last executing test programs: 18m20.513777898s ago: executing program 1 (id=431): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='environ\x00') setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) iopl(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2000800) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x0, r2, 0x0, r3, r4, 0xcc, 0x101}, 0x0, 0x0, 0x6e28, 0xbbc, 0x3, 0x400, 0x5, 0xf3b, 0x100, 0x1, r5}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000640)={'\x00', 0xff, 0x6, 0x3, 0x9, 0x5, 0xffffffffffffffff}) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) (fail_nth: 1) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000880), 0x4400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0) 18m20.249911675s ago: executing program 1 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 18m19.78780816s ago: executing program 1 (id=434): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x3, 0x4001}, 0xc) close_range(r4, r5, 0x0) sched_rr_get_interval(r1, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(r2, &(0x7f0000000880)=[{&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f0000000280)=""/51, 0x33}], 0x6, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000940)=""/186, 0xba}], 0x2, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d26c1a5f2c7284dd0124aef4c9f4fd1ea63c5fb710bf32d884b1ea3a2c8479b8974ba721d96460e23984c609c48d9903e246a084a0e562d8c48aa7e31d9cb771e6b6d2c7e633c9df3591a6e6e213b0b70d834b86522f2e943849d476fc7a5aec81856709a8d687b3c3ba3813169e4991c0e9effbc49791831e85f89133f173ab7e7d027624f561bcf8be04dfff27e54d", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf25070000000800040064010102524e8cef54bca1c234af9b39fefbe060ac436e98b61580dfc11c7df2e8893895b9b90f7925e7c8db885db9f6e47a78ba6d7dbb7f09d842ca8bbb5ed8b245453f3038ceff2dc5ec130adca3"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r9, &(0x7f0000001040), 0x0, 0x800) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r11, 0x2}, 0x8) 18m14.684066865s ago: executing program 1 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xe00, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 18m13.326329944s ago: executing program 1 (id=449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(0x0, 0x133) open(0x0, 0x105000, 0x140) mknodat(r2, &(0x7f0000005840)='./file1\x00', 0x8, 0x4) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x53) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 18m11.859400146s ago: executing program 1 (id=453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xb3d, 0x1, 0xf9, 0x8, 0x5f}, &(0x7f00000000c0)=0x98) mbind(&(0x7f00001e8000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x5, 0x6, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x8001, 0x7ff, 0xf69}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x40, 0x0, 0x2004, 0x0, 0x0, 0xaba, 0x6a}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r2], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 17m56.486618444s ago: executing program 32 (id=453): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xb3d, 0x1, 0xf9, 0x8, 0x5f}, &(0x7f00000000c0)=0x98) mbind(&(0x7f00001e8000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x5, 0x6, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x8001, 0x7ff, 0xf69}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x40, 0x0, 0x2004, 0x0, 0x0, 0xaba, 0x6a}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r2], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 15m15.064063861s ago: executing program 5 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000000)={0x89, 0x2, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1a}, @pad1, @enc_lim={0x4, 0x1, 0x80}]}, 0x18) r8 = socket$tipc(0x1e, 0x6, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f0000000080)={0x2b, 0x3}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2}}}}]}, 0x4c}}, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r12) sendmsg$TIPC_CMD_SHOW_PORTS(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r13, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) ioctl$COMEDI_BUFCONFIG(r6, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10, 0x7}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032abd7001fedb9f25120000005a32bc122b35a53b8d2ede427fdeda49a9b9ac5a4d917aed0a50d8fb24aed85ba0f1b498989c4c00fa4e93cfb0bec50ee297829ae79177bbf3dc9098ea0183257b98fcc986af7ee0320f3f0294f8b5be"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) 15m7.572794674s ago: executing program 5 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x1}]}]}]}]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000040)=0x41, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r3) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x22, 0xa4, 0xaf, 0x20, 0x403, 0xf850, 0x3376, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xea, 0x0, 0x0, 0xd5, 0x40, 0x38}}]}}]}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4000001, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x40084d0c, 0x0) r9 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r9, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x21, 0x6, {0x6, 0x3, "dc3fab33"}}, &(0x7f00000000c0)={0x0, 0x3, 0xda, @string={0xda, 0x3, "8410e92fdd113d9879f3411dde2d4923d792e342ec38539b7f110b15e92d08fe0372788b7e3053da9361eedf883aafdd1eae79dedfd2cc9dae691a4f44e2976cca76c79ab82d36fcb2023b4a823db67a313b06ac9bbc7612276377f634b240c30998cfce3d85de6b72882c4abd3ab67ce38890548804181459ebfd0ff245918b388e4b2666c5c61af3679e8a2601d5ced855468d6ec392ab6a3d894f9774f402b46764827c6baef03ca56c64fb24b50431d69d692f37a25d2459d0055fd69607363cba68dd3e75fe50d88df89157e859b79e23c8766ec378"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x40, 0x10, 0x58, "3f0b7b85d88de7fd86ec45891888bd53ee5c8274539225c8c9f593715986711b53b492f5892fc256990d893c13ce44181fd9fe00f888bb2f4b2aabb5ced2b803fd4e10117889ab8b68ed98071678b612f6f087241748e61f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "d7ace7917abb41befc6039eefce09592159cf93bfae86349cfe3971b135c16d0b82c76151abf06ce437f814f8949c9"}}) 15m4.141159307s ago: executing program 5 (id=897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f00, '\x00', 0x0, 0xf}, 0x80) 15m2.96955068s ago: executing program 5 (id=901): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r4, &(0x7f0000019880)=[{&(0x7f0000000400)='{', 0x1}, {&(0x7f0000000000)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886cebf54e3cb5136da5a33fee76fb3113ff6dd6f06000000008eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2e34a25e4c3c017e54d1ca7bb8018be3cde47774ae2dea748a6477b79a1053dbcd40576a2df0463081b29273c2d82e5035a63c4ab8204aab5a2ed2920d6a2201d22bb008a657d26995a997f83a15422e1e9a1ba5dc0a73dcb1eb0f0f5345f8880cfd526fd1824543a6a045c1b4aa2d2dc5e704914", 0xfffffdf6}], 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 15m0.809940527s ago: executing program 5 (id=904): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x40000) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @remote}], 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) sendmsg$inet(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2400c0b5) 14m58.486150504s ago: executing program 5 (id=908): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x400000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 14m43.365383234s ago: executing program 33 (id=908): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x6}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x400000, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9m4.688337241s ago: executing program 4 (id=2605): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095f4cd579d2c022c2c312d74e9283c0f4a1f0ccef2abcf90e821dbe78e1b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r4, &(0x7f00000006c0), 0x0, 0xa3, 0x2917) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x7, 0x0, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100000000000000020000", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000001f86fa8ce048fe643b1ad3e20000b35ad5547bdd357e589dc40a"], 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 9m3.632511488s ago: executing program 4 (id=2610): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, 0x5394b, 0x601}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 9m2.695077045s ago: executing program 4 (id=2613): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x148, 0x1e0, 0x148, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) getsockopt$SO_COOKIE(r0, 0x1, 0x47, 0x0, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2000000000000261, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r4, &(0x7f0000000900)='!', 0x1, 0x1}]) close(0x3) r6 = io_uring_setup(0x2026, &(0x7f0000000180)={0x0, 0x7530, 0x0, 0x20001, 0x106}) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x2000000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0200000001"], 0x48) r10 = fsmount(r7, 0x1, 0x0) fchdir(r10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/91, 0x5b}], 0x1) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) ioctl$RNDGETENTCNT(r11, 0x80045200, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) 8m58.004634778s ago: executing program 4 (id=2620): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="e8", 0x1}, {0x0, 0x2000000}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') statx(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x6000, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x1095, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x400, 0x7ff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x206, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x9, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000040), 0x1200002, &(0x7f0000000700)=ANY=[@ANYBLOB='mode=00000000000000000000400,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r1, @ANYBLOB=',uid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',uid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',gid=', @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="0e657500783d", @ANYRESDEC=0xee00, @ANYBLOB=',measure,fscontext=sysadm_u,\x00']) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 8m56.738295595s ago: executing program 4 (id=2626): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x7f, 0xcf, 0x4d, 0x40, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x28, [{{0x9, 0x4, 0x9c, 0x0, 0x0, 0x86, 0x3b, 0x8d}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000340)=')::\x00', 0x4, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r4, 0x4e14, 0x912a, 0x41, 0x0, 0x0) 8m55.306307898s ago: executing program 4 (id=2631): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 8m54.884489589s ago: executing program 34 (id=2631): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 21.881718841s ago: executing program 6 (id=3874): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x3}, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='\x00\x9fH\x00\x00\x00', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x80000) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000300)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) syz_io_uring_submit(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x8000) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000100)={0x5, 0x0, 0x6}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x0, 0x8, '\x00', 0x1, &(0x7f0000000200)=[0x0]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x6fd, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000003c0)={0x2, 0x9, 0x0, 0x4000}) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 17.79699749s ago: executing program 6 (id=3883): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x8002, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x7, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0xffffff80, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x0, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x8000, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 15.988700131s ago: executing program 6 (id=3888): socket$can_j1939(0x1d, 0x2, 0x7) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x73c3, &(0x7f0000000140)={0x0, 0x79ac, 0x80, 0x3, 0x40024e}, &(0x7f0000000080), &(0x7f0000000040)=0x0) socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000001440)=0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x3277, &(0x7f0000000500)={0x0, 0x10000000, 0x100, 0x3, 0x8000021d}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_usb_control_io$printer(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x9, 0x200002eb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) 14.363416794s ago: executing program 3 (id=3890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03fffffff50000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 14.076502502s ago: executing program 3 (id=3892): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x5) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x812, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x13, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0xb, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x7, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x2, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x1000007, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x8001, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7ffffbff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0x10002, 0x39b5, 0x1, 0x800}, {0x61, 0x0, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9e3, 0x0, 0x8, 0xfffffffc}, {0x9, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000080)='ip6erspan0\x00') setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) flock(r7, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 13.261928159s ago: executing program 3 (id=3894): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) io_pgetevents(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r11, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x10000, 0x116000, 0x8}) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@set_irq_handler={0xc8, 0x20, {0x18, 0x1}}, @nested_load_code={0x12e, 0x55, {0x1, "b9560900000f320f3036f30f01f8b9800000c00f32350080003f0f300f09470f494007b805000000b9003800000f01d90fbd629fc463f960d7000f01cb"}}, @rdmsr={0x66, 0x18, {0x8cb}}, @set_irq_handler={0xc8, 0x20, {0xb0, 0x1}}, @code={0xa, 0x72, {"48b8bc5678b06043c34d0f23c00f21f835020006000f23f8430f209fc744240000000000c7442402c6000000c7442406000000000f0114240f18f6d3049eb9a10800000f3266baf80cb8b4163e81ef66bafc0ced1a1bc4e209a83f66ba430066ed"}}, @enable_nested={0x12c, 0x18}], 0x137}) socket$nl_netfilter(0x10, 0x3, 0xc) 9.773228538s ago: executing program 0 (id=3902): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/mcfilter\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/109, 0x6d}], 0x2, 0xa3, 0x2917) 8.702885474s ago: executing program 0 (id=3904): openat$kvm(0xffffffffffffff9c, 0x0, 0x222a00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 8.625357049s ago: executing program 2 (id=3905): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}]}}) 8.458299992s ago: executing program 6 (id=3907): mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0xffdff800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000001740)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.054817377s ago: executing program 0 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='afs_make_fs_calli\x00', r2, 0x0, 0x7}, 0x6c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r6}, 0x38) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000100)={{0x29, @multicast1, 0x4e23, 0x3, 'lblcr\x00', 0x24, 0xc, 0x21}, {@rand_addr=0x1000, 0x4e24, 0x4, 0x9, 0x4, 0x2}}, 0x44) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x3c}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 7.035192986s ago: executing program 7 (id=3909): keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000"], 0x164}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x8, 0x9, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "0fa4ad18"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000011000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r6], 0x168}}], 0x1, 0x8000004) 6.597025963s ago: executing program 6 (id=3910): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000001740)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() madvise(&(0x7f00008ea000/0x4000)=nil, 0x4000, 0xf) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0x104) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 5.585107935s ago: executing program 0 (id=3911): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRES64=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async, rerun: 64) r2 = getpgrp(0x0) (rerun: 64) shutdown(0xffffffffffffffff, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (rerun: 64) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a02) poll(&(0x7f0000000140)=[{r3, 0x4010}], 0x1, 0x3) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 5.553564523s ago: executing program 2 (id=3912): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}]}}) 5.482169188s ago: executing program 3 (id=3913): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x8, 0x2, 0x40, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xce) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="750a00000000000061119c000000000018000000001800000000000000000000950000000000000044b32e6adb381c2870677bd74f789930f6bafc881c740f3aa7c2441fcc74e909ec3aeaa000c1ad6647ea08cacef6b06bce989cc5f5d118"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.496661446s ago: executing program 6 (id=3914): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001900000000bd70000000000020010000000000000000000000000001fc0200000000000000000000000000000000fffd100200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0800000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000084000500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000030000000002030000000000fcffffff000000007f000001000000000000000000000000000000003300000000000000ac1e010100000000000000000000000007350000010007000000000000000000faffffff"], 0x13c}}, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000600)={@link_local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "a409bc", 0x168, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@hopopts={0xc, 0xd, '\x00', [@pad1, @generic={0x6, 0x63, "e4b2b456521e11e692a75b9aa72e46c48db9e65fb61df7fa5d7c1cee9a01b1e14cdfcea0a2e79d140eec5203a1c82587efd6da2ae68c1eec6940432608c84d58f234195e7a2beb010ece80a7ca98f35aabd5d0d6a441f42d35891653c028f3ca4d4e19"}, @enc_lim={0x4, 0x1, 0xa4}]}, @dstopts={0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}, @dstopts={0x6, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xe}]}], @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x8, 0x0, 0x0, 0x4, 0x9, 0x1, 0x4e24, 0x4e22, 0x3, 0x3, 0x0, 0x0, 0x1}, [{0x163, 0xffff, 0x5, 0x5, 0x8001, 0x5, 0x0, 0x4}, {0xff, 0x6, 0x5, 0xfffffff8, 0xef, 0x6, 0x2, 0x8}, {0x2, 0xd, 0x8, 0x8, 0x3, 0x2, 0x7, 0x9}, {0x2, 0xd26, 0xffffff18, 0xc8, 0x100, 0x4, 0x6, 0xe39a}, {0x8, 0x7fffffff, 0x5, 0x7, 0xf, 0x8000, 0x7, 0x7f}, {0x9, 0x1, 0x5, 0xffff0000, 0x800000, 0x200, 0x1, 0xfff7621}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) sendmsg$AUDIT_SET(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfd, {0x42, 0x0, 0x2, 0xffffffffffffffff, 0x7fff, 0x8, 0xc, 0x3, 0x0, 0x5, 0xffffffff}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x0, 0x5e, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'gretap0\x00', 0x0, 0x700, 0x7, 0x3, 0x0, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @timestamp_addr={0x44, 0x34, 0xb2, 0x1, 0x8, [{@rand_addr=0x64010101, 0x4}, {@private=0xa010102, 0x4}, {@empty, 0x9}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @end, @generic={0x89, 0x10, "288876f3228096c05cebf7fd452e"}, @ssrr={0x89, 0x7, 0xb2, [@rand_addr=0x64018101]}, @generic={0x7, 0xe, "fa009ae49e7524b89ab8d237"}, @cipso={0x86, 0x1e, 0x2, [{0x0, 0x5, "a2db30"}, {0x7, 0xb, "1d44ea0f8e4eb4b461"}, {0x7, 0x8, "4b513caf192c"}]}]}}}}}) r9 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r10, &(0x7f000001aa40)=""/102400, 0x19000) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000ff0f000005f2ffff07000000c0000000", @ANYRES32=r7, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.683047756s ago: executing program 3 (id=3915): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x4000000}, 0x0) 3.681079836s ago: executing program 2 (id=3916): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3.549993185s ago: executing program 3 (id=3917): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x6, 0x3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) r7 = fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='%\xde({^\xfa@:', 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4b8affbf514fd00", r5, 0xffffffffffffffff}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) close_range(r3, r8, 0x0) 3.336401136s ago: executing program 7 (id=3918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x1f) 3.310438834s ago: executing program 2 (id=3919): openat$kvm(0xffffffffffffff9c, 0x0, 0x222a00, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.442060221s ago: executing program 7 (id=3920): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x5}}]}}) 2.370688852s ago: executing program 0 (id=3921): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x16, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x884) 2.237405761s ago: executing program 2 (id=3922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffd) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)=ANY=[@ANYBLOB="34bdff0f", @ANYRES16=r4, @ANYBLOB="578d2cbd7000fddbdf250200000014000180080003007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000165480bbdd943afaf4d61cb512dd80c84f76a48f7fbb6972"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={0xffffffffffffffff, r6}, 0xc) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 1.237609432s ago: executing program 7 (id=3923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000007", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 985.654467ms ago: executing program 7 (id=3924): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000001740)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() madvise(&(0x7f00008ea000/0x4000)=nil, 0x4000, 0xf) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000080)=0x104) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 914.102385ms ago: executing program 2 (id=3925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="9400000010000104000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0) 779.21182ms ago: executing program 0 (id=3926): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x5, 0x400401) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000400)={0x1, 0xb, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x200, 0x7}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x830}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x728e}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf25210000000c009900030000005d0000000a00f500ffffffffffff0000d1b4335dbabf2b4e5926653a16644d4e71dd1cf913e0650eab7d1388b6efc022185505ee18ad1ba4712beba7f798c62963b2e2096db556c25b76275f5cacea3195956421e348f89dd31ed1b3090345f69a8bed257f925a44708647af58a158e9089a29c1e3a2"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002dbd7000fbdbdf25370000000c009900030000007300080008005700f200000005001800080022012f0300000800a000000000000800570003000000"], 0x48}, 0x1, 0x0, 0x0, 0xd5a8f0de3d86e845}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xdb, @empty}}, 0xffb, 0x5, 0xffff18b9, 0x6, 0x330, 0x80000041, 0xdb}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r8, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 7 (id=3927): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) recvmsg$unix(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f00000006c0)=""/195, 0xc3}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f00000007c0)=""/73, 0x49}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/197, 0xc5}, {&(0x7f0000000a00)=""/232, 0xe8}], 0x9, &(0x7f0000000bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x40000040) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4000, 0x3, @mcast1={0xff, 0x7}, 0x745}}, {{0xa, 0x2, 0x6, @loopback}}}, 0x108) kernel console output (not intermixed with test programs): 7347][ T30] audit: type=1400 audit(1767946188.613:2496): avc: denied { append } for pid=16997 comm="syz.3.3050" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1002.553153][ T2967] bond0 (unregistering): Released all slaves [ 1002.571864][ T2967] bond1 (unregistering): Released all slaves [ 1002.988605][ T5828] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1003.054313][ T5828] Bluetooth: hci1: command tx timeout [ 1003.514612][T17031] FAULT_INJECTION: forcing a failure. [ 1003.514612][T17031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.559797][ T2967] bond2 (unregistering): Released all slaves [ 1003.574495][T17031] CPU: 0 UID: 0 PID: 17031 Comm: syz.7.3057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.574519][T17031] Tainted: [L]=SOFTLOCKUP [ 1003.574523][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1003.574535][T17031] Call Trace: [ 1003.574540][T17031] [ 1003.574545][T17031] dump_stack_lvl+0x16c/0x1f0 [ 1003.574569][T17031] should_fail_ex+0x512/0x640 [ 1003.574591][T17031] _copy_from_iter+0x2a4/0x16c0 [ 1003.574611][T17031] ? __alloc_skb+0x220/0x410 [ 1003.574629][T17031] ? __alloc_skb+0x35d/0x410 [ 1003.574646][T17031] ? __pfx__copy_from_iter+0x10/0x10 [ 1003.574664][T17031] ? netlink_autobind.isra.0+0x158/0x370 [ 1003.574685][T17031] netlink_sendmsg+0x820/0xdd0 [ 1003.574704][T17031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.574724][T17031] ____sys_sendmsg+0xa5d/0xc30 [ 1003.574740][T17031] ? copy_msghdr_from_user+0x10a/0x160 [ 1003.574753][T17031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.574775][T17031] ___sys_sendmsg+0x134/0x1d0 [ 1003.574798][T17031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.574829][T17031] __sys_sendmsg+0x16d/0x220 [ 1003.574842][T17031] ? __pfx___sys_sendmsg+0x10/0x10 [ 1003.574864][T17031] do_syscall_64+0xcd/0xf80 [ 1003.574882][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.574896][T17031] RIP: 0033:0x7f653058f749 [ 1003.574908][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.574920][T17031] RSP: 002b:00007f6531440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.574932][T17031] RAX: ffffffffffffffda RBX: 00007f65307e5fa0 RCX: 00007f653058f749 [ 1003.574940][T17031] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1003.574948][T17031] RBP: 00007f6531440090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.574955][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.574961][T17031] R13: 00007f65307e6038 R14: 00007f65307e5fa0 R15: 00007ffe397b4378 [ 1003.574978][T17031] [ 1004.065756][ T5815] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1004.184110][T17037] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1004.205912][ T2967] bond3 (unregistering): Released all slaves [ 1004.238592][ T5815] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1004.241666][ T2967] bond4 (unregistering): Released all slaves [ 1004.272896][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.307018][ T2967] bond5 (unregistering): Released all slaves [ 1004.348714][ T5815] usb 4-1: config 0 descriptor?? [ 1004.378126][ T2967] bond6 (unregistering): Released all slaves [ 1004.571995][ T2967] tipc: Left network mode [ 1004.579820][ T1140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1004.579827][ T5815] usb 4-1: selecting invalid altsetting 3 [ 1004.648163][ T5815] comedi comedi5: could not set alternate setting 3 in high speed [ 1004.672891][ T5815] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1004.674015][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1004.692406][ T1140] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1005.114025][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1005.273858][ T5828] Bluetooth: hci1: command tx timeout [ 1005.320289][ T5937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1005.600134][ T5815] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1005.629350][ T5815] usb 4-1: USB disconnect, device number 42 [ 1006.164651][T17055] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1006.200075][T17049] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1006.657198][T16926] chnl_net:caif_netlink_parms(): no params data found [ 1007.212924][T17060] syzkaller0: entered promiscuous mode [ 1007.223851][T17060] syzkaller0: entered allmulticast mode [ 1007.635925][ T5815] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1007.781439][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.806900][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 1007.833710][ T5815] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1007.872518][ T5815] usb 3-1: config 0 has no interface number 0 [ 1007.900930][ T5815] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1007.941359][ T5815] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1007.989606][ T5815] usb 3-1: config 0 interface 48 has no altsetting 0 [ 1008.007907][ T5815] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1008.048149][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.082504][ T5815] usb 3-1: Product: syz [ 1008.098662][ T5815] usb 3-1: Manufacturer: syz [ 1008.118586][ T5815] usb 3-1: SerialNumber: syz [ 1008.170173][ T5815] usb 3-1: config 0 descriptor?? [ 1008.406665][T16926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.415897][T16926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.511556][T16926] bridge_slave_0: entered allmulticast mode [ 1008.879845][T16926] bridge_slave_0: entered promiscuous mode [ 1008.890624][T16926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.899292][T16926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.907531][T16926] bridge_slave_1: entered allmulticast mode [ 1008.946243][T16926] bridge_slave_1: entered promiscuous mode [ 1009.378560][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1009.444544][ T2967] hsr_slave_0: left promiscuous mode [ 1009.454271][ T2967] hsr_slave_1: left promiscuous mode [ 1009.859191][ C1] hrtimer: interrupt took 29751 ns [ 1010.061565][ T5815] gspca_main: se401-2.14.0 probing 047d:5003 [ 1010.135338][T17098] usb usb8: usbfs: process 17098 (syz.6.3070) did not claim interface 0 before use [ 1010.285762][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3071'. [ 1011.007097][ T5815] gspca_se401: read req failed req 0x06 error -19 [ 1011.026117][ T5815] usb 3-1: USB disconnect, device number 38 [ 1012.582219][T16926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.605353][T17102] vxcan1: entered promiscuous mode [ 1012.614367][T17102] team0: Device vxcan1 is of different type [ 1012.728577][T16926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.866453][T16926] team0: Port device team_slave_0 added [ 1012.894603][T16926] team0: Port device team_slave_1 added [ 1013.255656][ T30] audit: type=1401 audit(1767946199.736:2497): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1013.594632][T16926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.611952][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.642489][T16926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.657111][T16926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.770690][T16926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.862040][T16926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.961503][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'. [ 1014.671800][ T2967] IPVS: stop unused estimator thread 0... [ 1015.077043][ T30] audit: type=1400 audit(1767946201.177:2498): avc: denied { audit_write } for pid=17137 comm="syz.6.3079" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1015.208951][ T30] audit: type=1107 audit(1767946201.186:2499): pid=17137 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='wg9ЅYlly-zd#i' [ 1016.301315][T17163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1017.058344][T16926] hsr_slave_0: entered promiscuous mode [ 1017.072792][T16926] hsr_slave_1: entered promiscuous mode [ 1017.087699][T16926] debugfs: 'hsr0' already exists in 'hsr' [ 1017.094049][T16926] Cannot create hsr debugfs directory [ 1017.603846][ T30] audit: type=1400 audit(1767946203.815:2500): avc: denied { accept } for pid=17169 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1017.647964][ T30] audit: type=1400 audit(1767946203.862:2501): avc: denied { getopt } for pid=17173 comm="syz.2.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1017.670661][T17177] netlink: 'syz.6.3085': attribute type 1 has an invalid length. [ 1018.100711][ T30] audit: type=1401 audit(1767946204.283:2502): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1018.626784][T17205] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1018.636946][T17205] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3093'. [ 1018.688772][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.586820][T17217] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3094'. [ 1020.450796][T16926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1020.525362][T16926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1020.577610][T16926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1020.635682][T16926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1020.792744][T17241] FAULT_INJECTION: forcing a failure. [ 1020.792744][T17241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.890632][T17241] CPU: 0 UID: 0 PID: 17241 Comm: syz.6.3096 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.890675][T17241] Tainted: [L]=SOFTLOCKUP [ 1020.890681][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.890694][T17241] Call Trace: [ 1020.890700][T17241] [ 1020.890709][T17241] dump_stack_lvl+0x16c/0x1f0 [ 1020.890740][T17241] should_fail_ex+0x512/0x640 [ 1020.890775][T17241] _copy_from_iter+0x2a4/0x16c0 [ 1020.890811][T17241] ? __alloc_skb+0x220/0x410 [ 1020.890841][T17241] ? __alloc_skb+0x35d/0x410 [ 1020.890872][T17241] ? __pfx__copy_from_iter+0x10/0x10 [ 1020.890904][T17241] ? netlink_autobind.isra.0+0x158/0x370 [ 1020.890941][T17241] netlink_sendmsg+0x820/0xdd0 [ 1020.890972][T17241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1020.891009][T17241] ____sys_sendmsg+0xa5d/0xc30 [ 1020.891037][T17241] ? copy_msghdr_from_user+0x10a/0x160 [ 1020.891056][T17241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1020.891096][T17241] ___sys_sendmsg+0x134/0x1d0 [ 1020.891120][T17241] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.891178][T17241] __sys_sendmsg+0x16d/0x220 [ 1020.891202][T17241] ? __pfx___sys_sendmsg+0x10/0x10 [ 1020.891240][T17241] do_syscall_64+0xcd/0xf80 [ 1020.891270][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.891291][T17241] RIP: 0033:0x7fe3df18f749 [ 1020.891309][T17241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.891330][T17241] RSP: 002b:00007fe3e00fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.891349][T17241] RAX: ffffffffffffffda RBX: 00007fe3df3e5fa0 RCX: 00007fe3df18f749 [ 1020.891363][T17241] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1020.891377][T17241] RBP: 00007fe3e00fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.891389][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.891402][T17241] R13: 00007fe3df3e6038 R14: 00007fe3df3e5fa0 R15: 00007ffc29043358 [ 1020.891431][T17241] [ 1021.131235][T16926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.151568][T16926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.171140][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.178942][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.192897][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.201173][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.599289][T16926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.682773][T17275] 9pnet_virtio: no channels available for device syz [ 1022.745487][T17275] SQUASHFS error: Failed to read block 0x0: -5 [ 1023.427817][T16926] veth0_vlan: entered promiscuous mode [ 1023.480079][T16926] veth1_vlan: entered promiscuous mode [ 1024.291760][T16926] veth0_macvtap: entered promiscuous mode [ 1024.497672][T16926] veth1_macvtap: entered promiscuous mode [ 1024.734430][T17298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1025.612819][T16926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.653011][T16926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.673879][T17306] usb usb8: usbfs: process 17306 (syz.3.3107) did not claim interface 0 before use [ 1025.706583][ T6871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.744678][ T6871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.767226][ T6871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.850023][ T6871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.567035][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.620196][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.427326][ T4659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.439672][ T4659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.125722][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1031.206966][T10472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1031.225740][T10472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1031.243524][T10472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1031.256420][T10472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1031.265454][T10472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1032.117398][ T30] audit: type=1326 audit(1767946217.408:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.6.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7fc00000 [ 1032.173953][ T30] audit: type=1326 audit(1767946217.436:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.6.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe3df18f749 code=0x7fc00000 [ 1032.302137][ T5815] IPVS: starting estimator thread 0... [ 1032.413662][T17388] IPVS: using max 68 ests per chain, 163200 per kthread [ 1032.919131][ T30] audit: type=1326 audit(1767946218.156:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.6.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7fc00000 [ 1033.490946][T10472] Bluetooth: hci0: command tx timeout [ 1033.922362][T17408] trusted_key: encrypted_key: insufficient parameters specified [ 1034.249049][ T30] audit: type=1401 audit(1767946219.391:2506): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1035.717491][T10472] Bluetooth: hci0: command tx timeout [ 1036.864723][ T30] audit: type=1400 audit(1767946221.833:2507): avc: denied { append } for pid=17417 comm="syz.7.3124" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1036.936639][T17366] lo speed is unknown, defaulting to 1000 [ 1037.160479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.198719][ T5828] Bluetooth: hci0: command tx timeout [ 1038.453771][ T30] audit: type=1400 audit(1767946223.320:2508): avc: denied { write } for pid=17420 comm="syz.6.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1038.662630][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3128'. [ 1039.010396][ T30] audit: type=1400 audit(1767946223.844:2509): avc: denied { read } for pid=17420 comm="syz.6.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1040.292653][ T5828] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1040.409562][ T5828] Bluetooth: hci0: command tx timeout [ 1041.308428][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 1041.535143][T17366] chnl_net:caif_netlink_parms(): no params data found [ 1041.695964][T17473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3135'. [ 1042.420978][T17482] loop7: detected capacity change from 0 to 16384 [ 1042.740103][T17483] loop7: detected capacity change from 16384 to 0 [ 1042.761259][ C0] I/O error, dev loop7, sector 15616 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1043.091533][T17489] 9pnet_virtio: no channels available for device syz [ 1043.152220][T17489] SQUASHFS error: Failed to read block 0x0: -5 [ 1043.804352][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1044.492969][T17499] FAULT_INJECTION: forcing a failure. [ 1044.492969][T17499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.522292][T17499] CPU: 1 UID: 0 PID: 17499 Comm: syz.2.3140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.522326][T17499] Tainted: [L]=SOFTLOCKUP [ 1044.522333][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1044.522345][T17499] Call Trace: [ 1044.522353][T17499] [ 1044.522361][T17499] dump_stack_lvl+0x16c/0x1f0 [ 1044.522389][T17499] should_fail_ex+0x512/0x640 [ 1044.522457][T17499] _copy_from_user+0x2e/0xd0 [ 1044.522485][T17499] memdup_user+0x6b/0xe0 [ 1044.522508][T17499] strndup_user+0x78/0xe0 [ 1044.522531][T17499] __x64_sys_mount+0x136/0x310 [ 1044.522554][T17499] ? __pfx___x64_sys_mount+0x10/0x10 [ 1044.522583][T17499] do_syscall_64+0xcd/0xf80 [ 1044.522612][T17499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.522635][T17499] RIP: 0033:0x7f1e07b8f749 [ 1044.522653][T17499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.522669][T17499] RSP: 002b:00007f1e08ab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1044.522689][T17499] RAX: ffffffffffffffda RBX: 00007f1e07de6180 RCX: 00007f1e07b8f749 [ 1044.522702][T17499] RDX: 0000200000002280 RSI: 0000200000000100 RDI: 0000200000000040 [ 1044.522715][T17499] RBP: 00007f1e08ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.522728][T17499] R10: 0000000001000080 R11: 0000000000000246 R12: 0000000000000001 [ 1044.522741][T17499] R13: 00007f1e07de6218 R14: 00007f1e07de6180 R15: 00007ffd1e6f42d8 [ 1044.522771][T17499] [ 1047.866329][ T30] audit: type=1400 audit(1767946232.123:2510): avc: denied { bind } for pid=17509 comm="syz.2.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1047.939621][ T30] audit: type=1400 audit(1767946232.198:2511): avc: denied { execute } for pid=17509 comm="syz.2.3143" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1048.251002][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.259217][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.268429][T17366] bridge_slave_0: entered allmulticast mode [ 1048.319846][T17366] bridge_slave_0: entered promiscuous mode [ 1048.388985][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.400640][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.414477][T17366] bridge_slave_1: entered allmulticast mode [ 1049.045306][T17366] bridge_slave_1: entered promiscuous mode [ 1049.459300][T17536] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3149'. [ 1049.479200][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.498164][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.726306][T17366] team0: Port device team_slave_0 added [ 1049.741718][T17366] team0: Port device team_slave_1 added [ 1050.810283][T17545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3151'. [ 1050.904635][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.916942][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.952861][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.025678][T17553] futex_wake_op: syz.2.3154 tries to shift op by -1; fix this program [ 1051.048390][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.058529][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.102447][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.305929][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3153'. [ 1051.813219][T17366] hsr_slave_0: entered promiscuous mode [ 1051.822111][T17366] hsr_slave_1: entered promiscuous mode [ 1051.845943][T17366] debugfs: 'hsr0' already exists in 'hsr' [ 1051.859075][T17366] Cannot create hsr debugfs directory [ 1051.932843][T17562] loop2: detected capacity change from 0 to 1 [ 1052.014458][T17562] ldm_validate_privheads(): Disk read failed. [ 1052.035843][T17562] Dev loop2: unable to read RDB block 1 [ 1052.163108][T17562] loop2: unable to read partition table [ 1052.178400][T17562] loop2: partition table beyond EOD, truncated [ 1052.199662][T17562] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1052.469272][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3157'. [ 1055.236944][ T30] audit: type=1400 audit(1767946239.028:2512): avc: denied { ioctl } for pid=17578 comm="syz.6.3160" path="socket:[60182]" dev="sockfs" ino=60182 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1055.294016][T17591] Bluetooth: MGMT ver 1.23 [ 1055.299640][T17591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1055.384420][ T30] audit: type=1326 audit(1767946239.168:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.0.3163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f605e78f749 code=0x0 [ 1058.386798][T17599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3166'. [ 1058.466973][ T5828] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1059.042928][T17601] syzkaller0: entered promiscuous mode [ 1059.051982][T17601] syzkaller0: entered allmulticast mode [ 1059.994150][T17620] 9pnet_virtio: no channels available for device syz [ 1060.052179][T17620] SQUASHFS error: Failed to read block 0x0: -5 [ 1060.992623][T17628] 9pnet_virtio: no channels available for device syz [ 1061.032283][T17628] SQUASHFS error: Failed to read block 0x0: -5 [ 1062.327592][ T30] audit: type=1326 audit(1767946245.623:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.368816][ T30] audit: type=1326 audit(1767946245.623:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.407242][ T30] audit: type=1326 audit(1767946245.623:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.493454][ T30] audit: type=1326 audit(1767946245.623:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3df18df90 code=0x7ffc0000 [ 1062.522049][ T30] audit: type=1326 audit(1767946245.632:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.568820][ T30] audit: type=1326 audit(1767946245.632:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.608856][ T30] audit: type=1326 audit(1767946245.642:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.696474][T16449] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1062.698019][ T30] audit: type=1326 audit(1767946245.642:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.870261][ T30] audit: type=1326 audit(1767946245.642:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1062.922616][T16449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.949140][T16449] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.972218][T16449] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1062.978462][ T30] audit: type=1326 audit(1767946245.642:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.6.3170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3df191667 code=0x7ffc0000 [ 1062.987529][T16449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.111973][T16449] usb 3-1: config 0 descriptor?? [ 1063.662633][T17634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.673118][T17634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.715018][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.724028][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.731617][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.740994][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.749242][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.757950][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.767567][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.775697][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.784234][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.792456][T16449] ortek 0003:1223:3F07.000D: unknown main item tag 0x0 [ 1063.805742][T16449] ortek 0003:1223:3F07.000D: item fetching failed at offset 66/69 [ 1063.817204][T16449] ortek 0003:1223:3F07.000D: probe with driver ortek failed with error -22 [ 1063.931432][T17444] usb 3-1: USB disconnect, device number 39 [ 1064.886027][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'. [ 1067.342068][T17666] affs: No valid root block on device nullb0 [ 1068.838254][T17366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1068.857589][T17675] tipc: Enabled bearer , priority 0 [ 1068.867432][T17676] syzkaller0: entered promiscuous mode [ 1068.874112][T17676] syzkaller0: entered allmulticast mode [ 1068.882373][T17366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1068.916449][T17366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1068.948807][T17366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1069.219200][T17672] tipc: Resetting bearer [ 1069.376534][T17672] tipc: Disabling bearer [ 1070.018024][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'. [ 1070.242391][T17713] xt_NFQUEUE: number of total queues is 0 [ 1070.612911][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.675069][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.697232][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.705371][ T6871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.733806][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.741763][ T6871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.266631][T17366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.712492][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.941100][T17366] veth0_vlan: entered promiscuous mode [ 1071.977422][T17366] veth1_vlan: entered promiscuous mode [ 1071.998666][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3195'. [ 1072.069948][T17366] veth0_macvtap: entered promiscuous mode [ 1072.115932][T17366] veth1_macvtap: entered promiscuous mode [ 1072.165573][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.526370][T17738] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3196'. [ 1072.823799][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.844975][ T4750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.876905][T17740] xt_connbytes: Forcing CT accounting to be enabled [ 1072.896391][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1072.896405][ T30] audit: type=1400 audit(1767946255.558:2534): avc: denied { write } for pid=17739 comm="syz.2.3197" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1072.937311][ T4750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.955638][ T4750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.969456][ T6871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.290472][ T4750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.428581][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.620966][ T4750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.266407][T17748] netlink: 'syz.6.3200': attribute type 4 has an invalid length. [ 1074.277541][T17748] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3200'. [ 1074.786205][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1075.110926][ T9992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.129383][ T9992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.731739][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1078.252681][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 1079.681986][ T30] audit: type=1400 audit(1767946261.901:2535): avc: denied { bind } for pid=17792 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1079.903181][T17799] veth0_to_team: entered promiscuous mode [ 1079.994622][T17801] 9pnet_virtio: no channels available for device syz [ 1080.033174][T17801] SQUASHFS error: Failed to read block 0x0: -5 [ 1080.416184][ T30] audit: type=1400 audit(1767946262.584:2536): avc: denied { map } for pid=17792 comm="syz.0.3210" path="socket:[61314]" dev="sockfs" ino=61314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1080.442959][ T30] audit: type=1400 audit(1767946262.584:2537): avc: denied { read accept } for pid=17792 comm="syz.0.3210" path="socket:[61314]" dev="sockfs" ino=61314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1080.533612][ T30] audit: type=1400 audit(1767946262.612:2538): avc: denied { ioctl } for pid=17792 comm="syz.0.3210" path="socket:[61314]" dev="sockfs" ino=61314 ioctlcmd=0x42d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1081.136137][T10472] Bluetooth: hci5: command 0x0406 tx timeout [ 1081.787603][ T5983] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1081.980516][ T5828] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1082.343479][ T5983] usb 3-1: device descriptor read/64, error -71 [ 1083.027616][ T5983] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1083.177207][ T5983] usb 3-1: device descriptor read/64, error -71 [ 1083.306236][ T5983] usb usb3-port1: attempt power cycle [ 1083.822569][ T5983] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1083.852583][ T5983] usb 3-1: device descriptor read/8, error -71 [ 1084.575776][T17834] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17834 comm=syz.6.3221 [ 1084.620261][ T5983] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1084.914218][ T5983] usb 3-1: device not accepting address 43, error -71 [ 1085.062145][ T5983] usb usb3-port1: unable to enumerate USB device [ 1086.818676][ T30] audit: type=1400 audit(1767946268.571:2539): avc: denied { setopt } for pid=17855 comm="syz.3.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1087.618552][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3232'. [ 1088.874788][T17444] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1089.076396][T17444] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.196007][ T5915] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1089.270136][T17444] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1089.287708][T17444] usb 4-1: config 1 has no interface number 1 [ 1089.303595][T17444] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1089.346816][T17444] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1089.484204][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1089.581181][ T30] audit: type=1401 audit(1767946271.078:2540): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1089.708395][T17444] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1089.719208][T17444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.739195][T17444] usb 4-1: Product: syz [ 1089.745272][T17444] usb 4-1: Manufacturer: syz [ 1089.751159][T17444] usb 4-1: SerialNumber: syz [ 1089.766481][T17880] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1090.007921][ T5915] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1090.168091][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1090.386021][ T5915] usb usb3-port1: attempt power cycle [ 1090.682660][T17444] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1090.864783][T17444] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1091.599188][ T5915] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1091.925094][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1091.996158][T17444] usb 4-1: USB disconnect, device number 43 [ 1092.266158][ T5915] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1092.332153][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1092.936061][T16659] udevd[16659]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.132087][ T5915] usb usb3-port1: unable to enumerate USB device [ 1093.173794][ T30] audit: type=1400 audit(1767946274.521:2541): avc: denied { read } for pid=17920 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1093.456181][ T6041] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1094.503086][ T6041] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.386226][ T6041] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.464084][ T6041] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.987499][T17950] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1097.480589][T17954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1097.864392][T17958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1097.947033][T17958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1097.953981][T17958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1098.082329][T17958] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1098.088978][T17958] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1098.201858][T17958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1098.266911][T17958] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1098.455422][T17958] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1100.184254][T10472] Bluetooth: hci4: command 0x0406 tx timeout [ 1100.191596][T10472] Bluetooth: hci2: command 0x0c1a tx timeout [ 1100.269363][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1100.365583][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1101.415796][T17996] 9pnet_virtio: no channels available for device syz [ 1101.478677][T17996] SQUASHFS error: Failed to read block 0x0: -5 [ 1102.408532][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.492766][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1102.579106][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1103.164368][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3268'. [ 1103.946836][ T30] audit: type=1400 audit(1767946284.512:2542): avc: denied { sqpoll } for pid=18014 comm="syz.2.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1104.778577][T18026] ISOFS: Unable to identify CD-ROM format. [ 1104.805955][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1104.813730][ T30] audit: type=1400 audit(1767946285.373:2543): avc: denied { read } for pid=18025 comm="syz.7.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1106.053704][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3274'. [ 1106.128694][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1106.822841][ T5828] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1108.949987][ T30] audit: type=1400 audit(1767946289.274:2544): avc: denied { write } for pid=18066 comm="syz.3.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1109.063717][T18071] syzkaller0: entered promiscuous mode [ 1109.070433][T18071] syzkaller0: entered allmulticast mode [ 1109.087343][T18071] 0: reclassify loop, rule prio 0, protocol 800 [ 1109.243209][T18075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3282'. [ 1109.259386][T16748] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1109.501940][T16748] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.520253][T16748] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1109.545335][T16748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.572175][T16748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1109.605886][T16748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1109.644619][T16748] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.681522][T16748] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.704572][T16748] usb 4-1: Product: syz [ 1109.713696][T16748] usb 4-1: Manufacturer: syz [ 1109.868201][T16748] cdc_wdm 4-1:1.0: skipping garbage [ 1110.133229][T16748] cdc_wdm 4-1:1.0: skipping garbage [ 1110.163139][T16748] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1110.176308][T16748] cdc_wdm 4-1:1.0: Unknown control protocol [ 1110.250760][T16748] usb 4-1: USB disconnect, device number 44 [ 1110.370986][T17317] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1110.435012][ T5915] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1110.520474][T17317] usb 1-1: device descriptor read/64, error -71 [ 1110.659503][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 1110.675249][ T5915] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1110.739502][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3290'. [ 1110.777016][T17317] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1110.853296][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.883474][ T5915] usb 3-1: config 0 descriptor?? [ 1110.895065][ T5915] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1111.012211][T17317] usb 1-1: device descriptor read/64, error -71 [ 1111.135309][T17317] usb usb1-port1: attempt power cycle [ 1111.578964][T17317] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1112.325311][T17317] usb 1-1: device descriptor read/8, error -71 [ 1112.615536][T17317] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1112.649322][T17317] usb 1-1: device descriptor read/8, error -71 [ 1112.731234][ T5828] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1112.778532][T17317] usb usb1-port1: unable to enumerate USB device [ 1113.189378][ T5915] usb 3-1: Detected FT232A [ 1113.215408][ T5915] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1113.234844][ T5915] usb 3-1: USB disconnect, device number 48 [ 1113.252233][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1113.274639][ T5915] ftdi_sio 3-1:0.0: device disconnected [ 1113.893154][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3296'. [ 1114.505677][ T30] audit: type=1400 audit(1767946294.475:2545): avc: denied { write } for pid=18122 comm="syz.7.3297" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1117.588623][T18128] loop2: detected capacity change from 0 to 1 [ 1117.598387][T17923] ldm_validate_privheads(): Disk read failed. [ 1117.605222][T17923] Dev loop2: unable to read RDB block 1 [ 1117.614125][T18110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1117.621970][T18110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1117.630082][T18110] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1117.637244][T18110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1117.639811][T17923] loop2: unable to read partition table [ 1117.652449][T17923] loop2: partition table beyond EOD, truncated [ 1117.667004][T18128] ldm_validate_privheads(): Disk read failed. [ 1117.699212][T18128] Dev loop2: unable to read RDB block 1 [ 1117.736451][T18128] loop2: unable to read partition table [ 1117.756809][T18128] loop2: partition table beyond EOD, truncated [ 1117.812660][T18128] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1117.842336][T18134] overlayfs: missing 'lowerdir' [ 1118.003104][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1119.766881][T10472] Bluetooth: hci2: command 0x0c1a tx timeout [ 1119.773749][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1119.916464][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1119.923333][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1120.430987][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1120.655639][T18168] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18168 comm=syz.2.3311 [ 1121.554597][T17317] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1121.636226][T18188] team0: Port device vxcan1 removed [ 1121.651278][T18188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1121.780245][T17317] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1121.803816][T18194] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1121.811939][T17317] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1121.825466][T17317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.838200][T17317] usb 4-1: Product: syz [ 1121.843203][T17317] usb 4-1: Manufacturer: syz [ 1121.848385][T17317] usb 4-1: SerialNumber: syz [ 1121.871740][T17317] usb 4-1: config 0 descriptor?? [ 1121.914645][T17317] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1121.986302][T17317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1122.033712][T17317] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1122.052487][T17317] usb 4-1: media controller created [ 1122.188127][T17317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1122.342960][T18199] vxfs: WRONG superblock magic 00000000 at 1 [ 1122.379623][T17317] DVB: Unable to find symbol mt352_attach() [ 1122.412855][T18199] vxfs: WRONG superblock magic 00000000 at 8 [ 1122.472630][T18199] vxfs: can't find superblock. [ 1122.550852][T17317] DVB: Unable to find symbol nxt6000_attach() [ 1122.579353][T17317] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1122.600184][T17317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 1122.625025][T17317] dvb-usb: schedule remote query interval to 1000 msecs. [ 1122.635453][T18203] netlink: 'syz.0.3320': attribute type 4 has an invalid length. [ 1122.680280][T17317] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1122.775688][T17317] dvb-usb: bulk message failed: -22 (7/0) [ 1122.814156][T17317] dvb-usb: bulk message failed: -22 (7/0) [ 1122.947894][T17317] usb 4-1: USB disconnect, device number 45 [ 1122.967821][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1123.093220][T17317] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1124.331426][T18222] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1126.067313][T18232] loop7: detected capacity change from 0 to 16384 [ 1127.382708][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1128.446441][T18237] loop7: detected capacity change from 16384 to 0 [ 1130.713944][T18255] ptrace attach of "./syz-executor exec"[18254] was attempted by "./syz-executor exec"[18255] [ 1131.371028][T18257] usb usb8: usbfs: process 18257 (syz.7.3333) did not claim interface 0 before use [ 1131.673228][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'. [ 1131.718232][T18261] fuse: Bad value for 'fd' [ 1133.067323][ T30] audit: type=1401 audit(1767946311.801:2546): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1133.397250][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1133.607462][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 1134.654577][T18294] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3345'. [ 1135.578747][T17906] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1136.865574][T17430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1137.144503][T10472] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1139.139326][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1139.671711][ T30] audit: type=1400 audit(1767946318.022:2547): avc: denied { ioctl } for pid=18347 comm="syz.7.3361" path="socket:[63926]" dev="sockfs" ino=63926 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1139.830391][T18349] syzkaller0: entered promiscuous mode [ 1139.841117][T18349] syzkaller0: entered allmulticast mode [ 1141.012740][T17430] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1141.209579][T17430] usb 3-1: Using ep0 maxpacket: 32 [ 1141.328892][T17430] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 1141.348050][T17430] usb 3-1: config 0 has no interface number 1 [ 1141.356885][T17430] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 120, using maximum allowed: 30 [ 1141.370304][T17430] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1141.585354][T17430] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1141.616460][T17430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.850788][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1142.119442][T17430] usb 3-1: Product: syz [ 1142.124500][T17430] usb 3-1: Manufacturer: syz [ 1142.129803][T17430] usb 3-1: SerialNumber: syz [ 1142.139183][T17430] usb 3-1: config 0 descriptor?? [ 1142.279571][T17430] viperboard 3-1:0.61: version 0.00 found at bus 003 address 049 [ 1142.319733][T17430] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1142.349282][T17430] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1142.490383][T17430] viperboard 3-1:0.0: version 0.00 found at bus 003 address 049 [ 1142.619396][T17430] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1142.632552][T17430] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1142.656001][T17430] usb 3-1: USB disconnect, device number 49 [ 1142.785706][T18381] netlink: 120 bytes leftover after parsing attributes in process `syz.6.3369'. [ 1142.795834][T18381] netlink: 'syz.6.3369': attribute type 1 has an invalid length. [ 1142.805271][T18381] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3369'. [ 1142.823190][T18381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=18381 comm=syz.6.3369 [ 1142.842292][ T30] audit: type=1400 audit(1767946320.913:2548): avc: denied { watch } for pid=18378 comm="syz.6.3369" path="/485/file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1143.140105][ T30] audit: type=1400 audit(1767946320.913:2549): avc: denied { watch_sb } for pid=18378 comm="syz.6.3369" path="/485/file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1144.799574][T18395] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1145.048741][T18405] loop7: detected capacity change from 0 to 16384 [ 1145.073862][T18395] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1145.219740][ T30] audit: type=1401 audit(1767946323.205:2550): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1145.294254][T18411] loop7: detected capacity change from 16384 to 0 [ 1145.294407][ C0] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1145.539141][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 1145.655169][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'. [ 1146.804306][ T5915] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1148.144028][T18452] input: syz0 as /devices/virtual/input/input19 [ 1148.952822][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1148.966467][T18459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.107032][T18459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.690115][T18471] netlink: 'syz.2.3394': attribute type 23 has an invalid length. [ 1150.035717][T18479] 9pnet_virtio: no channels available for device syz [ 1150.040219][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1150.913053][T18483] vxfs: WRONG superblock magic 00000000 at 1 [ 1150.933401][T18483] vxfs: WRONG superblock magic 00000000 at 8 [ 1150.955153][T18483] vxfs: can't find superblock. [ 1151.308954][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1151.355650][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3400'. [ 1151.525774][T18481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1151.534347][T18481] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1151.552073][T18481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1151.608074][T18481] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1151.818179][T18481] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1151.853734][T18481] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1151.995942][T18512] usb usb5: usbfs: process 18512 (syz.7.3401) did not claim interface 0 before use [ 1152.496982][T18481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1152.508052][T18481] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1152.870040][ T30] audit: type=1804 audit(1767946330.362:2551): pid=18527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3404" name="/newroot/60/file0" dev="tmpfs" ino=334 res=1 errno=0 [ 1152.912049][ T30] audit: type=1400 audit(1767946330.409:2552): avc: denied { setopt } for pid=18526 comm="syz.0.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1154.097093][T18558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3408'. [ 1155.075710][ T30] audit: type=1401 audit(1767946332.411:2553): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1155.132171][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3411'. [ 1155.581656][T18581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1157.805560][T18604] 9pnet_virtio: no channels available for device syz [ 1157.875064][T18604] SQUASHFS error: Failed to read block 0x0: -5 [ 1158.909761][ T30] audit: type=1400 audit(1767946335.844:2554): avc: denied { wake_alarm } for pid=18611 comm="syz.2.3420" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.324651][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 1159.399491][T18626] loop2: detected capacity change from 0 to 1 [ 1159.432985][ T30] audit: type=1400 audit(1767946336.508:2555): avc: denied { name_connect } for pid=18623 comm="syz.6.3422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1159.464986][T18626] ldm_validate_privheads(): Disk read failed. [ 1159.481017][T18626] Dev loop2: unable to read RDB block 1 [ 1159.510532][T18626] loop2: unable to read partition table [ 1159.529999][T18626] loop2: partition table beyond EOD, truncated [ 1159.555881][T18626] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1159.998362][T18638] netlink: 'syz.2.3428': attribute type 39 has an invalid length. [ 1161.968421][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1161.978855][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1164.432765][ T30] audit: type=1401 audit(1767946341.176:2556): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1165.633158][T18687] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1165.735834][T18689] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1165.979023][T18691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3441'. [ 1166.053768][T18692] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1166.053768][T18692] The task syz.3.3441 (18692) triggered the difference, watch for misbehavior. [ 1166.292928][T18694] loop2: detected capacity change from 0 to 1 [ 1166.301929][T18694] ldm_validate_privheads(): Disk read failed. [ 1166.311033][T18694] Dev loop2: unable to read RDB block 1 [ 1166.317839][T18694] loop2: unable to read partition table [ 1166.324722][T18694] loop2: partition table beyond EOD, truncated [ 1166.334238][T18694] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1166.673280][T18696] syzkaller0: entered promiscuous mode [ 1166.679543][T18696] syzkaller0: entered allmulticast mode [ 1166.847195][T18700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1168.125325][T18706] xt_NFQUEUE: number of total queues is 0 [ 1169.501238][T17317] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1169.675407][T17317] usb 4-1: Using ep0 maxpacket: 32 [ 1169.692486][T17317] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 1169.707926][T17317] usb 4-1: config 0 has no interface number 1 [ 1169.715538][T17317] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 120, using maximum allowed: 30 [ 1169.777793][T18725] No control pipe specified [ 1169.828912][T17317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1169.914330][T17317] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1169.979288][T18730] input: syz0 as /devices/virtual/input/input20 [ 1169.993919][T17317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.034160][T17317] usb 4-1: Product: syz [ 1170.043168][T17317] usb 4-1: Manufacturer: syz [ 1170.051538][T17317] usb 4-1: SerialNumber: syz [ 1170.079598][T17317] usb 4-1: config 0 descriptor?? [ 1170.222548][T17317] viperboard 4-1:0.61: version 0.00 found at bus 004 address 046 [ 1170.255278][T17317] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1170.278649][T17317] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1170.322059][T17317] viperboard 4-1:0.0: version 0.00 found at bus 004 address 046 [ 1170.372304][T17317] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1170.394150][T17317] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1170.564997][T17317] usb 4-1: USB disconnect, device number 46 [ 1170.729229][ T30] audit: type=1400 audit(1767946346.967:2557): avc: denied { watch_mount } for pid=18724 comm="syz.0.3452" path="/70/file1" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1175.038380][T18787] 9pnet_virtio: no channels available for device syz [ 1175.073669][T18787] SQUASHFS error: Failed to read block 0x0: -5 [ 1175.734796][T18791] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1175.845458][T18791] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1176.260392][ T5915] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1176.438752][ T30] audit: type=1400 audit(1767946352.412:2558): avc: denied { getopt } for pid=18811 comm="syz.6.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1176.478201][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.510986][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.519101][ T30] audit: type=1326 audit(1767946352.440:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1176.572192][ T30] audit: type=1326 audit(1767946352.440:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1176.579199][ T5915] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1176.699640][ T30] audit: type=1326 audit(1767946352.440:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1176.743940][ T30] audit: type=1326 audit(1767946352.440:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1176.827302][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.836857][ T30] audit: type=1326 audit(1767946352.440:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1177.016975][ T30] audit: type=1326 audit(1767946352.440:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1177.066416][ T5915] usb 4-1: config 0 descriptor?? [ 1177.273716][T17430] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1177.295205][ T30] audit: type=1326 audit(1767946352.440:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1177.323110][ T30] audit: type=1326 audit(1767946352.440:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18811 comm="syz.6.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3df18f749 code=0x7ffc0000 [ 1178.070402][ T5915] elo 0003:04E7:0030.000E: invalid report_size 329578763 [ 1178.111814][ T5915] elo 0003:04E7:0030.000E: item 0 4 1 7 parsing failed [ 1178.130469][T17430] usb 1-1: device descriptor read/64, error -71 [ 1178.155283][ T5915] elo 0003:04E7:0030.000E: parse failed [ 1178.161808][ T5915] elo 0003:04E7:0030.000E: probe with driver elo failed with error -22 [ 1178.429986][T17430] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1178.458266][ T30] audit: type=1400 audit(1767946354.301:2567): avc: denied { accept } for pid=18799 comm="syz.3.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1178.980497][T17430] usb 1-1: device descriptor read/64, error -71 [ 1179.146119][T17430] usb usb1-port1: attempt power cycle [ 1179.472907][ T5915] usb 4-1: USB disconnect, device number 47 [ 1179.699247][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1179.819639][T17430] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1180.054236][T18844] 9pnet_virtio: no channels available for device syz [ 1180.085640][T18844] SQUASHFS error: Failed to read block 0x0: -5 [ 1180.657313][T17430] usb 1-1: device descriptor read/8, error -71 [ 1181.833226][T18857] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1182.212546][T18845] bridge_slave_0: left allmulticast mode [ 1182.220892][T18845] bridge_slave_0: left promiscuous mode [ 1182.299516][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.817938][T18845] bridge_slave_1: left allmulticast mode [ 1182.825920][T18845] bridge_slave_1: left promiscuous mode [ 1182.963548][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.540265][T18845] bond0: (slave bond_slave_0): Releasing backup interface [ 1183.658588][T18845] bond0: (slave bond_slave_1): Releasing backup interface [ 1183.704434][T18845] team0: Port device team_slave_0 removed [ 1183.792112][T18845] team0: Port device team_slave_1 removed [ 1183.876091][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.885102][T18845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.956703][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.965414][T18845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1184.035165][T18845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1184.783036][T18878] libceph: resolve '. [ 1184.783036][T18878] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1184.783036][T18878] ' (ret=-3): failed [ 1185.211147][T18899] 9pnet_virtio: no channels available for device syz [ 1186.701053][T18910] xt_NFQUEUE: number of total queues is 0 [ 1187.467317][T17317] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1187.665674][T17317] usb 4-1: Using ep0 maxpacket: 32 [ 1187.698691][T17317] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 1187.747000][T17317] usb 4-1: config 0 has no interface number 1 [ 1187.766937][T17317] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 120, using maximum allowed: 30 [ 1187.799374][T17317] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1187.855937][T17317] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1187.879766][T17317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.888840][T17317] usb 4-1: Product: syz [ 1187.893944][T17317] usb 4-1: Manufacturer: syz [ 1187.907235][T17317] usb 4-1: SerialNumber: syz [ 1187.918696][T17317] usb 4-1: config 0 descriptor?? [ 1188.751237][T17317] viperboard 4-1:0.61: version 0.00 found at bus 004 address 048 [ 1188.770767][T17317] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1188.783059][T17317] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1188.876028][T17317] viperboard 4-1:0.0: version 0.00 found at bus 004 address 048 [ 1188.947515][T17317] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1188.975913][T17317] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1189.173274][T17317] usb 4-1: USB disconnect, device number 48 [ 1189.301112][ T8588] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1189.661140][ T8588] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1189.686781][ T8588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.222667][ T8588] usb 3-1: Product: syz [ 1190.233292][ T8588] usb 3-1: Manufacturer: syz [ 1190.244623][ T8588] usb 3-1: SerialNumber: syz [ 1190.259825][ T8588] usb 3-1: config 0 descriptor?? [ 1190.514415][ T8588] usb 3-1: USB disconnect, device number 50 [ 1190.583701][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3504'. [ 1190.608536][ T6871] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1190.629374][ T6871] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1190.647800][T17430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1190.745882][T18926] netlink: 'syz.2.3500': attribute type 1 has an invalid length. [ 1191.590856][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1191.621247][ T30] audit: type=1326 audit(1767946366.585:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.6.3506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3df18f749 code=0x0 [ 1191.696855][T18926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1191.729178][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1191.742756][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1191.837479][ T30] audit: type=1326 audit(1767946366.585:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18950 comm="syz.6.3506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3df18f749 code=0x0 [ 1192.181212][T17430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1192.389064][T17430] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1192.657733][T18954] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1192.716513][T18964] bond1: (slave dummy0): making interface the new active one [ 1192.753172][T18964] dummy0: entered promiscuous mode [ 1192.761727][T18964] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1192.916846][ T30] audit: type=1400 audit(1767946367.810:2570): avc: denied { write } for pid=18974 comm="syz.0.3510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1193.156406][T18982] loop6: detected capacity change from 0 to 524287487 [ 1193.168074][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.178061][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.352269][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.361049][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.370001][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.379094][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.407116][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.426751][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.456614][T18982] ldm_validate_partition_table(): Disk read failed. [ 1193.477341][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.486807][T18982] Buffer I/O error on dev loop6, logical block 0, async page read [ 1193.512836][T18982] Dev loop6: unable to read RDB block 0 [ 1193.578540][T18982] loop6: unable to read partition table [ 1193.585449][T18982] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1194.571728][T18926] bond1 (unregistering): (slave veth5): Releasing active interface [ 1195.148721][T18926] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1195.176930][T18926] bond1 (unregistering): Released all slaves [ 1195.190888][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1195.291171][T18999] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1196.525598][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3516'. [ 1197.353527][T19026] tipc: Resetting bearer [ 1197.913108][ T30] audit: type=1400 audit(1767946372.507:2571): avc: denied { bind } for pid=19024 comm="syz.6.3520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1200.098834][T19058] bridge1: entered promiscuous mode [ 1200.106079][T19058] bridge1: entered allmulticast mode [ 1204.770656][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1204.781379][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1205.609082][T19105] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3541'. [ 1206.409163][T15309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1207.505472][T15309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.645867][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.664456][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.554379][T19161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3550'. [ 1211.566441][T19161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3550'. [ 1212.290267][T15309] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1214.622270][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1215.587049][ T5915] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1216.184804][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 1216.298918][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.394226][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1216.435404][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1216.496830][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1216.628734][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1217.293834][ T5915] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1217.305934][ T5915] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1217.782401][ T5915] usb 1-1: Manufacturer: syz [ 1217.985327][ T5915] usb 1-1: config 0 descriptor?? [ 1219.325895][T19228] lo speed is unknown, defaulting to 1000 [ 1219.621716][T19233] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3572'. [ 1220.312849][ T5915] rc_core: IR keymap rc-hauppauge not found [ 1220.329193][ T5915] Registered IR keymap rc-empty [ 1220.341869][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.376078][T19236] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1220.385520][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.410929][T19236] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1220.439706][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1220.480212][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 1220.650291][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.888485][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.943193][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.004722][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.048702][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.103467][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.275696][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.912574][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.170644][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.336821][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1222.471486][ T5915] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1222.527547][ T5915] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1222.615719][ T5915] usb 1-1: USB disconnect, device number 57 [ 1222.774108][ T30] audit: type=1400 audit(1767946395.763:2572): avc: denied { ioctl } for pid=19258 comm="syz.0.3579" path="socket:[67557]" dev="sockfs" ino=67557 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1222.873537][ T30] audit: type=1400 audit(1767946395.763:2573): avc: denied { getopt } for pid=19258 comm="syz.0.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1224.608054][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.710223][T19280] xt_NFQUEUE: number of total queues is 0 [ 1225.142215][ T5915] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1225.484331][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 1225.508368][ T5915] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 1225.521371][ T5915] usb 4-1: config 0 has no interface number 1 [ 1225.539595][ T5915] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 120, using maximum allowed: 30 [ 1225.574468][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1225.660114][ T5915] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1225.675075][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.684512][ T5915] usb 4-1: Product: syz [ 1225.695603][ T5915] usb 4-1: Manufacturer: syz [ 1225.707403][ T5915] usb 4-1: SerialNumber: syz [ 1225.742841][T19290] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1225.771594][ T5915] usb 4-1: config 0 descriptor?? [ 1225.920219][T19292] 8021q: VLANs not supported on lo [ 1225.958153][ T5915] viperboard 4-1:0.61: version 0.00 found at bus 004 address 049 [ 1226.257315][ T5915] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1226.294002][ T5915] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1226.478693][ T5915] viperboard 4-1:0.0: version 0.00 found at bus 004 address 049 [ 1226.509417][ T5915] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1226.521181][ T5915] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1226.593809][ T5915] usb 4-1: USB disconnect, device number 49 [ 1227.141693][T19303] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1228.580099][T19316] bridge_slave_0: left allmulticast mode [ 1228.606541][T19316] bridge_slave_0: left promiscuous mode [ 1228.674005][T19323] program syz.6.3596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1228.848910][T19328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3594'. [ 1229.230448][T19316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.266107][T19316] bridge_slave_1: left allmulticast mode [ 1229.272722][T19316] bridge_slave_1: left promiscuous mode [ 1229.293358][T19316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.467956][T19316] bond0: (slave bond_slave_0): Releasing backup interface [ 1229.628646][T19316] bond0: (slave bond_slave_1): Releasing backup interface [ 1229.779497][T19316] team0: Port device team_slave_0 removed [ 1229.889210][T19316] team0: Port device team_slave_1 removed [ 1229.906273][T19316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.938170][T19316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.373143][T19316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1231.298979][T19354] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1231.459807][T15309] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1231.963236][T15309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.006685][T15309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.047482][T15309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1232.100907][T15309] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1232.119680][T15309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.159995][T15309] usb 4-1: config 0 descriptor?? [ 1232.732645][T15309] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1233.099807][T19371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1233.315257][T19350] CIFS mount error: No usable UNC path provided in device string! [ 1233.315257][T19350] [ 1233.355667][T19350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1233.457307][ T5915] usb 4-1: USB disconnect, device number 50 [ 1233.661934][T19377] ptrace attach of "./syz-executor exec"[19379] was attempted by "./syz-executor exec"[19377] [ 1233.672822][ T30] audit: type=1400 audit(1767946405.932:2574): avc: denied { write } for pid=19363 comm="syz.6.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1233.850067][T19385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1236.785169][T19408] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1237.235953][T19408] netlink: 'syz.6.3615': attribute type 1 has an invalid length. [ 1242.741814][T19444] netlink: 'syz.2.3626': attribute type 4 has an invalid length. [ 1242.945029][T19445] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1243.715417][ T30] audit: type=1400 audit(1767946415.306:2575): avc: denied { read } for pid=19447 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1244.176751][ T30] audit: type=1400 audit(1767946415.372:2576): avc: denied { accept } for pid=19447 comm="syz.7.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.639199][T19465] loop7: detected capacity change from 0 to 16384 [ 1244.878894][T19470] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 1244.940794][T19465] loop7: detected capacity change from 16384 to 0 [ 1244.940821][ C0] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1244.960028][ C0] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1247.301866][T16748] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1247.373374][ T30] audit: type=1326 audit(1767946418.777:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1247.427468][ T30] audit: type=1326 audit(1767946418.777:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1247.489262][T16748] usb 1-1: Using ep0 maxpacket: 8 [ 1247.531799][T19485] Process accounting resumed [ 1247.583250][ T30] audit: type=1326 audit(1767946418.777:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1247.620057][T19490] lo speed is unknown, defaulting to 1000 [ 1247.780663][T16748] usb 1-1: config 7 has an invalid interface number: 4 but max is 1 [ 1247.835756][T16748] usb 1-1: config 7 has an invalid interface number: 74 but max is 1 [ 1247.844682][T16748] usb 1-1: config 7 has an invalid descriptor of length 51, skipping remainder of the config [ 1248.175683][T16748] usb 1-1: config 7 has no interface number 0 [ 1248.186237][ T30] audit: type=1326 audit(1767946418.777:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1248.242510][T16748] usb 1-1: config 7 has no interface number 1 [ 1248.289749][T19495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3639'. [ 1249.124239][T16748] usb 1-1: config 7 interface 74 altsetting 16 endpoint 0x6 has invalid maxpacket 9227, setting to 64 [ 1249.136716][T16748] usb 1-1: config 7 interface 74 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1249.151324][ T30] audit: type=1326 audit(1767946418.777:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.177768][T16748] usb 1-1: config 7 interface 4 has no altsetting 0 [ 1249.185131][T16748] usb 1-1: config 7 interface 74 has no altsetting 0 [ 1249.192615][ T30] audit: type=1326 audit(1767946418.777:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.218843][ T30] audit: type=1326 audit(1767946418.777:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.246882][T16748] usb 1-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=4a.65 [ 1249.257158][T16748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.266061][T16748] usb 1-1: Product: 碵桾䲲憧鱹﹂灟䲎튋㘌⩽ꋋ뭗铬䕌婹㭿稱懱끲ćᕿ惑Ⓟ愞椔耚褿녎 [ 1249.279666][ T30] audit: type=1326 audit(1767946418.777:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.306405][T16748] usb 1-1: Manufacturer: ̻圖大牰۹揄岿ᢜᛡ瑱嗅꫃䦒鸚ⰳ鯲뎻䤟ꡍọ滣콧佬릳㈅큟ᇳꤛꧫ⪝陙鴯ꈫ琳阑摆뢾튤䧉涚챉䚩訏䊢뮸鄔逖鑻⩪銒ق셹ఈ곓ᩬ륚’昔高Ʝ졛믚 [ 1249.333179][ T30] audit: type=1326 audit(1767946418.777:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.363106][T16748] usb 1-1: SerialNumber: syz [ 1249.369881][ T30] audit: type=1326 audit(1767946418.777:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.526597][ T30] audit: type=1326 audit(1767946418.777:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1249.553309][ T30] audit: type=1326 audit(1767946418.777:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1250.044400][T19509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1250.057361][ T30] audit: type=1326 audit(1767946418.777:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1250.084486][ T30] audit: type=1326 audit(1767946418.777:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19487 comm="syz.3.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1250.565648][T16748] uvcvideo 1-1:7.4: Found UVC 0.00 device 碵桾䲲憧鱹﹂灟䲎튋㘌⩽ꋋ뭗铬䕌婹㭿稱懱끲ćᕿ惑Ⓟ愞椔耚褿녎 (0e8d:0004) [ 1250.584942][T16748] uvcvideo 1-1:7.4: No valid video chain found. [ 1250.611138][T16748] usb 1-1: USB disconnect, device number 58 [ 1250.707048][T19511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3643'. [ 1252.203766][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1252.742240][T16748] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1252.903552][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1253.071376][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3646'. [ 1253.105544][T16748] usb 3-1: device descriptor read/64, error -32 [ 1253.736186][T16748] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1254.020846][T19547] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1254.428196][T16748] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1254.453353][T16748] usb 3-1: config 0 has no interface number 0 [ 1254.468371][T16748] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 1254.516465][T16748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.536545][T16748] usb 3-1: Product: syz [ 1254.548445][T16748] usb 3-1: Manufacturer: syz [ 1254.578497][T16748] usb 3-1: SerialNumber: syz [ 1254.612853][T16748] usb 3-1: config 0 descriptor?? [ 1254.633784][T16748] xr_serial 3-1:0.46: More than one union descriptor, skipping ... [ 1255.454995][T16748] usb 3-1: USB disconnect, device number 53 [ 1256.383002][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1256.383021][ T30] audit: type=1326 audit(1767946426.991:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1256.415924][ T30] audit: type=1326 audit(1767946427.000:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1256.468445][ T30] audit: type=1326 audit(1767946427.019:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea7c18df90 code=0x7ffc0000 [ 1256.496362][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1256.509339][ T30] audit: type=1326 audit(1767946427.037:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fea7c190f77 code=0x7ffc0000 [ 1256.536021][ T30] audit: type=1326 audit(1767946427.047:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1256.563657][ T30] audit: type=1326 audit(1767946427.047:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fea7c190f77 code=0x7ffc0000 [ 1256.804548][ T30] audit: type=1326 audit(1767946427.047:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fea7c18e3aa code=0x7ffc0000 [ 1257.044723][ T30] audit: type=1326 audit(1767946427.056:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1257.087893][ T30] audit: type=1326 audit(1767946427.056:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7c18f749 code=0x7ffc0000 [ 1259.007451][ T30] audit: type=1326 audit(1767946427.094:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19562 comm="syz.3.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea7c18df90 code=0x7ffc0000 [ 1260.314141][T19582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1261.043492][T19602] FAULT_INJECTION: forcing a failure. [ 1261.043492][T19602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.058151][T19602] CPU: 1 UID: 0 PID: 19602 Comm: syz.0.3663 Tainted: G L syzkaller #0 PREEMPT(full) [ 1261.058187][T19602] Tainted: [L]=SOFTLOCKUP [ 1261.058195][T19602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1261.058210][T19602] Call Trace: [ 1261.058218][T19602] [ 1261.058226][T19602] dump_stack_lvl+0x16c/0x1f0 [ 1261.058263][T19602] should_fail_ex+0x512/0x640 [ 1261.058297][T19602] _copy_from_user+0x2e/0xd0 [ 1261.058327][T19602] do_arpt_set_ctl+0xb5b/0x1060 [ 1261.058352][T19602] ? preempt_schedule_common+0x44/0xc0 [ 1261.058385][T19602] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1261.058419][T19602] ? __pfx___schedule+0x10/0x10 [ 1261.058451][T19602] ? rcu_is_watching+0x12/0xc0 [ 1261.058472][T19602] ? irqentry_exit+0x1dd/0x8c0 [ 1261.058499][T19602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1261.058526][T19602] ? irqentry_exit+0x1dd/0x8c0 [ 1261.058552][T19602] ? rcu_is_watching+0x12/0xc0 [ 1261.058585][T19602] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1261.058617][T19602] nf_setsockopt+0x8d/0xf0 [ 1261.058650][T19602] ip_setsockopt+0xcb/0xf0 [ 1261.058693][T19602] udp_setsockopt+0x7d/0xd0 [ 1261.058722][T19602] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1261.058754][T19602] do_sock_setsockopt+0xf3/0x1d0 [ 1261.058785][T19602] __sys_setsockopt+0x1a0/0x230 [ 1261.058812][T19602] __x64_sys_setsockopt+0xbd/0x160 [ 1261.058832][T19602] ? do_syscall_64+0x91/0xf80 [ 1261.058859][T19602] ? lockdep_hardirqs_on+0x7c/0x110 [ 1261.058886][T19602] do_syscall_64+0xcd/0xf80 [ 1261.058915][T19602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.058938][T19602] RIP: 0033:0x7f605e78f749 [ 1261.058958][T19602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1261.058978][T19602] RSP: 002b:00007f605c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1261.059000][T19602] RAX: ffffffffffffffda RBX: 00007f605e9e6180 RCX: 00007f605e78f749 [ 1261.059015][T19602] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 000000000000000c [ 1261.059030][T19602] RBP: 00007f605c9f6090 R08: 0000000000000440 R09: 0000000000000000 [ 1261.059044][T19602] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001 [ 1261.059057][T19602] R13: 00007f605e9e6218 R14: 00007f605e9e6180 R15: 00007ffd11ab08a8 [ 1261.059089][T19602] [ 1261.373258][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3664'. [ 1261.841664][T19608] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1262.587039][ T8588] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1262.666936][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3661'. [ 1263.324540][ T8588] usb 4-1: Using ep0 maxpacket: 16 [ 1263.528510][ T8588] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.540685][ T8588] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1263.602784][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1264.045529][ T8588] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1264.077640][ T8588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.123079][ T8588] usb 4-1: config 0 descriptor?? [ 1264.913368][ T8588] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1265.624677][T19647] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1265.939296][ T8588] usb 4-1: USB disconnect, device number 51 [ 1267.110251][T19655] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1267.354816][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3675'. [ 1267.752479][T19649] fido_id[19649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1268.093420][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1268.093437][ T30] audit: type=1400 audit(1767946438.161:2620): avc: denied { read write } for pid=19659 comm="syz.2.3679" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1268.154346][ T30] audit: type=1400 audit(1767946438.198:2621): avc: denied { open } for pid=19659 comm="syz.2.3679" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1268.389641][ T30] audit: type=1400 audit(1767946438.198:2622): avc: denied { ioctl } for pid=19659 comm="syz.2.3679" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1269.121333][ T30] audit: type=1400 audit(1767946439.096:2623): avc: denied { lock } for pid=19661 comm="syz.7.3680" path="socket:[69755]" dev="sockfs" ino=69755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1269.246430][T19678] 9pnet_virtio: no channels available for device syz [ 1269.524688][ T30] audit: type=1400 audit(1767946439.096:2624): avc: denied { map } for pid=19661 comm="syz.7.3680" path="socket:[69778]" dev="sockfs" ino=69778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1269.681455][ T30] audit: type=1400 audit(1767946439.105:2625): avc: denied { connect } for pid=19661 comm="syz.7.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1270.603696][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1270.710506][T19700] 9pnet_virtio: no channels available for device syz [ 1271.785047][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1272.353494][T19724] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1273.661521][T19729] syzkaller0: entered promiscuous mode [ 1273.725126][T19729] syzkaller0: entered allmulticast mode [ 1274.061122][T19737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1274.082162][T19729] 0: reclassify loop, rule prio 0, protocol 800 [ 1274.180997][T19740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19740 comm=syz.2.3699 [ 1274.663288][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3692'. [ 1275.972227][T19763] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1277.292617][T19778] netlink: 'syz.2.3709': attribute type 1 has an invalid length. [ 1277.368341][T19778] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3709'. [ 1277.637081][T19788] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3712'. [ 1278.418158][ T30] audit: type=1326 audit(1767946447.722:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19789 comm="syz.6.3713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3df18f749 code=0x0 [ 1278.493050][T19779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1278.539797][ T30] audit: type=1400 audit(1767946447.937:2627): avc: denied { ioctl } for pid=19789 comm="syz.6.3713" path="/553/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1279.670581][T19804] 9pnet_virtio: no channels available for device syz [ 1281.647413][ T8588] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1282.704687][T19825] netlink: 'syz.6.3724': attribute type 4 has an invalid length. [ 1282.713348][T19825] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3724'. [ 1283.202235][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3717'. [ 1283.409999][ T8588] usb 3-1: Using ep0 maxpacket: 16 [ 1284.285468][ T8588] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1284.299574][ T8588] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1284.318480][ T8588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.327518][ T8588] usb 3-1: Product: syz [ 1284.338995][ T8588] usb 3-1: Manufacturer: syz [ 1284.344250][ T8588] usb 3-1: SerialNumber: syz [ 1284.356156][ T8588] usb 3-1: config 0 descriptor?? [ 1284.366348][ T8588] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1284.378901][ T8588] usb 3-1: Detected FT232R [ 1284.529385][ T8588] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1284.558247][ T8588] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1284.604881][ T8588] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1284.632181][ T8588] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1284.668107][ T8588] usb 3-1: USB disconnect, device number 54 [ 1284.698360][ T8588] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1285.065482][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1285.342009][ T8588] ftdi_sio 3-1:0.0: device disconnected [ 1286.490460][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3726'. [ 1286.570942][T19868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3726'. [ 1287.035760][ T8588] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1287.204700][ T8588] usb 1-1: Using ep0 maxpacket: 32 [ 1287.221704][ T8588] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.247351][ T8588] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.264151][ T8588] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1287.335421][ T8588] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1287.342950][ T8588] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1287.365230][ T8588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.376537][ T8588] usb 1-1: config 0 descriptor?? [ 1287.845997][T15309] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1287.986322][T19884] netlink: 'syz.6.3740': attribute type 4 has an invalid length. [ 1288.010457][T15309] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1288.029184][T15309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.056509][T15309] usb 4-1: Product: syz [ 1288.069762][T15309] usb 4-1: Manufacturer: syz [ 1288.083978][T15309] usb 4-1: SerialNumber: syz [ 1288.108228][T15309] usb 4-1: config 0 descriptor?? [ 1288.124350][ T30] audit: type=1400 audit(1767946456.899:2628): avc: denied { associate } for pid=19885 comm="syz.6.3741" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1288.716306][T15309] usb 4-1: USB disconnect, device number 52 [ 1289.041122][T19879] netlink: 'syz.3.3738': attribute type 1 has an invalid length. [ 1289.131265][T19879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1289.230396][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 1289.668579][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1289.700788][T19898] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1289.823930][T19879] bond2: (slave dummy0): making interface the new active one [ 1289.839806][T19879] dummy0: entered promiscuous mode [ 1289.994985][T19879] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1290.087980][ T8588] usbhid 1-1:0.0: can't add hid device: -71 [ 1290.109527][ T8588] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1290.254035][ T8588] usb 1-1: USB disconnect, device number 59 [ 1290.435862][T19909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3747'. [ 1290.571936][T19909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3747'. [ 1290.894254][T19909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3747'. [ 1291.574920][ T30] audit: type=1400 audit(1767946460.117:2629): avc: denied { write } for pid=19915 comm="syz.2.3749" path="socket:[70834]" dev="sockfs" ino=70834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1291.622043][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1292.336649][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1292.480182][T19898] bond2 (unregistering): (slave veth3): Releasing active interface [ 1292.501835][T19898] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1292.532480][T19898] bond2 (unregistering): Released all slaves [ 1292.694574][T19924] Process accounting resumed [ 1292.919480][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3754'. [ 1293.475143][T19940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3756'. [ 1293.764852][T19947] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1294.470659][T15309] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1294.832697][T15309] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1294.882598][T15309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.904853][T19955] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1294.916445][T15309] usb 1-1: Product: syz [ 1294.921057][T15309] usb 1-1: Manufacturer: syz [ 1295.109953][T15309] usb 1-1: SerialNumber: syz [ 1295.111274][T19954] syzkaller0: entered promiscuous mode [ 1295.121249][T19954] syzkaller0: entered allmulticast mode [ 1295.786725][T15309] usb 1-1: config 0 descriptor?? [ 1296.830094][T15309] usb 1-1: USB disconnect, device number 60 [ 1297.277173][T19985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1297.475032][T19985] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1297.487765][T17430] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1297.678321][T17430] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1297.978565][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3769'. [ 1298.037046][T17430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.072185][T17430] usb 1-1: Product: syz [ 1298.086742][T17430] usb 1-1: Manufacturer: syz [ 1298.093620][T17430] usb 1-1: SerialNumber: syz [ 1298.145108][T17430] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1298.201547][T15309] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1298.461058][T20004] netlink: 'syz.6.3771': attribute type 5 has an invalid length. [ 1298.503080][T20004] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1298.536240][T20005] netlink: 'syz.6.3771': attribute type 5 has an invalid length. [ 1298.545446][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1298.583146][T20004] dummy0: mtu less than device minimum [ 1298.593721][ T30] audit: type=1400 audit(1767946466.694:2630): avc: denied { listen } for pid=20003 comm="syz.6.3771" path=2F3536362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1298.646575][T20004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1299.347810][T15309] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1299.378888][T15309] ath9k_htc: Failed to initialize the device [ 1299.441493][T15309] usb 1-1: ath9k_htc: USB layer deinitialized [ 1300.846046][ T30] audit: type=1401 audit(1767946468.780:2631): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1300.917697][T20031] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3777'. [ 1301.008704][T20031] Unknown options in mask b7f2 [ 1301.346716][T16748] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1301.603234][T17430] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1301.740331][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3781'. [ 1301.773986][T17317] usb 1-1: USB disconnect, device number 61 [ 1301.934554][T17430] usb 4-1: Using ep0 maxpacket: 16 [ 1301.934746][T16748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.944369][T17430] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1301.989628][T17430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.999113][T17430] usb 4-1: Product: syz [ 1302.004034][T17430] usb 4-1: Manufacturer: syz [ 1302.009153][T17430] usb 4-1: SerialNumber: syz [ 1302.021059][ T30] audit: type=1326 audit(1767946469.856:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1302.059914][T16748] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1302.063449][T17430] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1302.084622][T17430] r8152-cfgselector 4-1: config 0 descriptor?? [ 1302.091799][T16748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.100850][ T30] audit: type=1326 audit(1767946469.856:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1302.628361][ T30] audit: type=1326 audit(1767946469.865:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1302.987698][T16748] usb 3-1: config 0 descriptor?? [ 1302.997991][ T30] audit: type=1326 audit(1767946469.865:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1303.078445][ T30] audit: type=1326 audit(1767946469.865:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1303.213782][ T30] audit: type=1326 audit(1767946469.865:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1303.241504][ T30] audit: type=1326 audit(1767946469.865:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1303.654527][T20033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.670075][T20033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.681417][ T30] audit: type=1326 audit(1767946469.865:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20044 comm="syz.0.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605e78f749 code=0x7ffc0000 [ 1303.718909][T20059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.741614][T20059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.760882][T17430] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1303.792432][T17430] r8152-cfgselector 4-1: bad CDC descriptors [ 1303.823323][T17430] r8152-cfgselector 4-1: USB disconnect, device number 53 [ 1303.902897][T16748] uclogic 0003:28BD:0071.0011: interface is invalid, ignoring [ 1304.097896][T20062] loop7: detected capacity change from 0 to 16384 [ 1304.133355][T16748] usb 3-1: USB disconnect, device number 55 [ 1304.340342][T20063] loop7: detected capacity change from 16384 to 0 [ 1304.340387][ C0] I/O error, dev loop7, sector 12288 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 1304.419698][T20066] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3788'. [ 1304.455993][T20066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20066 comm=syz.7.3788 [ 1305.125924][T20078] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 1305.133229][T20078] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1305.142035][T20078] vhci_hcd vhci_hcd.0: Device attached [ 1305.449866][T20076] kAFS: unable to lookup cell '(,cL' [ 1305.459314][T20079] vhci_hcd: connection closed [ 1305.460965][T17937] vhci_hcd vhci_hcd.7: stop threads [ 1305.538682][T17937] vhci_hcd vhci_hcd.7: release socket [ 1305.551351][T17430] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1305.570608][T17937] vhci_hcd vhci_hcd.7: disconnect device [ 1305.804629][T20072] netlink: zone id is out of range [ 1305.810544][T20072] netlink: zone id is out of range [ 1305.821371][T20072] netlink: zone id is out of range [ 1305.827405][T20072] netlink: zone id is out of range [ 1305.833136][T20072] netlink: zone id is out of range [ 1305.839080][T20072] netlink: zone id is out of range [ 1305.844876][T20072] netlink: zone id is out of range [ 1305.850779][T20072] netlink: zone id is out of range [ 1305.857930][T20072] netlink: zone id is out of range [ 1305.863614][T20072] netlink: zone id is out of range [ 1305.904878][T20093] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 1306.520337][T20102] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3795'. [ 1308.580045][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1308.582338][ T30] audit: type=1401 audit(1767946475.993:2664): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1309.937345][T20140] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1309.949591][T20140] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1309.961597][T20140] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1310.168197][T20144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1311.680927][T20167] xt_NFQUEUE: number of total queues is 0 [ 1312.365631][T20175] net_ratelimit: 12 callbacks suppressed [ 1312.365668][T20175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1312.746183][T17430] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1312.912907][T17430] usb 4-1: Using ep0 maxpacket: 32 [ 1312.933629][T17430] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 1312.948176][T17430] usb 4-1: config 0 has no interface number 1 [ 1312.956071][T17430] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 120, using maximum allowed: 30 [ 1312.975939][T17430] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1313.163565][T17430] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1313.276088][T17430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.714498][T17430] usb 4-1: Product: syz [ 1313.723553][T17430] usb 4-1: Manufacturer: syz [ 1313.729085][T17430] usb 4-1: SerialNumber: syz [ 1313.748343][T17430] usb 4-1: config 0 descriptor?? [ 1314.353971][T17430] viperboard 4-1:0.61: version 0.00 found at bus 004 address 054 [ 1314.365803][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3821'. [ 1314.418078][T17430] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1314.438144][T17430] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1314.488302][T17430] viperboard 4-1:0.0: version 0.00 found at bus 004 address 054 [ 1314.544063][T17430] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1314.573802][T17430] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1314.621404][T17430] usb 4-1: USB disconnect, device number 54 [ 1315.443415][T20209] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3827'. [ 1315.736544][T20211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1316.435782][ T30] audit: type=1400 audit(1767946483.383:2665): avc: denied { listen } for pid=20212 comm="syz.0.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1316.614646][ T30] audit: type=1400 audit(1767946483.383:2666): avc: denied { ioctl } for pid=20212 comm="syz.0.3828" path="socket:[71864]" dev="sockfs" ino=71864 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1316.855847][T20224] overlayfs: failed to resolve './file1': -2 [ 1317.098709][T20226] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1317.861413][T20232] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1319.245709][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3834'. [ 1319.746838][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1322.367319][ T30] audit: type=1401 audit(1767946488.818:2667): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1324.287619][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1324.928557][T20306] netlink: 'syz.7.3841': attribute type 1 has an invalid length. [ 1324.973300][T20307] syzkaller0: entered promiscuous mode [ 1324.985680][T20307] syzkaller0: entered allmulticast mode [ 1326.600178][T20325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1329.100325][T20337] 9pnet_fd: p9_fd_create_tcp (20337): problem connecting socket to 127.0.0.1 [ 1329.331423][ T30] audit: type=1400 audit(1767946495.423:2668): avc: denied { connect } for pid=20343 comm="syz.3.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1330.143903][T20342] FAULT_INJECTION: forcing a failure. [ 1330.143903][T20342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1330.190987][T20342] CPU: 0 UID: 0 PID: 20342 Comm: syz.6.3859 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.191033][T20342] Tainted: [L]=SOFTLOCKUP [ 1330.191048][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1330.191062][T20342] Call Trace: [ 1330.191069][T20342] [ 1330.191086][T20342] dump_stack_lvl+0x16c/0x1f0 [ 1330.191135][T20342] should_fail_ex+0x512/0x640 [ 1330.191172][T20342] _copy_from_iter+0x2a4/0x16c0 [ 1330.191230][T20342] ? __alloc_skb+0x220/0x410 [ 1330.191259][T20342] ? __alloc_skb+0x35d/0x410 [ 1330.191309][T20342] ? __pfx__copy_from_iter+0x10/0x10 [ 1330.191352][T20342] ? netlink_autobind.isra.0+0x158/0x370 [ 1330.191397][T20342] netlink_sendmsg+0x820/0xdd0 [ 1330.191436][T20342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1330.191486][T20342] ____sys_sendmsg+0xa5d/0xc30 [ 1330.191515][T20342] ? copy_msghdr_from_user+0x10a/0x160 [ 1330.191543][T20342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1330.191592][T20342] ___sys_sendmsg+0x134/0x1d0 [ 1330.191623][T20342] ? __pfx____sys_sendmsg+0x10/0x10 [ 1330.191698][T20342] __sys_sendmsg+0x16d/0x220 [ 1330.191729][T20342] ? __pfx___sys_sendmsg+0x10/0x10 [ 1330.191769][T20342] ? fput+0x70/0xf0 [ 1330.191799][T20342] do_syscall_64+0xcd/0xf80 [ 1330.191832][T20342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.191856][T20342] RIP: 0033:0x7fe3df18f749 [ 1330.191873][T20342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1330.191898][T20342] RSP: 002b:00007fe3e00fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1330.191932][T20342] RAX: ffffffffffffffda RBX: 00007fe3df3e5fa0 RCX: 00007fe3df18f749 [ 1330.191946][T20342] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 1330.191959][T20342] RBP: 00007fe3e00fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1330.191984][T20342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.191997][T20342] R13: 00007fe3df3e6038 R14: 00007fe3df3e5fa0 R15: 00007ffc29043358 [ 1330.192040][T20342] [ 1331.093846][T20358] loop2: detected capacity change from 0 to 1 [ 1331.149939][T18382] ldm_validate_privheads(): Disk read failed. [ 1331.178454][T18382] Dev loop2: unable to read RDB block 1 [ 1331.195042][T18382] loop2: unable to read partition table [ 1331.212296][T18382] loop2: partition table beyond EOD, truncated [ 1331.242776][T20358] ldm_validate_privheads(): Disk read failed. [ 1331.277145][T20358] Dev loop2: unable to read RDB block 1 [ 1331.283741][T20358] loop2: unable to read partition table [ 1331.303339][T20358] loop2: partition table beyond EOD, truncated [ 1331.325982][T20358] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1331.357116][ T5187] ldm_validate_privheads(): Disk read failed. [ 1331.402083][ T5187] Dev loop2: unable to read RDB block 1 [ 1331.416218][ T5187] loop2: unable to read partition table [ 1331.423363][ T5187] loop2: partition table beyond EOD, truncated [ 1332.768426][ T30] audit: type=1400 audit(1767946498.660:2669): avc: denied { write } for pid=20365 comm="syz.6.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1337.928666][T20401] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1339.283437][ T30] audit: type=1400 audit(1767946504.750:2670): avc: denied { read } for pid=20407 comm="syz.2.3875" lport=64987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1340.546171][ T30] audit: type=1400 audit(1767946505.835:2671): avc: denied { read } for pid=20407 comm="syz.2.3875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1341.593013][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1341.737041][T20443] input: syz0 as /devices/virtual/input/input29 [ 1344.427806][T20459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1344.438553][T20459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1344.458898][T20459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1344.550141][T20462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 1345.391325][T20473] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 1345.424422][T20474] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 1346.376508][T20488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3896'. [ 1346.544587][T20488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20488 comm=syz.0.3896 [ 1347.171668][T20496] 9pnet_virtio: no channels available for device syz [ 1348.098288][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3900'. [ 1352.563802][T20536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1353.544376][T20533] syzkaller0: entered promiscuous mode [ 1353.551176][T20533] syzkaller0: entered allmulticast mode [ 1357.416631][T20580] 9pnet: Found fid 0 not clunked [ 1357.614945][T20586] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3923'. [ 1357.650419][T20583] bond2: entered promiscuous mode [ 1358.028936][T20593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3925'. [ 1358.665160][T17858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.676358][T17858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.706976][T17317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.084875][T17317] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1363.142082][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1363.484241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1372.377731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1389.480716][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1422.318526][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1471.126199][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1471.133982][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20593/1:b..l [ 1471.143446][ C0] rcu: (detected by 0, t=10503 jiffies, g=112397, q=177 ncpus=2) [ 1471.152033][ C0] task:syz.2.3925 state:R running task stack:24296 pid:20593 tgid:20592 ppid:16428 task_flags:0x40054c flags:0x00080000 [ 1471.168570][ C0] Call Trace: [ 1471.172199][ C0] [ 1471.175436][ C0] ? __schedule+0x10b9/0x6150 [ 1471.180594][ C0] __schedule+0x1139/0x6150 [ 1471.185566][ C0] ? __pfx___schedule+0x10/0x10 [ 1471.190916][ C0] preempt_schedule_irq+0x51/0x90 [ 1471.196484][ C0] irqentry_exit+0x1d8/0x8c0 [ 1471.201538][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1471.208113][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 1471.213829][ C0] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 bd ee 0e 0f 82 74 02 00 00 8b 35 ba ed ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1471.235484][ C0] RSP: 0018:ffffc9000c1973b8 EFLAGS: 00000206 [ 1471.242151][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000ace16c1f [ 1471.250909][ C0] RDX: 0000000000000000 RSI: ffffffff8daa80f3 RDI: ffffffff8bf2b380 [ 1471.259668][ C0] RBP: 0000000000000002 R08: 0000000027c185dd R09: 00000000d27c185d [ 1471.268427][ C0] R10: 0000000000000002 R11: ffff8880325c8b30 R12: 0000000000000000 [ 1471.277184][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1471.285968][ C0] ? tlb_finish_mmu+0x168/0x7c0 [ 1471.291323][ C0] ? exit_mmap+0x3f9/0xb60 [ 1471.296177][ C0] ? __mmput+0x12a/0x410 [ 1471.300847][ C0] ? mmput+0x62/0x70 [ 1471.305128][ C0] ? do_exit+0x7d7/0x2bd0 [ 1471.309882][ C0] __update_page_owner_free_handle.constprop.0+0x4d/0x4a0 [ 1471.317705][ C0] ? __update_page_owner_free_handle.constprop.0+0x3c/0x4a0 [ 1471.325723][ C0] __reset_page_owner+0x93/0x1a0 [ 1471.331153][ C0] free_unref_folios+0xa22/0x1610 [ 1471.336675][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1471.343069][ C0] folios_put_refs+0x4be/0x750 [ 1471.348307][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1471.354124][ C0] free_pages_and_swap_cache+0x3f0/0x4a0 [ 1471.360312][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1471.367137][ C0] ? __pfx___might_resched+0x10/0x10 [ 1471.372957][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1471.379545][ C0] tlb_finish_mmu+0x168/0x7c0 [ 1471.384702][ C0] exit_mmap+0x3f9/0xb60 [ 1471.389369][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1471.394612][ C0] ? __lock_acquire+0x436/0x2890 [ 1471.400047][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 1471.406154][ C0] __mmput+0x12a/0x410 [ 1471.410643][ C0] mmput+0x62/0x70 [ 1471.414745][ C0] do_exit+0x7d7/0x2bd0 [ 1471.419316][ C0] ? lock_acquire+0x179/0x330 [ 1471.424463][ C0] ? __pfx_do_exit+0x10/0x10 [ 1471.429619][ C0] ? find_held_lock+0x2b/0x80 [ 1471.434779][ C0] do_group_exit+0xd3/0x2a0 [ 1471.439748][ C0] get_signal+0x2671/0x26d0 [ 1471.444720][ C0] ? __pfx_get_signal+0x10/0x10 [ 1471.450058][ C0] ? do_futex+0x122/0x350 [ 1471.454823][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 1471.460922][ C0] ? fput+0x70/0xf0 [ 1471.465100][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1471.471883][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1471.477714][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 1471.483537][ C0] do_syscall_64+0x4ee/0xf80 [ 1471.488591][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.495254][ C0] RIP: 0033:0x7f1e07b8f749 [ 1471.500108][ C0] RSP: 002b:00007f1e08af90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1471.509355][ C0] RAX: fffffffffffffe00 RBX: 00007f1e07de5fa8 RCX: 00007f1e07b8f749 [ 1471.518123][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e07de5fa8 [ 1471.526881][ C0] RBP: 00007f1e07de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.535734][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.544682][ C0] R13: 00007f1e07de6038 R14: 00007ffd1e6f41f0 R15: 00007ffd1e6f42d8 [ 1471.553554][ C0] [ 1471.556873][ C0] rcu: rcu_preempt kthread starved for 10542 jiffies! g112397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1471.569374][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1471.580428][ C0] rcu: RCU grace-period kthread stack dump: [ 1471.586889][ C0] task:rcu_preempt state:R running task stack:27064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1471.601742][ C0] Call Trace: [ 1471.605344][ C0] [ 1471.608562][ C0] ? __schedule+0x10b9/0x6150 [ 1471.613705][ C0] __schedule+0x1139/0x6150 [ 1471.618672][ C0] ? __pfx___schedule+0x10/0x10 [ 1471.624099][ C0] ? find_held_lock+0x2b/0x80 [ 1471.629262][ C0] ? schedule+0x2d7/0x3a0 [ 1471.634026][ C0] schedule+0xe7/0x3a0 [ 1471.638592][ C0] schedule_timeout+0x123/0x290 [ 1471.644054][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1471.650171][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1471.656226][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1471.662633][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1471.668663][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1471.673906][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1471.679752][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1471.685487][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1471.690938][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1471.696284][ C0] rcu_gp_kthread+0x26d/0x380 [ 1471.701428][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1471.707141][ C0] ? rcu_is_watching+0x12/0xc0 [ 1471.712374][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1471.718092][ C0] ? __kthread_parkme+0x19e/0x250 [ 1471.723617][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1471.729429][ C0] kthread+0x3c5/0x780 [ 1471.733903][ C0] ? __pfx_kthread+0x10/0x10 [ 1471.738951][ C0] ? rcu_is_watching+0x12/0xc0 [ 1471.744191][ C0] ? __pfx_kthread+0x10/0x10 [ 1471.749235][ C0] ret_from_fork+0x983/0xb10 [ 1471.754286][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1471.759912][ C0] ? __switch_to+0x7af/0x10d0 [ 1471.765282][ C0] ? __pfx_kthread+0x10/0x10 [ 1471.770335][ C0] ret_from_fork_asm+0x1a/0x30 [ 1471.775613][ C0] [ 1471.778922][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1471.785870][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.797509][ C0] Tainted: [L]=SOFTLOCKUP [ 1471.802248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1471.813492][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1471.819701][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1471.841461][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1471.848131][ C0] RAX: 0000000004226a27 RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 1471.856984][ C0] RDX: 0000000000000000 RSI: ffffffff8dace187 RDI: ffffffff8bf2b380 [ 1471.865855][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 1471.874730][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 1471.883584][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 1471.892341][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1471.902179][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1471.909411][ C0] CR2: 000000110c36a15d CR3: 0000000047e41000 CR4: 00000000003526f0 [ 1471.918172][ C0] Call Trace: [ 1471.921792][ C0] [ 1471.925000][ C0] default_idle+0x13/0x20 [ 1471.929765][ C0] default_idle_call+0x6c/0xb0 [ 1471.935191][ C0] do_idle+0x38d/0x510 [ 1471.939675][ C0] ? __pfx_do_idle+0x10/0x10 [ 1471.944739][ C0] cpu_startup_entry+0x4f/0x60 [ 1471.950000][ C0] rest_init+0x16b/0x2b0 [ 1471.954655][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1471.960461][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1471.966556][ C0] start_kernel+0x3ef/0x4d0 [ 1471.971522][ C0] x86_64_start_reservations+0x18/0x30 [ 1471.977529][ C0] x86_64_start_kernel+0x130/0x190 [ 1471.983146][ C0] common_startup_64+0x13e/0x148 [ 1471.988778][ C0]