last executing test programs: 17m56.403860376s ago: executing program 0 (id=3986): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x74000000, '\x00'/100}}}}}}, 0x0) 17m56.132455256s ago: executing program 0 (id=3989): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x31, 0x42, {0x42, 0x6, "bd6671b0e095a4544cc87bd173c2bcb7f24e3c5cc2c699bce881aa49939f72840902d2d6d14ffcb6a8b02efe1f5f5fde76982cf734a57e67470cb750ed529948"}}, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x8850) writev(r0, &(0x7f0000000040), 0x2) 17m54.500509569s ago: executing program 0 (id=3999): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dvb_frontend(0x0, 0x0, 0x141000) socket$rds(0x15, 0x5, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000130000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x907bd84c5f157ae4) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="2c1ffae7b9cc8d8ce93725f4161a589f6f31d83a625645807d8dd6498b836bec3b53bbf487653a42c2c4b11785"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) epoll_create(0xff9) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c0042, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+me'], 0xc) 17m53.990035727s ago: executing program 0 (id=4000): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)=0x4) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0xf98, 0x11, 0xff, @local, @private1, {[@routing={0x87, 0xa, 0x1, 0x0, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x62, 0x2, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x10, [@mcast1]}, @dstopts={0x5c, 0x1c3, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x80, [0xe]}}, @generic={0x5, 0xdff, "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"}]}, @hopopts={0x3c}], "edac99e59c7b644049a480fdc35c6daf244fe284f5df0717f3ffe98acae00df1e96f3eedd0018278768074f81679bd72aa936258286a1517a3757fd533420dae17fee6db3adfcfff7b53f8ba888b63b08b5c0c6116515a2f87ff85e3fafe36bfcbfd499a2630e3ae2b91af23e8cfdbf50ab98b99d6c0e5e376e34ae8a7b10223c3ca60857af1bea34bb950e912fe655f2965a18b6ab993592a8c6a75411b550d6f1e1975d1f5a80fb5205579cd5d29a17d839e0542d38e96ced4beb9a03a80e133a3fa08fdf52febf93564594c92db5036049c66b78e3fde93d8491c377d237b"}}}}, 0xfce) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) close(0x3) 17m53.530780911s ago: executing program 0 (id=4004): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000500140000007ef506be0000000000703c000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 17m53.256300393s ago: executing program 0 (id=4006): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x5, 0x1b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x88, 0xcd, 0x9d, 0x8, 0x2100, 0x9e55, 0xe1a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6, 0x8f, 0x60, 0x5}}]}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @stepwise={0x0, 0x2, 0x7, 0x0, 0x40000000, 0x5}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x34}}, 0x801) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000300)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd26, 0x70bd2a, 0x70bd2d, 0xafe0}}]}, 0xd4}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 17m38.695786757s ago: executing program 32 (id=4006): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect(0x5, 0x1b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x88, 0xcd, 0x9d, 0x8, 0x2100, 0x9e55, 0xe1a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6, 0x8f, 0x60, 0x5}}]}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @stepwise={0x0, 0x2, 0x7, 0x0, 0x40000000, 0x5}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, r2, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x34}}, 0x801) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000300)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd26, 0x70bd2a, 0x70bd2d, 0xafe0}}]}, 0xd4}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 10m47.403040522s ago: executing program 5 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000020000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000200000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb050003000100000024000100000000000000000000000000000000000000000000000000000000000000000006000500000000005c000080060005000800000008000a000101000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 10m46.931582482s ago: executing program 5 (id=6001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000001fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 10m46.088140633s ago: executing program 5 (id=6004): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffe8000000000000000000000000003aaff0200000000000000000000000000014e1d4e20006490"], 0x0) 10m45.033084473s ago: executing program 5 (id=6009): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000060a0b04000000000000000002000000300004802c0001800a000100696e6e653e519faf1c0002800800024000000084080003400000000708000140000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r4, 0x0) keyctl$instantiate(0xc, r1, &(0x7f0000000240)=ANY=[@ANYBLOB="6e657720eeda72797074667320757365723a73797220303030303070304030303030303030303430393100"], 0x2b, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000083f558c570616e00004280080015008618050005001700fe00000004001200"], 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'macvlan0\x00', &(0x7f0000000400)=@ethtool_rxfh={0x46, 0x5, 0x101, 0x200, 0xc0, "4891b5", 0x0, [0xa0, 0x5, 0x95, 0x2]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d003, 0x0) 10m42.443156531s ago: executing program 5 (id=6017): r0 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3889fce9a567ee3d26ff0000", @ANYRES32=r4, @ANYBLOB="10005e800400010008000200fcffffff"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00ab907e97feffff", @ANYRES16=r5, @ANYBLOB="000125bd7000fcdbdf25700000000c00990003000000690000000a0006000802110000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ppoll(&(0x7f0000000040)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r6, &(0x7f00000000c0)="a5", 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r10, &(0x7f0000000180), 0x400008a, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000180)) r11 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 10m41.984558208s ago: executing program 5 (id=6020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x5000000}]}}) gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 10m40.787001248s ago: executing program 33 (id=6020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x5000000}]}}) gettid() openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 29.879049214s ago: executing program 4 (id=8265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x28, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb, 0x1000000}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = getpid() r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$isdn(0x22, 0x2, 0x10) r11 = socket$isdn(0x22, 0x2, 0x2) r12 = dup3(r11, r10, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r9, &(0x7f0000000280)={r12, r8, 0x7}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 26.923214485s ago: executing program 4 (id=8269): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0xba8, 0x0, 0x168, 0x10, 0x908, 0xb, 0xad8, 0x250, 0x250, 0xad8, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x908, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x200}, {0x7}, {0xf41, 0x2}, {0x80000000}, {0xa0000}, {0x2}, {0xb0, 0x2}, {0xfffffff3, 0x3}, {0x6, 0x1}, {0x9, 0x3}, {0x9, 0x3}], [{0x2, 0x3}, {0x7fff, 0x4}, {0xfff, 0x8}, {0x4, 0x2}, {0x1, 0xb3}, {0x3, 0x10001}, {0x747, 0x8001}, {0x4, 0xd}, {0x48f5, 0xfffffffa}, {0x0, 0x7ff}, {0xfff}], 0x2, 0x1}, {[{0x81}, {0x80000000, 0x1}, {0x6, 0x3}, {0x8, 0x2}, {0xfffffffa, 0x1}, {0x401}, {0x7, 0x2}, {0x7}, {0x3df2, 0x99ffdcbf898bd3b2}, {0x8000}, {0xa, 0x2}], [{0x4, 0x8000}, {0xfffffff8, 0xfff}, {0x20, 0x200}, {0x5, 0x6}, {0x5000, 0x5}, {0x3, 0x3}, {0x2000000, 0x5e}, {0x7, 0x7}, {0x3, 0xdc}, {0x9, 0x3}, {0x5, 0x7fffffff}], 0x8, 0xb}, {[{0x6, 0xc44cb69118c6bc3}, {0x4, 0x3}, {0xfffffff9, 0x3}, {0x1000}, {0x9, 0x3}, {0xff, 0x3}, {0x6, 0x2}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}], [{0x80000001}, {0x8, 0xf30}, {0x9, 0x577}, {0xd, 0xa18}, {0x3, 0x2}, {0x0, 0xd4}, {0x4, 0x10000}, {0x6, 0x7e}, {0xf, 0x6}, {0x1, 0x2}, {0x8, 0x5}], 0x5, 0x7}, {[{0x6, 0x3}, {0x6b43, 0x1}, {0xffffff5f}, {}, {0x4c, 0x1}, {0x7, 0x3}, {0x8, 0x2}, {0xc3}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x1}], [{0x1, 0x9}, {0x2, 0xff}, {0x0, 0x40}, {}, {0x80000001, 0x5}, {0x3, 0x3}, {0xffffff60, 0x5}, {0x10, 0x7f}, {0x5, 0xfff}, {0x9, 0x7ff}, {0xec7f, 0x8}], 0x0, 0x8}, {[{0x8, 0x3}, {0x4, 0x3}, {0x0, 0x21e5da8cfd88894d}, {0x7f, 0x1}, {0x4, 0x2}, {0x28bb, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7f, 0x2}, {0xfff, 0x3}, {0xffff5887, 0x1}], [{0x2}, {0xc768, 0xb0e}, {0x3, 0x8}, {0x8, 0x2}, {0x9, 0x8a0}, {0x5, 0xd0e}, {0x2, 0xfffffff9}, {0x9, 0x59}, {0xc000, 0x2f9}, {0x800, 0x3dcf}, {0xfffffffb, 0xe}], 0x9, 0x4}, {[{0x5, 0x3}, {0x6, 0x3}, {0x117452e, 0x1}, {0x0, 0x2}, {0xf7, 0x3}, {0xaa5a}, {0x8000, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x80, 0x3}, {0x5}], [{0x7, 0x1}, {0x8000, 0x8}, {0x4, 0x5}, {0x7, 0x6}, {0x0, 0x7a3}, {0x5, 0x4}, {0x8, 0x2}, {0x6c0, 0x7fffffff}, {0x0, 0x5}, {0x81, 0x3}, {0xa, 0x1}], 0x6, 0xb}, {[{0x4, 0x1}, {0x5, 0x1}, {0x1ff, 0x1}, {0x2, 0x2}, {0xb, 0x3}, {0xfffffff8, 0x2}, {0x7, 0x2}, {0x0, 0x2}, {0xff, 0x1}, {0x6, 0x1}, {0x9, 0x3}], [{0xc6a7, 0x7}, {0x4, 0x9}, {0x5, 0x10000}, {0x2, 0xeb}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x400, 0x4}, {0x400, 0x2}, {0x6, 0x40}, {0x10, 0xeb}], 0x1, 0x5}, {[{0x1, 0x2}, {0x1, 0x1}, {0xab6, 0x1}, {}, {0x7}, {0x101, 0x1}, {0xc, 0x30cfb1736fa8c266}, {0xfd, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x1}], [{0x41b, 0x70}, {0x7f, 0xaf}, {0x0, 0x8}, {0xc62, 0xfffffffd}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x4}, {0x3, 0x4}, {0x10, 0x6}, {0x0, 0x9}, {0x40, 0x1}], 0x5, 0x5}, {[{0xc07}, {0x5}, {0x6, 0x2}, {0x800, 0x3}, {0x61}, {0x3, 0x2}, {0x94, 0x3}, {0x80, 0x3}, {0x8, 0x1}, {0xada, 0x1}, {0xd, 0x1}], [{0x1, 0x400}, {0x7, 0x57}, {0x9, 0xab}, {0x5, 0x8}, {0xffffffff, 0x200}, {0x9a2a, 0xdd}, {0x4ee, 0x100}, {0x8003, 0x6}, {0x5, 0xb0d9}, {0x1, 0x17000000}, {0x8000, 0xd}], 0x8, 0xb}, {[{0xad40, 0x2}, {0x91}, {0xfff}, {}, {0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x8, 0x3}, {0x4}, {0x2}, {0x4}], [{0x1ff, 0x8}, {0x0, 0xfb6b}, {0xfff, 0xfffffbff}, {0x5, 0x4}, {0x1, 0x800}, {0x10001, 0x3}, {0x2, 0x6}, {0x4, 0x5}, {0x0, 0x4c55}, {0x8, 0x100}, {0x2, 0x9}], 0x3, 0x3}, {[{0x4, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x401, 0x2}, {0x9}, {0x8, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x40, 0x2}, {0xffffffff, 0x2}, {0x18000000, 0x3}], [{0x4a, 0xfffffffa}, {0x9, 0x81}, {0x800, 0x3ff}, {0x3ff, 0x8}, {0x65, 0x5}, {0x0, 0x3}, {0x2, 0x7ff}, {0x2, 0x82}, {0x6, 0x5}, {0x1}, {0x9, 0x10001}], 0x2}]}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0xfffffffd, 0x10000, 0x80000001, 0x82}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3cd}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc08) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080), 0x0) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 23.788439419s ago: executing program 4 (id=8282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket(0x2b, 0x80801, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf2501"], 0x38}}, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x4000) 18.864969976s ago: executing program 4 (id=8298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x2200}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 18.736087496s ago: executing program 4 (id=8301): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000000300)="aacccbbb84d192d745b6105150378cbf48a99f95b69e6e72c79b12cded851127e926ee93995fdbe14bdaf6b3341583b28cb3980b1046f3c28a3a5acecc7f8c4b5d0bc31262d352877a8061876cc018e2a207eddba2864ca8582c3cdaffff7f6cd8d5eb208a25ddfc5bff7cbca5346a7969be6a50cb1bcb72cebb9e1e43ee1c19f0f1285c4b27abd8a9ce4529573a27bceae36387129a174777d80599b340498b7e033809d1e57beba07e0e", 0xab) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) shutdown(r0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 17.654597085s ago: executing program 4 (id=8305): sync() sync() mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/185, 0xb9) sync() prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x8f, "4e325c023ce47e18174db6e0b8302b9aff97360db6af4895e95749fb8c10300d6e11dc7b6ab02e90a12d258424d29dd958ca395d809a9178119d9a334c398b31565fb9bb8da95251dedafe03435cb255ac5f88725fb0feaf66f13c4fbad7f844ddb3628b8918c540e00e2befe7ef79e278604f4462f46b54651cf3344da8268b192c626f4f09142dd4be8ed83c4d89"}, &(0x7f0000000280)=0x97) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0xf9d, 0x10}, 0xc) sync() read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000002340)=""/4096, 0x1000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x3, &(0x7f0000003340)) ioctl$RTC_WIE_OFF(r1, 0x7010) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003680)={'sit0\x00', &(0x7f0000003580)={'gre0\x00', 0x0, 0x700, 0x10, 0x2, 0xea8, {{0x38, 0x4, 0x1, 0x2, 0xe0, 0x66, 0x0, 0xc, 0x4, 0x0, @private=0xa010101, @private=0xa010102, {[@noop, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "e1affc67ba23b4bd9deb8e9f"}]}, @cipso={0x86, 0x42, 0x1, [{0xea8ddcc0e44309e5, 0xf, "e655ded1fedd4030e8f1d687b9"}, {0x6, 0x7, "98a90e534b"}, {0x5, 0xd, "29071bef02dcf43adb58ea"}, {0x6, 0x9, "bfb5f823bd7c38"}, {0x0, 0x10, "76a2d53c169391381f89c2379a4f"}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xd3, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@private=0xa010100, 0x10000}, {@multicast1, 0x3}, {@remote, 0x1000}, {@loopback, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x6e, 0x1, 0x8, [{@loopback, 0x80000001}, {@rand_addr=0x64010101, 0x9}, {@local, 0xffffffff}, {@local, 0x7fffffff}]}, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe8bd}, {@empty, 0x8}, {@private=0xa010100, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff430}]}]}}}}}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0x6, 0x17, &(0x7f0000003380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x0, 0x0, 0xb, 0xc, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003440)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000003480)=""/204, 0x41100, 0x10, '\x00', r7, @xdp=0x25, r1, 0x8, &(0x7f00000036c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000003700)={0x3, 0xf, 0x8, 0x1ff}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f00000037c0)=[r8], &(0x7f0000003800)=[{0x2, 0x2, 0x8, 0x1}, {0x2, 0x3, 0x9, 0x7}], 0x10, 0x3}, 0x94) syz_open_dev$usbfs(&(0x7f0000003900), 0x0, 0x20800) close_range(r0, r8, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x1) sync() ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000003a40)={0x5, 0x6, &(0x7f0000003940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003980)=[0x0], &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000003ec0)={&(0x7f0000003a80)={{@hyper, 0x7fffffff}, {@host, 0x3ff}, 0x400, "09eca940d7af9acd2308f51b2d8f5eef7589997d9427e38df8d690d58dd82f84803cf030bbd826f82e98e481ff5a1d750909cfce736fca22555325fa7e5be56b94fcb0e4644fee58f6ea408154aeac581f387fadd72bfd6511df6eebb4b33d687e93f9145dee57e80e20e9c9b1c320b323b17e19f23e03f48631a0153d0b33f3b60559e8827296da77f05a23b33dc8946c9ae5dcb6a99c323175aee57b4dd9af265f0b48974907b4d57bee6a372f0a7db1e62646a7b1b4fec9e5e5a3a73c2f336b7b3cb714c7d15b96df2147ca3ccb9faa5e0f56e8baf4dfe0f15a6698631edcfd249cc9bd19e934f68f7fd540168d1596918ebdedcd92ef5c2376308fce62fe1edbee91d465075b6f6d6f03b4ac3cc27abdb5943936ff6acdb747dded575be331ac554a2264226a3bc4b7c13c7e72f862b910a26a31c8720bf7bbaa6b450deb0d79300d5416d72d1a4470fe845e4011dd14c17999dc94255034d79ff7524dae38c7d82afca19a845c3e5ef3d0bfea154a7999debcbfcd289d59ef1fcfb4aaa658ea08fde1389f1c3f28c45db2ae3331c658aaf3ddb7ab05e3b21ed079b7c5869e779dd4c3882a438194672b889485db175599393b093afed29831b3b614d6a4e1234144319e5bfde72e390e7991260027e033825f89bf01168724814191e5dbe710fb8ea06945ccee2989c5d93e8f9401055ecdb6d54b4157f531362b17fb715a8b275cc10503555c5b51952cff2c3a71d54c569acb4384e95b315938cdeaafceac46eb2184e6186989da21a3532e23cb9574ce6264955973e3a45f0d34b5f2f278255cba6830f28cc1848d7a363bbc20600b0b0977a6cd3087216d00dc4149fd8654982833aab82d464f042e5541c237d2456c52e02e935aed14ebccff436b523ba954b6e2b7fcc182daef7aec29b4b028b97b6dac5bf56f642243b99819c82d773d0e43cc10a2ef2433737e260fe4be1e257400c1ee3b23ef801bdfc5fc046e1069f62792f2481ebb61e376d7c7f9555f3d34823492e12f8743761aac85dc0680c8b5f4f66436f170abd8bf09265176ccecb2373d9b76429d0f0413b2eeb6f40c4df617be8921bd465f69653694ac5781d2ce0e7603cd3b41fef9d15b3398b6ad8d601e6b27da640ba2fc95046d940dde032fa61664c60ac4ef7384c1302b48685e32e74c988be8f3b8e4759a494c838136132a4d588d1503f2145cdc345a980ff2e07111d2153aa08bd5193d9fbc06b21b8dcf289e786f75233c5c8938736e8d1d67d0754a6a5712ae50693ff8a62563dd14857e54c3f37c2c453587d7372de0350d9244da753ae062a7a2f9a9f6dceff0d6ebd7f160d6c7c32ac5cbd548ac964821159b454a7a82e350dbcadb467d07ee25b6f5bb8fa10edb3197217e20e45e5d1f6d2151d109f4e4f6254ede4b35b074a66ca0fb47e9104125908490c4"}, 0x418, 0x9}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) pipe(&(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r9, &(0x7f0000004000)={0x1e8, 0xfffffffffffffff5, r3, [{{0x0, 0x1, 0xa, 0x800, 0x9, 0xa53, {0x4, 0xb, 0x8, 0x9b68, 0xdd0, 0x80000000, 0x9, 0x7fff, 0xa, 0x4000, 0x2, r4, r5, 0x1ff, 0x9c}}, {0x6, 0xffff, 0x0, 0x1ffc}}, {{0x2, 0x1, 0xc1d9, 0x8, 0x60000000, 0x7fffffff, {0x1, 0xfffffffffffffffb, 0x3, 0x516f, 0x3, 0x7, 0x7, 0x9, 0x7714, 0xc000, 0x7, r4, 0x0, 0x80000000, 0xa}}, {0x3, 0xfffffffffffffefe, 0x9, 0x6, '*:.\x8e!\\#$%'}}, {{0x6, 0x0, 0x5, 0x8, 0x8, 0x2537343e, {0x6, 0xfffffffffffffffd, 0xd8c, 0x7fff, 0xd5d, 0xfff, 0xfff, 0x0, 0x9, 0x4000, 0x3, r4, r5, 0xfffffffc}}, {0x0, 0x10000, 0x0, 0xfffffffd}}]}, 0x1e8) 9.676705272s ago: executing program 1 (id=8328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x26, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000280), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) 9.499960478s ago: executing program 1 (id=8329): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0xfffffffc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00003b5000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xfffffffffffffcec) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='cdg', 0x3) shutdown(r4, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x40, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRESHEX]) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x8]}, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 8.192239269s ago: executing program 3 (id=8332): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6048800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000005002e002000000008000300", @ANYRES32=r3, @ANYBLOB="0555f4ae1a53e6be605979024c1facdf0840d1e86935cc436afd4f1ba58e0c86b64b72d0"], 0x2c}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x12) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0xf) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="1401000020000103000000000000000001"], 0x114}], 0x1, 0x0, 0x0, 0x400c004}, 0x0) 8.151284961s ago: executing program 2 (id=8333): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_', @ANYRESHEX=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) listen(0xffffffffffffffff, 0x10040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x3f00}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 7.774007008s ago: executing program 2 (id=8334): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) bind$netrom(0xffffffffffffffff, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000280)="0859657e0336b928c78c8840ddbf3c3411c9fb3ab0ff137dbc8e41e74fd6cb6306ad9c6d3adcdc86cd78d9f4", 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 7.588246461s ago: executing program 2 (id=8335): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000000300)="aacccbbb84d192d745b6105150378cbf48a99f95b69e6e72c79b12cded851127e926ee93995fdbe14bdaf6b3341583b28cb3980b1046f3c28a3a5acecc7f8c4b5d0bc31262d352877a8061876cc018e2a207eddba2864ca8582c3cdaffff7f6cd8d5eb208a25ddfc5bff7cbca5346a7969be6a50cb1bcb72cebb9e1e43ee1c19f0f1285c4b27abd8a9ce4529573a27bceae36387129a174777d80599b340498b7e033809d1e57beba07e0e", 0xab) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) shutdown(r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 6.9961034s ago: executing program 3 (id=8338): socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x4000ffff, 0x5, 0x4, 0x0, 0x12}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x20000, 0x2, {0x0}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r5], 0xfffffdef}}, 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 6.629189762s ago: executing program 2 (id=8339): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x4e, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x7fff]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x9, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x404000, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x10001}]}) chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000a40)={0x3, 0x3, 0xa000200000a958, 0x4, 0x200, 0xf8, 0x5, 0xfffffffffffffff8, 0xfff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x28c881, 0xc4) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000240)=0x0) read$FUSE(r6, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x4, 0x0, {r7}, {r8}, 0x5, 0x6}) 6.275604155s ago: executing program 6 (id=8340): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0x3, 0x1}, 0x6) (async) syz_usb_connect(0x2, 0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) 6.119903598s ago: executing program 1 (id=8341): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) listen(r2, 0x39b3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000600000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r7 = socket$unix(0x1, 0x17f, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) 5.218688057s ago: executing program 3 (id=8342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x5}) (async) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) (async) semop(0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff}, 0x94}}, 0x4000800) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x8e) fchdir(r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c0c1) (async) accept4$unix(r9, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x0) pivot_root(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)='./control\x00') (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040601080000040902020073797a300000000000482025fc18c84366"], 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x4000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7779754fcf6066646e6f3d", @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) 5.100810492s ago: executing program 3 (id=8343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e26, @broadcast}, 0x10, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000600)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 5.016298062s ago: executing program 1 (id=8344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e26, @broadcast}, 0x10, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000600)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 4.438269762s ago: executing program 6 (id=8345): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) bind$netrom(0xffffffffffffffff, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000280)="0859657e0336b928c78c8840ddbf3c3411c9fb3ab0ff137dbc8e41e74fd6cb6306ad9c6d3adcdc86cd78d9f4", 0x2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 4.373834657s ago: executing program 3 (id=8346): creat(&(0x7f0000000080)='./bus/file0\x00', 0x45) creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x157b84ad, 0x766, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000300000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, 0x0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendfile(r3, r2, 0x0, 0x10000200000200) socket$inet(0x2, 0x1, 0x100) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) userfaultfd(0x80801) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26, 0x0, 0x0, 0x206}, 0x28) 4.346939395s ago: executing program 2 (id=8347): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {0x9}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x20}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}, {}, 0x88}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) io_setup(0x10000, &(0x7f0000000800)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12120) 4.322166746s ago: executing program 1 (id=8348): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setrlimit(0xa, &(0x7f0000000100)={0x7b, 0x1ec7}) ioctl$TIOCMIWAIT(r1, 0x5453, 0x300fff2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000180)={@loopback, @local, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000003140100000000000000000109000200f9007278650014003300766c616e3100"/46], 0x38}, 0x1, 0x0, 0x0, 0x2000c889}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}, 0x1, 0x0, 0x0, 0x4008815}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000880)=""/91, 0x5b}], 0x7) 4.148208651s ago: executing program 6 (id=8349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write(r1, &(0x7f0000000300)="aacccbbb84d192d745b6105150378cbf48a99f95b69e6e72c79b12cded851127e926ee93995fdbe14bdaf6b3341583b28cb3980b1046f3c28a3a5acecc7f8c4b5d0bc31262d352877a8061876cc018e2a207eddba2864ca8582c3cdaffff7f6cd8d5eb208a25ddfc5bff7cbca5346a7969be6a50cb1bcb72cebb9e1e43ee1c19f0f1285c4b27abd8a9ce4529573a27bceae36387129a174777d80599b340498b7e033809d1e57beba07e0e", 0xab) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(0x0, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) shutdown(r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 3.352769741s ago: executing program 1 (id=8350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket(0x2b, 0x80801, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf2501"], 0x38}}, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x4000) 3.248666377s ago: executing program 2 (id=8351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket(0x2b, 0x80801, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf2501"], 0x38}}, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x4000) 3.109926011s ago: executing program 6 (id=8352): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x4e, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x7fff]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x9, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x404000, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x10001}]}) chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000a40)={0x3, 0x3, 0xa000200000a958, 0x4, 0x200, 0xf8, 0x5, 0xfffffffffffffff8, 0xfff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x28c881, 0xc4) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000240)=0x0) read$FUSE(r6, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x4, 0x0, {r7}, {r8}, 0x5, 0x6}) 2.996081409s ago: executing program 3 (id=8353): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x4e, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x7fff]}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0x9, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x404000, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7}, 0x1c) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x10001}]}) chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000a40)={0x3, 0x3, 0xa000200000a958, 0x4, 0x200, 0xf8, 0x5, 0xfffffffffffffff8, 0xfff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x28c881, 0xc4) mkdirat(r6, &(0x7f0000000180)='./bus\x00', 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000240)=0x0) read$FUSE(r6, &(0x7f0000000ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x4, 0x0, {r7}, {r8}, 0x5, 0x6}) 730.070194ms ago: executing program 34 (id=8305): sync() sync() mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/185, 0xb9) sync() prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x8f, "4e325c023ce47e18174db6e0b8302b9aff97360db6af4895e95749fb8c10300d6e11dc7b6ab02e90a12d258424d29dd958ca395d809a9178119d9a334c398b31565fb9bb8da95251dedafe03435cb255ac5f88725fb0feaf66f13c4fbad7f844ddb3628b8918c540e00e2befe7ef79e278604f4462f46b54651cf3344da8268b192c626f4f09142dd4be8ed83c4d89"}, &(0x7f0000000280)=0x97) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0xf9d, 0x10}, 0xc) sync() read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pread64(r0, &(0x7f0000002340)=""/4096, 0x1000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x3, &(0x7f0000003340)) ioctl$RTC_WIE_OFF(r1, 0x7010) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003680)={'sit0\x00', &(0x7f0000003580)={'gre0\x00', 0x0, 0x700, 0x10, 0x2, 0xea8, {{0x38, 0x4, 0x1, 0x2, 0xe0, 0x66, 0x0, 0xc, 0x4, 0x0, @private=0xa010101, @private=0xa010102, {[@noop, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "e1affc67ba23b4bd9deb8e9f"}]}, @cipso={0x86, 0x42, 0x1, [{0xea8ddcc0e44309e5, 0xf, "e655ded1fedd4030e8f1d687b9"}, {0x6, 0x7, "98a90e534b"}, {0x5, 0xd, "29071bef02dcf43adb58ea"}, {0x6, 0x9, "bfb5f823bd7c38"}, {0x0, 0x10, "76a2d53c169391381f89c2379a4f"}]}, @noop, @timestamp_addr={0x44, 0x2c, 0xd3, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@private=0xa010100, 0x10000}, {@multicast1, 0x3}, {@remote, 0x1000}, {@loopback, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x6e, 0x1, 0x8, [{@loopback, 0x80000001}, {@rand_addr=0x64010101, 0x9}, {@local, 0xffffffff}, {@local, 0x7fffffff}]}, @timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe8bd}, {@empty, 0x8}, {@private=0xa010100, 0xc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff430}]}]}}}}}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003740)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0x6, 0x17, &(0x7f0000003380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x0, 0x0, 0xb, 0xc, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003440)='syzkaller\x00', 0x3, 0xcc, &(0x7f0000003480)=""/204, 0x41100, 0x10, '\x00', r7, @xdp=0x25, r1, 0x8, &(0x7f00000036c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000003700)={0x3, 0xf, 0x8, 0x1ff}, 0x10, 0xffffffffffffffff, r1, 0x2, &(0x7f00000037c0)=[r8], &(0x7f0000003800)=[{0x2, 0x2, 0x8, 0x1}, {0x2, 0x3, 0x9, 0x7}], 0x10, 0x3}, 0x94) syz_open_dev$usbfs(&(0x7f0000003900), 0x0, 0x20800) close_range(r0, r8, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x1) sync() ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000003a40)={0x5, 0x6, &(0x7f0000003940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003980)=[0x0], &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000003ec0)={&(0x7f0000003a80)={{@hyper, 0x7fffffff}, {@host, 0x3ff}, 0x400, "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"}, 0x418, 0x9}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) pipe(&(0x7f0000003f00)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r9, &(0x7f0000004000)={0x1e8, 0xfffffffffffffff5, r3, [{{0x0, 0x1, 0xa, 0x800, 0x9, 0xa53, {0x4, 0xb, 0x8, 0x9b68, 0xdd0, 0x80000000, 0x9, 0x7fff, 0xa, 0x4000, 0x2, r4, r5, 0x1ff, 0x9c}}, {0x6, 0xffff, 0x0, 0x1ffc}}, {{0x2, 0x1, 0xc1d9, 0x8, 0x60000000, 0x7fffffff, {0x1, 0xfffffffffffffffb, 0x3, 0x516f, 0x3, 0x7, 0x7, 0x9, 0x7714, 0xc000, 0x7, r4, 0x0, 0x80000000, 0xa}}, {0x3, 0xfffffffffffffefe, 0x9, 0x6, '*:.\x8e!\\#$%'}}, {{0x6, 0x0, 0x5, 0x8, 0x8, 0x2537343e, {0x6, 0xfffffffffffffffd, 0xd8c, 0x7fff, 0xd5d, 0xfff, 0xfff, 0x0, 0x9, 0x4000, 0x3, r4, r5, 0xfffffffc}}, {0x0, 0x10000, 0x0, 0xfffffffd}}]}, 0x1e8) 604.432497ms ago: executing program 6 (id=8355): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000280)={0x3, @win={{0x80}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0xfffffffc}}, 0x0, 0x0}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x12) ioctl$TCFLSH(r1, 0x540b, 0x0) 0s ago: executing program 6 (id=8356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e26, @broadcast}, 0x10, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x2000c1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000600)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x2b, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) kernel console output (not intermixed with test programs): 7155] ? clear_bhb_loop+0x40/0x90 [ 1716.941598][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.941617][ T7155] RIP: 0033:0x7f9dd599c799 [ 1716.941636][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.941655][ T7155] RSP: 002b:00007f9dd67a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.941676][ T7155] RAX: 0000000000000000 RBX: 00007f9dd5c15fa0 RCX: 00007f9dd599c799 [ 1716.941687][ T7155] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 1716.941698][ T7155] RBP: 00007f9dd67a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.941709][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1716.941719][ T7155] R13: 00007f9dd5c16038 R14: 00007f9dd5c15fa0 R15: 00007ffef322b098 [ 1716.941747][ T7155] [ 1717.995037][ T7168] overlayfs: failed to resolve './file1': -2 [ 1718.039462][ T29] audit: type=1400 audit(1773246022.186:1058): avc: denied { ioctl } for pid=7163 comm="syz.1.7561" path="socket:[107410]" dev="sockfs" ino=107410 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1718.431808][ T7169] xt_hashlimit: size too large, truncated to 1048576 [ 1718.825809][T13618] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1718.833719][T13618] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1718.888250][ T7195] geneve2: entered promiscuous mode [ 1718.903163][ T7195] geneve2: entered allmulticast mode [ 1719.076215][ T29] audit: type=1400 audit(1773246023.216:1059): avc: denied { ioctl } for pid=7193 comm="syz.1.7568" path="socket:[107456]" dev="sockfs" ino=107456 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1719.218385][ T7215] validate_nla: 43 callbacks suppressed [ 1719.218410][ T7215] netlink: 'syz.3.7572': attribute type 2 has an invalid length. [ 1719.519221][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7570'. [ 1720.522319][ T7245] hpfs: Bad magic ... probably not HPFS [ 1722.336530][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 30 seconds [ 1722.351122][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 30 seconds [ 1722.362985][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 30 seconds [ 1722.375510][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 30 seconds [ 1722.717493][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7586'. [ 1723.317823][ T7301] comedi comedi3: adq12b: I/O port conflict (0x8005,16) [ 1723.955178][ T7306] fuse: Bad value for 'fd' [ 1724.911157][ T7317] netlink: 'syz.2.7594': attribute type 2 has an invalid length. [ 1725.777297][ T7113] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1726.083680][ T7113] usb 7-1: device descriptor read/64, error -71 [ 1726.337490][ T792] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1726.350016][ T7113] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1726.561952][ T7113] usb 7-1: device descriptor read/64, error -71 [ 1726.572268][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 1726.586934][ T792] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1726.612206][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.680268][ T7113] usb usb7-port1: attempt power cycle [ 1726.681167][ T792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1726.712271][ T792] pvrusb2: ********** [ 1726.716494][ T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1726.727237][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7604'. [ 1726.740469][ T792] pvrusb2: Important functionality might not be entirely working. [ 1726.749531][ T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1726.761440][ T792] pvrusb2: ********** [ 1726.867309][ T7362] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1726.990700][ T2344] pvrusb2: Invalid write control endpoint [ 1727.043482][ T7113] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1727.230121][ T7375] block device autoloading is deprecated and will be removed. [ 1727.408240][ T7113] usb 7-1: device descriptor read/8, error -71 [ 1727.424086][ T2344] pvrusb2: Invalid write control endpoint [ 1727.434092][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1727.446805][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1727.455348][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1727.466046][ T2344] pvrusb2: Device being rendered inoperable [ 1727.472173][ T792] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1727.483635][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1727.485418][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.498223][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1727.510891][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.522226][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1727.532281][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1727.543271][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1727.609259][ T7385] xt_TCPMSS: Only works on TCP SYN packets [ 1727.624773][ T7385] sit2: entered allmulticast mode [ 1727.651479][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 1727.658565][ T792] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1727.667883][ T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.682368][ T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1727.694327][ T7113] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1727.708695][ T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1727.716426][ T7113] usb 7-1: device descriptor read/8, error -71 [ 1727.718670][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.817912][ T792] usb 2-1: Product: syz [ 1727.831955][ T792] usb 2-1: Manufacturer: syz [ 1727.847720][ T792] usb 2-1: SerialNumber: syz [ 1727.855861][ T7390] bridge0: entered promiscuous mode [ 1727.866450][ T7113] usb usb7-port1: unable to enumerate USB device [ 1727.885913][ T7390] bridge0: left promiscuous mode [ 1728.072998][ T7113] usb 5-1: USB disconnect, device number 95 [ 1730.484271][ T792] usb 2-1: 0:2 : does not exist [ 1730.492812][ T792] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1730.718457][ T792] usb 2-1: USB disconnect, device number 67 [ 1730.754755][ T4034] udevd[4034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.375150][ T7484] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1731.605099][ T792] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1732.180933][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 1732.251989][ T792] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1732.264096][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.272799][ T792] usb 4-1: Product: syz [ 1732.277071][ T792] usb 4-1: Manufacturer: syz [ 1732.281971][ T792] usb 4-1: SerialNumber: syz [ 1732.301162][ T792] usb 4-1: config 0 descriptor?? [ 1732.354213][ T792] gspca_main: se401-2.14.0 probing 047d:5003 [ 1733.474565][ T792] gspca_se401: read req failed req 0x06 error -19 [ 1733.487071][ T792] usb 4-1: USB disconnect, device number 61 [ 1733.624344][T17341] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1733.784964][T17341] usb 5-1: Using ep0 maxpacket: 32 [ 1733.792823][T17341] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1733.802962][T17341] usb 5-1: config 0 has no interface number 0 [ 1733.834791][T17341] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1733.846245][ T7533] siw: device registration error -23 [ 1733.872939][T17341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.896994][T17341] usb 5-1: Product: syz [ 1733.942387][T17341] usb 5-1: Manufacturer: syz [ 1733.966009][T17341] usb 5-1: SerialNumber: syz [ 1734.009733][T17341] usb 5-1: config 0 descriptor?? [ 1736.374554][ T29] audit: type=1400 audit(1773246039.425:1060): avc: denied { setopt } for pid=7548 comm="syz.3.7636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1737.352418][T17341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1737.393319][T17341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1737.471199][T17341] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1737.512507][T17341] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1737.550628][T17341] usb 5-1: USB disconnect, device number 96 [ 1737.944662][ T7589] xt_hashlimit: max too large, truncated to 1048576 [ 1739.336367][T13618] Bluetooth: Wrong link type (-22) [ 1740.091300][ T7616] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7654'. [ 1741.234850][ T7637] No control pipe specified [ 1741.391458][ T7642] hpfs: Bad magic ... probably not HPFS [ 1742.750986][ T7651] random: crng reseeded on system resumption [ 1743.529902][ T7657] zonefs (nullb0) ERROR: Not a zoned block device [ 1744.381714][ T7113] lo speed is unknown, defaulting to 1000 [ 1744.388020][T24766] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.389007][ T7113] syU: Port: 1 Link DOWN [ 1744.408250][T24766] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.440623][T16010] lo speed is unknown, defaulting to 1000 [ 1744.454015][T24766] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.463288][T24766] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.866189][ T7694] netlink: 'syz.2.7669': attribute type 10 has an invalid length. [ 1746.024184][ T7709] fuse: Unknown parameter '00000000000000000000' [ 1748.396270][ T7748] 9p: Bad value for 'wfdno' [ 1748.402183][ T7748] netlink: 'syz.3.7687': attribute type 1 has an invalid length. [ 1748.414878][ T7750] xt_hashlimit: max too large, truncated to 1048576 [ 1748.487263][ T7751] random: crng reseeded on system resumption [ 1748.748256][ T7113] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1748.767155][ T7754] xt_hashlimit: max too large, truncated to 1048576 [ 1748.825919][ T7748] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1748.881973][ T7753] bond5: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1748.914985][ T7113] usb 5-1: Using ep0 maxpacket: 16 [ 1748.923366][ T7792] gfs2: error -5 reading superblock [ 1748.932069][ T7113] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 1748.953682][ T7113] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1748.963986][ T7113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.978481][ T7113] usb 5-1: Product: syz [ 1748.994543][ T7113] usb 5-1: Manufacturer: syz [ 1749.006981][ T7113] usb 5-1: SerialNumber: syz [ 1749.030982][ T7113] usb 5-1: config 0 descriptor?? [ 1750.521644][ T792] usb 5-1: USB disconnect, device number 97 [ 1750.556615][ T7806] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7693'. [ 1750.683590][ T7806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7806 comm=syz.3.7693 [ 1753.090633][ T5932] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1754.252360][ T7864] IPv6: NLM_F_CREATE should be specified when creating new route [ 1754.350978][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1754.369316][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1754.394942][ T5932] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1754.419124][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.427589][ T5932] usb 5-1: Product: syz [ 1754.455242][ T5932] usb 5-1: Manufacturer: syz [ 1754.463525][ T5932] usb 5-1: SerialNumber: syz [ 1754.983639][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 60 seconds [ 1754.994613][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 60 seconds [ 1755.007925][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 60 seconds [ 1755.019231][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 60 seconds [ 1755.261970][T16010] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1755.619635][ T7884] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1755.628634][ T7884] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1755.848252][ T7886] random: crng reseeded on system resumption [ 1756.682582][T16010] usb 2-1: device descriptor read/64, error -71 [ 1756.831571][ T5932] usb 5-1: selecting invalid altsetting 1 [ 1757.914609][T16010] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1758.199902][T16010] usb 2-1: device descriptor read/64, error -71 [ 1758.203653][ T5932] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1758.267039][ T5932] usb 5-1: USB disconnect, device number 98 [ 1758.322292][ T4034] udevd[4034]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1758.340667][T16010] usb usb2-port1: attempt power cycle [ 1758.673382][ T7928] random: crng reseeded on system resumption [ 1759.859194][ T7942] xt_hashlimit: max too large, truncated to 1048576 [ 1760.447776][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.525859][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.085218][ T7996] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1761.095053][ T7996] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7727'. [ 1761.322553][ T5932] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1761.446566][ T8007] random: crng reseeded on system resumption [ 1761.526341][ T5932] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1761.604988][ T5932] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1761.665375][ T5932] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.798020][ T5932] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1761.814616][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1761.823454][ T5932] usb 7-1: Product: syz [ 1761.827901][ T5932] usb 7-1: Manufacturer: syz [ 1761.833887][ T5932] usb 7-1: SerialNumber: syz [ 1762.118729][ T5932] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1762.307836][ T7113] usb 7-1: USB disconnect, device number 39 [ 1762.439178][ T8025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1762.446446][ T8025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1762.461094][ T8025] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1762.477719][ T8025] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1762.489914][ T8025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1762.497451][ T8025] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1762.510499][ T8025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1762.516790][ T8025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1762.529221][ T8025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1762.548967][ T8025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1762.569475][ T7988] usblp0: removed [ 1762.582892][ T8025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1762.589010][ T8025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1762.640780][ T8025] can0: slcan on ttyS3. [ 1763.189983][ T8024] can0 (unregistered): slcan off ttyS3. [ 1763.481732][ T7951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1763.590016][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7740'. [ 1763.702386][ T5932] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1763.894871][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 1763.967558][ T5932] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1763.982835][ T5932] usb 7-1: config 0 has no interface number 0 [ 1763.989641][ T5932] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1764.018993][ T5932] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1764.028733][ T7113] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1764.030769][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.060269][ T5932] usb 7-1: Product: syz [ 1764.065224][ T5932] usb 7-1: Manufacturer: syz [ 1764.073627][ T5932] usb 7-1: SerialNumber: syz [ 1764.137636][ T5932] usb 7-1: config 0 descriptor?? [ 1764.311368][ T7113] usb 2-1: Using ep0 maxpacket: 32 [ 1764.325248][ T7113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.351397][ T7113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1764.374382][ T7113] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1764.400233][ T7113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.440316][ T7113] usb 2-1: config 0 descriptor?? [ 1764.521639][T13618] Bluetooth: hci3: command 0x0406 tx timeout [ 1764.612664][ T5131] Bluetooth: hci6: command 0x0406 tx timeout [ 1764.741829][ T5131] Bluetooth: hci0: command 0x0406 tx timeout [ 1764.751084][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 1764.757448][ T5131] Bluetooth: hci5: command 0x0406 tx timeout [ 1764.772051][ T5131] Bluetooth: hci2: command 0x0406 tx timeout [ 1765.001198][ T5932] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1765.022606][ T5932] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1765.091960][ T8119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7748'. [ 1765.308373][ T7113] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 1765.397029][ T7113] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 1765.802285][ T8141] loop6: detected capacity change from 0 to 2640 [ 1765.818094][ T7113] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 1765.843897][ T8141] buffer_io_error: 11 callbacks suppressed [ 1765.843932][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.900487][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1765.944396][ T8113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8113 comm=syz.4.7748 [ 1765.972807][ T5932] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1766.010539][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.020352][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.031563][ T5932] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1766.041410][ T5932] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1766.055610][ T7113] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1766.081792][ T5932] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1766.108912][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.127968][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.158123][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.174029][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.183230][ T8141] ldm_validate_partition_table(): Disk read failed. [ 1766.190311][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.198820][ T8141] Buffer I/O error on dev loop6, logical block 0, async page read [ 1766.207210][ T8141] Dev loop6: unable to read RDB block 0 [ 1766.217549][ T8141] loop6: unable to read partition table [ 1766.223632][ T8141] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1766.289063][ T7113] ft260 0003:0403:6030.0018: failed to retrieve status: -71, no wakeup [ 1766.302455][ T5820] usb 7-1: USB disconnect, device number 40 [ 1766.311443][ T7113] ft260 0003:0403:6030.0018: failed to retrieve status: -71 [ 1766.367317][ T7113] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 1767.381049][T13618] Bluetooth: hci3: command 0x0406 tx timeout [ 1767.387198][T13618] Bluetooth: hci6: command 0x0406 tx timeout [ 1767.394391][T13618] Bluetooth: hci5: command 0x0406 tx timeout [ 1767.400921][T13618] Bluetooth: hci1: command 0x0406 tx timeout [ 1767.406978][T13618] Bluetooth: hci0: command 0x0406 tx timeout [ 1767.413082][T13618] Bluetooth: hci2: command 0x0406 tx timeout [ 1770.630361][ T7113] usb 2-1: USB disconnect, device number 71 [ 1770.829138][ T5820] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1771.045762][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1771.080422][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1771.128594][ T5820] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1771.182448][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.185755][ T29] audit: type=1400 audit(1773246072.004:1061): avc: denied { bind } for pid=8225 comm="syz.3.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1771.257787][ T5820] usb 3-1: config 0 descriptor?? [ 1771.314683][ T29] audit: type=1400 audit(1773246072.042:1062): avc: denied { connect } for pid=8225 comm="syz.3.7762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1771.731550][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.743546][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.765272][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.790084][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.809807][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.845485][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.870270][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.896271][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.930035][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1771.976647][ T5820] saitek 0003:06A3:0621.0019: unknown main item tag 0x0 [ 1772.008847][ T5820] saitek 0003:06A3:0621.0019: hidraw0: USB HID v0.fe Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 1772.022749][ T8243] binder: BINDER_SET_CONTEXT_MGR already set [ 1772.036970][ T8243] binder: 8201:8243 ioctl 4018620d 200000000200 returned -16 [ 1772.382339][ T8251] xt_hashlimit: max too large, truncated to 1048576 [ 1774.774353][ T8281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1774.801126][ T8287] netlink: 'syz.1.7773': attribute type 1 has an invalid length. [ 1774.846651][ T8287] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1774.983552][ T8325] netlink: 'syz.4.7774': attribute type 2 has an invalid length. [ 1775.049878][ T5932] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1775.357213][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1776.119781][ T5932] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1776.280311][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1776.432884][ T5932] usb usb4-port1: attempt power cycle [ 1776.908283][ T29] audit: type=1400 audit(1773246077.357:1063): avc: denied { mounton } for pid=8341 comm="syz.4.7780" path="/259/file0" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1776.931714][ T5932] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1777.043900][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1777.126379][ T5820] usb 3-1: USB disconnect, device number 81 [ 1777.337517][ T7113] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1777.404662][ T5932] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1777.448012][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1777.571744][ T5932] usb usb4-port1: unable to enumerate USB device [ 1777.674814][ T7113] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1777.699558][ T7113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.739460][ T5820] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1777.771954][ T7113] usb 5-1: Product: syz [ 1777.817886][ T7113] usb 5-1: Manufacturer: syz [ 1777.841893][ T7113] usb 5-1: SerialNumber: syz [ 1777.852275][ T8379] overlayfs: missing 'lowerdir' [ 1777.861604][ T7113] usb 5-1: config 0 descriptor?? [ 1778.022599][ T8386] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7785'. [ 1778.039598][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 1778.054500][ T5820] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1778.078783][ T5820] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1778.116876][ T5820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1778.172583][ T5820] usb 3-1: config 1 has no interface number 0 [ 1778.175346][ T8394] tun0: tun_chr_ioctl cmd 1074025675 [ 1778.193410][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1778.203051][ T8394] tun0: persist enabled [ 1778.226796][ T8394] tun0: tun_chr_ioctl cmd 1074025675 [ 1778.232142][ T8394] tun0: persist enabled [ 1778.232614][ T5820] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.278297][ T5820] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1778.278785][ T5131] Bluetooth: hci4: urb ffff8880785b5700 submission failed (2) [ 1778.291652][ T5820] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1778.371585][ T8408] loop6: detected capacity change from 0 to 7 [ 1778.398296][ C1] blk_print_req_error: 11 callbacks suppressed [ 1778.398315][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.414232][ C1] buffer_io_error: 11 callbacks suppressed [ 1778.414255][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.436134][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.445821][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.474301][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.484010][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.504128][ T8394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1778.546072][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.555785][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.584156][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.593862][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.605402][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.615133][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.625336][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.635033][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.651598][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.661670][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.669655][ T8408] ldm_validate_partition_table(): Disk read failed. [ 1778.678211][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.687835][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.700995][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.710700][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1778.724806][ T8408] Dev loop6: unable to read RDB block 0 [ 1778.750076][ T8408] loop6: unable to read partition table [ 1778.756959][ T8408] loop6: partition table beyond EOD, truncated [ 1778.764259][ T8408] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1779.348965][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.391513][ T5820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1779.649375][ T5820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1780.102916][ T8441] netlink: 'syz.6.7790': attribute type 2 has an invalid length. [ 1780.122793][ T8441] !: entered promiscuous mode [ 1780.129997][ T5820] usb 3-1: USB disconnect, device number 82 [ 1780.137088][ T5820] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1780.827261][ T8436] netlink: 'syz.6.7790': attribute type 2 has an invalid length. [ 1780.854350][ T5820] usb 5-1: USB disconnect, device number 99 [ 1781.416832][ T29] audit: type=1400 audit(1773246081.578:1064): avc: denied { unmount } for pid=31433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1781.456743][ T8476] overlayfs: missing 'lowerdir' [ 1781.518634][ T8478] netlink: 'syz.4.7797': attribute type 1 has an invalid length. [ 1781.600669][ T8478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1781.619405][ T8517] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1782.139339][ T8535] random: crng reseeded on system resumption [ 1783.347528][ T8547] random: crng reseeded on system resumption [ 1783.709490][ T8554] netlink: 'syz.3.7806': attribute type 2 has an invalid length. [ 1783.743962][ T8558] overlayfs: missing 'lowerdir' [ 1783.818446][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7808'. [ 1784.280510][ T8572] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7810'. [ 1784.299671][ T8569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7811'. [ 1784.501345][T16010] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1784.666089][T16010] usb 4-1: device descriptor read/64, error -71 [ 1784.869728][ T5932] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1784.954654][T16010] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1785.069980][ T8606] zonefs (nullb0) ERROR: Not a zoned block device [ 1785.152794][ T8611] random: crng reseeded on system resumption [ 1785.362275][T16010] usb 4-1: device descriptor read/64, error -71 [ 1785.492886][ T5932] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1785.503972][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.552447][ T5932] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1785.568595][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.583848][ T5932] usb 2-1: Product: syz [ 1785.605428][ T5932] usb 2-1: Manufacturer: syz [ 1785.610622][ T5932] usb 2-1: SerialNumber: syz [ 1785.670879][T16010] usb usb4-port1: attempt power cycle [ 1785.736503][ T5932] rtl8150 2-1:1.0: couldn't find required endpoints [ 1785.744784][ T5932] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1786.129543][T16010] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1786.403184][ T29] audit: type=1400 audit(1773246086.099:1065): avc: denied { map } for pid=8627 comm="syz.6.7824" path="socket:[111453]" dev="sockfs" ino=111453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1787.376957][T16010] usb 4-1: device descriptor read/8, error -71 [ 1787.392275][ T8638] fuse: Unknown parameter '00000000000000000000' [ 1787.427191][ T5896] usb 2-1: USB disconnect, device number 72 [ 1787.433533][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 90 seconds [ 1787.445883][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 90 seconds [ 1787.457245][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 90 seconds [ 1787.468514][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 90 seconds [ 1787.472689][ T8633] lo speed is unknown, defaulting to 1000 [ 1787.754663][ T7113] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1787.901995][ T8663] netlink: 'syz.6.7827': attribute type 1 has an invalid length. [ 1787.946388][T16010] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1788.004481][T16010] usb 4-1: Using ep0 maxpacket: 16 [ 1788.023820][ T7113] usb 3-1: Using ep0 maxpacket: 16 [ 1788.074703][T16010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.099391][T16010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.148510][T16010] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1788.167316][ T7113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.178551][ T7113] usb 3-1: config 0 has no interfaces? [ 1788.215032][T16010] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1788.219860][ T8663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1788.234186][T16010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.288386][ T7113] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1788.386406][ T7113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.411278][T16010] usb 4-1: config 0 descriptor?? [ 1788.439366][ T8673] vlan2: entered allmulticast mode [ 1788.449261][ T7113] usb 3-1: Product: syz [ 1788.449493][ T8673] veth0_to_bond: entered allmulticast mode [ 1788.453519][ T7113] usb 3-1: Manufacturer: syz [ 1788.453547][ T7113] usb 3-1: SerialNumber: syz [ 1788.480547][ T7113] usb 3-1: config 0 descriptor?? [ 1788.525606][ T8673] bond4: (slave vlan2): making interface the new active one [ 1788.580816][ T8673] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 1788.936031][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.944686][ T8633] lo speed is unknown, defaulting to 1000 [ 1788.976854][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.987366][T16010] microsoft 0003:045E:07DA.001A: item 0 4 0 11 parsing failed [ 1789.006050][T16010] microsoft 0003:045E:07DA.001A: parse failed [ 1789.033526][T16010] microsoft 0003:045E:07DA.001A: probe with driver microsoft failed with error -22 [ 1789.229058][ T5932] usb 4-1: USB disconnect, device number 69 [ 1790.671429][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7839'. [ 1791.740579][ T5932] usb 3-1: USB disconnect, device number 83 [ 1792.252376][T16010] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1792.405515][T16010] usb 2-1: device descriptor read/64, error -71 [ 1792.770277][T16010] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1792.799547][ T8844] bridge0: entered promiscuous mode [ 1792.826080][ T8844] bridge0: left promiscuous mode [ 1792.925592][T16010] usb 2-1: device descriptor read/64, error -71 [ 1793.043844][T16010] usb usb2-port1: attempt power cycle [ 1793.407805][T16010] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1793.469574][ T8862] genirq: Flags mismatch irq 6. 00200000 (das16m1) vs. 00200000 (pcl812) [ 1793.517442][T16010] usb 2-1: device descriptor read/8, error -71 [ 1793.548804][ T8862] netlink: 'syz.6.7854': attribute type 12 has an invalid length. [ 1793.812621][T16010] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1793.922340][T16010] usb 2-1: device descriptor read/8, error -71 [ 1794.391787][T16010] usb usb2-port1: unable to enumerate USB device [ 1794.516750][ T8872] loop6: detected capacity change from 0 to 7 [ 1794.540226][ C1] blk_print_req_error: 11 callbacks suppressed [ 1794.540248][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.556060][ C1] buffer_io_error: 11 callbacks suppressed [ 1794.556077][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.588245][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.597912][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.617020][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.626665][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.635860][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.645455][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.658891][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.668554][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.727341][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.737054][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.747615][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.757259][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.767070][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.776733][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.784749][ T8872] ldm_validate_partition_table(): Disk read failed. [ 1794.795708][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.805434][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.815344][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1794.825004][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1794.840265][ T8872] Dev loop6: unable to read RDB block 0 [ 1794.855905][ T8872] loop6: unable to read partition table [ 1794.863498][ T8872] loop6: partition table beyond EOD, truncated [ 1794.870221][ T8872] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1795.564839][ T5932] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1795.707139][ T8891] SET target dimension over the limit! [ 1796.305048][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1796.320969][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1796.333375][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1796.345261][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1796.356381][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1796.369896][ T5932] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1796.387674][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.395891][ T5932] usb 4-1: Product: syz [ 1796.406669][ T5932] usb 4-1: Manufacturer: syz [ 1796.413869][ T5932] usb 4-1: SerialNumber: syz [ 1796.428606][ T8891] delete_channel: no stack [ 1796.435053][ T5932] usb 4-1: config 0 descriptor?? [ 1796.452921][ T5932] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1796.656088][ T8907] xt_hashlimit: max too large, truncated to 1048576 [ 1797.722464][T17341] hid_parser_main: 28 callbacks suppressed [ 1797.722489][T17341] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1797.761868][T17341] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1799.163957][T17341] usb 4-1: USB disconnect, device number 70 [ 1800.128884][ T8973] fuse: Unknown parameter '00000000000000000000' [ 1800.159869][T24771] wlan0: Trigger new scan to find an IBSS to join [ 1801.036679][ T8996] xt_hashlimit: max too large, truncated to 1048576 [ 1801.175071][ T9003] loop6: detected capacity change from 0 to 7 [ 1801.184690][ C0] blk_print_req_error: 11 callbacks suppressed [ 1801.184711][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.200606][ C0] buffer_io_error: 11 callbacks suppressed [ 1801.200627][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.228358][T16010] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1801.252006][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.261686][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.291038][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.300764][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.323246][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.332937][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.357933][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.367623][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.391717][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.401397][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.425642][ T7113] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1801.447808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.457468][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.466068][T16010] usb 2-1: Using ep0 maxpacket: 8 [ 1801.499111][T16010] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1801.509677][T16010] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.538107][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.547765][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.555880][ T9003] ldm_validate_partition_table(): Disk read failed. [ 1801.569090][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.578797][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.600574][T16010] usb 2-1: config 0 has no interfaces? [ 1801.611358][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1801.621026][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1801.635247][ T9003] Dev loop6: unable to read RDB block 0 [ 1801.644598][ T7113] usb 3-1: Using ep0 maxpacket: 8 [ 1801.653532][ T9003] loop6: unable to read partition table [ 1801.660869][ T9003] loop6: partition table beyond EOD, truncated [ 1801.667354][ T9003] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1801.716596][ T7113] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1801.767979][T16010] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1801.809517][ T7113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.855830][T16010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.921951][T16010] usb 2-1: Product: syz [ 1801.930195][ T7113] usb 3-1: config 0 has no interfaces? [ 1801.987484][T16010] usb 2-1: Manufacturer: syz [ 1802.005334][ T7113] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1802.045829][T16010] usb 2-1: SerialNumber: syz [ 1802.056835][ T7113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.077204][T16010] usb 2-1: config 0 descriptor?? [ 1802.105886][ T7113] usb 3-1: Product: syz [ 1802.110126][ T7113] usb 3-1: Manufacturer: syz [ 1802.141658][ T7113] usb 3-1: SerialNumber: syz [ 1802.154092][ T7113] usb 3-1: config 0 descriptor?? [ 1802.581474][ T7113] usb 3-1: USB disconnect, device number 84 [ 1802.664218][T17341] usb 2-1: USB disconnect, device number 77 [ 1803.080386][ T9055] xt_hashlimit: size too large, truncated to 1048576 [ 1804.247131][ T29] audit: type=1804 audit(1773246102.196:1066): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.7894" name="/newroot/374/bus/bus" dev="overlay" ino=2033 res=1 errno=0 [ 1804.302171][ T8329] wlan0: Trigger new scan to find an IBSS to join [ 1805.437525][T16010] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1805.540433][ T9086] random: crng reseeded on system resumption [ 1805.631999][T16010] usb 7-1: Using ep0 maxpacket: 8 [ 1805.639484][T16010] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1805.663849][T16010] usb 7-1: config index 0 descriptor too short (expected 274, got 18) [ 1805.851773][T16010] usb 7-1: config 6 has an invalid interface number: 57 but max is 0 [ 1805.861867][T16010] usb 7-1: config 6 has no interface number 0 [ 1806.077301][T16010] usb 7-1: config 6 interface 57 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1806.468624][T16010] usb 7-1: config 6 interface 57 has no altsetting 0 [ 1806.500790][T16010] usb 7-1: string descriptor 0 read error: -71 [ 1806.794930][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.842060][T16010] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 1806.876299][T16010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.063589][T16010] usb 7-1: can't set config #6, error -71 [ 1807.534473][T16010] usb 7-1: USB disconnect, device number 41 [ 1808.569316][ T9118] 9pnet_fd: p9_fd_create_tcp (9118): problem connecting socket to 127.0.0.1 [ 1809.013540][ T9137] random: crng reseeded on system resumption [ 1809.849145][ T9151] input: syz1 as /devices/virtual/input/input37 [ 1811.698666][ T9173] random: crng reseeded on system resumption [ 1812.151955][ T5932] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1812.318734][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1812.325636][ T5932] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1812.334265][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.340039][T16010] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1812.345668][ T5932] usb 5-1: config 0 has no interfaces? [ 1812.361121][ T5932] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1812.370754][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.378885][ T5932] usb 5-1: Product: syz [ 1812.383385][ T5932] usb 5-1: Manufacturer: syz [ 1812.388002][ T5932] usb 5-1: SerialNumber: syz [ 1812.396423][ T5932] usb 5-1: config 0 descriptor?? [ 1812.510919][T16010] usb 3-1: Using ep0 maxpacket: 8 [ 1812.518268][T16010] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1812.526477][T16010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.537128][T16010] usb 3-1: config 0 has no interfaces? [ 1812.544650][T16010] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1812.554226][T16010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.562243][T16010] usb 3-1: Product: syz [ 1812.566546][T16010] usb 3-1: Manufacturer: syz [ 1812.571172][T16010] usb 3-1: SerialNumber: syz [ 1812.578023][T16010] usb 3-1: config 0 descriptor?? [ 1812.630902][ T5932] usb 5-1: USB disconnect, device number 100 [ 1812.815197][T16010] usb 3-1: USB disconnect, device number 85 [ 1812.995961][ T9219] bridge0: entered promiscuous mode [ 1813.004662][ T9219] bridge0: left promiscuous mode [ 1813.269637][ T9236] binder: 9228:9236 ioctl 4018620d 0 returned -22 [ 1813.283162][ T9236] binder: 9228:9236 ioctl c0306201 0 returned -14 [ 1813.304424][ T9236] binder: 9228:9236 ioctl c0306201 0 returned -14 [ 1813.316083][ T9229] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1815.128728][T16010] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1815.331753][T16010] usb 4-1: Using ep0 maxpacket: 16 [ 1815.369678][T16010] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1815.410127][T16010] usb 4-1: config 0 has no interface number 0 [ 1815.442302][T16010] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1815.469167][T16010] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1815.499365][T16010] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1815.526875][T16010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.567807][T16010] usb 4-1: config 0 descriptor?? [ 1816.237757][T16010] uclogic 0003:28BD:0071.001C: pen parameters not found [ 1816.279380][T17341] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1816.284793][ T5820] hid (null): unknown global tag 0xc [ 1816.323194][ T5820] hid-generic 0007:0002:0002.001D: reserved main item tag 0xe [ 1816.354276][T16010] uclogic 0003:28BD:0071.001C: interface is invalid, ignoring [ 1816.372097][ T5820] hid-generic 0007:0002:0002.001D: unknown main item tag 0x0 [ 1816.400214][ T5820] hid-generic 0007:0002:0002.001D: unknown main item tag 0x2 [ 1816.425189][ T5820] hid-generic 0007:0002:0002.001D: unknown global tag 0xc [ 1816.454002][ T5820] hid-generic 0007:0002:0002.001D: item 0 1 1 12 parsing failed [ 1816.488510][T17341] usb 7-1: Using ep0 maxpacket: 8 [ 1816.493910][ T5820] hid-generic 0007:0002:0002.001D: probe with driver hid-generic failed with error -22 [ 1816.518003][T17341] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1816.537895][ T5820] usb 4-1: USB disconnect, device number 71 [ 1816.583521][T17341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.610634][T17341] usb 7-1: Product: syz [ 1816.621077][T17341] usb 7-1: Manufacturer: syz [ 1816.637357][T17341] usb 7-1: SerialNumber: syz [ 1816.665215][T17341] usb 7-1: config 0 descriptor?? [ 1816.906480][T17341] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1818.624935][T17341] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1819.697063][ T9391] ip6gre2: entered promiscuous mode [ 1819.708369][ T9391] ip6gre2: entered allmulticast mode [ 1819.978707][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 120 seconds [ 1819.992492][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 120 seconds [ 1820.010372][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 120 seconds [ 1820.023264][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 120 seconds [ 1820.184370][T17341] usb 7-1: USB disconnect, device number 42 [ 1820.564551][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1820.579707][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7966'. [ 1820.590467][ T8329] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1820.601360][ T8329] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1820.620840][ T8329] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1820.756342][ T8329] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1821.916292][ T9440] netlink: 'syz.6.7969': attribute type 1 has an invalid length. [ 1822.486510][ T9440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1822.544070][ T5932] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1822.693766][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1822.961905][T16010] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1822.981138][ T29] audit: type=1400 audit(1773246120.474:1067): avc: denied { read } for pid=9493 comm="syz.4.7973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1823.067940][ T5932] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1823.132051][T16010] usb 7-1: Using ep0 maxpacket: 16 [ 1823.144786][T16010] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1823.161629][ T9503] random: crng reseeded on system resumption [ 1823.171521][T16010] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1823.196175][T16010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.217254][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1823.227290][T16010] usb 7-1: Product: syz [ 1823.237907][T16010] usb 7-1: Manufacturer: syz [ 1823.242768][T16010] usb 7-1: SerialNumber: syz [ 1823.253477][T16010] usb 7-1: config 0 descriptor?? [ 1823.277487][T16010] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1823.305891][T16010] usb 7-1: Detected FT232R [ 1823.308658][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1823.319586][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1823.336464][ T5932] usb usb4-port1: attempt power cycle [ 1823.536796][T16010] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1823.708754][ T5932] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1823.767253][T16010] ftdi_sio 7-1:0.0: GPIO initialisation failed: -5 [ 1823.777007][T16010] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1823.786770][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1823.819630][T17341] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1823.852799][T17341] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1823.981045][ T9520] fido_id[9520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1824.036040][T16010] usb 7-1: USB disconnect, device number 43 [ 1824.061168][T16010] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1824.063664][ T5932] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1824.112168][T16010] ftdi_sio 7-1:0.0: device disconnected [ 1824.179383][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1824.207196][ T9542] netlink: 'syz.1.7980': attribute type 2 has an invalid length. [ 1824.307839][ T5932] usb usb4-port1: unable to enumerate USB device [ 1825.061358][ T9573] random: crng reseeded on system resumption [ 1825.329549][T16010] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1826.046258][ T7113] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1826.065298][ T7113] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1826.178051][T16010] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.229298][ T7113] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1826.249531][T16010] usb 5-1: config 0 has no interfaces? [ 1826.262531][ T7113] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1826.305624][T16010] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1826.336604][T16010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.349631][ T9585] fido_id[9585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1826.367698][T16010] usb 5-1: Product: syz [ 1826.374980][T16010] usb 5-1: Manufacturer: syz [ 1826.379604][T16010] usb 5-1: SerialNumber: syz [ 1826.433115][T16010] usb 5-1: config 0 descriptor?? [ 1827.833895][ T29] audit: type=1400 audit(1773246124.536:1068): avc: denied { write } for pid=9619 comm="syz.6.7995" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1827.857710][ T5932] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1828.041213][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 1828.074090][ T5932] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1828.105705][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.125319][ T5932] usb 3-1: config 0 has no interfaces? [ 1828.242226][ T5932] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1828.261193][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.269999][ T5932] usb 3-1: Product: syz [ 1828.275223][ T5932] usb 3-1: Manufacturer: syz [ 1828.279872][ T5932] usb 3-1: SerialNumber: syz [ 1828.291765][ T5932] usb 3-1: config 0 descriptor?? [ 1828.573878][ T7113] usb 3-1: USB disconnect, device number 86 [ 1828.770028][ T9643] random: crng reseeded on system resumption [ 1829.782237][T16010] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 1829.887294][T16010] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1829.950813][T16010] usb 5-1: USB disconnect, device number 101 [ 1830.249706][ T9674] xt_hashlimit: max too large, truncated to 1048576 [ 1831.839977][ T9687] netlink: 'syz.4.8004': attribute type 1 has an invalid length. [ 1832.141703][ T9687] bond6: entered promiscuous mode [ 1832.147157][ T9687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1835.745899][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8011'. [ 1836.691910][ T5131] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1836.756005][ T9774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9774 comm=syz.6.8017 [ 1837.600494][ T5820] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1837.973106][ T5820] usb 7-1: device descriptor read/64, error -71 [ 1838.028198][ T9803] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1838.077284][ T29] audit: type=1400 audit(1773246134.606:1069): avc: denied { relabelto } for pid=9784 comm="syz.4.8019" name="318" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1838.131549][ T29] audit: type=1400 audit(1773246134.635:1070): avc: denied { associate } for pid=9784 comm="syz.4.8019" name="318" dev="tmpfs" ino=1760 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1838.214904][ T29] audit: type=1400 audit(1773246134.663:1071): avc: denied { add_name } for pid=9784 comm="syz.4.8019" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1838.253135][ T5820] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1838.420256][ T5820] usb 7-1: device descriptor read/64, error -71 [ 1838.431363][ T29] audit: type=1400 audit(1773246134.663:1072): avc: denied { associate } for pid=9784 comm="syz.4.8019" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1838.539876][ T5820] usb usb7-port1: attempt power cycle [ 1840.013859][ T5820] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1840.259628][ T5820] usb 7-1: device not accepting address 46, error -71 [ 1840.630344][ T29] audit: type=1400 audit(1773246136.993:1073): avc: denied { remove_name } for pid=31433 comm="syz-executor" name="bus" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1840.762068][ T29] audit: type=1400 audit(1773246137.030:1074): avc: denied { rmdir } for pid=31433 comm="syz-executor" name="bus" dev="tmpfs" ino=1766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1841.018371][ T29] audit: type=1400 audit(1773246137.077:1075): avc: denied { rmdir } for pid=31433 comm="syz-executor" name="318" dev="tmpfs" ino=1760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1841.142712][ T6637] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1841.553735][ T9878] xt_hashlimit: size too large, truncated to 1048576 [ 1842.130610][ T5896] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1842.410629][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.448578][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.484270][ T5896] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1842.506876][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.537913][ T5896] usb 3-1: config 0 descriptor?? [ 1842.654554][ T9917] tipc: Started in network mode [ 1842.659528][ T9917] tipc: Node identity eefc6ad05d93, cluster identity 4711 [ 1842.694695][ T9917] tipc: Enabled bearer , priority 0 [ 1842.719043][ T9926] syzkaller0: entered promiscuous mode [ 1842.744590][ T9926] syzkaller0: entered allmulticast mode [ 1842.780029][ T9916] tipc: Enabling of bearer rejected, already enabled [ 1843.260595][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 1843.275928][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1843.584028][ T5896] usb 3-1: USB disconnect, device number 87 [ 1843.590968][ T9915] tipc: Resetting bearer [ 1844.773549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1845.089994][ T9915] tipc: Disabling bearer [ 1845.178129][ T5820] tipc: Node number set to 3010423504 [ 1849.331258][ T5932] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1849.502911][ T5820] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1849.843740][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 1849.861485][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1849.865989][ T5932] usb 4-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 1849.952516][ T29] audit: type=1400 audit(1773246145.725:1076): avc: denied { mounton } for pid=10023 comm="syz.6.8063" path="/proc/1258/cgroup" dev="proc" ino=115531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1849.997512][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1850.009153][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.016209][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1850.039996][ T5932] usb 4-1: Product: syz [ 1850.044331][ T5932] usb 4-1: Manufacturer: syz [ 1850.051799][ T5932] usb 4-1: SerialNumber: syz [ 1850.096432][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1850.122053][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1850.136991][ T5820] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1850.169148][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.185295][ T5820] usb 2-1: Product: syz [ 1850.197337][ T5820] usb 2-1: Manufacturer: syz [ 1850.202189][ T5820] usb 2-1: SerialNumber: syz [ 1850.210221][ T5820] usb 2-1: config 0 descriptor?? [ 1850.228580][ T5820] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1850.480188][ T5932] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1850.501974][ T5932] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1850.517457][ T5896] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1850.654719][ T5932] usb 4-1: USB disconnect, device number 76 [ 1850.702081][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 1850.735469][ T5896] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1850.770059][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.792186][ T5896] usb 7-1: config 0 has no interfaces? [ 1850.804152][ T5896] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1850.816323][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.828382][ T5896] usb 7-1: Product: syz [ 1850.834432][ T5896] usb 7-1: Manufacturer: syz [ 1850.841486][ T5896] usb 7-1: SerialNumber: syz [ 1850.860695][ T5896] usb 7-1: config 0 descriptor?? [ 1851.515985][ T5820] usb 7-1: USB disconnect, device number 48 [ 1853.357679][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 150 seconds [ 1853.372179][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 150 seconds [ 1853.383311][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 150 seconds [ 1853.402087][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 150 seconds [ 1854.167681][T10121] SET target dimension over the limit! [ 1854.514891][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8081'. [ 1854.911478][T10135] hpfs: Bad magic ... probably not HPFS [ 1855.291418][T10121] delete_channel: no stack [ 1855.770270][T16010] usb 2-1: USB disconnect, device number 78 [ 1858.317300][T16010] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1858.497211][T16010] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1858.512872][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8090'. [ 1859.146019][ T5896] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 1859.391647][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1859.401204][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1859.510919][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1859.751589][T10200] [U] ^E [ 1859.760413][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1859.774372][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1859.814811][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1859.826929][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1859.866576][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1859.909583][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1859.941273][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1859.966635][ T5896] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1859.996513][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1860.059847][ T5896] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1860.170989][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1860.281978][ T5896] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1860.306513][T10215] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1860.443789][T10215] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1860.485759][ T5896] usb 5-1: string descriptor 0 read error: -22 [ 1860.493766][ T5896] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1860.515826][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.568507][ T5896] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1861.735249][T10233] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8101'. [ 1865.535402][ T5179] udevd[5179]: worker [4050] /devices/virtual/block/nbd0 is taking a long time [ 1866.634841][ T7134] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 1866.656189][ T7134] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1866.780162][ T7134] usb 5-1: USB disconnect, device number 102 [ 1867.108196][T10292] /dev/nullb0: Can't open blockdev [ 1869.514155][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8115'. [ 1869.657248][T10318] tmpfs: Unknown parameter 'grpquota_block_hard' [ 1869.705236][T10322] FAULT_INJECTION: forcing a failure. [ 1869.705236][T10322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.730130][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.2.8119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1869.730164][T10322] Tainted: [L]=SOFTLOCKUP [ 1869.730172][T10322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1869.730182][T10322] Call Trace: [ 1869.730192][T10322] [ 1869.730200][T10322] dump_stack_lvl+0x100/0x190 [ 1869.730249][T10322] should_fail_ex.cold+0x5/0xa [ 1869.730279][T10322] _copy_from_user+0x2e/0xd0 [ 1869.730313][T10322] video_usercopy+0xe71/0x1740 [ 1869.730342][T10322] ? __pfx___video_do_ioctl+0x10/0x10 [ 1869.730372][T10322] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1869.730401][T10322] ? __pfx_video_usercopy+0x10/0x10 [ 1869.730442][T10322] v4l2_ioctl+0x1bd/0x250 [ 1869.730465][T10322] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1869.730489][T10322] __x64_sys_ioctl+0x18e/0x210 [ 1869.730524][T10322] do_syscall_64+0x106/0xf80 [ 1869.730550][T10322] ? clear_bhb_loop+0x40/0x90 [ 1869.730574][T10322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.730594][T10322] RIP: 0033:0x7fd422b9c799 [ 1869.730613][T10322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.730633][T10322] RSP: 002b:00007fd420df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.730654][T10322] RAX: ffffffffffffffda RBX: 00007fd422e15fa0 RCX: 00007fd422b9c799 [ 1869.730666][T10322] RDX: 0000200000000040 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1869.730677][T10322] RBP: 00007fd420df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.730688][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.730699][T10322] R13: 00007fd422e16038 R14: 00007fd422e15fa0 R15: 00007fff7ccd8c98 [ 1869.730726][T10322] [ 1870.196145][ T29] audit: type=1800 audit(1773246164.668:1077): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.8117" name="/" dev="tmpfs" ino=1 res=0 errno=0 [ 1873.270977][ T5932] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1873.285381][ T5932] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1874.262397][ T29] audit: type=1400 audit(1773246168.477:1078): avc: denied { lock } for pid=10391 comm="syz.4.8133" path="socket:[117067]" dev="sockfs" ino=117067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1875.298020][T24768] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1875.322717][T10364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1876.740027][T10428] xt_hashlimit: size too large, truncated to 1048576 [ 1877.601367][ T5820] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1877.665539][T10451] random: crng reseeded on system resumption [ 1877.860326][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 1878.004557][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1878.093438][ T5820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1878.139380][ T5820] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1878.160777][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.180378][ T5820] usb 5-1: Product: syz [ 1878.195452][ T5820] usb 5-1: Manufacturer: syz [ 1878.209649][ T5820] usb 5-1: SerialNumber: syz [ 1878.232678][ T5820] usb 5-1: config 0 descriptor?? [ 1878.239391][T10457] xt_hashlimit: max too large, truncated to 1048576 [ 1879.748414][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8142'. [ 1879.789529][ T29] audit: type=1400 audit(1773246173.624:1079): avc: denied { accept } for pid=10429 comm="syz.1.8142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1880.083213][ T5932] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1880.092331][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 1880.338754][ T5932] usb 2-1: device descriptor read/64, error -32 [ 1880.435447][T10472] fuse: Unknown parameter '00000000000000000000' [ 1880.606432][ T5932] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1880.916584][ T5932] usb 2-1: device descriptor read/64, error -71 [ 1881.044150][ T5932] usb usb2-port1: attempt power cycle [ 1881.053040][ T5820] usb 5-1: USB disconnect, device number 103 [ 1881.130843][ T7134] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1881.322822][ T7134] usb 4-1: Using ep0 maxpacket: 32 [ 1881.379222][T10506] SET target dimension over the limit! [ 1881.419640][ T7134] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1881.439571][ T7134] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1881.560900][ T7134] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1881.570579][ T7134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.582610][ T7134] usb 4-1: config 0 descriptor?? [ 1882.515066][ T792] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1882.523452][ T7134] usbhid 4-1:0.0: can't add hid device: -71 [ 1882.572313][ T7134] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1882.599828][ T7134] usb 4-1: USB disconnect, device number 77 [ 1882.840585][ T792] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1883.487189][T10505] delete_channel: no stack [ 1883.498016][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.544488][ T792] usb 7-1: config 0 has no interface number 0 [ 1883.710500][ T792] usb 7-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1883.744700][ T792] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1883.765665][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.787985][ T792] usb 7-1: Product: syz [ 1883.800542][ T792] usb 7-1: Manufacturer: syz [ 1883.813100][ T792] usb 7-1: SerialNumber: syz [ 1883.862589][ T792] usb 7-1: config 0 descriptor?? [ 1883.898935][ T792] asix 7-1:0.251: probe with driver asix failed with error -22 [ 1884.479353][ T7134] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1885.221718][ T7134] usb 2-1: Using ep0 maxpacket: 32 [ 1885.235857][ T7134] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1885.247050][ T7134] usb 2-1: config 0 has no interface number 0 [ 1885.256995][ T7134] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1885.304655][ T7134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.323236][ T7134] usb 2-1: Product: syz [ 1885.343954][ T7134] usb 2-1: Manufacturer: syz [ 1885.357917][T10572] SET target dimension over the limit! [ 1885.364561][ T7134] usb 2-1: SerialNumber: syz [ 1885.377526][ T7134] usb 2-1: config 0 descriptor?? [ 1885.390684][ T7134] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1885.558630][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 180 seconds [ 1885.569508][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 180 seconds [ 1885.581703][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 180 seconds [ 1885.593132][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 180 seconds [ 1885.611196][ T7134] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1885.629467][ T7134] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1885.660427][T16010] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1885.681760][ T5820] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1885.755635][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1885.756389][T19971] usb 2-1: USB disconnect, device number 82 [ 1885.797548][T19971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1885.831060][T16010] usb 4-1: Using ep0 maxpacket: 16 [ 1885.851341][T16010] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1885.863276][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 1885.876767][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1885.887556][T19971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1885.903239][T16010] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1885.919480][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1885.933426][T19971] quatech2 2-1:0.51: device disconnected [ 1885.949247][T16010] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1885.960679][ T5820] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1885.975220][T16010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.052481][T10621] xt_hashlimit: max too large, truncated to 1048576 [ 1886.064959][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.074223][T16010] usb 4-1: Product: syz [ 1886.079589][ T5820] usb 3-1: Product: syz [ 1886.084274][T16010] usb 4-1: Manufacturer: syz [ 1886.089383][ T5820] usb 3-1: Manufacturer: syz [ 1886.112815][T16010] usb 4-1: SerialNumber: syz [ 1886.145362][ T5820] usb 3-1: SerialNumber: syz [ 1886.167817][ T5820] usb 3-1: config 0 descriptor?? [ 1886.545343][T19971] usb 7-1: USB disconnect, device number 49 [ 1886.592805][T10638] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1886.672390][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.685879][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.154194][T10652] 0x000000000800-0x000000020803 : "" [ 1887.160984][T10652] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1f800 [ 1887.236992][ T29] audit: type=1400 audit(1773246180.540:1080): avc: denied { ioctl } for pid=10646 comm="syz.6.8166" path="/425/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1887.354088][T10652] ftl_cs: FTL header corrupt! [ 1887.461605][T10638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1888.194624][T10638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1888.215912][T10638] bond0 (unregistering): Released all slaves [ 1888.514721][T10569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1888.658276][ T8329] bond1: (slave vlan2): link status definitely down, disabling slave [ 1888.688947][T16010] usb 4-1: 0:2 : does not exist [ 1888.726048][T16010] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1888.736763][ T8329] bond1: now running without any active interface! [ 1888.767244][T16010] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1888.917499][T16010] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1888.932752][T16010] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1889.508061][T16010] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1889.670665][T16010] usb 4-1: USB disconnect, device number 78 [ 1889.805732][ T5098] udevd[5098]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1889.880973][ T29] audit: type=1400 audit(1773246183.095:1081): avc: denied { append } for pid=10691 comm="syz.3.8170" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1891.507268][ T5820] usb 3-1: USB disconnect, device number 88 [ 1892.847843][ T1003] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1894.474457][T10769] random: crng reseeded on system resumption [ 1895.117045][ T8178] Bluetooth: hci4: command 0x1003 tx timeout [ 1895.117079][ T5131] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1895.125404][T10778] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:ffff with DS=0x1d [ 1896.260055][ T7134] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1896.546524][ T7134] usb 7-1: Using ep0 maxpacket: 8 [ 1896.568130][ T7134] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1896.593702][ T7134] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1896.628315][ T7134] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1896.654340][ T7134] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.684251][ T7134] usb 7-1: Product: syz [ 1896.700818][ T7134] usb 7-1: Manufacturer: syz [ 1896.718625][ T7134] usb 7-1: SerialNumber: syz [ 1896.757073][ T7134] usb 7-1: config 0 descriptor?? [ 1897.247914][ T5820] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1897.291645][ T5820] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1897.394174][T10831] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.8190'. [ 1899.526200][ T7134] usb 7-1: USB disconnect, device number 50 [ 1900.088842][T10879] random: crng reseeded on system resumption [ 1900.409314][ T7134] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1900.439582][ T7134] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1900.650766][ T5820] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1901.173492][ T5820] usb 4-1: config 0 has an invalid interface number: 103 but max is 0 [ 1901.182310][ T5820] usb 4-1: config 0 has no interface number 0 [ 1901.189282][ T5820] usb 4-1: too many endpoints for config 0 interface 103 altsetting 76: 53, using maximum allowed: 30 [ 1901.200646][ T5820] usb 4-1: config 0 interface 103 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1901.225323][ T5820] usb 4-1: config 0 interface 103 has no altsetting 0 [ 1901.238150][ T5820] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1901.253810][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.742326][ T5820] usb 4-1: Product: syz [ 1901.763181][ T5820] usb 4-1: Manufacturer: syz [ 1901.778126][ T5820] usb 4-1: SerialNumber: syz [ 1901.788677][ T5820] usb 4-1: config 0 descriptor?? [ 1902.071535][T10861] vivid-001: disconnect [ 1902.683540][T10859] vivid-001: reconnect [ 1902.703121][ T5820] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1902.761199][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1902.776679][ T5820] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1902.786352][ T5820] usb 4-1: media controller created [ 1902.807082][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1902.991662][ T5820] DVB: Unable to find symbol mt352_attach() [ 1903.036219][ T5820] DVB: Unable to find symbol nxt6000_attach() [ 1903.042579][ T5820] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1903.069204][ T5820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 1903.424814][ T5820] dvb-usb: schedule remote query interval to 1000 msecs. [ 1903.432366][ T5820] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1903.468672][ T5820] dvb-usb: bulk message failed: -22 (7/0) [ 1903.480839][ T5820] dvb-usb: bulk message failed: -22 (7/0) [ 1903.519019][ T5820] usb 4-1: USB disconnect, device number 79 [ 1903.619072][ T5820] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1903.641481][T10890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1904.475959][ T5820] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1904.488088][T10981] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8207'. [ 1904.500589][ T29] audit: type=1400 audit(1773246196.778:1082): avc: denied { read } for pid=10969 comm="syz.4.8206" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1904.648771][ T5820] usb 7-1: Using ep0 maxpacket: 8 [ 1904.655597][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1904.677616][ T5820] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1904.699918][ T5820] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1904.712766][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.721227][ T5820] usb 7-1: Product: syz [ 1904.838939][ T5820] usb 7-1: Manufacturer: syz [ 1905.701279][ T5820] usb 7-1: SerialNumber: syz [ 1905.728116][ T5820] usb 7-1: config 0 descriptor?? [ 1905.866458][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1905.899628][ T9] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1908.226782][ T7134] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1908.419723][ T5820] usb 7-1: USB disconnect, device number 51 [ 1908.446820][ T7134] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1908.494475][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1908.532916][ T7134] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1908.556270][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1908.578360][ T7134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1908.614590][ T7134] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1908.643142][ T7134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.651348][ T7134] usb 5-1: Product: syz [ 1908.665432][ T7134] usb 5-1: Manufacturer: syz [ 1908.684275][ T7134] usb 5-1: SerialNumber: syz [ 1908.724251][ T7134] usb 5-1: config 0 descriptor?? [ 1908.743231][ T7134] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 1908.825657][T11051] Cannot find add_set index 0 as target [ 1909.510068][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.647761][T11063] random: crng reseeded on system resumption [ 1910.118835][T11047] delete_channel: no stack [ 1910.666428][ T7134] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1910.681818][ T7134] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1910.854968][ T1151] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1911.175486][ T792] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1911.389123][ T792] usb 7-1: Using ep0 maxpacket: 32 [ 1911.685068][ T792] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1911.712712][ T792] usb 7-1: config 0 has no interface number 0 [ 1911.740692][ T792] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1911.777587][ T792] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1911.811463][ T792] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1911.845322][ T792] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1911.878807][ T792] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1911.905248][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.927350][ T792] usb 7-1: Product: syz [ 1911.940889][ T792] usb 7-1: Manufacturer: syz [ 1911.950838][ T792] usb 7-1: SerialNumber: syz [ 1911.993380][ T792] usb 7-1: config 0 descriptor?? [ 1912.092977][T11082] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1912.225357][ T9] usb 5-1: USB disconnect, device number 104 [ 1912.393828][ T8329] wlan0: Trigger new scan to find an IBSS to join [ 1912.507078][T11116] hub 9-0:1.0: USB hub found [ 1912.512263][T11116] hub 9-0:1.0: 1 port detected [ 1912.521575][ T5820] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1912.716810][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 1912.724314][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1912.737749][ T29] audit: type=1400 audit(1773246204.481:1083): avc: denied { link } for pid=11128 comm="syz.2.8230" name="#53" dev="tmpfs" ino=2610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1912.760798][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1912.768951][ T5820] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1912.794088][ T5820] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1912.810087][ T29] audit: type=1400 audit(1773246204.490:1084): avc: denied { rename } for pid=11128 comm="syz.2.8230" name="#54" dev="tmpfs" ino=2610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1912.883198][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.943297][ T5820] usb 2-1: Product: syz [ 1912.947688][ T5820] usb 2-1: Manufacturer: syz [ 1912.963659][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1912.998012][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1913.013192][ T5820] usb 2-1: SerialNumber: syz [ 1913.067377][ T5820] usb 2-1: config 0 descriptor?? [ 1913.078393][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1913.092472][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1913.107786][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1913.851321][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1913.861310][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.870626][ T9] usb 5-1: Product: syz [ 1913.874999][ T9] usb 5-1: Manufacturer: syz [ 1913.882930][ T9] usb 5-1: SerialNumber: syz [ 1913.897079][ T9] usb 5-1: config 0 descriptor?? [ 1913.914249][ T9] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 1914.415283][ T792] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1914.528632][ T792] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 1915.212363][ T792] usb 7-1: USB disconnect, device number 52 [ 1915.750214][ T5820] usb 2-1: USB disconnect, device number 83 [ 1916.669801][ T8329] wlan0: Trigger new scan to find an IBSS to join [ 1917.104565][T11143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1917.524469][ T9] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1917.545618][ T9] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1917.576463][ T5820] usb 5-1: USB disconnect, device number 105 [ 1917.792447][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 210 seconds [ 1917.803468][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 210 seconds [ 1917.816663][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 210 seconds [ 1917.827819][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 210 seconds [ 1917.866155][T24767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1918.375973][T11225] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1918.402241][ T29] audit: type=1800 audit(1773246209.787:1085): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8239" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1918.518981][T11227] lo speed is unknown, defaulting to 1000 [ 1919.237093][T11227] lo speed is unknown, defaulting to 1000 [ 1919.306541][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1919.505630][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1919.643581][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.661032][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.700329][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1919.721953][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1919.741611][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.768367][ T9] usb 2-1: config 0 descriptor?? [ 1920.310992][T19971] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1920.482065][T19971] usb 3-1: Using ep0 maxpacket: 8 [ 1920.556673][T19971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1920.598902][T19971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1920.637464][T19971] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1920.653892][T19971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.685959][T19971] usb 3-1: Product: syz [ 1920.690276][T19971] usb 3-1: Manufacturer: syz [ 1920.707760][T19971] usb 3-1: SerialNumber: syz [ 1920.744591][T19971] usb 3-1: config 0 descriptor?? [ 1921.057342][ T5820] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1921.293439][ T5820] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1921.390354][T16010] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1921.401654][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1921.408044][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1921.532992][ T9] usb 2-1: USB disconnect, device number 84 [ 1921.593885][T16010] usb 7-1: Using ep0 maxpacket: 8 [ 1921.618317][T16010] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 1921.657198][T16010] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1921.720566][T16010] usb 7-1: config 0 has no interfaces? [ 1921.741377][T16010] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1922.106889][T16010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.152032][T16010] usb 7-1: Product: syz [ 1922.156315][T16010] usb 7-1: Manufacturer: syz [ 1922.298471][T16010] usb 7-1: SerialNumber: syz [ 1922.504355][T16010] usb 7-1: config 0 descriptor?? [ 1922.836808][T16010] usb 7-1: USB disconnect, device number 53 [ 1923.325935][T19971] usb 3-1: USB disconnect, device number 89 [ 1923.607333][ T29] audit: type=1326 audit(1773246214.645:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1923.612644][ T5896] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1923.708474][T11342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1923.715723][ T29] audit: type=1326 audit(1773246214.645:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1923.750549][T11342] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1923.775883][T11342] audit: backlog limit exceeded [ 1923.829681][ T29] audit: type=1326 audit(1773246214.645:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1923.907180][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1923.922410][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1923.947430][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1924.039637][ T29] audit: type=1326 audit(1773246214.645:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.060082][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1924.121060][ T29] audit: type=1326 audit(1773246214.645:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.152832][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1924.186249][ T5896] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1924.198744][ T29] audit: type=1326 audit(1773246214.645:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.232748][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.245754][ T5896] usb 2-1: Product: syz [ 1924.249970][ T5896] usb 2-1: Manufacturer: syz [ 1924.250443][ T29] audit: type=1326 audit(1773246214.645:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.272980][ T5896] usb 2-1: SerialNumber: syz [ 1924.299543][ T29] audit: type=1326 audit(1773246214.654:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.304266][ T5896] usb 2-1: config 0 descriptor?? [ 1924.325658][ T29] audit: type=1326 audit(1773246214.654:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1924.398466][ T5896] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1924.544186][ T29] audit: type=1326 audit(1773246214.654:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1925.186008][ T29] audit: type=1326 audit(1773246214.654:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11337 comm="syz.3.8254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4f19c799 code=0x50000 [ 1925.828668][T19971] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1925.886904][T11381] bridge0: entered promiscuous mode [ 1925.974336][T11392] xt_hashlimit: max too large, truncated to 1048576 [ 1926.022120][T11381] bridge0: left promiscuous mode [ 1926.102183][T19971] usb 3-1: Using ep0 maxpacket: 8 [ 1926.110466][T19971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1926.122507][T19971] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1926.148739][T19971] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1926.161113][T19971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.242794][T11403] SET target dimension over the limit! [ 1926.279835][T19971] usb 3-1: Product: syz [ 1926.294502][T19971] usb 3-1: Manufacturer: syz [ 1926.299137][T19971] usb 3-1: SerialNumber: syz [ 1926.332884][T19971] usb 3-1: config 0 descriptor?? [ 1927.524264][T11423] loop7: detected capacity change from 0 to 7 [ 1927.587397][ T5896] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1928.358859][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1928.378043][T12435] wlan0: Trigger new scan to find an IBSS to join [ 1928.410989][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1928.422526][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1928.434219][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1928.636480][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1928.651445][T11400] delete_channel: no stack [ 1928.659944][T11423] Dev loop7: unable to read RDB block 7 [ 1928.677998][T11423] loop7: unable to read partition table [ 1928.678603][ T5896] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1928.685265][T11423] loop7: partition table beyond EOD, truncated [ 1928.700193][T11423] loop_reread_partitions: partition scan of loop7 (Wý* %4FLQk݊5) failed (rc=-5) [ 1928.712451][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.723582][ T5896] usb 4-1: Product: syz [ 1928.734614][ T5896] usb 4-1: Manufacturer: syz [ 1928.745605][ T5896] usb 4-1: SerialNumber: syz [ 1928.938964][ T5896] usb 4-1: config 0 descriptor?? [ 1929.003499][ T5896] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1929.267387][ T5896] usb 2-1: USB disconnect, device number 85 [ 1929.421203][T11449] xt_hashlimit: max too large, truncated to 1048576 [ 1929.634358][T11456] xt_hashlimit: max too large, truncated to 1048576 [ 1929.870802][T19971] usb 3-1: USB disconnect, device number 90 [ 1930.647699][T11472] random: crng reseeded on system resumption [ 1931.724919][T11490] hpfs: Bad magic ... probably not HPFS [ 1932.111539][T19971] usb 4-1: USB disconnect, device number 80 [ 1932.351838][T11509] SELinux: failed to load policy [ 1932.357948][ T7134] libceph: connect (1)[c::]:6789 error -101 [ 1932.364646][ T7134] libceph: mon0 (1)[c::]:6789 connect error [ 1932.611263][T11504] ceph: No mds server is up or the cluster is laggy [ 1932.653796][ T7134] libceph: connect (1)[c::]:6789 error -101 [ 1932.655697][ T1003] wlan0: Trigger new scan to find an IBSS to join [ 1932.660028][ T7134] libceph: mon0 (1)[c::]:6789 connect error [ 1932.672251][ T5896] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1932.844229][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1932.877648][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1932.897322][ T5896] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1932.942847][ T5896] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1932.969081][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.991192][ T5896] usb 5-1: Product: syz [ 1933.008763][ T5896] usb 5-1: Manufacturer: syz [ 1933.025294][ T5896] usb 5-1: SerialNumber: syz [ 1933.046508][ T5896] usb 5-1: config 0 descriptor?? [ 1933.652971][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.823756][T11536] xt_hashlimit: max too large, truncated to 1048576 [ 1934.070871][T11541] xt_hashlimit: max too large, truncated to 1048576 [ 1936.570846][ T5896] usb 5-1: USB disconnect, device number 106 [ 1937.418691][T11591] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1937.662255][T11599] hpfs: Bad magic ... probably not HPFS [ 1938.411270][T16010] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1938.592944][T16010] usb 4-1: Using ep0 maxpacket: 16 [ 1938.606473][T16010] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1938.621261][T16010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.659598][T16010] usb 4-1: Product: syz [ 1938.669786][T16010] usb 4-1: Manufacturer: syz [ 1938.695023][T16010] usb 4-1: SerialNumber: syz [ 1939.318490][T16010] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1939.382389][T16010] usb 4-1: USB disconnect, device number 81 [ 1939.449821][T19971] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1940.099295][T19971] usb 7-1: Using ep0 maxpacket: 8 [ 1940.106139][T19971] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1940.116275][T19971] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1940.128498][T19971] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1940.138431][T19971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.146567][T19971] usb 7-1: Product: syz [ 1940.150794][T19971] usb 7-1: Manufacturer: syz [ 1940.155482][T19971] usb 7-1: SerialNumber: syz [ 1940.162627][T19971] usb 7-1: config 0 descriptor?? [ 1940.281015][T16010] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1940.475856][T16010] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1940.611183][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1940.611342][ T29] audit: type=1400 audit(1773246230.564:1161): avc: denied { write } for pid=11684 comm="syz.2.8315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1940.637561][T16010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1940.655063][T16010] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1940.769785][T16010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1940.781885][T16010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1940.806036][T16010] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1940.820546][T16010] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.828843][T16010] usb 4-1: Product: syz [ 1940.833234][T16010] usb 4-1: Manufacturer: syz [ 1941.361867][T16010] usb 4-1: SerialNumber: syz [ 1941.377041][T16010] usb 4-1: config 0 descriptor?? [ 1941.401232][T16010] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 1942.710952][T19971] usb 7-1: USB disconnect, device number 54 [ 1943.497597][ T792] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1943.819658][ T792] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x41, changing to 0x1 [ 1943.878170][ T792] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1943.888184][ T792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1943.900468][ T792] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1943.909867][ T792] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1943.919371][ T792] usb 2-1: Product: syz [ 1943.923961][ T792] usb 2-1: Manufacturer: syz [ 1943.935587][ T792] usb 2-1: SerialNumber: syz [ 1943.957669][ T792] usb 2-1: config 0 descriptor?? [ 1943.981772][ T792] usb 2-1: selecting invalid altsetting 0 [ 1944.541866][T11743] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1944.647284][ T7134] usb 4-1: USB disconnect, device number 82 [ 1944.654458][ T792] usb 2-1: USB disconnect, device number 86 [ 1945.488181][T24768] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1946.773439][T11801] xt_hashlimit: max too large, truncated to 1048576 [ 1946.972845][T16010] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1947.151515][T16010] usb 2-1: device descriptor read/64, error -71 [ 1947.879188][T16010] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1947.924800][T11810] fuse: Unknown parameter '00000000000000000000' [ 1948.251902][T16010] usb 2-1: device descriptor read/64, error -71 [ 1948.370558][T16010] usb usb2-port1: attempt power cycle [ 1948.580481][T11819] hpfs: Bad magic ... probably not HPFS [ 1948.655864][T11822] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8336'. [ 1948.665707][T11822] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8336'. [ 1948.764809][T16010] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1948.797695][T16010] usb 2-1: device descriptor read/8, error -71 [ 1948.818363][T11827] random: crng reseeded on system resumption [ 1948.865237][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1948.900663][T11829] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8332'. [ 1949.064376][T16010] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1949.086106][T16010] usb 2-1: device descriptor read/8, error -71 [ 1949.492040][T16010] usb usb2-port1: unable to enumerate USB device [ 1950.000780][T11855] random: crng reseeded on system resumption [ 1950.057935][ T7134] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1950.286254][ T7134] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1950.296539][ T7134] usb 7-1: config 0 has no interface number 0 [ 1950.308648][ T7134] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1950.337088][ T7134] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1950.346561][ T7134] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.366401][ T7134] usb 7-1: Product: syz [ 1950.374849][ T7134] usb 7-1: Manufacturer: syz [ 1950.432898][ T7134] usb 7-1: SerialNumber: syz [ 1950.445296][ T7134] usb 7-1: config 0 descriptor?? [ 1950.455055][T11844] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1950.471485][ T7134] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, de:74:e2:b1:7b:cb [ 1950.617830][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 240 seconds [ 1950.628845][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 240 seconds [ 1950.640669][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 240 seconds [ 1950.651943][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 240 seconds [ 1950.710539][ T7134] usb 7-1: USB disconnect, device number 55 [ 1950.721261][ T7134] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1950.858356][T11875] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8342'. [ 1952.266557][T11909] hpfs: Bad magic ... probably not HPFS [ 1952.278939][T11902] loop6: detected capacity change from 0 to 7 [ 1952.289019][ C0] blk_print_req_error: 11 callbacks suppressed [ 1952.289041][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.304882][ C0] buffer_io_error: 11 callbacks suppressed [ 1952.304898][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.322013][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.331770][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.344032][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.353743][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.362799][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.372395][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.381592][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.391253][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.410426][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.420175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.439189][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.448864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.456891][T11902] ldm_validate_partition_table(): Disk read failed. [ 1952.465866][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.475629][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.484790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.494513][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.509295][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1952.519140][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1952.553394][T11902] Dev loop6: unable to read RDB block 0 [ 1952.567040][T11902] loop6: unable to read partition table [ 1952.573404][T24774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1952.584841][T11902] loop6: partition table beyond EOD, truncated [ 1952.592383][T11902] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1952.913330][ T5179] ldm_validate_partition_table(): Disk read failed. [ 1952.932966][ T5179] Dev loop6: unable to read RDB block 0 [ 1952.943225][ T5179] loop6: unable to read partition table [ 1952.949074][ T5179] loop6: partition table beyond EOD, truncated [ 1953.167143][T16010] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1953.199898][T11942] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:ffff with DS=0x1d [ 1953.349013][ T5932] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1953.369986][T16010] usb 3-1: Using ep0 maxpacket: 8 [ 1953.379024][T16010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1953.398907][T16010] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1953.420335][T16010] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1953.429927][T16010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.438531][T16010] usb 3-1: Product: syz [ 1953.448818][T16010] usb 3-1: Manufacturer: syz [ 1953.455696][T16010] usb 3-1: SerialNumber: syz [ 1953.471646][T16010] usb 3-1: config 0 descriptor?? [ 1953.562613][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 1953.569560][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1953.579968][ T5932] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1953.595226][ T5932] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1953.604602][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.619366][ T5932] usb 2-1: Product: syz [ 1953.631204][ T5932] usb 2-1: Manufacturer: syz [ 1953.642415][ T5932] usb 2-1: SerialNumber: syz [ 1953.663318][ T5932] usb 2-1: config 0 descriptor?? [ 1956.048725][ T8178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1956.064500][ T8178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1956.095599][ T8178] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1956.129158][ T8178] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1956.140531][ T8178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1956.669963][T11969] lo speed is unknown, defaulting to 1000 [ 1956.871509][ T5932] usb 2-1: USB disconnect, device number 91 [ 1956.980675][ T5820] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1958.118293][ T5820] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1958.855620][ T5131] Bluetooth: hci2: command tx timeout [ 1959.156830][ T5896] usb 3-1: USB disconnect, device number 91 [ 1959.249994][T11969] lo speed is unknown, defaulting to 1000 [ 1959.555797][T12010] fido_id[12010]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1959.955126][T12034] hpfs: Bad magic ... probably not HPFS [ 1961.031184][ T5131] Bluetooth: hci2: command tx timeout [ 1961.604144][T11969] chnl_net:caif_netlink_parms(): no params data found [ 1961.685975][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.693556][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.700855][T11969] bridge_slave_0: entered allmulticast mode [ 1961.708485][T11969] bridge_slave_0: entered promiscuous mode [ 1961.718853][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.727605][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.734985][T11969] bridge_slave_1: entered allmulticast mode [ 1961.742315][T11969] bridge_slave_1: entered promiscuous mode [ 1961.771842][T11969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1961.783661][T11969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1961.814408][T11969] team0: Port device team_slave_0 added [ 1961.822363][T11969] team0: Port device team_slave_1 added [ 1961.850045][T11969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1961.857239][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1961.883507][T11969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1961.895830][T11969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1961.903298][T11969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1961.929415][T11969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1961.973462][T11969] hsr_slave_0: entered promiscuous mode [ 1961.979927][T11969] hsr_slave_1: entered promiscuous mode [ 1961.986432][T11969] debugfs: 'hsr0' already exists in 'hsr' [ 1961.992181][T11969] Cannot create hsr debugfs directory [ 1962.170918][T11969] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1962.181228][T11969] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1962.192037][T11969] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1962.201702][T11969] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1962.225733][T11969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.232988][T11969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.240429][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.247532][T11969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.297049][T11969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1962.311729][T24771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.322668][T24771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1962.339948][T11969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1962.352706][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.359889][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.375840][T24771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.383105][T24771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.535347][T11969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.695610][T11969] veth0_vlan: entered promiscuous mode [ 1962.707775][T11969] veth1_vlan: entered promiscuous mode [ 1962.736650][T11969] veth0_macvtap: entered promiscuous mode [ 1962.749398][T11969] veth1_macvtap: entered promiscuous mode [ 1962.768614][T11969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.782564][T11969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.798986][ T1151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.809054][ T1151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.822849][ T1151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.832604][ T1151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.923332][T24766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.931265][T24766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.963352][T24774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.971520][T24774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.418537][ T5131] Bluetooth: hci2: command tx timeout [ 1965.647323][ T5131] Bluetooth: hci2: command tx timeout [ 1966.658580][ T5179] udevd[5179]: worker [4050] /devices/virtual/block/nbd0 timeout; kill it [ 1966.667469][ T5179] udevd[5179]: seq 31411 '/devices/virtual/block/nbd0' killed [ 1968.298832][T24774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.138003][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1979.923010][T24768] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1983.341501][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 270 seconds [ 1983.352867][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 270 seconds [ 1983.364045][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 270 seconds [ 1983.375519][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 270 seconds [ 1986.771354][T24771] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2002.490940][T24766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2013.430476][T24766] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2015.484562][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 300 seconds [ 2015.495448][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 300 seconds [ 2015.506968][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 300 seconds [ 2015.518756][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 300 seconds [ 2020.268915][T24771] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2036.680845][T24771] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2040.785014][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.622146][ T1151] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2047.632798][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 330 seconds [ 2047.644153][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 330 seconds [ 2047.655414][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 330 seconds [ 2047.666606][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 330 seconds [ 2053.776511][T24774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2068.136958][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2070.874867][T24774] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2079.762028][T20786] block nbd0: Possible stuck request ffff888027a08000: control (read@0,1024B). Runtime 360 seconds [ 2079.773067][T20786] block nbd0: Possible stuck request ffff888027a08200: control (read@1024,1024B). Runtime 360 seconds [ 2079.784318][T20786] block nbd0: Possible stuck request ffff888027a08400: control (read@2048,1024B). Runtime 360 seconds [ 2079.795524][T20786] block nbd0: Possible stuck request ffff888027a08600: control (read@3072,1024B). Runtime 360 seconds [ 2081.815009][T12435] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2086.771316][ T8178] Bluetooth: hci2: command 0x0406 tx timeout [ 2087.978881][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2098.909454][ T30] INFO: task syz.4.8305:11617 blocked for more than 142 seconds. [ 2098.917347][ T30] Tainted: G L syzkaller #0 [ 2098.924716][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2098.933465][ T30] task:syz.4.8305 state:D stack:29000 pid:11617 tgid:11616 ppid:31433 task_flags:0x400040 flags:0x00080002 [ 2098.945600][ T30] Call Trace: [ 2098.948894][ T30] [ 2098.952006][ T30] __schedule+0xfee/0x6120 [ 2098.956518][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2098.961557][ T30] ? __pfx___schedule+0x10/0x10 [ 2098.966716][ T30] ? find_held_lock+0x2b/0x80 [ 2098.971417][ T30] ? schedule+0x2bf/0x390 [ 2098.975960][ T30] schedule+0xdd/0x390 [ 2098.980062][ T30] schedule_preempt_disabled+0x13/0x30 [ 2098.986071][ T30] __mutex_lock+0xc9a/0x1b90 [ 2098.990714][ T30] ? sync_bdevs+0x153/0x480 [ 2098.996064][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.001130][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2099.006915][ T30] ? iput.part.0+0x1a0/0xf50 [ 2099.011529][ T30] ? sync_bdevs+0x153/0x480 [ 2099.016073][ T30] sync_bdevs+0x153/0x480 [ 2099.020427][ T30] ksys_sync+0xb0/0xf0 [ 2099.024485][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2099.029313][ T30] ? kcov_ioctl+0x16a/0x720 [ 2099.033849][ T30] ? do_syscall_64+0x95/0xf80 [ 2099.038695][ T30] __do_sys_sync+0xe/0x20 [ 2099.043083][ T30] do_syscall_64+0x106/0xf80 [ 2099.047721][ T30] ? clear_bhb_loop+0x40/0x90 [ 2099.052468][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.058525][ T30] RIP: 0033:0x7f41ba99c799 [ 2099.062986][ T30] RSP: 002b:00007f41bb786028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2099.071774][ T30] RAX: ffffffffffffffda RBX: 00007f41bac15fa0 RCX: 00007f41ba99c799 [ 2099.081105][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.089247][ T30] RBP: 00007f41bac15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.097843][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.106317][ T30] R13: 00007f41bac16038 R14: 00007f41bac15fa0 R15: 00007ffd49a69708 [ 2099.114401][ T30] [ 2099.117519][ T30] INFO: task syz.4.8305:11619 blocked for more than 143 seconds. [ 2099.125870][ T30] Tainted: G L syzkaller #0 [ 2099.132384][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2099.141178][ T30] task:syz.4.8305 state:D stack:28136 pid:11619 tgid:11616 ppid:31433 task_flags:0x400040 flags:0x00080002 [ 2099.153162][ T30] Call Trace: [ 2099.156489][ T30] [ 2099.159454][ T30] __schedule+0xfee/0x6120 [ 2099.163894][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2099.169116][ T30] ? __pfx___schedule+0x10/0x10 [ 2099.174001][ T30] ? find_held_lock+0x2b/0x80 [ 2099.178945][ T30] ? schedule+0x2bf/0x390 [ 2099.183313][ T30] schedule+0xdd/0x390 [ 2099.187418][ T30] schedule_preempt_disabled+0x13/0x30 [ 2099.192900][ T30] __mutex_lock+0xc9a/0x1b90 [ 2099.197559][ T30] ? sync_bdevs+0x153/0x480 [ 2099.202583][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.207646][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2099.213423][ T30] ? iput.part.0+0x1a0/0xf50 [ 2099.218273][ T30] ? sync_bdevs+0x153/0x480 [ 2099.222843][ T30] sync_bdevs+0x153/0x480 [ 2099.227192][ T30] ksys_sync+0xb0/0xf0 [ 2099.231325][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2099.236146][ T30] ? kcov_ioctl+0x16a/0x720 [ 2099.240732][ T30] ? do_syscall_64+0x95/0xf80 [ 2099.245438][ T30] __do_sys_sync+0xe/0x20 [ 2099.249762][ T30] do_syscall_64+0x106/0xf80 [ 2099.254452][ T30] ? clear_bhb_loop+0x40/0x90 [ 2099.259140][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.265091][ T30] RIP: 0033:0x7f41ba99c799 [ 2099.269499][ T30] RSP: 002b:00007f41b8bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2099.277935][ T30] RAX: ffffffffffffffda RBX: 00007f41bac16090 RCX: 00007f41ba99c799 [ 2099.285974][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.294056][ T30] RBP: 00007f41bac16090 R08: 0000000000000000 R09: 0000000000000000 [ 2099.302101][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.310205][ T30] R13: 00007f41bac16128 R14: 00007f41bac16090 R15: 00007ffd49a69708 [ 2099.318708][ T30] [ 2099.321774][ T30] INFO: task syz.4.8305:11621 blocked for more than 143 seconds. [ 2099.329777][ T30] Tainted: G L syzkaller #0 [ 2099.336444][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2099.345252][ T30] task:syz.4.8305 state:D stack:26640 pid:11621 tgid:11616 ppid:31433 task_flags:0x400040 flags:0x00080002 [ 2099.357350][ T30] Call Trace: [ 2099.360810][ T30] [ 2099.363763][ T30] __schedule+0xfee/0x6120 [ 2099.368209][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2099.373231][ T30] ? __pfx___schedule+0x10/0x10 [ 2099.378328][ T30] ? find_held_lock+0x2b/0x80 [ 2099.383133][ T30] ? schedule+0x2bf/0x390 [ 2099.387487][ T30] schedule+0xdd/0x390 [ 2099.391615][ T30] schedule_preempt_disabled+0x13/0x30 [ 2099.397179][ T30] __mutex_lock+0xc9a/0x1b90 [ 2099.401839][ T30] ? sync_bdevs+0x153/0x480 [ 2099.406363][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.411522][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2099.417198][ T30] ? iput.part.0+0x1a0/0xf50 [ 2099.423711][ T30] ? sync_bdevs+0x153/0x480 [ 2099.428269][ T30] sync_bdevs+0x153/0x480 [ 2099.432953][ T30] ksys_sync+0xb0/0xf0 [ 2099.437067][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2099.441847][ T30] ? do_syscall_64+0x95/0xf80 [ 2099.446625][ T30] __do_sys_sync+0xe/0x20 [ 2099.450980][ T30] do_syscall_64+0x106/0xf80 [ 2099.455754][ T30] ? clear_bhb_loop+0x40/0x90 [ 2099.460499][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.466558][ T30] RIP: 0033:0x7f41ba99c799 [ 2099.471015][ T30] RSP: 002b:00007f41b8bd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2099.479777][ T30] RAX: ffffffffffffffda RBX: 00007f41bac16180 RCX: 00007f41ba99c799 [ 2099.487822][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.495817][ T30] RBP: 00007f41bac16180 R08: 0000000000000000 R09: 0000000000000000 [ 2099.504004][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.512170][ T30] R13: 00007f41bac16218 R14: 00007f41bac16180 R15: 00007ffd49a69708 [ 2099.521276][ T30] [ 2099.524375][ T30] INFO: task syz.4.8305:11625 blocked for more than 143 seconds. [ 2099.532621][ T30] Tainted: G L syzkaller #0 [ 2099.539147][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2099.548201][ T30] task:syz.4.8305 state:D stack:27464 pid:11625 tgid:11616 ppid:31433 task_flags:0x580140 flags:0x00080002 [ 2099.560217][ T30] Call Trace: [ 2099.563549][ T30] [ 2099.566495][ T30] __schedule+0xfee/0x6120 [ 2099.571268][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2099.576301][ T30] ? __pfx___schedule+0x10/0x10 [ 2099.581232][ T30] ? find_held_lock+0x2b/0x80 [ 2099.586072][ T30] ? schedule+0x2bf/0x390 [ 2099.590446][ T30] schedule+0xdd/0x390 [ 2099.594744][ T30] schedule_preempt_disabled+0x13/0x30 [ 2099.600311][ T30] __mutex_lock+0xc9a/0x1b90 [ 2099.605077][ T30] ? sync_bdevs+0x153/0x480 [ 2099.609610][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.614708][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2099.620367][ T30] ? iput.part.0+0x1a0/0xf50 [ 2099.625021][ T30] ? sync_bdevs+0x153/0x480 [ 2099.629540][ T30] sync_bdevs+0x153/0x480 [ 2099.633879][ T30] ksys_sync+0xb0/0xf0 [ 2099.638050][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2099.643156][ T30] ? do_syscall_64+0x95/0xf80 [ 2099.647921][ T30] __do_sys_sync+0xe/0x20 [ 2099.652445][ T30] do_syscall_64+0x106/0xf80 [ 2099.657130][ T30] ? clear_bhb_loop+0x40/0x90 [ 2099.661898][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.667873][ T30] RIP: 0033:0x7f41ba99c799 [ 2099.672297][ T30] RSP: 002b:00007f41b87b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2099.681154][ T30] RAX: ffffffffffffffda RBX: 00007f41bac16270 RCX: 00007f41ba99c799 [ 2099.689175][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.697140][ T30] RBP: 00007f41bac16270 R08: 0000000000000000 R09: 0000000000000000 [ 2099.705220][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.713268][ T30] R13: 00007f41bac16308 R14: 00007f41bac16270 R15: 00007ffd49a69708 [ 2099.721322][ T30] [ 2099.724414][ T30] INFO: task syz.4.8305:11626 blocked for more than 143 seconds. [ 2099.732171][ T30] Tainted: G L syzkaller #0 [ 2099.738663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2099.747481][ T30] task:syz.4.8305 state:D stack:27176 pid:11626 tgid:11616 ppid:31433 task_flags:0x400140 flags:0x00080002 [ 2099.759802][ T30] Call Trace: [ 2099.763312][ T30] [ 2099.766467][ T30] __schedule+0xfee/0x6120 [ 2099.771083][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2099.776215][ T30] ? __pfx___schedule+0x10/0x10 [ 2099.781116][ T30] ? find_held_lock+0x2b/0x80 [ 2099.785864][ T30] ? schedule+0x2bf/0x390 [ 2099.790208][ T30] schedule+0xdd/0x390 [ 2099.794267][ T30] schedule_preempt_disabled+0x13/0x30 [ 2099.799824][ T30] __mutex_lock+0xc9a/0x1b90 [ 2099.804443][ T30] ? sync_bdevs+0x153/0x480 [ 2099.808999][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.814207][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2099.819925][ T30] ? iput.part.0+0x1a0/0xf50 [ 2099.824537][ T30] ? sync_bdevs+0x153/0x480 [ 2099.829062][ T30] sync_bdevs+0x153/0x480 [ 2099.833412][ T30] ksys_sync+0xb0/0xf0 [ 2099.837481][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2099.842274][ T30] ? do_syscall_64+0x95/0xf80 [ 2099.846967][ T30] __do_sys_sync+0xe/0x20 [ 2099.851419][ T30] do_syscall_64+0x106/0xf80 [ 2099.856038][ T30] ? clear_bhb_loop+0x40/0x90 [ 2099.861285][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.867285][ T30] RIP: 0033:0x7f41ba99c799 [ 2099.871994][ T30] RSP: 002b:00007f41b838f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2099.880437][ T30] RAX: ffffffffffffffda RBX: 00007f41bac16360 RCX: 00007f41ba99c799 [ 2099.888506][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.896549][ T30] RBP: 00007f41bac16360 R08: 0000000000000000 R09: 0000000000000000 [ 2099.904582][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.912558][ T30] R13: 00007f41bac163f8 R14: 00007f41bac16360 R15: 00007ffd49a69708 [ 2099.920686][ T30] [ 2099.923742][ T30] [ 2099.923742][ T30] Showing all locks held in the system: [ 2099.931628][ T30] 1 lock held by khungtaskd/30: [ 2099.936528][ T30] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2099.946664][ T30] 2 locks held by getty/5570: [ 2099.951353][ T30] #0: ffff8880340ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2099.961201][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2099.971797][ T30] 1 lock held by udevd/4050: [ 2099.976447][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2099.986340][ T30] 1 lock held by syz.4.8305/11617: [ 2099.991526][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2100.001124][ T30] 1 lock held by syz.4.8305/11619: [ 2100.006250][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2100.015795][ T30] 1 lock held by syz.4.8305/11621: [ 2100.020968][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2100.030408][ T30] 1 lock held by syz.4.8305/11625: [ 2100.035904][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2100.045483][ T30] 1 lock held by syz.4.8305/11626: [ 2100.050649][ T30] #0: ffff88802791c358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2100.060187][ T30] [ 2100.062518][ T30] ============================================= [ 2100.062518][ T30] [ 2100.070997][ T30] NMI backtrace for cpu 0 [ 2100.071020][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2100.071045][ T30] Tainted: [L]=SOFTLOCKUP [ 2100.071050][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2100.071060][ T30] Call Trace: [ 2100.071067][ T30] [ 2100.071074][ T30] dump_stack_lvl+0x100/0x190 [ 2100.071124][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2100.071145][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2100.071180][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2100.071215][ T30] sys_info+0x141/0x190 [ 2100.071240][ T30] watchdog+0xd25/0x1050 [ 2100.071277][ T30] ? __pfx_watchdog+0x10/0x10 [ 2100.071304][ T30] ? __kthread_parkme+0x18c/0x230 [ 2100.071336][ T30] ? kthread+0x13a/0x450 [ 2100.071354][ T30] ? __pfx_watchdog+0x10/0x10 [ 2100.071386][ T30] kthread+0x370/0x450 [ 2100.071404][ T30] ? __pfx_kthread+0x10/0x10 [ 2100.071423][ T30] ret_from_fork+0x754/0xd80 [ 2100.071447][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2100.071469][ T30] ? __switch_to+0x7b4/0x1120 [ 2100.071494][ T30] ? __pfx_kthread+0x10/0x10 [ 2100.071515][ T30] ret_from_fork_asm+0x1a/0x30 [ 2100.071554][ T30] [ 2100.071562][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2100.200830][ C1] NMI backtrace for cpu 1 [ 2100.200856][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2100.200879][ C1] Tainted: [L]=SOFTLOCKUP [ 2100.200885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2100.200894][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2100.200920][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2100.200934][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 2100.200948][ C1] RAX: 0000000007ef562b RBX: ffff88801e6a24c0 RCX: ffffffff8b8f9c75 [ 2100.200959][ C1] RDX: 0000000000000000 RSI: ffffffff8de74cf8 RDI: ffffffff8c1afaa0 [ 2100.200968][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 2100.200978][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498 [ 2100.200988][ C1] R13: 0000000000000001 R14: ffffffff90d98310 R15: 0000000000000000 [ 2100.200999][ C1] FS: 0000000000000000(0000) GS:ffff888124447000(0000) knlGS:0000000000000000 [ 2100.201016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2100.201026][ C1] CR2: 000055f742144168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2100.201036][ C1] Call Trace: [ 2100.201041][ C1] [ 2100.201047][ C1] default_idle+0x9/0x10 [ 2100.201070][ C1] default_idle_call+0x6c/0xb0 [ 2100.201088][ C1] do_idle+0x35b/0x4b0 [ 2100.201113][ C1] ? __pfx_do_idle+0x10/0x10 [ 2100.201134][ C1] cpu_startup_entry+0x4f/0x60 [ 2100.201152][ C1] start_secondary+0x21d/0x2d0 [ 2100.201177][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2100.201200][ C1] common_startup_64+0x13e/0x148 [ 2100.201226][ C1] [ 2100.202027][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2100.202044][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2100.202075][ T30] Tainted: [L]=SOFTLOCKUP [ 2100.202082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2100.202092][ T30] Call Trace: [ 2100.202099][ T30] [ 2100.202106][ T30] dump_stack_lvl+0x100/0x190 [ 2100.202140][ T30] vpanic+0x552/0x970 [ 2100.202158][ T30] ? __pfx_vpanic+0x10/0x10 [ 2100.202177][ T30] ? rcu_is_watching+0x12/0xc0 [ 2100.202204][ T30] panic+0xd1/0xe0 [ 2100.202220][ T30] ? __pfx_panic+0x10/0x10 [ 2100.202241][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2100.202266][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2100.202290][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2100.202312][ T30] ? watchdog.cold+0x198/0x1ca [ 2100.202331][ T30] ? watchdog+0xd35/0x1050 [ 2100.202355][ T30] watchdog.cold+0x1a9/0x1ca [ 2100.202382][ T30] ? __pfx_watchdog+0x10/0x10 [ 2100.202405][ T30] ? __kthread_parkme+0x18c/0x230 [ 2100.202432][ T30] ? kthread+0x13a/0x450 [ 2100.202448][ T30] ? __pfx_watchdog+0x10/0x10 [ 2100.202469][ T30] kthread+0x370/0x450 [ 2100.202484][ T30] ? __pfx_kthread+0x10/0x10 [ 2100.202502][ T30] ret_from_fork+0x754/0xd80 [ 2100.202522][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2100.202541][ T30] ? __switch_to+0x7b4/0x1120 [ 2100.202562][ T30] ? __pfx_kthread+0x10/0x10 [ 2100.202580][ T30] ret_from_fork_asm+0x1a/0x30 [ 2100.202612][ T30] [ 2100.524147][ T30] Kernel Offset: disabled [ 2100.528521][ T30] Rebooting in 86400 seconds..