fa04a6bdc7d85ed68e4730b816e728d380df1de4b5b19d0632c02c13146a3137b2d95a9b3316bab24fb05ff9a540a9647b5bfe72e20543bad61dbba290c1460fce568a14ca271bcb75ce5157a54efaf10af191f81cbdc7c499b84f92ccf001cedafd5a28fb32befa61c3a73876137d7206e860c06cb741cb8e336ebd7769578d214e6ec2f40153aac48bf2aea86f", 0xa5}], 0x2, 0x0, 0x0, 0x40000}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000640)="8a3959d0652bb84ed0c67f9ecffda294cc3cd3f6f4f0c204ff9a4033c28b556e7cbaea5ea86b9f420986c3c36d042773f2fc08b0d44a122b8f9593a9d8fa27725668a3638b708d00912174a9ccad1ed0a2e58eb99de08ab5412ca3bf3f70c6b38cf30f9b89bb0699522cddd76646a97eb63e508087a2fd52c8bfc68932b79d5edec91ebd6cded1d235650892a3b99afcced008df31", 0x95}, {&(0x7f0000000700)="780953ca91a4dbb85f9cc27f9abf57aebc494b6be9dd1d0c332661c610b548aa06a9866adc3c", 0x26}, {&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="a2ed63409cfebb78401bdadbffc7fb89b7ed754424c3d75fbb6cc624bb05efdb5746ffdff19d0429cee32ec204c135b2d20d3f40b4ffbe22ae8aabb4b02a03c0a3a6a5a049b319c987058c7b91292846e9f56deead8b09f88398d058f02784c486c9cee8d2248aee0064d0f57623c7bb7e68b724b6f1934dfc4cb01ae9ce5dfc480a8a8fdba558", 0x87}, {&(0x7f0000001900)="b8fa61f36c406d9ce399fca58d661f91fafb7904ad698cd7102aefb1e3f2d1df48d4f0df8e1a5d2983bbf7b07b1980041303128632a9a5f664aee758833c6ca865fb3362417f7c0eed942c310715", 0x4e}, {&(0x7f0000001980)="b92db282895b72951ee410c9b34ec92f095f613335c0d9eddb25fcfe898370a999fb1a39cee5337bf9e96a27c456cc2825", 0x31}], 0x7, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x118, 0x20044000}}, {{&(0x7f0000002300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002380)="479cd0a085fa11c6a5e5e52f2523f615d6609f00c2ddf6af2cbfd8581e38ac408d8e1844a88179c1657a4075faf46843004a71e5ab9104646cdb7abc99f072823218a22575a566f86c51911d27", 0x4d}, {&(0x7f0000002400)="3b3281fdd0845c9ec110536dfba658ea478a37f8de91e09a4ac08bb4748fb4b985bda07fd450a8a1e540082fcdc9409cd75ee0a78f3db738ec", 0x39}, {&(0x7f0000002440)="b2a8a2d5076cd4384859e89982e9f15b1209cba263a172b8e10b9ecc4578756b72257e1e944f59b8b582bdec5024efb0624b41a0dd32c06cdfdc4911bdda9dca03e9b492fc2455c8e20edabab1f2da5b8ffd162415b7478862ec4d95", 0x5c}, {&(0x7f00000024c0)="3c9650d3518cd8263d39959cbcad99f01b57db95b0ec674e0d1027feed661e697b", 0x21}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="de8402d8f8983c4bf7028dd9808578728aa0aef37618077a171cfec1b1ce8b08af0b2e01761f1987514fe27f30171a1db32946286d7c018d8115ee88c692cf52bbd1c8d3d90c7858c45a3a6211df6cc5a5765e8a67e47d4770e894477150d7345acda4445c47ed500654b0b6358836b07ebce129", 0x74}], 0x6, &(0x7f0000003740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r0, 0xffffffffffffffff, r5]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108, 0x840}}, {{&(0x7f0000003880)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003900)="c399af6097e9cdaf57adb89f65d718dbb5ff9c93e4054b8d721b86ce843fd39b3461e20d68b8d469718073e4ebc9956fa5e85bb32e2c5299083e1bb033f743a722254d50a2d47e5e2d6e2f1a0af54dd860cda2454f65e4dbf41b74f99267f3942a070d8b", 0x64}, {&(0x7f0000003980)="6f4a1c07322a3558edd3fffbe79ed0b563b04e8c5a073ad9719161c0ddc8d6dd99e70862cb4a3b678c45a22aea013551a4926fe89509b490cbdf64302459a657bcf74c3d5c57cd410ab25c2e36d60be1f2f25346d65eddbd6e9d45a9bbd454853d71b914a1e80d45396b4e497b497bebcf5c2a75b23cd60d4587aaa4d5a4a3e38c0316ed19268fa868ebc82f6b9906b5a7611bf69c34e1c0aff972d06a1dfdbaccf3708665ce2c8940981d6753a5f330bbff5e0168559b", 0xb7}, {&(0x7f0000003a40)="34bb7dbc75061deeee6b3ccddf8b653053cb4239d7d99676d2cc0502a028fd39a80de9ea2ca0ef1bf9e5aca5e9fa07b78043e52b088695fb8a4f07023661ddd60fd707e356fa896b79ec994a68b853251209fc46022bc1ca308ff1d1b31c1a94ac7d4496a151e7c0146a86f6a9b6c8a57be4ef60cf0292b09c5fe63863ce900c12068eadee6520e8cfbd9679", 0x8c}], 0x3, &(0x7f0000003b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000024001000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8040}}, {{&(0x7f0000003c00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c80)="99c3d31af9eb68e03032d8a49ce645d4f558453ba3be39d7a18dec80a0e50e4ebda066e1dbcef8b7dd42b329b5de1b1217dd72a2bb0c2fe36ca4f14871d91e04edb4081f72b51a6c9c413e157bbb6722c102f060ac70e83b5a25dcc59d7d3951d9edf3cb86c4de2e3000dfb669dc863b2e5eae5755f391c9", 0x78}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="000000003400000000000000010000000100", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0120ad18267a14c341ae3bf6b9e3e411079172e247a399f7a05"], 0x118, 0x4}}], 0x6, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) 5.669022623s ago: executing program 0 (id=6581): syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) r0 = socket(0x2c, 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000008000000010400000000000014be3c188bc23d04535605ecb8b5937c55d53f4e561bd53c5a44073e21387f7bc71b45f4b3a0204a0c03d19f377f8ac023b53ce9988f9bab91eb166656ca178b62e09efe76401b9c21007ceb", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) process_vm_readv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/228, 0xe4}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000600)=""/24, 0x18}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f00000004c0)=""/147, 0x93}], 0x5, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0x3, 0x0) setresuid(r3, r3, r3) r7 = syz_usb_connect$midi(0x2, 0x51, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000208205140140000102030109023f00010100500309040000030103200b09050f03400006c100062501027b"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000180002002cbd70000104000002800046fc01c80500010000080007006401010208001900", @ANYRES16=r7, @ANYBLOB="00040000", @ANYRES32=0x0, @ANYBLOB="06001c004e210000080006000700000006001d004e20000005001b000100000008000200ac14142c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4001) 5.134532073s ago: executing program 2 (id=6582): mount$nfs4(&(0x7f0000000100)='&\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xe692ac86c79a6aee, &(0x7f00000001c0)={[{'/dev/dvb/adapter#/demux#\x00'}, {'/dev/dvb/adapter#/demux#\x00'}, {}]}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000700)=""/218, 0x28, 0xda, 0x1, 0x1}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000006c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee00, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 5.073119846s ago: executing program 1 (id=6583): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x7, 0x10000, 0x4, 0x6, 0x72, 0x3, 0x7, 0xa, 0x1, 0x8001, 0xd, 0xff6f, 0x801, 0xfffffffe, 0xb4c, 0xffffffff, 0x0, 0x3, 0x40000001, 0x86, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x7, 0x6, 0x65c, 0x6, 0xfffffff4]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="85002000ed3143b4d8a700c7", @ANYRES32=r2, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r3}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000f8ffff010000000000000000850000003600000085000000d000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x80000, r1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 4.267074166s ago: executing program 2 (id=6584): r0 = socket$netlink(0x10, 0x3, 0x0) chdir(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000012900)=[{{&(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000024c0)="c47e5c2d485b1d62601c8a8b854e67384621ed91bed6b89c766b80d02ab4d160e708ee4755176b926c6013e8b50d39528eeda06e089f3a807a886889eefafad42ab1f835db47a80383733a7c684831c33619d7382dd74839ccde10bdb4af7c63897158d95eda0e3eda8b05cb4e9ad7586220464c3019f6b169dba0a0e86306351075c87cdaf3ea8791283c43c24676109cd0cee0d0253cc15d6bea0ca34cdec344fa9259559d670bc0450ab8c91b1ef56a7831813344eacbb716aa071fab2dcb24fc760beb4fc8ea", 0xc8}, {&(0x7f00000025c0)="2e6499a5d6c4b2220d079c35827bcdda031287ebd7528748308c7521aa03f89f18b500053eefb2d111465abcc3c328b453c52f18cb1567", 0x37}], 0x2, &(0x7f0000002640)=ANY=[@ANYBLOB="1c000000000000000100000002000000cd183127322797389209252347af171b45e5cf4beb138e9c1d09652763a871a96ec33bb397ed449f6ff47d478e64", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x90}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x20000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) r6 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000040)={0x4, 0x2, @qam={0x6, 0x18, 0xd}}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r8, @ANYBLOB="f100150008000000100016800c0001000002000000000009", @ANYRES32=r3], 0x3c}}, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000002300), 0x8000, &(0x7f0000002340)={'trans=virtio,', {[{@aname={'aname', 0x3d, 'syz'}}, {@mmap}, {@cache_readahead}, {@fscache}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'net/ip6_flowlabel\x00'}}, {@hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\#'}}]}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') read$FUSE(r10, &(0x7f00000002c0)={0x2020}, 0x2020) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x800854db, &(0x7f0000000200)=""/155) 4.026672123s ago: executing program 1 (id=6586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @addr}, {0x1, 0x0, 0x0, 0x9, @tick=0x5, {}, {}, @result}, {0x81, 0x0, 0x0, 0x0, @tick, {0x6}, {0x5, 0x7}, @control={0x0, 0x4}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5a5, {0x0, 0xf9}, {0x0, 0xff}, @note={0x0, 0x1, 0x3, 0x1, 0x3}}], 0x70) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@local, 0x0, 0x88, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x4001, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f00000005c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x1, {0x7f, 0x8, 0x6, 0xe54f}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.959179525s ago: executing program 4 (id=6587): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x40810) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 3.384854058s ago: executing program 4 (id=6588): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x489, &(0x7f0000000240)={0x0, 0xa5ba, 0x1, 0xffd, 0x5cc}, &(0x7f0000000300), &(0x7f0000000340)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x3, r2, 0xcccccccc}) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x0, 0x2a, 0x0, 0x1}, 0x28) lsm_get_self_attr(0x65, &(0x7f0000000400)={0x0, 0x0, 0x40, 0x20, ""/32}, &(0x7f00000003c0)=0x40, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 3.370224611s ago: executing program 2 (id=6589): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000300060808004149004001040800", 0x58}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x10, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x0, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000080)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.086552603s ago: executing program 4 (id=6590): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@ifindex, r2, 0x5, 0x2, r3}, 0x20) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_eq}, {@appraise_type}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='vfat\x00', 0x2, &(0x7f0000000600)='$\x00') setfsgid(0xee00) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x4) faccessat(r3, &(0x7f0000000340)='./file0\x00', 0x180) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.08615632s ago: executing program 1 (id=6591): r0 = userfaultfd(0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50) syz_open_dev$video4linux(0x0, 0xb9000000, 0xc00c0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c987, 0x0, 0xffffffdf, 0x22d, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x1, &(0x7f0000019300)="b6761f8eb3701f2aff529a613e4154a656c98bbeb7264e999e569333be57126abf88a488ec119bafb581744243cd1b546ae21ca08ec20dcf708bce6d4266bd6e178c13c2a36691d528f715d992a74825ed1d7440333dca56d41124068c32d31cd6f5a609de5aae23daa13af9a5d953638adac3a5dc249a062051e833d3bb7f0c34345305d2db9ac3006b6827a829f0d53203b99f057d803eb66550ab17922871d3a8dfbcc36c0679593c4e54968a8a7879ae671744973ea7e900eae4db50cd7a049645f97c2c", 0xe, 0x6}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) syz_open_dev$sndctrl(0x0, 0x8, 0x191000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000300)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0xed) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="8f"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) mincore(&(0x7f00002bd000/0x4000)=nil, 0x4000, &(0x7f00000000c0)) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x200014, 0x200, &(0x7f0000000880)="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"}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 2.192604644s ago: executing program 0 (id=6592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'}) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r6 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000391000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x71}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a31000000000800034000000001080008400000000008000440000000001400"], 0x6c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.121537776s ago: executing program 33 (id=6546): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_io_uring_setup(0x525f, &(0x7f00000001c0)={0x0, 0x8837, 0x25, 0x0, 0x30e, 0x0, r4}, &(0x7f0000000000), &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r5, r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f0000000140)=0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) connect$unix(r3, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000010}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xaee, 0x0, 0x20000081, 0x7a7, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x4, 0x100022}) 2.113639479s ago: executing program 4 (id=6594): mount$nfs4(&(0x7f0000000100)='&\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xe692ac86c79a6aee, &(0x7f00000001c0)={[{'/dev/dvb/adapter#/demux#\x00'}, {'/dev/dvb/adapter#/demux#\x00'}, {}]}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000700)=""/218, 0x28, 0xda, 0x1, 0x1}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000006c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee00, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 982.311165ms ago: executing program 4 (id=6595): mount$nfs4(&(0x7f0000000100)='&\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xe692ac86c79a6aee, &(0x7f00000001c0)={[{'/dev/dvb/adapter#/demux#\x00'}, {'/dev/dvb/adapter#/demux#\x00'}, {}]}) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000700)=""/218, 0x28, 0xda, 0x1, 0x1}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000006c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) setreuid(0xee00, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 926.457791ms ago: executing program 0 (id=6596): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x7, 0x10000, 0x4, 0x6, 0x72, 0x3, 0x7, 0xa, 0x1, 0x8001, 0xd, 0xff6f, 0x801, 0xfffffffe, 0xb4c, 0xffffffff, 0x0, 0x3, 0x40000001, 0x86, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x7, 0x6, 0x65c, 0x6, 0xfffffff4]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="85002000ed3143b4d8a700c7", @ANYRES32=r2, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r3}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000f8ffff010000000000000000850000003600000085000000d000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x80000, r1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 249.31705ms ago: executing program 2 (id=6597): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x8001, 0x7, 0xfffffffffffffffb, 0x800, 0xfffffffffffffffe, 0x1fff}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000003c0)={0x1, 0x0, [{0x1, 0x8001, 0x0, 0x7ff, 0x195a43d7}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 0s ago: executing program 4 (id=6598): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x13, r0, 0xa95f4000) kernel console output (not intermixed with test programs): dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1942.211026][ T29] audit: type=1400 audit(1774745332.504:4819): avc: denied { map } for pid=30748 comm="syz.5.6216" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1942.257181][ T29] audit: type=1400 audit(1774745332.504:4820): avc: denied { execute } for pid=30748 comm="syz.5.6216" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1942.356037][T20301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.503465][T30758] vxcan1 speed is unknown, defaulting to 1000 [ 1942.603568][T30762] netlink: 231 bytes leftover after parsing attributes in process `syz.5.6217'. [ 1943.068932][T30766] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1943.387815][ T5888] usb 2-1: USB disconnect, device number 111 [ 1943.829063][T20301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.274864][ T6330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.283265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.322000][ T29] audit: type=1400 audit(1774745334.605:4821): avc: denied { connect } for pid=30783 comm="syz.4.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1944.476976][T30793] siw: device registration error -23 [ 1944.485159][T30793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6227'. [ 1944.595813][ T29] audit: type=1400 audit(1774745334.885:4822): avc: denied { block_suspend } for pid=30790 comm="syz.0.6226" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1944.835881][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.568327][T30818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6233'. [ 1945.693268][ T29] audit: type=1400 audit(1774745335.876:4823): avc: denied { read } for pid=30812 comm="syz.2.6233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1945.718843][ T5888] IPVS: starting estimator thread 0... [ 1945.931117][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.073015][T30819] IPVS: using max 50 ests per chain, 120000 per kthread [ 1946.238875][ T5888] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1946.749176][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1946.779631][ T5888] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1946.793238][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.804312][ T5888] usb 6-1: config 0 descriptor?? [ 1946.809965][T30822] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1946.860037][T24995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.868339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.993151][T20301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1947.147233][ T29] audit: type=1326 audit(1774745337.446:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30841 comm="syz.1.6241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f856c39c799 code=0x0 [ 1948.379173][ T5868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.380895][T27733] Bluetooth: hci1: command 0xfc11 tx timeout [ 1948.443110][ T5820] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1948.443157][ T29] audit: type=1400 audit(1774745337.706:4825): avc: denied { read } for pid=30848 comm="syz.0.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1948.472346][T20301] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1948.547161][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.562159][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.588391][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.605954][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.686586][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.701914][T20301] usb 3-1: Using ep0 maxpacket: 16 [ 1948.711134][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.714374][T20301] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1948.737835][T20301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.756749][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.761531][T20301] usb 3-1: Product: syz [ 1948.779266][T20301] usb 3-1: Manufacturer: syz [ 1948.791763][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.794757][T20301] usb 3-1: SerialNumber: syz [ 1948.798904][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.824782][T20301] usb 3-1: config 0 descriptor?? [ 1948.863426][ T5888] uclogic 0003:5543:0064.002D: unknown main item tag 0x0 [ 1948.912303][ T5888] uclogic 0003:5543:0064.002D: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.5-1/input0 [ 1948.980715][ T5888] usb 6-1: USB disconnect, device number 32 [ 1949.003147][ T29] audit: type=1400 audit(1774745339.307:4826): avc: denied { getopt } for pid=30856 comm="syz.1.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1949.075594][T20301] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1949.123378][T20301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1949.146369][T30855] fido_id[30855]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1949.172249][T20301] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1949.201596][T20301] usb 3-1: media controller created [ 1949.250346][T20301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1949.354745][T20301] zl10353_read_register: readreg error (reg=127, ret==0) [ 1949.389402][T20301] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1949.399032][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.421626][T20301] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1949.458889][T20301] usb 3-1: USB disconnect, device number 48 [ 1949.984878][T20301] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1950.032283][T10486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.040660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.351162][T20301] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1950.442731][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.531017][T20301] usb 3-1: Using ep0 maxpacket: 8 [ 1950.551338][T20301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.562099][T20301] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1950.582651][T20301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.656194][T20301] usb 3-1: config 0 descriptor?? [ 1950.674331][T20301] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1951.230644][T20301] gspca_vc032x: reg_r err -110 [ 1951.246784][T20301] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1951.401374][T30896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6253'. [ 1951.422609][T30896] xt_hashlimit: size too large, truncated to 1048576 [ 1951.611303][T20301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.728028][ T29] audit: type=1400 audit(1774745342.029:4827): avc: denied { append } for pid=30865 comm="syz.2.6248" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1952.112947][ T29] audit: type=1400 audit(1774745342.419:4828): avc: denied { nosuid_transition } for pid=30865 comm="syz.2.6248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 1952.179867][ T29] audit: type=1400 audit(1774745342.439:4829): avc: denied { transition } for pid=30865 comm="syz.2.6248" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1952.286605][ T29] audit: type=1400 audit(1774745342.439:4830): avc: denied { entrypoint } for pid=30865 comm="syz.2.6248" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2119 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1952.350108][ T29] audit: type=1400 audit(1774745342.439:4831): avc: denied { share } for pid=30865 comm="syz.2.6248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1952.391354][ T29] audit: type=1400 audit(1774745342.439:4832): avc: denied { noatsecure } for pid=30865 comm="syz.2.6248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1953.445536][ T6330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.453946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.468438][T20301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.736719][ T5888] usb 3-1: USB disconnect, device number 49 [ 1954.663105][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.150321][T24995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.158935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.346173][ T29] audit: type=1400 audit(1774745345.650:4833): avc: denied { ioctl } for pid=30931 comm="syz.4.6265" path="socket:[140041]" dev="sockfs" ino=140041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1956.561611][T30943] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1956.569721][T30943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.579190][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1956.625362][ T5875] net_ratelimit: 1 callbacks suppressed [ 1956.625380][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.006947][T30948] fuse: Bad value for 'user_id' [ 1957.012017][T30948] fuse: Bad value for 'user_id' [ 1957.299089][T30941] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1957.306159][T30941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.314387][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1957.321532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.632788][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.720284][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1957.734140][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1957.747620][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1957.756382][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1957.765637][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1957.862186][T13965] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.916741][T30957] vxcan1 speed is unknown, defaulting to 1000 [ 1957.993983][T13965] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.090723][T13965] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.103595][T30964] IPv6: NLM_F_CREATE should be specified when creating new route [ 1958.117241][T20301] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1958.127400][T30964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1958.176718][T13965] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.279666][T20301] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1958.289342][T20301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.301667][T30957] chnl_net:caif_netlink_parms(): no params data found [ 1958.311486][T20301] usb 6-1: config 0 descriptor?? [ 1958.324249][T20301] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1958.448826][T13965] team0: left allmulticast mode [ 1958.453968][T13965] team_slave_0: left allmulticast mode [ 1958.469637][T13965] team_slave_1: left allmulticast mode [ 1958.483768][T13965] team0: left promiscuous mode [ 1958.493922][T13965] team_slave_0: left promiscuous mode [ 1958.503189][T13965] team_slave_1: left promiscuous mode [ 1958.511597][T13965] bridge0: port 3(team0) entered disabled state [ 1958.547474][T13965] bridge_slave_1: left promiscuous mode [ 1958.558302][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.576511][T13965] bridge_slave_0: left allmulticast mode [ 1958.590157][T13965] bridge_slave_0: left promiscuous mode [ 1958.598987][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.679710][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1958.864210][T13965] team0: Port device bridge1 removed [ 1958.961797][T13965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1958.975278][T13965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1958.986629][T13965] bond0 (unregistering): Released all slaves [ 1958.997599][ T5820] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1959.067370][ T6330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.075729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.084816][T13965] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1959.093594][T13965] wireguard0: left promiscuous mode [ 1959.109272][T13965] bond1 (unregistering): Released all slaves [ 1959.117620][T30978] netlink: 'syz.1.6276': attribute type 21 has an invalid length. [ 1959.133505][T13965] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 1959.142130][T13965] wireguard1: left promiscuous mode [ 1959.148910][T13965] bond2 (unregistering): Released all slaves [ 1959.162072][T13965] bond3 (unregistering): (slave wireguard2): Releasing backup interface [ 1959.170569][T13965] wireguard2: left promiscuous mode [ 1959.178342][T13965] bond3 (unregistering): Released all slaves [ 1959.191772][T13965] bond4 (unregistering): (slave wireguard3): Releasing backup interface [ 1959.202031][T13965] wireguard3: left promiscuous mode [ 1959.208784][T13965] bond4 (unregistering): Released all slaves [ 1959.222092][T13965] bond5 (unregistering): (slave wireguard4): Releasing backup interface [ 1959.230936][T13965] wireguard4: left promiscuous mode [ 1959.239255][T13965] bond5 (unregistering): Released all slaves [ 1959.251674][T13965] bond6 (unregistering): (slave wireguard5): Releasing backup interface [ 1959.261976][T13965] wireguard5: left promiscuous mode [ 1959.268611][T13965] bond6 (unregistering): Released all slaves [ 1959.283081][T13965] bond7 (unregistering): (slave wireguard6): Releasing backup interface [ 1959.291823][T13965] wireguard6: left promiscuous mode [ 1959.299832][T13965] bond7 (unregistering): Released all slaves [ 1959.312193][T13965] bond8 (unregistering): (slave veth7): Releasing active interface [ 1959.324252][T13965] bond8 (unregistering): Released all slaves [ 1959.352842][T30957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.360141][T30957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.367670][T30957] bridge_slave_0: entered allmulticast mode [ 1959.374707][T30957] bridge_slave_0: entered promiscuous mode [ 1959.383499][T30957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1959.391318][T30957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.399692][T30957] bridge_slave_1: entered allmulticast mode [ 1959.411212][T30957] bridge_slave_1: entered promiscuous mode [ 1959.464057][T30957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1959.476995][T30957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1959.486365][T13965] !: left promiscuous mode [ 1959.550930][T30957] team0: Port device team_slave_0 added [ 1959.558975][T30957] team0: Port device team_slave_1 added [ 1959.591576][T30957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1959.608724][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1959.635776][T30957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1959.662955][T30957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1959.680084][T30957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1959.723448][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.727249][T30957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1959.866352][ T5821] Bluetooth: hci4: command tx timeout [ 1959.877863][T30957] hsr_slave_0: entered promiscuous mode [ 1959.895127][T30957] hsr_slave_1: entered promiscuous mode [ 1959.904933][T30957] debugfs: 'hsr0' already exists in 'hsr' [ 1959.918863][T30957] Cannot create hsr debugfs directory [ 1960.035310][T30985] FAULT_INJECTION: forcing a failure. [ 1960.035310][T30985] name failslab, interval 1, probability 0, space 0, times 0 [ 1960.050880][T30985] CPU: 0 UID: 0 PID: 30985 Comm: syz.1.6279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1960.050909][T30985] Tainted: [L]=SOFTLOCKUP [ 1960.050914][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1960.050924][T30985] Call Trace: [ 1960.050929][T30985] [ 1960.050936][T30985] dump_stack_lvl+0x100/0x190 [ 1960.050968][T30985] should_fail_ex.cold+0x5/0xa [ 1960.050988][T30985] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1960.051008][T30985] should_failslab+0xc2/0x120 [ 1960.051025][T30985] __kmalloc_noprof+0xe0/0x850 [ 1960.051055][T30985] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1960.051074][T30985] ? netlink_lookup+0x116/0x270 [ 1960.051100][T30985] genl_start+0x18f/0x970 [ 1960.051121][T30985] __netlink_dump_start+0x60e/0x990 [ 1960.051151][T30985] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1960.051171][T30985] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1960.051196][T30985] ? __pfx_genl_get_cmd+0x10/0x10 [ 1960.051211][T30985] ? __pfx_genl_start+0x10/0x10 [ 1960.051226][T30985] ? __pfx_genl_dumpit+0x10/0x10 [ 1960.051242][T30985] ? __pfx_genl_done+0x10/0x10 [ 1960.051261][T30985] ? __dev_queue_xmit+0x5af/0x4800 [ 1960.051278][T30985] ? __radix_tree_lookup+0x217/0x2b0 [ 1960.051306][T30985] genl_rcv_msg+0x471/0x800 [ 1960.051328][T30985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1960.051346][T30985] ? __pfx_ethnl_default_start+0x10/0x10 [ 1960.051367][T30985] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1960.051390][T30985] ? __pfx_ethnl_default_done+0x10/0x10 [ 1960.051420][T30985] netlink_rcv_skb+0x159/0x420 [ 1960.051447][T30985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1960.051473][T30985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1960.051508][T30985] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1960.051537][T30985] genl_rcv+0x28/0x40 [ 1960.051553][T30985] netlink_unicast+0x5aa/0x870 [ 1960.051584][T30985] ? __pfx_netlink_unicast+0x10/0x10 [ 1960.051618][T30985] netlink_sendmsg+0x8b0/0xda0 [ 1960.051647][T30985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1960.051673][T30985] ? __might_fault+0xa0/0x140 [ 1960.051708][T30985] ____sys_sendmsg+0x9e1/0xb70 [ 1960.051729][T30985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1960.051758][T30985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1960.051788][T30985] ___sys_sendmsg+0x190/0x1e0 [ 1960.051809][T30985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1960.051860][T30985] __sys_sendmsg+0x170/0x220 [ 1960.051884][T30985] ? __pfx___sys_sendmsg+0x10/0x10 [ 1960.051923][T30985] do_syscall_64+0x106/0xf80 [ 1960.051948][T30985] ? clear_bhb_loop+0x40/0x90 [ 1960.051969][T30985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.051986][T30985] RIP: 0033:0x7f856c39c799 [ 1960.052002][T30985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1960.052019][T30985] RSP: 002b:00007f856d1f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1960.052037][T30985] RAX: ffffffffffffffda RBX: 00007f856c615fa0 RCX: 00007f856c39c799 [ 1960.052048][T30985] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1960.052059][T30985] RBP: 00007f856d1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1960.052069][T30985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1960.052079][T30985] R13: 00007f856c616038 R14: 00007f856c615fa0 R15: 00007ffc6699d7b8 [ 1960.052110][T30985] [ 1960.349868][T30987] syzkaller0: entered promiscuous mode [ 1960.401943][T20301] gspca_stv06xx: I2C: Read error writing address: -71 [ 1960.411024][T20301] usb 6-1: USB disconnect, device number 33 [ 1960.475806][T30987] syzkaller0: entered allmulticast mode [ 1961.226217][T31006] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6282'. [ 1961.945365][ T5821] Bluetooth: hci4: command tx timeout [ 1961.952204][T31027] netlink: 'syz.5.6287': attribute type 21 has an invalid length. [ 1961.971961][T31021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1962.121996][T28468] net_ratelimit: 3 callbacks suppressed [ 1962.122009][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.613766][T31037] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1962.621283][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1963.112246][T31044] netlink: 'syz.5.6290': attribute type 8 has an invalid length. [ 1963.120265][ T29] audit: type=1400 audit(1774745353.414:4834): avc: denied { ioctl } for pid=31038 comm="syz.5.6290" path="socket:[140404]" dev="sockfs" ino=140404 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1963.127154][T30957] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1963.186378][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.037237][ T5821] Bluetooth: hci4: command tx timeout [ 1964.198890][T24995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.207584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.291011][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.291643][T31061] FAULT_INJECTION: forcing a failure. [ 1964.291643][T31061] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.318630][T30957] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1964.464787][T30957] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1964.653493][T31061] CPU: 0 UID: 0 PID: 31061 Comm: syz.4.6294 Tainted: G L syzkaller #0 PREEMPT(full) [ 1964.653528][T31061] Tainted: [L]=SOFTLOCKUP [ 1964.653534][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1964.653544][T31061] Call Trace: [ 1964.653551][T31061] [ 1964.653560][T31061] dump_stack_lvl+0x100/0x190 [ 1964.653595][T31061] should_fail_ex.cold+0x5/0xa [ 1964.653620][T31061] ? tomoyo_encode2+0xfb/0x3c0 [ 1964.653645][T31061] should_failslab+0xc2/0x120 [ 1964.653664][T31061] __kmalloc_noprof+0xe0/0x850 [ 1964.653696][T31061] tomoyo_encode2+0xfb/0x3c0 [ 1964.653727][T31061] tomoyo_encode+0x29/0x50 [ 1964.653752][T31061] tomoyo_realpath_from_path+0x18c/0x690 [ 1964.653785][T31061] tomoyo_path_number_perm+0x23c/0x580 [ 1964.653808][T31061] ? tomoyo_path_number_perm+0x22e/0x580 [ 1964.653834][T31061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1964.653884][T31061] ? find_held_lock+0x2b/0x80 [ 1964.653907][T31061] ? __fget_files+0x215/0x3d0 [ 1964.653926][T31061] ? hook_file_ioctl_common+0x146/0x410 [ 1964.653951][T31061] ? __fget_files+0x21f/0x3d0 [ 1964.653975][T31061] security_file_ioctl+0xd3/0x230 [ 1964.654003][T31061] __x64_sys_ioctl+0xb7/0x210 [ 1964.654033][T31061] do_syscall_64+0x106/0xf80 [ 1964.654060][T31061] ? clear_bhb_loop+0x40/0x90 [ 1964.654083][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.654101][T31061] RIP: 0033:0x7f59c6b9c799 [ 1964.654117][T31061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1964.654134][T31061] RSP: 002b:00007f59c7b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1964.654152][T31061] RAX: ffffffffffffffda RBX: 00007f59c6e15fa0 RCX: 00007f59c6b9c799 [ 1964.654164][T31061] RDX: 0000200000000000 RSI: 00000000800442d3 RDI: 0000000000000004 [ 1964.654175][T31061] RBP: 00007f59c7b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.654186][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.654197][T31061] R13: 00007f59c6e16038 R14: 00007f59c6e15fa0 R15: 00007ffc3b642978 [ 1964.654224][T31061] [ 1964.928699][T31061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1964.939656][T30957] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1965.305408][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.315053][T31086] netlink: 'syz.1.6299': attribute type 21 has an invalid length. [ 1965.348279][T13965] hsr_slave_0: left promiscuous mode [ 1965.541335][T13965] hsr_slave_1: left promiscuous mode [ 1965.554120][T13965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1965.561593][T13965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1965.581139][T13965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1965.601667][T13965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1966.221393][T24995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.228788][ T5821] Bluetooth: hci4: command tx timeout [ 1966.229824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.306291][T13965] veth1_macvtap: left promiscuous mode [ 1966.311811][T13965] veth0_macvtap: left promiscuous mode [ 1966.337768][T13965] veth1_vlan: left promiscuous mode [ 1966.361820][T13965] veth0_vlan: left promiscuous mode [ 1966.920524][ T5888] IPVS: starting estimator thread 0... [ 1967.016311][T31109] IPVS: using max 49 ests per chain, 117600 per kthread [ 1967.173614][T31112] netlink: 'syz.1.6305': attribute type 9 has an invalid length. [ 1967.202419][T31112] netlink: 'syz.1.6305': attribute type 11 has an invalid length. [ 1967.239526][T31112] netlink: 'syz.1.6305': attribute type 12 has an invalid length. [ 1967.249625][T31112] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1967.330300][T31112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1967.383065][T30572] net_ratelimit: 1 callbacks suppressed [ 1967.383086][T30572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.686038][T13965] team0 (unregistering): Port device team_slave_1 removed [ 1967.785506][T13965] team0 (unregistering): Port device team_slave_0 removed [ 1967.897132][T31119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6307'. [ 1968.079216][T30957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1968.133256][T30957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1968.161538][T25007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.168689][T25007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1968.220225][T25007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.227392][T25007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1968.278493][T30957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1968.422834][ T29] audit: type=1400 audit(1774745358.727:4835): avc: denied { write } for pid=31127 comm="syz.5.6309" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1968.446825][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.589329][ T29] audit: type=1400 audit(1774745358.867:4836): avc: denied { ioctl } for pid=31130 comm="syz.4.6311" path="socket:[141605]" dev="sockfs" ino=141605 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1968.853144][T31144] netlink: 'syz.1.6313': attribute type 21 has an invalid length. [ 1968.971176][T31145] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1968.978769][T31145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.987579][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1968.994681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.022250][T31145] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1969.029672][T31145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.038125][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1969.045216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.344079][T30957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1969.416473][T30957] veth0_vlan: entered promiscuous mode [ 1969.537046][T30957] veth1_vlan: entered promiscuous mode [ 1969.621578][T29769] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1969.744409][T13965] IPVS: stop unused estimator thread 0... [ 1969.843313][ T29] audit: type=1400 audit(1774745360.148:4837): avc: denied { setopt } for pid=31151 comm="syz.1.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1970.323031][T30957] veth0_macvtap: entered promiscuous mode [ 1970.363163][T30957] veth1_macvtap: entered promiscuous mode [ 1970.424319][T29769] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1970.433819][T29769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.448830][T29769] usb 6-1: Product: syz [ 1970.465332][T30957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1970.481702][T29769] usb 6-1: Manufacturer: syz [ 1970.489661][T30957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1970.552786][T29769] usb 6-1: SerialNumber: syz [ 1970.673296][T29769] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1970.690275][T13965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.705334][T13965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.714276][ T5888] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1970.817824][T13965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1970.881378][T13965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.424506][T31175] fuse: Bad value for 'fd' [ 1972.215903][ T5888] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1972.268268][ T5808] usb 6-1: USB disconnect, device number 34 [ 1972.303690][ T5888] ath9k_htc: Failed to initialize the device [ 1972.718477][ T5808] usb 6-1: ath9k_htc: USB layer deinitialized [ 1972.747426][T13965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.769523][T13965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.843753][T13965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.853145][T13965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.994294][T31182] net_ratelimit: 6 callbacks suppressed [ 1972.994324][T31182] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1973.007822][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1973.026563][T31182] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1973.035719][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1973.353986][T31186] batman_adv: batadv0: Adding interface: macsec1 [ 1973.380489][ T5820] Bluetooth: hci1: command 0xfc11 tx timeout [ 1973.388576][ T5821] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1973.396959][T30572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.405745][T31186] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.516776][T31186] batman_adv: batadv0: Interface activated: macsec1 [ 1974.385983][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1974.397412][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1974.407734][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1974.415521][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1974.425094][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1974.429969][T30572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1974.593064][T31195] vxcan1 speed is unknown, defaulting to 1000 [ 1974.928855][T20301] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1975.384757][T20301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1975.404387][T20301] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1975.430093][T20301] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1975.457242][T20301] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1975.474151][T30572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.522896][T20301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1975.554111][T20301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1975.748343][T20301] usb 2-1: SerialNumber: syz [ 1976.269847][T31204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.290813][ T6328] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.335807][T31204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.442121][ T6328] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.539563][ T6328] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.577845][ T5820] Bluetooth: hci1: command tx timeout [ 1976.610115][ T5875] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1976.678199][ T6328] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.719930][T31195] chnl_net:caif_netlink_parms(): no params data found [ 1976.779583][ T5875] usb 6-1: device descriptor read/64, error -71 [ 1976.987965][T31204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.995894][T31204] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1977.059418][ T5875] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1977.117226][ T6328] bridge0: port 3(batadv0) entered disabled state [ 1977.135662][ T6328] bridge_slave_1: left allmulticast mode [ 1977.147387][ T6328] bridge_slave_1: left promiscuous mode [ 1977.159470][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.177903][ T6328] bridge_slave_0: left allmulticast mode [ 1977.190867][ T6328] bridge_slave_0: left promiscuous mode [ 1977.202782][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.218293][ T5875] usb 6-1: device descriptor read/64, error -71 [ 1977.255232][ T6328] tipc: Resetting bearer [ 1977.329109][T25007] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1977.344291][ T5875] usb usb6-port1: attempt power cycle [ 1977.697434][ T5875] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1977.719618][ T5875] usb 6-1: device descriptor read/8, error -71 [ 1977.748039][ T6328] tipc: Disabling bearer [ 1977.859900][T24992] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1977.968164][ T5875] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1977.978152][ T6328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1978.010113][ T5875] usb 6-1: device descriptor read/8, error -71 [ 1978.017600][ T6328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1978.036353][ T6328] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1978.046274][ T6328] bond0 (unregistering): Released all slaves [ 1978.067035][ T6328] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1978.075511][ T6328] wireguard0: left promiscuous mode [ 1978.089215][ T6328] bond1 (unregistering): Released all slaves [ 1978.125538][ T6328] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 1978.134495][ T5875] usb usb6-port1: unable to enumerate USB device [ 1978.141573][ T6328] wireguard1: left promiscuous mode [ 1978.170797][ T6328] bond2 (unregistering): Released all slaves [ 1978.205444][ T6328] bond3 (unregistering): (slave wireguard2): Releasing backup interface [ 1978.214443][ T6328] wireguard2: left promiscuous mode [ 1978.232419][ T6328] bond3 (unregistering): Released all slaves [ 1978.273596][ T6328] bond4 (unregistering): (slave wireguard3): Releasing backup interface [ 1978.299786][ T6328] wireguard3: left promiscuous mode [ 1978.319751][ T6328] bond4 (unregistering): Released all slaves [ 1978.357827][ T6328] bond5 (unregistering): (slave wireguard4): Releasing backup interface [ 1978.366271][ T6328] wireguard4: left promiscuous mode [ 1978.375868][ T6328] bond5 (unregistering): Released all slaves [ 1978.390720][T31195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.398776][T24992] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1978.418466][T31195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.435288][T31195] bridge_slave_0: entered allmulticast mode [ 1978.464949][T31195] bridge_slave_0: entered promiscuous mode [ 1978.487693][T31195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.501627][T31195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.516565][T31195] bridge_slave_1: entered allmulticast mode [ 1978.656610][ T5820] Bluetooth: hci1: command tx timeout [ 1978.657125][T20301] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1978.688330][T31195] bridge_slave_1: entered promiscuous mode [ 1978.728762][T20301] usb 2-1: USB disconnect, device number 112 [ 1978.764638][ T6328] tipc: Left network mode [ 1978.775629][T31234] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1978.823670][T31242] netlink: 'syz.1.6340': attribute type 1 has an invalid length. [ 1978.831598][T31242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1978.861432][T31195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.916206][T31195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.230090][T25007] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1979.306053][ T6328] IPVS: stopping backup sync thread 26777 ... [ 1979.369389][T31195] team0: Port device team_slave_0 added [ 1979.428584][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1979.488022][T31195] team0: Port device team_slave_1 added [ 1979.556319][T30572] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1979.776082][T24986] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1980.207217][T30572] usb 2-1: Using ep0 maxpacket: 16 [ 1980.224220][T30572] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 1980.237659][T30572] usb 2-1: config 251 has no interface number 0 [ 1980.251591][T30572] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1980.263646][T30572] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1980.274403][T30572] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1980.280542][T31255] syzkaller0: entered promiscuous mode [ 1980.291056][T31255] syzkaller0: entered allmulticast mode [ 1980.291142][T30572] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1980.352938][T31195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1980.364774][T31195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1980.366853][T30572] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1980.513389][T30572] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.544167][T30572] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1980.559741][T31195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1980.602397][T30572] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1980.616634][T31195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1980.632368][T31195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1980.665984][T30572] usb 2-1: config 251 interface 202 has no altsetting 0 [ 1980.690588][T30572] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1980.725851][T31195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1980.742505][T30572] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1980.742804][ T5820] Bluetooth: hci1: command tx timeout [ 1980.751235][T30572] usb 2-1: Product: syz [ 1980.761101][T10486] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1980.810769][T30572] usb 2-1: SerialNumber: syz [ 1980.961042][T31272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6344'. [ 1981.083988][T31195] hsr_slave_0: entered promiscuous mode [ 1981.126505][T31195] hsr_slave_1: entered promiscuous mode [ 1981.153916][T31195] debugfs: 'hsr0' already exists in 'hsr' [ 1981.163618][T31195] Cannot create hsr debugfs directory [ 1981.364734][T31279] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1981.372438][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1981.401403][T31279] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1981.409275][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1981.452552][T24995] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1981.925254][T31286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6348'. [ 1981.932634][ T29] audit: type=1400 audit(1774745372.234:4838): avc: denied { name_bind } for pid=31283 comm="syz.2.6348" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1982.135166][T24992] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1982.393080][T30572] cxacru 2-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1982.758618][T30572] cxacru 2-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1982.788917][T31297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6350'. [ 1982.806560][T30572] cxacru 2-1:251.202: probe with driver cxacru failed with error -22 [ 1982.814925][ T5820] Bluetooth: hci1: command tx timeout [ 1982.849220][T30572] usb 2-1: USB disconnect, device number 113 [ 1982.966650][T31291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6347'. [ 1983.238586][T30572] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1983.444557][T30572] usb 2-1: Using ep0 maxpacket: 8 [ 1983.456130][T30572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.476789][T30572] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1983.513451][T30572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.539629][T30572] usb 2-1: config 0 descriptor?? [ 1983.582969][T30572] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1983.873599][ T29] audit: type=1400 audit(1774745374.135:4839): avc: denied { read } for pid=31317 comm="syz.4.6354" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1983.905545][T25005] net_ratelimit: 2 callbacks suppressed [ 1983.905566][T25005] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1983.923952][ T29] audit: type=1400 audit(1774745374.135:4840): avc: denied { open } for pid=31317 comm="syz.4.6354" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1984.160466][ T29] audit: type=1400 audit(1774745374.465:4841): avc: denied { write } for pid=31325 comm="syz.2.6355" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1984.384821][ T5808] IPVS: starting estimator thread 0... [ 1984.503767][T31329] IPVS: using max 41 ests per chain, 98400 per kthread [ 1984.533919][T13965] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1984.762765][T31195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1984.782551][T31333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6356'. [ 1984.804237][T31195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1984.876375][T31195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1984.926084][T31195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1985.113688][T13965] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1985.776145][T24986] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 1985.802796][T31322] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1985.853111][T31322] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1985.870097][T31322] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1985.914776][T31322] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1985.927967][T31195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1985.989668][T31195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1986.041487][T31322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1986.054511][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.061622][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1986.123072][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.130182][T10486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1986.141173][T31322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1986.173860][ T6328] hsr_slave_0: left promiscuous mode [ 1986.186225][ T6328] hsr_slave_1: left promiscuous mode [ 1986.207044][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1986.221097][ T6328] batadv0: mtu less than device minimum [ 1986.228101][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1986.231322][T31322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1986.239974][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1986.256564][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1986.267482][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1986.278359][ T6328] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1986.319653][T31322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1986.326765][T31322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1986.345209][T31322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1986.354692][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1986.413759][ T5820] Bluetooth: hci6: command 0x0406 tx timeout [ 1986.465941][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1986.593858][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1986.603520][ T6328] batman_adv: batadv0: Interface deactivated: macsec1 [ 1986.765146][ T6328] batman_adv: batadv0: Removing interface: macsec1 [ 1986.780735][ T6328] batman_adv: batadv0: Interface deactivated: dummy0 [ 1986.798048][ T6328] batman_adv: batadv0: Removing interface: dummy0 [ 1986.821425][ T6328] veth1_macvtap: left promiscuous mode [ 1986.832696][ T6328] veth0_macvtap: left promiscuous mode [ 1986.838375][ T6328] veth1_vlan: left promiscuous mode [ 1986.843849][ T6328] veth0_vlan: left promiscuous mode [ 1986.879223][T31389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6361'. [ 1986.918406][ T5808] usb 2-1: USB disconnect, device number 114 [ 1987.392403][ T5808] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1987.518754][ T6328] team0 (unregistering): Port device team_slave_1 removed [ 1987.530907][ T6328] team0 (unregistering): Port device team_slave_0 removed [ 1987.555926][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1987.564508][ T5808] usb 2-1: not running at top speed; connect to a high speed hub [ 1987.574770][ T5808] usb 2-1: config 7 has an invalid interface number: 1 but max is 0 [ 1987.585172][ T5808] usb 2-1: config 7 has no interface number 0 [ 1987.591376][ T5808] usb 2-1: config 7 interface 1 has no altsetting 0 [ 1987.601038][ T5808] usb 2-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=a2.4c [ 1987.614867][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.623422][ T5808] usb 2-1: Product: syz [ 1987.627686][ T5808] usb 2-1: Manufacturer: syz [ 1987.632745][ T5808] usb 2-1: SerialNumber: syz [ 1987.932477][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 1988.092020][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 1988.144641][ T5808] ftdi_sio 2-1:7.1: FTDI USB Serial Device converter detected [ 1988.193615][ T5808] ftdi_sio ttyUSB0: unknown device type: 0xa24c [ 1988.272438][ T5808] usb 2-1: USB disconnect, device number 115 [ 1988.295648][ T5808] ftdi_sio 2-1:7.1: device disconnected [ 1988.342930][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 1988.363940][T31426] vxcan1 speed is unknown, defaulting to 1000 [ 1989.092627][ T29] audit: type=1400 audit(1774745379.417:4842): avc: denied { ioctl } for pid=31425 comm="syz.1.6366" path="socket:[142709]" dev="sockfs" ino=142709 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1989.399166][T31195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.495289][ T6328] IPVS: stop unused estimator thread 0... [ 1989.558629][T31195] veth0_vlan: entered promiscuous mode [ 1989.611842][T31195] veth1_vlan: entered promiscuous mode [ 1989.796681][T31195] veth0_macvtap: entered promiscuous mode [ 1989.831155][ T5808] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1990.132275][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 1990.177118][ T5820] Bluetooth: hci4: command 0x0c1a tx timeout [ 1990.334358][T31195] veth1_macvtap: entered promiscuous mode [ 1990.360211][T31195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1990.425879][ T29] audit: type=1400 audit(1774745380.738:4843): avc: denied { setopt } for pid=31447 comm="syz.1.6374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1990.478909][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 1990.479921][T31195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1990.493994][ T5808] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1990.518447][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.539536][ T5808] usb 6-1: Product: syz [ 1990.553708][ T5808] usb 6-1: Manufacturer: syz [ 1990.568803][ T5808] usb 6-1: SerialNumber: syz [ 1990.576346][ T5808] usb 6-1: config 0 descriptor?? [ 1990.593211][T24992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.605395][ T5808] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1990.618620][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1990.631492][T24992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.640459][ T5808] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1990.660101][ T5808] usb 6-1: media controller created [ 1990.721830][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1990.936322][T24992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.962758][T24992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.069560][T31460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6375'. [ 1991.148254][ T5808] DVB: Unable to find symbol mt352_attach() [ 1991.226312][T31459] xt_hashlimit: size too large, truncated to 1048576 [ 1991.275216][ T5808] DVB: Unable to find symbol nxt6000_attach() [ 1991.653474][T24986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1991.681995][ T5808] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1991.691993][T24986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1991.847135][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input70 [ 1991.888530][T13965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1991.917458][ T5808] dvb-usb: schedule remote query interval to 1000 msecs. [ 1991.927949][T13965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1991.952734][ T5808] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1991.992084][ T5808] dvb-usb: bulk message failed: -22 (7/0) [ 1992.016963][ T5808] dvb-usb: bulk message failed: -22 (7/0) [ 1992.091368][ T5808] usb 6-1: USB disconnect, device number 39 [ 1992.243807][ T5808] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1992.260391][ T5821] Bluetooth: hci4: command 0x0c1a tx timeout [ 1992.261091][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 1992.490499][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout [ 1992.500341][ T5868] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1992.528216][T31474] netlink: 'syz.0.6326': attribute type 21 has an invalid length. [ 1992.766086][ T5868] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1992.787557][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.803807][ T5868] usb 2-1: Product: syz [ 1992.808683][T27733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1992.821788][T27733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1992.832885][ T5868] usb 2-1: Manufacturer: syz [ 1992.837634][T27733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1992.845120][ T5868] usb 2-1: SerialNumber: syz [ 1992.850627][T27733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1992.858238][T27733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1992.874151][ T5868] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1992.904965][T20301] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1992.917602][ T29] audit: type=1400 audit(1774745383.239:4844): avc: denied { shutdown } for pid=31478 comm="syz.4.6380" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1992.993995][T31480] vxcan1 speed is unknown, defaulting to 1000 [ 1993.391510][T18952] usb 2-1: USB disconnect, device number 116 [ 1993.773797][T13965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1993.834358][T31480] chnl_net:caif_netlink_parms(): no params data found [ 1993.983690][T13965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.009050][T20301] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1994.019032][T20301] ath9k_htc: Failed to initialize the device [ 1994.025595][T18952] usb 2-1: ath9k_htc: USB layer deinitialized [ 1994.181697][T13965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.298215][T31480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1994.306836][T31480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.314300][T31480] bridge_slave_0: entered allmulticast mode [ 1994.322028][T31480] bridge_slave_0: entered promiscuous mode [ 1994.415155][T13965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1994.436337][T31480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1994.444035][T31480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.451872][T31480] bridge_slave_1: entered allmulticast mode [ 1994.457581][T31511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1994.459380][T31480] bridge_slave_1: entered promiscuous mode [ 1994.599946][T31519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1994.698187][T31520] netlink: 'syz.4.6390': attribute type 21 has an invalid length. [ 1994.781463][T31480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.803133][T31512] xt_hashlimit: size too large, truncated to 1048576 [ 1994.812720][T31480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.889512][T27733] Bluetooth: hci3: command tx timeout [ 1995.003623][T31480] team0: Port device team_slave_0 added [ 1995.015554][T13965] erspan0: left allmulticast mode [ 1995.021518][T13965] erspan0: left promiscuous mode [ 1995.026644][T13965] bridge0: port 3(erspan0) entered disabled state [ 1995.569619][T13965] bridge_slave_1: left allmulticast mode [ 1995.580879][T13965] bridge_slave_1: left promiscuous mode [ 1995.588008][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1995.601625][T13965] bridge_slave_0: left allmulticast mode [ 1995.607274][T13965] bridge_slave_0: left promiscuous mode [ 1995.615813][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1996.131919][T13965] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1996.150904][T13965] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1996.175077][T13965] .` (unregistering): Released all slaves [ 1996.201766][T13965] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1996.240285][T13965] wireguard0: left promiscuous mode [ 1996.260479][T13965] bond1 (unregistering): Released all slaves [ 1996.670489][T13965] bond2 (unregistering): (slave wireguard1): Releasing backup interface [ 1996.681472][T13965] wireguard1: left promiscuous mode [ 1996.967878][T27733] Bluetooth: hci3: command tx timeout [ 1997.171754][T13965] bond2 (unregistering): Released all slaves [ 1997.296280][T13965] bond3 (unregistering): Released all slaves [ 1997.376656][T13965] bond4 (unregistering): (slave wireguard3): Releasing backup interface [ 1997.388805][T13965] wireguard3: left promiscuous mode [ 1997.559239][T13965] bond4 (unregistering): Released all slaves [ 1997.575309][T13965] bond5 (unregistering): Released all slaves [ 1997.591184][T13965] bond0 (unregistering): Released all slaves [ 1997.618894][T13965] bond6 (unregistering): Released all slaves [ 1997.650984][T13965] bond7 (unregistering): Released all slaves [ 1997.669752][ T29] audit: type=1400 audit(1774745387.992:4845): avc: denied { write } for pid=31541 comm="syz.4.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1997.692361][T31480] team0: Port device team_slave_1 added [ 1997.769094][T31539] vxcan1 speed is unknown, defaulting to 1000 [ 1997.804103][ T29] audit: type=1400 audit(1774745388.092:4846): avc: denied { read } for pid=31541 comm="syz.4.6396" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1997.828211][ T29] audit: type=1400 audit(1774745388.092:4847): avc: denied { open } for pid=31541 comm="syz.4.6396" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1997.860624][ T29] audit: type=1400 audit(1774745388.092:4848): avc: denied { ioctl } for pid=31541 comm="syz.4.6396" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1997.962211][T31480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1998.003411][T31480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1998.251265][T31480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1998.326056][T31480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1998.349107][T31480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1998.366469][T31558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6400'. [ 1998.479158][T31480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1998.490867][T31560] netlink: 'syz.1.6401': attribute type 21 has an invalid length. [ 1998.848982][T31480] hsr_slave_0: entered promiscuous mode [ 1998.867465][T31480] hsr_slave_1: entered promiscuous mode [ 1999.053416][T27733] Bluetooth: hci3: command tx timeout [ 2000.236424][ T5875] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2000.438180][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2000.455658][ T5875] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2000.476926][ T5875] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2000.652803][ T5875] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2000.842909][T31605] sp0: Synchronizing with TNC [ 2001.445649][T27733] Bluetooth: hci3: command tx timeout [ 2001.543955][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2001.553262][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2001.562165][ T5875] usb 3-1: SerialNumber: syz [ 2001.611371][T31589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2001.636103][T31589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2001.886689][T31624] netlink: 'syz.4.6412': attribute type 21 has an invalid length. [ 2002.132995][T31633] netlink: 'syz.0.6413': attribute type 6 has an invalid length. [ 2002.163939][T27733] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 2002.256612][T30572] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2002.280904][T31640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6415'. [ 2002.389349][T31589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2002.410518][T31589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2002.454998][T30572] usb 5-1: Using ep0 maxpacket: 8 [ 2002.480703][T30572] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2002.490678][T30572] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2002.505101][T30572] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2002.521798][T31480] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2002.532526][T31647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6416'. [ 2002.543575][T30572] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2002.547824][T31480] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2002.563753][T30572] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2002.650368][T30572] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2002.881739][T30572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.930948][T31480] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2002.988192][T31480] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2003.139961][ T5875] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2003.148704][T30572] usb 5-1: GET_CAPABILITIES returned 0 [ 2003.156611][T30572] usbtmc 5-1:16.0: can't read capabilities [ 2003.197697][ T5875] usb 3-1: USB disconnect, device number 50 [ 2003.540389][T31480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2003.592234][T31480] 8021q: adding VLAN 0 to HW filter on device team0 [ 2003.683826][T24995] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.690981][T24995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.104089][T24995] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.111290][T24995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.423822][T30572] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2004.480524][T13965] dummy0: left promiscuous mode [ 2004.504380][T13965] hsr_slave_0: left promiscuous mode [ 2004.510499][T13965] hsr_slave_1: left promiscuous mode [ 2004.516831][T13965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2004.538135][T13965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.557031][T13965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2004.573800][T13965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.575351][T30572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.596147][T30572] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2004.614288][T13965] veth1_macvtap: left promiscuous mode [ 2004.615149][T30572] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2004.619808][T13965] veth0_macvtap: left promiscuous mode [ 2004.639198][T13965] veth1_vlan: left promiscuous mode [ 2004.645535][T13965] veth0_vlan: left promiscuous mode [ 2004.653219][T30572] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2004.668553][T30572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.683889][T30572] usb 2-1: Product: syz [ 2004.688222][T30572] usb 2-1: Manufacturer: syz [ 2004.693004][T30572] usb 2-1: SerialNumber: syz [ 2004.722994][T30572] usb 2-1: config 0 descriptor?? [ 2004.737489][T30572] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 2004.745246][T30572] uvcvideo 2-1:0.0: No valid video chain found. [ 2005.016917][T30572] usb 5-1: USB disconnect, device number 15 [ 2005.053490][T29769] usb 2-1: USB disconnect, device number 117 [ 2006.166645][T13965] team0 (unregistering): Port device team_slave_1 removed [ 2006.223546][T13965] team0 (unregistering): Port device team_slave_0 removed [ 2006.451242][T31723] netlink: 'syz.2.6424': attribute type 21 has an invalid length. [ 2006.752797][ T29] audit: type=1400 audit(1774745397.076:4849): avc: denied { bind } for pid=31727 comm="syz.4.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2008.629214][T31480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2009.166831][T13965] IPVS: stop unused estimator thread 0... [ 2009.288373][T31480] veth0_vlan: entered promiscuous mode [ 2009.328376][T31480] veth1_vlan: entered promiscuous mode [ 2009.412562][T31480] veth0_macvtap: entered promiscuous mode [ 2009.448158][T31480] veth1_macvtap: entered promiscuous mode [ 2009.528662][T31757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2009.535545][T31480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.543686][T31480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2009.574774][T13965] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.595864][T13965] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.617849][T13965] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.628341][T31759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6429'. [ 2009.650140][T13965] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2009.926493][T29769] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2010.152095][T29769] usb 2-1: Using ep0 maxpacket: 32 [ 2010.159303][T29769] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2010.180901][T29769] usb 2-1: config 0 has no interface number 0 [ 2010.198636][T29769] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2010.208856][T29769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.219006][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.240903][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.248745][T29769] usb 2-1: Product: syz [ 2010.256774][T29769] usb 2-1: Manufacturer: syz [ 2010.272543][T29769] usb 2-1: SerialNumber: syz [ 2010.305177][T29769] usb 2-1: config 0 descriptor?? [ 2010.324350][T10486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.352947][T29769] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2010.363383][T10486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.407122][T31775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6437'. [ 2010.496021][T31778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6436'. [ 2010.528938][T31776] xt_hashlimit: size too large, truncated to 1048576 [ 2010.570848][T29769] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2010.741001][T29769] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2010.998005][ T29] audit: type=1400 audit(1774745401.288:4850): avc: denied { setopt } for pid=31782 comm="syz.5.6379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2011.029904][T31757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6432'. [ 2011.259542][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2011.267491][ T5888] usb 2-1: USB disconnect, device number 118 [ 2011.276261][ T5888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2011.378237][ T5888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2011.481993][ T5888] quatech2 2-1:0.51: device disconnected [ 2011.890012][ T5888] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2012.069900][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 2012.076747][ T5888] usb 2-1: config 0 has no interfaces? [ 2012.084868][ T5888] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2012.105238][ T5888] usb 2-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 2012.154340][ T5888] usb 2-1: Product: syz [ 2012.183762][ T5888] usb 2-1: Manufacturer: syz [ 2012.614585][ T5888] usb 2-1: SerialNumber: syz [ 2012.690722][T31809] net_ratelimit: 55 callbacks suppressed [ 2012.690747][T31809] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2012.703952][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2012.731401][T18952] IPVS: starting estimator thread 0... [ 2012.800283][T31809] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2012.808525][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2012.861328][T31810] IPVS: using max 45 ests per chain, 108000 per kthread [ 2012.887386][ T5888] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2012.972281][ T5888] r8152-cfgselector 2-1: config 0 descriptor?? [ 2013.199527][T28468] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2013.380160][T28468] usb 5-1: Using ep0 maxpacket: 16 [ 2013.388049][T28468] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 2013.392064][ T5888] r8152-cfgselector 2-1: USB disconnect, device number 119 [ 2013.399419][T28468] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2013.414999][T28468] usb 5-1: can't read configurations, error -61 [ 2013.559213][T28468] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2013.722623][T31827] fuse: Bad value for 'user_id' [ 2013.727549][T31827] fuse: Bad value for 'user_id' [ 2013.967224][T28468] usb 5-1: Using ep0 maxpacket: 16 [ 2014.022063][T28468] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 2014.033642][T28468] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2014.041987][T28468] usb 5-1: can't read configurations, error -61 [ 2014.048575][T28468] usb usb5-port1: attempt power cycle [ 2014.388878][T28468] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2014.431967][T28468] usb 5-1: Using ep0 maxpacket: 16 [ 2014.451859][T28468] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 2014.484295][T28468] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2014.499392][T28468] usb 5-1: can't read configurations, error -61 [ 2014.648603][T28468] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2014.669142][T28468] usb 5-1: Using ep0 maxpacket: 16 [ 2014.675076][T28468] usb 5-1: too many configurations: 235, using maximum allowed: 8 [ 2014.684996][T28468] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2014.694065][T28468] usb 5-1: can't read configurations, error -61 [ 2014.702755][T28468] usb usb5-port1: unable to enumerate USB device [ 2014.715903][T18952] kernel read not supported for file /dsp1 (pid: 18952 comm: kworker/0:4) [ 2015.101318][T31836] netlink: 'syz.1.6451': attribute type 7 has an invalid length. [ 2015.109118][T31836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6451'. [ 2015.211404][T10486] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2015.288071][T10486] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2015.346698][T10486] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2015.357154][T10486] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2015.678110][T27733] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2016.230016][T31848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6454'. [ 2016.336328][T31848] xt_hashlimit: size too large, truncated to 1048576 [ 2016.824978][T31861] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2016.833122][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2016.876623][T31861] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2016.884300][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2019.384869][ T29] audit: type=1400 audit(1774745409.712:4851): avc: denied { setopt } for pid=31885 comm="syz.4.6463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2019.428240][ T29] audit: type=1400 audit(1774745409.742:4852): avc: denied { bind } for pid=31885 comm="syz.4.6463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2019.458443][ T29] audit: type=1400 audit(1774745409.742:4853): avc: denied { node_bind } for pid=31885 comm="syz.4.6463" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2020.182474][T31913] fuse: Bad value for 'user_id' [ 2020.187461][T31913] fuse: Bad value for 'user_id' [ 2020.478824][ T29] audit: type=1326 audit(1774745410.813:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31910 comm="syz.5.6470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb000f9c799 code=0x0 [ 2020.594530][ T29] audit: type=1400 audit(1774745410.923:4855): avc: denied { ioctl } for pid=31915 comm="syz.4.6471" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2020.693159][T31918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.711641][T31919] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6471'. [ 2020.819802][T31918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.970081][T31918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.279214][T31923] FAT-fs (nullb0): bogus number of reserved sectors [ 2021.285922][T31923] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 2022.483440][ T29] audit: type=1400 audit(1774745412.814:4856): avc: denied { write } for pid=31929 comm="syz.5.6475" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2022.843015][T31939] netlink: 'syz.5.6476': attribute type 21 has an invalid length. [ 2022.924942][T31918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2023.207056][T31946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6479'. [ 2023.256394][ T5808] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2023.381205][T10486] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.421686][ T5808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2023.454461][T25007] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.462866][ T5808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2023.490858][ T5808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2023.504781][T10486] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.533398][T10486] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2023.547452][ T5808] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2023.583731][ T5808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2023.596745][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2023.615843][ T5808] usb 6-1: SerialNumber: syz [ 2023.635179][T31944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2023.644426][T31944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2024.582293][T31971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6485'. [ 2024.865914][T31944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2024.873301][T31944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2025.878949][ T5808] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 2025.901152][ T5808] usb 6-1: USB disconnect, device number 40 [ 2026.311659][T31989] fuse: Bad value for 'user_id' [ 2026.316750][T31989] fuse: Bad value for 'user_id' [ 2027.184276][T31996] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2027.192410][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2027.244891][T31996] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2027.252965][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2027.405195][T31998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6491'. [ 2027.555376][T32004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6494'. [ 2027.623789][ T29] audit: type=1400 audit(1774745417.957:4857): avc: denied { create } for pid=32008 comm="syz.2.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2028.511836][T27733] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2028.513433][ T5820] Bluetooth: hci0: command 0xfc11 tx timeout [ 2029.504971][ T29] audit: type=1400 audit(1774745419.847:4858): avc: denied { write } for pid=32035 comm="syz.4.6501" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2029.606651][ T29] audit: type=1400 audit(1774745419.948:4859): avc: denied { map } for pid=32035 comm="syz.4.6501" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2029.630819][ T29] audit: type=1400 audit(1774745419.948:4860): avc: denied { execute } for pid=32035 comm="syz.4.6501" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2030.034957][T29769] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2030.192627][T29769] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2030.252937][T29769] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2030.277836][T29769] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2030.297267][T29769] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2030.337047][T29769] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2030.367602][T29769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2030.386114][T29769] usb 5-1: SerialNumber: syz [ 2030.409167][T32043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2030.416969][T32043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2032.378692][T32043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2032.391296][T32043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2032.726424][T29769] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2032.768463][T29769] usb 5-1: USB disconnect, device number 20 [ 2034.495618][ T29] audit: type=1400 audit(1774745424.830:4861): avc: denied { watch_sb watch_reads } for pid=32072 comm="syz.0.6510" path="/26/file1" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2034.804559][T32061] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6507'. [ 2035.221127][T32087] sp0: Synchronizing with TNC [ 2035.310881][T32087] vxcan1 speed is unknown, defaulting to 1000 [ 2037.138161][T32090] ptrace attach of ""[32094] was attempted by "./syz-executor exec"[32090] [ 2038.396915][T30572] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2038.556673][T30572] usb 6-1: Using ep0 maxpacket: 32 [ 2038.574156][T30572] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2038.583883][T30572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.595869][T30572] usb 6-1: config 0 descriptor?? [ 2038.774980][ T29] audit: type=1400 audit(1774745429.112:4862): avc: denied { mounton } for pid=32105 comm="syz.4.6517" path="/118/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2038.775181][T32106] overlayfs: failed to resolve '/000000000000040000': -2 [ 2038.841288][T30572] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2038.929800][T32109] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2038.935329][ T29] audit: type=1400 audit(1774745429.272:4863): avc: denied { read } for pid=32105 comm="syz.4.6517" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2038.962621][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2038.983609][T30572] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2039.153034][T32112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6520'. [ 2039.203041][T32099] ALSA: seq fatal error: cannot create timer (-22) [ 2039.214344][T32109] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2039.214635][T30572] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2039.230621][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2039.250539][T30572] usb 6-1: media controller created [ 2039.409370][T30572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2039.475370][T30572] az6027: usb out operation failed. (-71) [ 2039.494347][T30572] az6027: usb out operation failed. (-71) [ 2039.514779][T30572] stb0899_attach: Driver disabled by Kconfig [ 2039.533990][T30572] az6027: no front-end attached [ 2039.533990][T30572] [ 2039.549938][T30572] az6027: usb out operation failed. (-71) [ 2039.564567][T32122] binder: 32121:32122 ioctl c0306201 200000000280 returned -14 [ 2039.572689][T30572] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2039.589171][T30572] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input71 [ 2039.603828][T32124] fuse: Unknown parameter 'AR#3' [ 2039.614104][T32124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2039.624772][T32124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32124 comm=syz.1.6524 [ 2039.671207][T30572] dvb-usb: schedule remote query interval to 400 msecs. [ 2039.688230][T30572] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2039.714325][T30572] usb 6-1: USB disconnect, device number 41 [ 2039.756586][ T5808] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2039.830588][T32135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2039.921878][T32137] Device name cannot be null; rc = [-22] [ 2039.937796][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 2040.133644][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.157259][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.165912][ T5875] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2040.180404][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2040.180921][T30572] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2040.193813][ T5808] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2040.264072][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.288523][ T5808] usb 5-1: config 0 descriptor?? [ 2040.327628][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2040.339989][ T5875] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2040.351189][ T5875] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2040.361447][ T5875] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2040.377122][ T5875] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2040.390599][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2040.399034][ T5875] usb 3-1: SerialNumber: syz [ 2040.502240][T32130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2040.511497][T32130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2040.521844][ T5808] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002E/input/input72 [ 2040.547764][T30572] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2040.635207][ T5808] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2040.745629][T30572] usb 6-1: Using ep0 maxpacket: 16 [ 2040.764465][T30572] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 2040.845589][T30572] usb 6-1: config 0 has no interface number 0 [ 2040.863150][T30572] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2040.885806][T30572] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2040.959644][T30572] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2040.985475][T30572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.048627][T30572] usb 6-1: Product: syz [ 2041.062825][T30572] usb 6-1: Manufacturer: syz [ 2041.098195][T30572] usb 6-1: SerialNumber: syz [ 2041.119930][T30572] usb 6-1: config 0 descriptor?? [ 2041.126549][T32134] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2041.139472][T32134] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2041.154159][T32130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2041.162262][T32130] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2041.362534][T32134] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2041.378769][T32134] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2041.473091][ T5875] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2041.527546][ T5875] usb 3-1: USB disconnect, device number 51 [ 2041.765282][T23391] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 2041.861110][T30572] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2041.881566][T30572] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2042.336430][T30572] asix 6-1:0.251: probe with driver asix failed with error -71 [ 2042.370391][T30572] usb 6-1: USB disconnect, device number 42 [ 2042.374748][T23391] usb 5-1: device descriptor read/64, error -32 [ 2042.689217][ T29] audit: type=1400 audit(1774745433.034:4864): avc: denied { listen } for pid=32163 comm="syz.0.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2042.995914][T32177] FAULT_INJECTION: forcing a failure. [ 2042.995914][T32177] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.008925][T32177] CPU: 0 UID: 0 PID: 32177 Comm: syz.2.6537 Tainted: G L syzkaller #0 PREEMPT(full) [ 2043.008955][T32177] Tainted: [L]=SOFTLOCKUP [ 2043.008961][T32177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2043.008971][T32177] Call Trace: [ 2043.008978][T32177] [ 2043.008985][T32177] dump_stack_lvl+0x100/0x190 [ 2043.009020][T32177] should_fail_ex.cold+0x5/0xa [ 2043.009045][T32177] should_failslab+0xc2/0x120 [ 2043.009065][T32177] __kmalloc_cache_node_noprof+0x7d/0x770 [ 2043.009094][T32177] ? __get_vm_area_node+0x101/0x330 [ 2043.009119][T32177] __get_vm_area_node+0x101/0x330 [ 2043.009138][T32177] ? preempt_schedule_irq+0x7b/0x90 [ 2043.009168][T32177] __vmalloc_node_range_noprof+0x213/0x1530 [ 2043.009191][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.009218][T32177] ? __lock_acquire+0x4a5/0x2630 [ 2043.009240][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.009269][T32177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2043.009291][T32177] ? find_held_lock+0x2b/0x80 [ 2043.009314][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.009337][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.009360][T32177] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2043.009382][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.009406][T32177] __vmalloc_node_noprof+0xad/0xf0 [ 2043.009426][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.009452][T32177] __vmalloc_noprof+0xa3/0x120 [ 2043.009474][T32177] ? __pfx___vmalloc_noprof+0x10/0x10 [ 2043.009497][T32177] ? rcu_is_watching+0x12/0xc0 [ 2043.009520][T32177] ? cap_capable+0x107/0x460 [ 2043.009544][T32177] bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.009569][T32177] ? security_capable+0x80/0x260 [ 2043.009592][T32177] bpf_prog_alloc+0x3b/0x200 [ 2043.009615][T32177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2043.009642][T32177] bpf_prog_load+0x494/0x2c20 [ 2043.009665][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.009685][T32177] ? __pfx_bpf_prog_load+0x10/0x10 [ 2043.009706][T32177] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2043.009728][T32177] ? avc_has_perm+0x135/0x1e0 [ 2043.009759][T32177] ? selinux_bpf+0xfb/0x150 [ 2043.009784][T32177] __sys_bpf+0x223a/0x4b90 [ 2043.009807][T32177] ? __pfx___sys_bpf+0x10/0x10 [ 2043.009825][T32177] ? proc_fail_nth_write+0x9f/0x220 [ 2043.009850][T32177] ? find_held_lock+0x2b/0x80 [ 2043.009885][T32177] ? find_held_lock+0x2b/0x80 [ 2043.009908][T32177] ? ksys_write+0x190/0x250 [ 2043.009932][T32177] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2043.009973][T32177] ? fput+0x79/0x100 [ 2043.009994][T32177] ? ksys_write+0x1ac/0x250 [ 2043.010010][T32177] ? __pfx_ksys_write+0x10/0x10 [ 2043.010031][T32177] __x64_sys_bpf+0x7b/0xc0 [ 2043.010051][T32177] ? lockdep_hardirqs_on+0x78/0x100 [ 2043.010077][T32177] do_syscall_64+0x106/0xf80 [ 2043.010102][T32177] ? clear_bhb_loop+0x40/0x90 [ 2043.010126][T32177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.010145][T32177] RIP: 0033:0x7fc0ffd9c799 [ 2043.010161][T32177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.010178][T32177] RSP: 002b:00007fc100ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2043.010196][T32177] RAX: ffffffffffffffda RBX: 00007fc100016180 RCX: 00007fc0ffd9c799 [ 2043.010208][T32177] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2043.010218][T32177] RBP: 00007fc100ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.010229][T32177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.010239][T32177] R13: 00007fc100016218 R14: 00007fc100016180 R15: 00007ffd215e61b8 [ 2043.010264][T32177] [ 2043.010323][T32177] warn_alloc: 1 callbacks suppressed [ 2043.010352][T32177] syz.2.6537: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2043.405193][T32177] CPU: 0 UID: 0 PID: 32177 Comm: syz.2.6537 Tainted: G L syzkaller #0 PREEMPT(full) [ 2043.405221][T32177] Tainted: [L]=SOFTLOCKUP [ 2043.405227][T32177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2043.405236][T32177] Call Trace: [ 2043.405242][T32177] [ 2043.405249][T32177] dump_stack_lvl+0x100/0x190 [ 2043.405283][T32177] warn_alloc.cold+0x95/0x1c1 [ 2043.405314][T32177] ? __pfx_warn_alloc+0x10/0x10 [ 2043.405339][T32177] ? trace_kmalloc+0x101/0x130 [ 2043.405360][T32177] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 2043.405390][T32177] ? __kasan_kmalloc+0x8a/0xb0 [ 2043.405416][T32177] ? __get_vm_area_node+0x208/0x330 [ 2043.405439][T32177] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 2043.405462][T32177] ? __lock_acquire+0x4a5/0x2630 [ 2043.405482][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.405513][T32177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2043.405534][T32177] ? find_held_lock+0x2b/0x80 [ 2043.405556][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.405576][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.405598][T32177] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2043.405625][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.405649][T32177] __vmalloc_node_noprof+0xad/0xf0 [ 2043.405670][T32177] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.405697][T32177] __vmalloc_noprof+0xa3/0x120 [ 2043.405718][T32177] ? __pfx___vmalloc_noprof+0x10/0x10 [ 2043.405741][T32177] ? rcu_is_watching+0x12/0xc0 [ 2043.405762][T32177] ? cap_capable+0x107/0x460 [ 2043.405786][T32177] bpf_prog_alloc_no_stats+0x59/0x630 [ 2043.405809][T32177] ? security_capable+0x80/0x260 [ 2043.405830][T32177] bpf_prog_alloc+0x3b/0x200 [ 2043.405852][T32177] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2043.405877][T32177] bpf_prog_load+0x494/0x2c20 [ 2043.405904][T32177] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 2043.405923][T32177] ? __pfx_bpf_prog_load+0x10/0x10 [ 2043.405944][T32177] ? avc_has_perm_noaudit+0x145/0x3b0 [ 2043.405966][T32177] ? avc_has_perm+0x135/0x1e0 [ 2043.405997][T32177] ? selinux_bpf+0xfb/0x150 [ 2043.406020][T32177] __sys_bpf+0x223a/0x4b90 [ 2043.406043][T32177] ? __pfx___sys_bpf+0x10/0x10 [ 2043.406061][T32177] ? proc_fail_nth_write+0x9f/0x220 [ 2043.406085][T32177] ? find_held_lock+0x2b/0x80 [ 2043.406111][T32177] ? find_held_lock+0x2b/0x80 [ 2043.406133][T32177] ? ksys_write+0x190/0x250 [ 2043.406155][T32177] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2043.406197][T32177] ? fput+0x79/0x100 [ 2043.406218][T32177] ? ksys_write+0x1ac/0x250 [ 2043.406233][T32177] ? __pfx_ksys_write+0x10/0x10 [ 2043.406254][T32177] __x64_sys_bpf+0x7b/0xc0 [ 2043.406272][T32177] ? lockdep_hardirqs_on+0x78/0x100 [ 2043.406298][T32177] do_syscall_64+0x106/0xf80 [ 2043.406323][T32177] ? clear_bhb_loop+0x40/0x90 [ 2043.406344][T32177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.406362][T32177] RIP: 0033:0x7fc0ffd9c799 [ 2043.406379][T32177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.406395][T32177] RSP: 002b:00007fc100ce2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2043.406412][T32177] RAX: ffffffffffffffda RBX: 00007fc100016180 RCX: 00007fc0ffd9c799 [ 2043.406424][T32177] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2043.406435][T32177] RBP: 00007fc100ce2090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.406445][T32177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.406456][T32177] R13: 00007fc100016218 R14: 00007fc100016180 R15: 00007ffd215e61b8 [ 2043.406479][T32177] [ 2043.407170][T32177] Mem-Info: [ 2043.790422][ T5808] usb 5-1: USB disconnect, device number 21 [ 2043.798615][T32177] active_anon:23695 inactive_anon:0 isolated_anon:0 [ 2043.798615][T32177] active_file:28650 inactive_file:4735 isolated_file:0 [ 2043.798615][T32177] unevictable:768 dirty:242 writeback:0 [ 2043.798615][T32177] slab_reclaimable:11286 slab_unreclaimable:128651 [ 2043.798615][T32177] mapped:48369 shmem:13470 pagetables:1660 [ 2043.798615][T32177] sec_pagetables:3 bounce:0 [ 2043.798615][T32177] kernel_misc_reclaimable:0 [ 2043.798615][T32177] free:1262115 free_pcp:16233 free_cma:0 [ 2043.845159][T32177] Node 0 active_anon:95480kB inactive_anon:0kB active_file:114600kB inactive_file:18808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:194176kB dirty:968kB writeback:0kB shmem:52944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14652kB pagetables:6488kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 2043.880185][T32177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2043.911895][T32177] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2043.950585][T32177] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 2043.961274][T32177] Node 0 DMA32 free:1088600kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97640kB inactive_anon:0kB active_file:114600kB inactive_file:18808kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2537072kB mlocked:0kB bounce:0kB free_pcp:64072kB local_pcp:44880kB free_cma:0kB [ 2043.999624][T32177] lowmem_reserve[]: 0 0 1 1 1 [ 2044.006345][T32177] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1044kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2044.036123][T32177] lowmem_reserve[]: 0 0 0 0 0 [ 2044.045455][T32177] Node 1 Normal free:3943148kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2044.078247][T32177] lowmem_reserve[]: 0 0 0 0 0 [ 2044.088811][T32177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2044.102385][T32177] Node 0 DMA32: 5549*4kB (UME) 6658*8kB (UME) 4946*16kB (UME) 1418*32kB (UME) 279*64kB (UME) 408*128kB (UME) 464*256kB (UME) 395*512kB (UME) 233*1024kB (UME) 60*2048kB (UM) 32*4096kB (UM) = 1083620kB [ 2044.123661][T32177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2044.135408][T32177] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 13*16kB (UM) 9*32kB (UM) 9*64kB (UM) 3*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (UM) = 3943148kB [ 2044.160376][T32177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.174077][T32177] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2044.183583][T32177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.193980][T32177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2044.203460][T32177] 50335 total pagecache pages [ 2044.209075][T32177] 0 pages in swap cache [ 2044.213348][T32177] Free swap = 124996kB [ 2044.217750][T32177] Total swap = 124996kB [ 2044.222006][T32177] 2097051 pages RAM [ 2044.226033][T32177] 0 pages HighMem/MovableOnly [ 2044.230828][T32177] 430907 pages reserved [ 2044.235285][T32177] 0 pages cma reserved [ 2044.318441][T30572] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2044.504038][T30572] usb 6-1: Using ep0 maxpacket: 32 [ 2044.751373][T30572] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2044.793568][T30572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.994486][T30572] usb 6-1: config 0 descriptor?? [ 2045.229598][T30572] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2045.356038][T30572] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2045.443306][T30572] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2045.641185][T30572] usb 6-1: media controller created [ 2045.647877][ T5875] hid_parser_main: 470 callbacks suppressed [ 2045.647898][ T5875] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 2045.676296][T30572] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2045.688441][ T5875] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2045.720702][T30572] az6027: usb out operation failed. (-71) [ 2045.739101][T30572] az6027: usb out operation failed. (-71) [ 2045.753425][T30572] stb0899_attach: Driver disabled by Kconfig [ 2045.773496][T30572] az6027: no front-end attached [ 2045.773496][T30572] [ 2045.790030][T32191] fido_id[32191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2045.804180][T30572] az6027: usb out operation failed. (-71) [ 2045.809939][T30572] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2045.825333][T30572] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73 [ 2045.868786][T30572] dvb-usb: schedule remote query interval to 400 msecs. [ 2045.904226][T30572] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2045.939763][T30572] usb 6-1: USB disconnect, device number 43 [ 2045.950060][T32193] sg_write: data in/out 60423/14 bytes for SCSI command 0x2-- guessing data in; [ 2045.950060][T32193] program syz.1.6543 not setting count and/or reply_len properly [ 2046.306470][ T5808] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2046.377758][T32195] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 2046.387383][T32195] random: crng reseeded on system resumption [ 2046.393764][ T29] audit: type=1400 audit(1774745436.736:4865): avc: denied { write } for pid=32194 comm="syz.4.6544" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2046.492732][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 2046.513809][T30572] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2046.531485][ T5808] usb 2-1: config 72 has an invalid interface number: 220 but max is 1 [ 2046.559219][ T5808] usb 2-1: config 72 has an invalid descriptor of length 0, skipping remainder of the config [ 2046.697685][ T5808] usb 2-1: config 72 has 1 interface, different from the descriptor's value: 2 [ 2046.711215][ T5808] usb 2-1: config 72 has no interface number 0 [ 2046.719571][ T5808] usb 2-1: config 72 interface 220 has no altsetting 0 [ 2046.746416][ T5808] usb 2-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 2046.755857][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.764610][ T5808] usb 2-1: Product: syz [ 2046.768885][ T5808] usb 2-1: Manufacturer: syz [ 2046.773885][ T5808] usb 2-1: SerialNumber: syz [ 2046.972505][ T5888] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2047.001824][ T5808] usb 2-1: USB disconnect, device number 120 [ 2047.596554][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2047.607880][ T5888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2047.659102][ T5888] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2047.674975][ T5888] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2047.700475][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2047.722084][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2047.730125][ T5888] usb 5-1: SerialNumber: syz [ 2047.760562][T32205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2047.769127][T32205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2048.208224][T32220] netlink: 'syz.2.6549': attribute type 11 has an invalid length. [ 2048.216342][ T29] audit: type=1400 audit(1774745438.557:4866): avc: denied { connect } for pid=32214 comm="syz.2.6549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2048.387666][T32205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2048.395678][T32205] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2048.678162][ T5888] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 2048.698179][ T5888] usb 5-1: USB disconnect, device number 22 [ 2048.813106][ T29] audit: type=1400 audit(1774745439.167:4867): avc: denied { ioctl } for pid=32226 comm="syz.0.6552" path="socket:[147699]" dev="sockfs" ino=147699 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2049.890781][T32240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6555'. [ 2050.023085][ T29] audit: type=1400 audit(1774745440.368:4868): avc: denied { nlmsg_write } for pid=32245 comm="syz.0.6557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2050.093269][ T29] audit: type=1400 audit(1774745440.378:4869): avc: denied { audit_write } for pid=32245 comm="syz.0.6557" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2050.134180][T32246] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=32246 comm=syz.0.6557 [ 2050.220798][ T5808] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2050.484449][T32257] fuse: Bad value for 'user_id' [ 2050.489395][T32257] fuse: Bad value for 'user_id' [ 2050.760556][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 2050.769213][ T5808] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2050.786503][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.861685][ T5875] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2050.882708][ T5808] usb 2-1: config 0 descriptor?? [ 2051.021103][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 2051.090931][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2051.101260][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2051.128922][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2051.136714][ T5875] usb 5-1: can't read configurations, error -71 [ 2051.169404][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2051.179939][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2051.188686][ T5808] usb 2-1: media controller created [ 2051.209497][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2051.310969][ T5888] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 2051.331353][ T5888] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2051.385913][T32261] ALSA: seq fatal error: cannot create timer (-22) [ 2052.715369][T27733] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 2052.785942][T32274] fuse: Bad value for 'user_id' [ 2052.790965][T32274] fuse: Bad value for 'user_id' [ 2053.131540][ T5808] az6027: usb out operation failed. (-71) [ 2053.137672][ T5808] az6027: usb out operation failed. (-71) [ 2053.143540][ T5808] stb0899_attach: Driver disabled by Kconfig [ 2053.149570][ T5808] az6027: no front-end attached [ 2053.149570][ T5808] [ 2053.156950][ T5808] az6027: usb out operation failed. (-71) [ 2053.169345][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2053.200408][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input74 [ 2053.259105][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 2053.274838][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2053.299466][ T5808] usb 2-1: USB disconnect, device number 121 [ 2053.345409][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2053.455208][ T6328] Bluetooth: hci0: Frame reassembly failed (-84) [ 2053.464855][T32277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6564'. [ 2053.504085][T25007] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 2054.042171][T32282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6566'. [ 2054.548755][T23391] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2054.700975][T23391] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2054.713296][T23391] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2054.723560][T23391] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2054.733360][T23391] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2054.747425][T23391] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2054.756634][T23391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2054.764700][T23391] usb 3-1: SerialNumber: syz [ 2054.772252][T32291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2054.779742][T27733] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 2054.806717][T32291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2055.462513][T32291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2055.470049][T32291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2055.498750][ T5820] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2055.567145][T32298] netlink: 'syz.1.6571': attribute type 21 has an invalid length. [ 2056.138720][T23391] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2056.186197][T23391] usb 3-1: USB disconnect, device number 52 [ 2056.613016][T32308] netlink: 'syz.1.6573': attribute type 21 has an invalid length. [ 2056.651969][T32307] lo speed is unknown, defaulting to 1000 [ 2056.657822][T32307] lo speed is unknown, defaulting to 1000 [ 2056.664142][T32307] lo speed is unknown, defaulting to 1000 [ 2056.678198][T32307] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2056.702633][T32307] lo speed is unknown, defaulting to 1000 [ 2056.709835][T32307] lo speed is unknown, defaulting to 1000 [ 2056.716868][T32307] lo speed is unknown, defaulting to 1000 [ 2056.723958][T32307] lo speed is unknown, defaulting to 1000 [ 2056.731015][T32307] lo speed is unknown, defaulting to 1000 [ 2056.738027][T32307] lo speed is unknown, defaulting to 1000 [ 2056.745050][T32307] lo speed is unknown, defaulting to 1000 [ 2056.752204][T32307] lo speed is unknown, defaulting to 1000 [ 2057.127374][T23391] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2057.288662][T23391] usb 5-1: Using ep0 maxpacket: 32 [ 2057.311631][T23391] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2057.343843][T23391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.420283][T23391] usb 5-1: config 0 descriptor?? [ 2057.743811][T23391] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2057.753895][T23391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2057.774284][T23391] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2057.785621][T23391] usb 5-1: media controller created [ 2057.812316][T23391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2057.832656][T32315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6577'. [ 2057.960625][T28468] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 2058.009398][T28468] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2058.011176][ T29] audit: type=1400 audit(1774745448.362:4870): avc: denied { listen } for pid=32321 comm="syz.2.6579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2058.044409][T32323] ALSA: seq fatal error: cannot create timer (-22) [ 2059.897480][T23391] az6027: usb out operation failed. (-110) [ 2059.919988][T23391] az6027: usb out operation failed. (-71) [ 2059.935400][T23391] stb0899_attach: Driver disabled by Kconfig [ 2059.945891][T23391] az6027: no front-end attached [ 2059.945891][T23391] [ 2059.995455][T32351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6584'. [ 2060.004477][T32351] IPv6: NLM_F_CREATE should be specified when creating new route [ 2060.018671][T32351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2060.025921][T32351] IPv6: NLM_F_CREATE should be set when creating new route [ 2060.033199][T32351] IPv6: NLM_F_CREATE should be set when creating new route [ 2060.052587][T23391] az6027: usb out operation failed. (-71) [ 2060.069203][T23391] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2060.095505][T23391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 2060.242028][T23391] dvb-usb: schedule remote query interval to 400 msecs. [ 2060.257078][T23391] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2060.278262][T23391] usb 5-1: USB disconnect, device number 25 [ 2060.651294][T23391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2060.718785][ T29] audit: type=1400 audit(1774745451.073:4871): avc: denied { bind } for pid=32356 comm="syz.4.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2061.035527][T23391] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2061.272734][T32374] netlink: 'syz.4.6590': attribute type 21 has an invalid length. [ 2061.998664][T23391] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2062.019640][T23391] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2062.057347][T23391] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2062.089155][T32379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6592'. [ 2062.105601][T23391] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 2063.113898][T23391] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2063.144529][T23391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2063.184199][T23391] usb 3-1: SerialNumber: syz [ 2063.311134][T32366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2063.326741][T32366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2063.344310][T29769] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2063.890467][T23391] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 2063.903999][T29769] usb 2-1: device descriptor read/64, error -71 [ 2063.924796][T23391] usb 3-1: USB disconnect, device number 53 [ 2064.056831][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2064.068292][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2064.077052][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2064.084543][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2064.104313][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2064.164691][T32398] vxcan1 speed is unknown, defaulting to 1000 [ 2064.166883][T29769] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2064.265906][ T29] audit: type=1400 audit(1774745454.625:4872): avc: denied { map } for pid=32401 comm="syz.4.6598" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2064.919346][T32398] lo speed is unknown, defaulting to 1000 [ 2065.330533][T32419] snd_dummy snd_dummy.0: control 0:-2:8:syz0:0 is already present [ 2065.590285][T32430] binder: 32427:32430 ioctl 400c620e 200000000240 returned -22 [ 2065.892194][T32398] chnl_net:caif_netlink_parms(): no params data found [ 2066.140199][ T5820] Bluetooth: hci0: command tx timeout [ 2067.354779][T32440] FAULT_INJECTION: forcing a failure. [ 2067.354779][T32440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2067.368532][T32440] CPU: 0 UID: 0 PID: 32440 Comm: syz.0.6605 Tainted: G L syzkaller #0 PREEMPT(full) [ 2067.368558][T32440] Tainted: [L]=SOFTLOCKUP [ 2067.368563][T32440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2067.368570][T32440] Call Trace: [ 2067.368574][T32440] [ 2067.368579][T32440] dump_stack_lvl+0x100/0x190 [ 2067.368601][T32440] should_fail_ex.cold+0x5/0xa [ 2067.368617][T32440] _copy_to_user+0x32/0xd0 [ 2067.368631][T32440] simple_read_from_buffer+0xcb/0x170 [ 2067.368644][T32440] proc_fail_nth_read+0x1af/0x230 [ 2067.368662][T32440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2067.368679][T32440] ? rw_verify_area+0xce/0x6d0 [ 2067.368695][T32440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2067.368716][T32440] vfs_read+0x1e4/0xb30 [ 2067.368735][T32440] ? __pfx_vfs_read+0x10/0x10 [ 2067.368753][T32440] ? __fget_files+0x215/0x3d0 [ 2067.368769][T32440] ? __fget_files+0x21f/0x3d0 [ 2067.368785][T32440] ksys_read+0x12a/0x250 [ 2067.368795][T32440] ? __pfx_ksys_read+0x10/0x10 [ 2067.368810][T32440] do_syscall_64+0x106/0xf80 [ 2067.368827][T32440] ? clear_bhb_loop+0x40/0x90 [ 2067.368842][T32440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.368853][T32440] RIP: 0033:0x7fb3c255cfce [ 2067.368863][T32440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2067.368875][T32440] RSP: 002b:00007fb3c34d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2067.368887][T32440] RAX: ffffffffffffffda RBX: 00007fb3c34d16c0 RCX: 00007fb3c255cfce [ 2067.368895][T32440] RDX: 000000000000000f RSI: 00007fb3c34d10a0 RDI: 000000000000000a [ 2067.368901][T32440] RBP: 00007fb3c34d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.368907][T32440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2067.368914][T32440] R13: 00007fb3c2816128 R14: 00007fb3c2816090 R15: 00007fff6ccb0ee8 [ 2067.368928][T32440] [ 2068.370397][T27733] Bluetooth: hci0: command tx timeout [ 2068.446569][T32398] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.570281][T32398] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.589215][T32398] bridge_slave_0: entered allmulticast mode [ 2068.606272][T32398] bridge_slave_0: entered promiscuous mode [ 2068.654693][T32398] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.694581][T32398] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.747307][T32398] bridge_slave_1: entered allmulticast mode [ 2068.799915][T32398] bridge_slave_1: entered promiscuous mode [ 2069.073030][T32398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2069.094959][T32398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.127795][T32398] team0: Port device team_slave_0 added [ 2069.136566][T32398] team0: Port device team_slave_1 added [ 2069.168111][T32398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2069.179994][T32398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2069.208044][T32398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2069.220483][T32398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2069.227691][T32398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2069.255068][T32398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2069.286641][T32398] hsr_slave_0: entered promiscuous mode [ 2069.294037][T32398] hsr_slave_1: entered promiscuous mode [ 2069.300236][T32398] debugfs: 'hsr0' already exists in 'hsr' [ 2069.306088][T32398] Cannot create hsr debugfs directory [ 2069.458812][T32398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2069.467915][T32398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2069.476888][T32398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2069.486292][T32398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2069.538938][T32398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2069.556334][T32398] 8021q: adding VLAN 0 to HW filter on device team0 [ 2069.566313][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.573394][T10486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2069.585581][T24995] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.592702][T24995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.763926][T32398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2069.903109][T32398] veth0_vlan: entered promiscuous mode [ 2069.913490][T32398] veth1_vlan: entered promiscuous mode [ 2069.936242][T32398] veth0_macvtap: entered promiscuous mode [ 2069.944606][T32398] veth1_macvtap: entered promiscuous mode [ 2069.960318][T32398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2069.973831][T32398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2069.989048][T25007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2069.999730][T25007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.010561][T25007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.023386][T25007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2070.088071][T10486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.101756][T10486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.125957][T24995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.134166][T24995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.451497][T27733] Bluetooth: hci0: command tx timeout [ 2072.530526][T27733] Bluetooth: hci0: command tx timeout [ 2115.877973][T27733] Bluetooth: hci3: command 0x0406 tx timeout [ 2187.516602][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 2208.462191][ T30] INFO: task syz.5.6546:32202 blocked for more than 143 seconds. [ 2208.469953][ T30] Tainted: G L syzkaller #0 [ 2208.476800][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2208.485591][ T30] task:syz.5.6546 state:D stack:28424 pid:32202 tgid:32197 ppid:31480 task_flags:0x400640 flags:0x00080002 [ 2208.497619][ T30] Call Trace: [ 2208.500899][ T30] [ 2208.503926][ T30] __schedule+0xfee/0x6120 [ 2208.508362][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2208.513428][ T30] ? __pfx___schedule+0x10/0x10 [ 2208.518295][ T30] ? find_held_lock+0x2b/0x80 [ 2208.525104][ T30] ? schedule+0x2bf/0x390 [ 2208.529479][ T30] schedule+0xdd/0x390 [ 2208.533627][ T30] schedule_timeout+0x1b2/0x280 [ 2208.538484][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2208.544533][ T30] ? __wait_for_common+0x2da/0x4c0 [ 2208.549671][ T30] ? rcu_is_watching+0x12/0xc0 [ 2208.554504][ T30] __wait_for_common+0x2e7/0x4c0 [ 2208.559458][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2208.564847][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2208.570314][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 2208.575605][ T30] ? vfs_coredump+0x7e0/0x5570 [ 2208.580383][ T30] ? rcu_is_watching+0x12/0xc0 [ 2208.585231][ T30] wait_for_completion_state+0x1c/0x40 [ 2208.590696][ T30] vfs_coredump+0x80d/0x5570 [ 2208.595529][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2208.600467][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 2208.605567][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2208.610523][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2208.615696][ T30] ? lock_acquire+0x1cf/0x380 [ 2208.620377][ T30] ? lock_acquire+0x1cf/0x380 [ 2208.625169][ T30] ? find_held_lock+0x2b/0x80 [ 2208.629900][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 2208.635215][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 2208.640428][ T30] ? bpf_ksym_find+0x128/0x1c0 [ 2208.645244][ T30] ? __kernel_text_address+0xd/0x30 [ 2208.650454][ T30] ? unwind_get_return_address+0x59/0xa0 [ 2208.656267][ T30] ? arch_stack_walk+0xa6/0xf0 [ 2208.661046][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 2208.665945][ T30] ? stack_trace_save+0x8e/0xc0 [ 2208.670795][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2208.676260][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 2208.681751][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2208.686683][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.692819][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 2208.698448][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 2208.705034][ T30] ? rcu_is_watching+0x12/0xc0 [ 2208.709829][ T30] get_signal+0x1f2a/0x21e0 [ 2208.714963][ T30] ? __pfx_get_signal+0x10/0x10 [ 2208.719914][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 2208.725491][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 2208.731032][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2208.737263][ T30] ? rcu_is_watching+0x12/0xc0 [ 2208.742112][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 2208.747410][ T30] do_syscall_64+0x67c/0xf80 [ 2208.752085][ T30] ? clear_bhb_loop+0x40/0x90 [ 2208.756761][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2208.762797][ T30] RIP: 0033:0x7fb000f9c799 [ 2208.767209][ T30] RSP: 002b:00007fb001d7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2208.775657][ T30] RAX: 00000000000000ca RBX: 00007fb001216098 RCX: 00007fb000f9c799 [ 2208.783838][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb00121609c [ 2208.791901][ T30] RBP: 00007fb001216090 R08: 0000000000000000 R09: 0000000000000000 [ 2208.799864][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.807866][ T30] R13: 00007fb001216128 R14: 00007ffd3a2ba660 R15: 00007ffd3a2ba748 [ 2208.815885][ T30] [ 2208.818962][ T30] [ 2208.818962][ T30] Showing all locks held in the system: [ 2208.826790][ T30] 1 lock held by khungtaskd/30: [ 2208.831685][ T30] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2208.841585][ T30] 2 locks held by getty/5565: [ 2208.846250][ T30] #0: ffff888038f600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2208.856019][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2208.866181][ T30] [ 2208.868485][ T30] ============================================= [ 2208.868485][ T30] [ 2208.877012][ T30] NMI backtrace for cpu 1 [ 2208.877028][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2208.877052][ T30] Tainted: [L]=SOFTLOCKUP [ 2208.877058][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2208.877069][ T30] Call Trace: [ 2208.877075][ T30] [ 2208.877082][ T30] dump_stack_lvl+0x100/0x190 [ 2208.877116][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2208.877136][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2208.877155][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2208.877179][ T30] sys_info+0x141/0x190 [ 2208.877197][ T30] watchdog+0xd25/0x1050 [ 2208.877228][ T30] ? __pfx_watchdog+0x10/0x10 [ 2208.877253][ T30] ? __kthread_parkme+0x18c/0x230 [ 2208.877281][ T30] ? kthread+0x13a/0x450 [ 2208.877297][ T30] ? __pfx_watchdog+0x10/0x10 [ 2208.877319][ T30] kthread+0x370/0x450 [ 2208.877335][ T30] ? __pfx_kthread+0x10/0x10 [ 2208.877354][ T30] ret_from_fork+0x754/0xd80 [ 2208.877374][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2208.877394][ T30] ? __switch_to+0x7b4/0x1120 [ 2208.877416][ T30] ? __pfx_kthread+0x10/0x10 [ 2208.877434][ T30] ret_from_fork_asm+0x1a/0x30 [ 2208.877466][ T30] [ 2208.877473][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2209.002250][ C0] NMI backtrace for cpu 0 [ 2209.002267][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2209.002286][ C0] Tainted: [L]=SOFTLOCKUP [ 2209.002291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2209.002300][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2209.002324][ C0] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2209.002337][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2209.002349][ C0] RAX: 0000000009e36dd3 RBX: ffffffff8e4975c0 RCX: ffffffff8b90fc75 [ 2209.002358][ C0] RDX: 0000000000000000 RSI: ffffffff8de797fd RDI: ffffffff8c1b17a0 [ 2209.002366][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 2209.002375][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 2209.002383][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9c010 [ 2209.002393][ C0] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 2209.002407][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2209.002416][ C0] CR2: 000055c6ed36e168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2209.002425][ C0] Call Trace: [ 2209.002430][ C0] [ 2209.002435][ C0] default_idle+0x9/0x10 [ 2209.002448][ C0] default_idle_call+0x6c/0xb0 [ 2209.002461][ C0] do_idle+0x464/0x590 [ 2209.002480][ C0] ? __pfx_do_idle+0x10/0x10 [ 2209.002499][ C0] cpu_startup_entry+0x4f/0x60 [ 2209.002515][ C0] rest_init+0x251/0x260 [ 2209.002528][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2209.002549][ C0] start_kernel+0x47f/0x480 [ 2209.002571][ C0] x86_64_start_reservations+0x24/0x30 [ 2209.002589][ C0] x86_64_start_kernel+0x12b/0x130 [ 2209.002606][ C0] common_startup_64+0x13e/0x148 [ 2209.002628][ C0] [ 2209.188420][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2209.195251][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2209.205909][ T30] Tainted: [L]=SOFTLOCKUP [ 2209.210217][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2209.220244][ T30] Call Trace: [ 2209.223503][ T30] [ 2209.226407][ T30] dump_stack_lvl+0x100/0x190 [ 2209.231067][ T30] vpanic+0x552/0x970 [ 2209.235021][ T30] ? __pfx_vpanic+0x10/0x10 [ 2209.239498][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2209.245627][ T30] panic+0xd1/0xe0 [ 2209.249321][ T30] ? __pfx_panic+0x10/0x10 [ 2209.253716][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2209.259871][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2209.266001][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2209.272129][ T30] ? watchdog.cold+0x198/0x1ca [ 2209.276867][ T30] ? watchdog+0xd35/0x1050 [ 2209.281271][ T30] watchdog.cold+0x1a9/0x1ca [ 2209.285850][ T30] ? __pfx_watchdog+0x10/0x10 [ 2209.290503][ T30] ? __kthread_parkme+0x18c/0x230 [ 2209.295507][ T30] ? kthread+0x13a/0x450 [ 2209.299834][ T30] ? __pfx_watchdog+0x10/0x10 [ 2209.304495][ T30] kthread+0x370/0x450 [ 2209.308539][ T30] ? __pfx_kthread+0x10/0x10 [ 2209.313099][ T30] ret_from_fork+0x754/0xd80 [ 2209.317662][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2209.322745][ T30] ? __switch_to+0x7b4/0x1120 [ 2209.327407][ T30] ? __pfx_kthread+0x10/0x10 [ 2209.331969][ T30] ret_from_fork_asm+0x1a/0x30 [ 2209.336714][ T30] [ 2209.339984][ T30] Kernel Offset: disabled [ 2209.344284][ T30] Rebooting in 86400 seconds..