last executing test programs: 19m57.617065891s ago: executing program 0 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0xffbffffd, 0xfffffffd, 0x0, 0x81, 0x2, 0xb88}) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2712, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000193c0)={'syztnl2\x00', 0x0, 0x0, 0xc7, 0x5, 0xd7, 0x0, @empty, @loopback, 0x7, 0x8, 0xa, 0x9}}) gettid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="6a4e0866e5a71825c5a9c293b0d4c5e84161b964ac42235f39"], 0xfdef) write$FUSE_LK(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf74cf000) socket$netlink(0x10, 0x3, 0x4) 19m55.909886979s ago: executing program 0 (id=153): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x40080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) r5 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r9, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 19m54.819953297s ago: executing program 0 (id=156): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open$dir(&(0x7f0000000440)='./file0\x00', 0x10481, 0x10) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000580), 0x4f7, 0x2002, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) setreuid(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$security_evm(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@ng={0x4, 0xb, "9bacd8d367c842218ddd5109e76c15f4b0"}, 0x13, 0x1) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000000002b080000e000000200000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001002000000000000700000000000000000000000000000000000400000000000000000000000000000000000a000200700000000000000014000e00fe5a69cab400000000000000000000bb08003b0009000000"], 0x10c}}, 0x0) sendfile(r4, r4, 0x0, 0x40008) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7, 0x0, 0x0, 0xfff}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) 19m53.041980045s ago: executing program 0 (id=165): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000300)=0x1) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000083064205a575a888f98d53f33fc3cb57001800ffff27", @ANYRES32=0x0, @ANYBLOB="150100000000000020001280080001006772650014000280080007007f00000108000100", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) 19m50.884907849s ago: executing program 0 (id=167): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x3) inotify_init() timer_create(0x4, &(0x7f0000000080)={0x0, 0x16, 0x7, @tid=r1}, &(0x7f00000000c0)=0x0) timer_delete(r2) fanotify_mark(0xffffffffffffffff, 0x200, 0x8000001, r0, &(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x8281, 0x52) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200, 0x20, 0x10}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000480)={&(0x7f0000000200)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/71, 0x47}], 0x2, &(0x7f0000000400)=""/117, 0x75}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044084) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r6, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x18, 0x61}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20004040) lsetxattr$security_capability(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)=@v3={0x3000000, [{0x1, 0x9}, {0x6, 0xf}], 0xee01}, 0x18, 0x3) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x103e02, 0x0) syz_pidfd_open(r1, 0x0) r9 = accept4$inet6(r8, &(0x7f0000000880)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000008c0)=0x1c, 0x0) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000900)) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000940), &(0x7f0000000980)=0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000009c0), r10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x36c8e7ce6e8dcd6f}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe60}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x38}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000801}, 0x20000000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x582da7c0e5507e8f}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x120, r12, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xf8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3800}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6efab85d42ec4e44e6e5a450350542e7dbc61dc7aebf9877b63fa22689f3dfcf"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x120}, 0x1, 0x0, 0x0, 0x44041}, 0x40000) 19m49.960444603s ago: executing program 0 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4e22, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 19m34.738009039s ago: executing program 32 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4e22, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 14m12.408112241s ago: executing program 1 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 14m12.090423826s ago: executing program 1 (id=1215): io_submit(0x0, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x0, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0xa, 0x0}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b6c8281a035f69a800000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 14m6.721678556s ago: executing program 1 (id=1227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000a40)=0xfff) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f00000001c0)=0xf4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000002c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @broadcast, @loopback}, &(0x7f00000009c0)=0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020008000300000000150000000000000000000000002000"], 0x50) r12 = syz_open_dev$mouse(&(0x7f0000000d00), 0x9, 0x101000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r2}, 0x20) r14 = syz_open_dev$audion(&(0x7f0000000e00), 0x200, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x21, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x178}}, @alu={0x7, 0x0, 0x4, 0xb, 0x3, 0xffffffffffffffc0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x6, 0x3, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='GPL\x00', 0x6dd, 0x0, 0x0, 0x41000, 0x12, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000a80)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x66c, 0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e40)=[r9, r10, r11, r12, r13, r14], &(0x7f0000000e80)=[{0x2, 0x5, 0x6, 0x6}], 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x0) close(r6) 14m5.040125637s ago: executing program 1 (id=1232): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x2, 0x0, 0x1, 0x2}, 0x1c) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r6 = request_key(&(0x7f0000000640)='big_key\x00', &(0x7f00000006c0)={'syz', 0x2}, &(0x7f0000000700)='/dev/kvm\x00', 0x0) keyctl$revoke(0x3, r6) fchown(r5, 0x0, 0x0) r7 = syz_usb_connect$cdc_ncm(0x5, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x6, 0x70, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "82178fce14"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x480, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x7ff}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x4e, 0x77}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x40, 0xa2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x3, 0xf8}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x40, 0x6, 0x40, 0x6}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x31, 0x5, 0xff91}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x30, 0x5, 0x5, 0x1, 0xc0}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc09}}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x8084) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "7d7408e707adb5a5"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0x0, 0xfffffffffffffffb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x30, 0x35, {0x35, 0xf, "6491b080f03d9ba6fc47809bfdea27bf366a08cb85acccdcdc367de46a605df9a5f97e0c77ca8c6dfbc51d391b15f0e8a8f2f7"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x0, 0x17, 0x8f, "2d0ddfeebc4b4dfff6d7cb6972b63fa652055fae5c6c6f84f350f0c8cc366540d6ec5448a944adbb7788176bd38c66b4d38b37b3c24ef85f7a4bcbe4fd4092704f6c6b411bec6ec1ae0517d99be1c3df15904f24bcf07b7616bea3b2f02f220f10d3fb35d6211a34afa89bc86d018bd35bd3d2282228bf5b39aad402f2a7031ab08b5bc819979b9571cbc11a650502"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x79}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0xfff8, 0x8, 0x5c588cf5, 0x0, 0x2, 0xb5b8, 0x8, 0x81, 0x9, 0x4, 0x1, 0x80}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0xfff}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x1, 'U'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000900)={0x14, &(0x7f0000000740)={0x0, 0x11, 0x64, {0x64, 0x1, "dbbcc3d7e8b4b1c7e0424aba5c1f593936d4faf02b48dc33c9c03c4c2a114487b1314c3993ce8c6438d652471e2462d6ba9ac8da5edd48dc321df916ae29726adcb94208cce28c63c72ed9a05716654beef14abd474ebee575e99dbc5866c65a84b1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a40)={0x20, 0xd, 0x69, "0c3db0509f7a9aa17f9f4f84c6158b2ccdfa9f0d72032c922b86db003df92e828ab314a52464eaaa413ea9980a3a5fd2104de3cbcf8123651b969c74895797d1bbbd7dda3f5c7d089fe245b6353cd628f3c1d4cac4b8eb7e78661e3930010a0ee1238bd7bc001105fc"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x0, 0xd1, {0xcf, "8dd536dabe7cbc79a0ec6e1fe1f39440d150dab4e2fb3cab692965afbcc48cb864e26fb85455dc75f7f496986d756eeb2c975c5d09364a39b6ee4c1b47c9913c36be7e9a9c5e46c2b273b0332759038c55f1addb8ae1cf1641216a556dba5c046250e649964448d0a0e79babefa937bfbcc3559b98f5bee2275571d4c65b25dabd6f62ca9603d98315f02e3cc57403de22f028cba2f31b6798a1e926f1c2b9c5e1750a1e8fefe90915d7d12b6c1adabc9ef0b7ba8002fb651717dbd3fe0542c0a68a978a54f8a621cf3259b46d3d7b"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x7}}) 14m1.428244079s ago: executing program 1 (id=1244): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xa00, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$can_bcm(r7, 0x0, 0x20000800) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) lseek(r1, 0x1000000, 0x1) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) 14m0.461061878s ago: executing program 1 (id=1245): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r5 = syz_open_procfs(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="640100", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000080001007063690011000200303030303a30303a31302e", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000009333f00f0002006e657464657673", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e30000000000800", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 13m45.26256318s ago: executing program 33 (id=1245): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) r5 = syz_open_procfs(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="640100", @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000080001007063690011000200303030303a30303a31302e", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0e0001006e657464657673696d0000009333f00f0002006e657464657673", @ANYRES32=0x0, @ANYBLOB="080001007063690011000200303030303a30303a31302e30000000000800", @ANYRES32=r5, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 11m12.243572798s ago: executing program 5 (id=1699): socket(0xa, 0x3, 0xfc) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(0x0, r0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x2000) 11m11.450620248s ago: executing program 5 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0", 0x28}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={@remote, @local}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11m10.488680602s ago: executing program 5 (id=1707): r0 = creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r1, 0xee01) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) connect$unix(r3, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)='D', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="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"], 0x18, 0x24048001}}], 0x1, 0x44080) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02e2ffff0000000004000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x13f, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r7, 0x80047458, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r5], 0x3c}}, 0x0) 11m3.658411269s ago: executing program 5 (id=1723): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0xffffffffffffff99) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) sched_setparam(r4, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000"], 0x44}}, 0x20000040) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000090000000900000000600000010000000070000130f000000090000f08660c65f2cbe6accf4307ef03a32006a0000000d00000002000000fcffffff000000000f00000007000000000000000300000085010000090000000400000000008065000800000d00000004000000b8f600000c00000040000000040000000500000000000002050000000000000000000003000000000400000005000000361900000f0000"], &(0x7f00000002c0)=""/94, 0xae, 0x5e, 0x1, 0xb, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x63d6, '\x00', 0x0, r7, 0x3, 0x0, 0x1}, 0x50) sendfile(r6, r6, 0x0, 0x200000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) 11m0.631235853s ago: executing program 5 (id=1730): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) syz_open_dev$usbfs(0x0, 0x400000005, 0x220000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) io_submit(0x0, 0x4f, &(0x7f0000000380)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa", 0xe9}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a8", 0x3f}, {&(0x7f0000004480)="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", 0xd9a}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668", 0xc}], 0x5) readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) 10m57.10882878s ago: executing program 5 (id=1738): r0 = socket(0xa, 0x3, 0xfc) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(0x0, r1, 0x0) io_setup(0x3, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x2000) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000019880)=""/102380, 0x18fec}], 0x1, 0x7, 0xffffffff) syz_usb_connect(0x5, 0x41, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xf8, 0x37, 0xfa, 0x8, 0x4e2, 0x1422, 0x5353, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x2, 0x84, 0x7c, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x10f1}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5286, 0x1c}}]}}]}}]}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x8) sendto$unix(r0, 0x0, 0x0, 0x48850, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'lblcr\x00', 0x2c, 0x80005, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x20, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 10m41.496580519s ago: executing program 34 (id=1738): r0 = socket(0xa, 0x3, 0xfc) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(0x0, r1, 0x0) io_setup(0x3, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, 0x0, 0x0, 0x2000) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000019880)=""/102380, 0x18fec}], 0x1, 0x7, 0xffffffff) syz_usb_connect(0x5, 0x41, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xf8, 0x37, 0xfa, 0x8, 0x4e2, 0x1422, 0x5353, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x2, 0x84, 0x7c, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x10f1}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x8, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x5286, 0x1c}}]}}]}}]}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x8) sendto$unix(r0, 0x0, 0x0, 0x48850, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'lblcr\x00', 0x2c, 0x80005, 0x71}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x20, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 2m35.887488885s ago: executing program 6 (id=2990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getenv(0x4201, r0, 0x4, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x0, 0x101, 0x400000, 0x5, 0x0, 0x0, 0x200000, 0x4, 0xfffffffc, 0x6000, 0x1, 0x0, r5, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setrlimit(0x2, &(0x7f0000000080)={0x40000000, 0x6}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$sock_ifreq(r6, 0x2203, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffefa7}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) 2m34.915133936s ago: executing program 6 (id=2991): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000007c0)="00aad6ac2e03be8983c74b87c2ebbe3caa113a9fb121c7eaba64a7a4ebc60cd3915b44053f218f036626fe3912e4758911b677cb49cc51653e950cc4604e6e25a9095681382e90f5645a4d37cb9ceb9c5f0203732230d8268aa27cbf7f8983476f3a12d5e52ad6b102542cf03c72e732140cf7a0f2f4458e325e4c3610c3b665ab13173eb5a978149e9dedb6f8cf5788e4b97341ae09a7f15838e3ad81ba8e0e999acc98b1905f80afe53c93264abf209b418235206f520f534d99e3cb76ee", 0xbf}], 0x1, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x1d, 0x0, 0x2}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f0000000240)={{r9, r10+60000000}, {0x0, 0x3938700}}, &(0x7f0000000280)) 2m34.597980074s ago: executing program 6 (id=2994): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) close(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2m33.223456266s ago: executing program 6 (id=2999): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1000000000000000040000000400000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e6ffffff000000010000000000000000dcd871ff3441a642c98b2ce4ba000000000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000440), 0xfe0c, 0x103) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x84, 0x30, 0x400, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x1}, {0x0, 0x0, 0x0, 0xfffd}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x84}}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x80000007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x8000, 0x83) ioctl$SG_BLKSECTGET(r6, 0x1267, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000200)=""/114, &(0x7f0000000000)=0x72) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SCSI_IOCTL_SYNC(r8, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x0, 0x8001, 0x0, 0x6, 0xa75, 0x8, 0x9, 0x1}) 2m32.561591959s ago: executing program 6 (id=3002): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @remote, 0x7}, {0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x48) syz_emit_ethernet(0x1df, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') r7 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r7, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x100, "2712db0700c964c0cdd68800d8e8630130b1fb723f0eb00fc8a12fdc00025269", 0x10000000, 0xfffffffffffffffb, 0x2, 0x0, 0x0, 0xf, 0x7ffb, 0x5, [0xa3, 0x9, 0x7, 0x8]}) pread64(r0, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) 2m29.720877457s ago: executing program 6 (id=3009): mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f00000012c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/219, 0xdb}, {&(0x7f0000001640)=""/151, 0x97}, {&(0x7f0000001700)=""/110, 0x6e}], 0x5, &(0x7f0000001800)=""/202, 0xca}}], 0x2, 0x4106c82597e7f69d, &(0x7f0000000040)) 2m14.52578001s ago: executing program 35 (id=3009): mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x8000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x7ff}, {{&(0x7f00000012c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/219, 0xdb}, {&(0x7f0000001640)=""/151, 0x97}, {&(0x7f0000001700)=""/110, 0x6e}], 0x5, &(0x7f0000001800)=""/202, 0xca}}], 0x2, 0x4106c82597e7f69d, &(0x7f0000000040)) 14.338106641s ago: executing program 2 (id=3361): getpid() r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) syz_io_uring_setup(0xd, &(0x7f0000000200), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1a1b6000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) 9.987306699s ago: executing program 2 (id=3368): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000000a8000fc0000000304000000140003006c6f000000000000000000000000000014000100200100"/64], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c40), 0x403, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(0x0, 0x80140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 9.757485594s ago: executing program 7 (id=3371): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f00000013c0)={&(0x7f0000002000)={[{&(0x7f0000001400)="8e1aae85ab3da513c5c6550b08000000000000b38803623186029c8c1fee9de808edcadcca00a5d680a434e2253a54c90ae1e6b65fcda77326aa649295f745da8068262f7ecd4aefe2694ad9fe7e1ce028ac09db1cee4648f8e66777d8f4ab0daf06f8e38dff373ca27733000ece7211ca4f71b27a904bd8de2492833fa64a6c3ddb6b5c90708dcc8efaa5a0311d0fb17d81e99c9761e8f2b264fb27ab43ca1ae603c4c264d26ad2da4633805effe74ef5e9716064939297000000", 0xbb, 0x3}, {&(0x7f00000000c0)="12ef9b02b38971ee8b55be2397faca8149e26c57c242cbfd1bf64b74318faa8afb01747241cf315f6d1d50090ad3ab42427bca7e3ce940adb3aa11cdf9abdc4c2de8c8e6f36e91ce32f7408dafd89ffb58208131b42c0a3dff8653190d6869292b4798f01d457f61aa7670d35311b53e833c", 0x72, 0x1}]}, 0x2, 0x1}, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 9.223793761s ago: executing program 3 (id=3374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.714110301s ago: executing program 2 (id=3375): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x100000000000000) 8.600348982s ago: executing program 3 (id=3376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.343384702s ago: executing program 3 (id=3378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918ee0d654fa3090616448acfb51d3e1c0810335481f6f61b6298fa07f54821c6203ba0c420", 0x2a}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={@remote, @local}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.318257239s ago: executing program 2 (id=3379): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) 7.731095444s ago: executing program 3 (id=3380): io_setup(0x3, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000019880)=""/102380, 0x18fec}], 0x1, 0x7, 0xffffffff) syz_usb_connect(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x8) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x20, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.711684089s ago: executing program 8 (id=3381): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6, 0x7fffffff}) 6.112292481s ago: executing program 7 (id=3383): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) socket$netlink(0x10, 0x3, 0x0) 6.108131033s ago: executing program 8 (id=3384): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) 5.654442297s ago: executing program 4 (id=3385): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000000a8000fc0000000304000000140003006c6f000000000000000000000000000014000100200100"/64], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c40), 0x403, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(0x0, 0x80140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 5.650719237s ago: executing program 2 (id=3386): r0 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 5.542799355s ago: executing program 4 (id=3387): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 5.533969775s ago: executing program 7 (id=3388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.964838048s ago: executing program 7 (id=3389): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x1, 0x6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x6, 0x7fffffff}) 3.630295206s ago: executing program 7 (id=3390): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000af83bad0537b1008e5e1442de1d5321e2166f4f0264cd8ab0a2992", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2507000000080001003100000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff07000070000000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c40), 0x403, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(0x0, 0x80140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) socket$netlink(0x10, 0x3, 0x4) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3.592477407s ago: executing program 2 (id=3391): io_setup(0x3, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000019880)=""/102380, 0x18fec}], 0x1, 0x7, 0xffffffff) syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xf8, 0x37, 0xfa, 0x8, 0x4e2, 0x1422, 0x5353, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x2, 0x84, 0x7c}}]}}]}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x8) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x20, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.496683908s ago: executing program 4 (id=3392): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) 3.430681148s ago: executing program 4 (id=3393): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c000480050003000100000005000300000000000500030000000000050003000240000005000300800000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007d858b8ea4ce6826253f63a3786a90dfc8ff9f947fa43e07a19f831d4dfa0336783b603fa59df7b86a082f5df76d744463e3ce8eb37806f7a2acc6f07adb064b5e361"], &(0x7f0000000300)='GPL\x00'}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000f2000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000004, 0x800000}], 0x0) 2.887405603s ago: executing program 3 (id=3394): faccessat(0xffffffffffffffff, 0x0, 0x2) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5922f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) 1.879661941s ago: executing program 8 (id=3395): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) 1.7414519s ago: executing program 4 (id=3396): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000"], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c40), 0x403, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x4}, 0x8) socket$netlink(0x10, 0x3, 0x4) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="67c7bdc227e3e16ec31e0afb07a14858e5e40c4e6302e303c3e10920b4ec9ba9ee9e3784d52680b05ddb2e9e7b989d0b726070f9ad1af56b54b1494e8b64f7d0402a773ed661a18aa6609a5a54b69dae7f11ce33346952f438cd23efc0438fa6a5550cec4865efcb4679e24fc4fa878357ba006e6c639afa2991050e8d3ed51fc013c14092c99161c055a8e57eb312afe18f2e823d598d00e6016e4aaa866ad6e0b7a4d677e683bbb2d80c9be9b927b026af586d86b8ea7689b65f7c887137770694af04a9498870"], 0xf0) sendto$inet6(r4, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.488774713s ago: executing program 3 (id=3397): prctl$PR_SET_FPEMU(0xa, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4db5b53c6ccde821) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='pvfs2\x00', 0x5, 0x0) 1.263226865s ago: executing program 8 (id=3398): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000000a8000fc0000000304000000140003006c6f000000000000000000000000000014000100200100"/64], 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002c40), 0x403, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(0x0, 0x80140, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000002c80)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) socket$netlink(0x10, 0x3, 0x4) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 748.199363ms ago: executing program 8 (id=3399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 645.467872ms ago: executing program 7 (id=3400): prctl$PR_SET_FPEMU(0xa, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4db5b53c6ccde821) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000001c0)='./file0\x00', 0x480ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000180)='.\x00', &(0x7f0000000000)='pvfs2\x00', 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 448.518418ms ago: executing program 4 (id=3401): r0 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 0s ago: executing program 8 (id=3402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000100), 0x48) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000440)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x2, &(0x7f00000004c0)=[0xee00, 0xee00]) r9 = getpgid(0xffffffffffffffff) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) getresuid(0x0, 0x0, &(0x7f0000000380)=0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0x0, 0x0, r11, 0x0, 0x4, 0x2}, 0x9, 0x0, 0xfffffffffffffff7, 0x7, r10, r10, 0x4}) r12 = getgid() r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000001740)='./file0/file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r15, &(0x7f0000000000), 0x400000000000041, 0x0) r16 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001800), 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="9805afcebb5cc46ea60237f8a6c69fe53d4114db894f824812e1f6b3988c739526d485099f6e173dd374618f311f175264dc7124b9444128010eb782fbe9ebb6cd934ee18090087a8b21594a04dec582b90dd6c10ae39a356ae39ae1a89b530e0d49483373f5d6e71a6550f1f2b05f37d468092a056b5f37d68eefcb20ab0540f61a80b826d0e8f705229f6c2a10a8e63f892d4d667d27bfcffd0b267097b6ad591ecc3f3b36879aece2dc911e40afdd92fa2cac09f316785d7fd9736a4d1f2991c97cbb4fcafba0f6", 0xc9}, {&(0x7f0000000040)="2a9a48ec46bd9f47fdd3f3a3342a81b8", 0x10}, {&(0x7f0000000640)="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", 0xff}, {0x0}, {&(0x7f00000002c0)="362707bd1fb1b7ff039d89f849ca007649b1b3e2dfb7c08ab3e48a51643f4d91794cf5e7b7143c90cefb6a306b2900d72bbcc4399734a36a2c4af98d243f9f59c61a291e63cb78fefa743471be160c0a22f4f3c852c3b91266557960ce5e83496d2877cecf8abc64d36b1d391257f349613704c01d333b3b60043a11b5f1ab3af24576c80f539d4bce39db8821898a264ffb64fe0db319463a903e8a62d12ad6e0a738c1c405195831a6762f2f097cf0e38624cbebab19c815", 0xb9}, {&(0x7f0000000740)="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", 0x1000}], 0x6, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r3, r1, r1, r15, r16, r4, r4, r3]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}], 0xf0}}], 0x1, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r17, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r5, 0x0}]) close_range(r4, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): :sysadm_t pid=16470 comm="syz.6.2564" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x0 [ 1040.855826][ T9079] usb 8-1: USB disconnect, device number 26 [ 1041.336506][ T9079] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1041.341747][T16487] binder: 16486:16487 ioctl c0306201 200000000240 returned -14 [ 1041.510659][ T9079] usb 3-1: Using ep0 maxpacket: 8 [ 1041.541975][ T9079] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1041.566321][T16493] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1041.587044][ T9079] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 1041.607944][ T9079] usb 3-1: config 0 has no interface number 0 [ 1041.617878][ T9079] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1041.771601][ T9079] usb 3-1: config 0 interface 88 has no altsetting 0 [ 1041.823542][ T5827] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1042.516223][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1042.571723][ T5827] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1042.662985][T16503] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2572'. [ 1042.675193][T16503] 0·: renamed from 71· (while UP) [ 1042.953544][T16503] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1042.956216][ T5827] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.041702][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.069642][T16496] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1043.100060][ T5827] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1043.146866][ T9079] usb 3-1: string descriptor 0 read error: -71 [ 1043.173799][ T9079] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1043.251585][ T9079] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1043.349846][ T9079] usb 3-1: config 0 descriptor?? [ 1043.406048][ T9079] usb 3-1: can't set config #0, error -71 [ 1043.451858][ T9079] usb 3-1: USB disconnect, device number 70 [ 1043.531763][ T5827] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1043.700549][T16522] qrtr: Invalid version 0 [ 1044.665837][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.681648][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1044.699025][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.624912][ T5827] usb 5-1: config 0 descriptor?? [ 1045.654329][ T1221] usb 4-1: USB disconnect, device number 76 [ 1045.871506][T16520] orangefs_mount: mount request failed with -4 [ 1046.038544][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 1046.048332][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1046.076024][ T5827] usb 5-1: USB disconnect, device number 66 [ 1046.678314][T16540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1046.727592][T16544] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 1046.765379][T16544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1046.776874][T16543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2581'. [ 1047.917138][T16556] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2586'. [ 1047.930368][T16556] 1·: renamed from 70· (while UP) [ 1048.148539][T16556] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1049.746720][T16560] ALSA: mixer_oss: invalid OSS volume '' [ 1050.607353][ T30] audit: type=1326 audit(1769145569.062:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16582 comm="syz.7.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7fc00000 [ 1050.932266][T16581] orangefs_mount: mount request failed with -4 [ 1051.023696][T16579] orangefs_mount: mount request failed with -4 [ 1051.144640][T16599] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1054.281550][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.102446][T10439] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1055.146552][ T30] audit: type=1400 audit(1769145573.602:1141): avc: denied { listen } for pid=16640 comm="syz.7.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1055.288525][ T30] audit: type=1400 audit(1769145573.632:1142): avc: denied { map } for pid=16640 comm="syz.7.2606" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1055.363299][T10439] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1055.372252][T10439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 7 [ 1055.387919][T10439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26282, setting to 1024 [ 1055.417449][T10439] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1055.433339][T10439] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1055.464341][T10439] usb 5-1: Manufacturer: syz [ 1055.473285][T10439] usb 5-1: config 0 descriptor?? [ 1055.484864][T10439] igorplugusb 5-1:0.0: endpoint incorrect [ 1055.609828][ T30] audit: type=1326 audit(1769145574.062:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.3.2604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446959acb9 code=0x7fc00000 [ 1055.706203][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.730331][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.914005][ T24] usb 5-1: USB disconnect, device number 67 [ 1056.729745][T16667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1057.057017][T16671] xt_hashlimit: overflow, try lower: 3/0 [ 1057.087622][ T30] audit: type=1400 audit(1769145575.542:1144): avc: denied { ioctl } for pid=16670 comm="syz.7.2612" path="socket:[55630]" dev="sockfs" ino=55630 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1057.897326][T16680] mkiss: ax0: crc mode is auto. [ 1060.191771][ T30] audit: type=1326 audit(1769145578.652:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.2.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ef9acb9 code=0x7fc00000 [ 1060.864760][T16698] orangefs_mount: mount request failed with -4 [ 1061.155564][T16725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1061.310380][T16733] nbd6: detected capacity change from 0 to 63 [ 1061.442866][T16728] syzkaller0: entered promiscuous mode [ 1061.458221][T16728] syzkaller0: entered allmulticast mode [ 1061.488250][T16730] batadv0: entered promiscuous mode [ 1061.506996][T16730] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1061.603090][T16730] bond5: (slave macvlan4): making interface the new active one [ 1061.616437][T16730] bond5: (slave macvlan4): Enslaving as an active interface with an up link [ 1061.773267][ T53] block nbd6: Receive control failed (result -104) [ 1062.521976][T16748] orangefs_mount: mount request failed with -4 [ 1062.996833][ T30] audit: type=1326 audit(1769145581.452:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.3.2630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f446959acb9 code=0x0 [ 1063.091167][T16760] loop9: detected capacity change from 0 to 7 [ 1063.198467][T16760] Dev loop9: unable to read RDB block 7 [ 1063.205723][T16760] loop9: unable to read partition table [ 1063.213139][T16760] loop9: partition table beyond EOD, truncated [ 1063.229591][T16760] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.255722][ T30] audit: type=1326 audit(1769145581.672:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="syz.2.2631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f868ef9acb9 code=0x0 [ 1066.102785][ T30] audit: type=1326 audit(1769145584.562:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.2.2635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ef9acb9 code=0x7fc00000 [ 1067.024170][T16790] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1067.030706][T16790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1067.040730][T16790] vhci_hcd vhci_hcd.0: Device attached [ 1067.311714][ T5870] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1067.551613][ T913] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1068.227194][ T913] usb 3-1: config 0 has no interfaces? [ 1068.233705][ T913] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1068.248086][ T913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.252118][T16806] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1068.598480][ T913] usb 3-1: config 0 descriptor?? [ 1068.699136][T16809] syzkaller0: entered promiscuous mode [ 1068.752338][T16809] syzkaller0: entered allmulticast mode [ 1068.951724][T16793] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1068.961773][ T3842] vhci_hcd vhci_hcd.2: stop threads [ 1068.966988][ T3842] vhci_hcd vhci_hcd.2: release socket [ 1069.003116][ T3842] vhci_hcd vhci_hcd.2: disconnect device [ 1069.005704][T16814] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2645'. [ 1069.020277][T16814] 0·: renamed from 71· (while UP) [ 1069.199440][T16814] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1069.374131][T16820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.406101][T16820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.684142][ T913] usb 3-1: USB disconnect, device number 71 [ 1070.343130][ T30] audit: type=1326 audit(1769145588.802:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16824 comm="syz.7.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7fc00000 [ 1070.747952][T16840] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2651'. [ 1070.845469][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1070.852124][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1070.931091][ T5827] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1071.091531][ T5827] usb 8-1: Using ep0 maxpacket: 8 [ 1071.100234][ T5827] usb 8-1: config 0 has an invalid interface number: 109 but max is 0 [ 1071.111349][ T5827] usb 8-1: config 0 has no interface number 0 [ 1071.111772][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1071.133504][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1071.174535][ T5827] usb 8-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1071.281996][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.304773][ T5827] usb 8-1: Product: syz [ 1071.308954][ T5827] usb 8-1: Manufacturer: syz [ 1071.335326][ T5827] usb 8-1: SerialNumber: syz [ 1071.372275][ T5827] usb 8-1: config 0 descriptor?? [ 1071.551675][T16840] ceph: No mds server is up or the cluster is laggy [ 1072.478229][ T5870] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1072.658285][T10439] usb 8-1: USB disconnect, device number 27 [ 1072.907866][T16856] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1072.919859][T16856] 0·: renamed from hsr0 (while UP) [ 1072.967116][T16856] 0·: entered allmulticast mode [ 1072.974723][T16856] hsr_slave_0: entered allmulticast mode [ 1072.981486][T16856] hsr_slave_1: entered allmulticast mode [ 1072.993278][T16856] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1073.490044][ T30] audit: type=1400 audit(1769145591.792:1150): avc: denied { block_suspend } for pid=16853 comm="syz.2.2656" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1073.523827][T16863] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2657'. [ 1073.533700][T16863] 0·: renamed from hsr0 (while UP) [ 1073.835485][T16863] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1074.214212][T16870] qrtr: Invalid version 0 [ 1077.299376][ T30] audit: type=1326 audit(1769145595.752:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16877 comm="syz.2.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868ef9acb9 code=0x7fc00000 [ 1077.753688][ T30] audit: type=1326 audit(1769145596.212:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16883 comm="syz.7.2663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e0679acb9 code=0x0 [ 1077.937572][T16894] loop9: detected capacity change from 0 to 7 [ 1077.987087][T16516] Dev loop9: unable to read RDB block 7 [ 1077.994050][T16516] loop9: unable to read partition table [ 1078.426332][T16516] loop9: partition table beyond EOD, truncated [ 1078.514875][T16894] Dev loop9: unable to read RDB block 7 [ 1078.543349][T16894] loop9: unable to read partition table [ 1078.598280][T16894] loop9: partition table beyond EOD, truncated [ 1078.638901][T16894] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1079.142417][T16899] syzkaller0: entered promiscuous mode [ 1079.148191][T16899] syzkaller0: entered allmulticast mode [ 1080.653568][T16933] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.2674'. [ 1080.828302][ T913] libceph: connect (1)[c::]:6789 error -101 [ 1080.841898][ T913] libceph: mon0 (1)[c::]:6789 connect error [ 1081.112478][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1081.118901][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1081.728339][T16940] input: syz1 as /devices/virtual/input/input79 [ 1081.827483][T16933] ceph: No mds server is up or the cluster is laggy [ 1082.504405][T16946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2676'. [ 1083.815325][T16956] orangefs_mount: mount request failed with -4 [ 1084.796792][ T30] audit: type=1400 audit(1769145603.252:1153): avc: denied { execute } for pid=16960 comm="syz.6.2681" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1084.921573][ T5897] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1085.087479][ T5897] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.099706][ T5897] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1085.256967][T16971] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2682'. [ 1085.269215][T16963] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2682'. [ 1085.297569][ T5897] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1085.478508][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.522946][T16965] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1085.539264][ T5897] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1085.892978][ T5897] usb 5-1: USB disconnect, device number 68 [ 1087.634279][ T30] audit: type=1326 audit(1769145606.092:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16985 comm="syz.4.2689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46259acb9 code=0x0 [ 1087.785665][T16992] loop9: detected capacity change from 0 to 7 [ 1087.796997][T16992] Dev loop9: unable to read RDB block 7 [ 1087.802772][T16992] loop9: unable to read partition table [ 1087.810201][T16992] loop9: partition table beyond EOD, truncated [ 1087.816444][T16992] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1087.966909][T16994] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20005 [ 1088.098658][T16996] syzkaller0: entered promiscuous mode [ 1088.114201][T16996] syzkaller0: entered allmulticast mode [ 1089.009535][ T5827] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1089.244266][ T5827] usb 8-1: Using ep0 maxpacket: 16 [ 1089.264731][ T5827] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 1089.292616][ T5827] usb 8-1: config 251 has no interface number 0 [ 1089.533504][ T5827] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1089.589401][ T5827] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1089.612936][ T5827] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1089.666551][ T5827] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 1089.701829][ T5827] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1089.721836][ T5827] usb 8-1: config 251 interface 202 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1089.773741][ T30] audit: type=1400 audit(1769145608.232:1155): avc: denied { setopt } for pid=17008 comm="syz.3.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.794415][T17010] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1089.811561][ T5827] usb 8-1: config 251 interface 202 has no altsetting 0 [ 1089.835072][ T5827] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1089.877189][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.897169][ T5827] usb 8-1: Product: syz [ 1089.908527][ T5827] usb 8-1: Manufacturer: syz [ 1090.031650][ T5827] usb 8-1: SerialNumber: syz [ 1090.637013][T17004] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1091.952525][ T5827] cxacru 8-1:251.202: cxacru_bind: interface has incorrect endpoints [ 1091.987516][ T5827] cxacru 8-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1092.016230][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 30 seconds [ 1092.029345][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 30 seconds [ 1092.042240][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 30 seconds [ 1092.054046][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 30 seconds [ 1092.090048][ T5827] usb 8-1: USB disconnect, device number 28 [ 1092.368650][ T30] audit: type=1400 audit(1769145610.822:1156): avc: denied { mount } for pid=17029 comm="syz.6.2700" name="/" dev="hugetlbfs" ino=56349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1092.423565][ T30] audit: type=1400 audit(1769145610.882:1157): avc: denied { remount } for pid=17029 comm="syz.6.2700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1092.423597][T17031] hugetlbfs: Bad value 'm' for mount option 'size' [ 1092.423597][T17031] [ 1092.522429][ T30] audit: type=1400 audit(1769145610.982:1158): avc: denied { unmount } for pid=11297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1093.514935][ T30] audit: type=1400 audit(1769145611.972:1159): avc: denied { getopt } for pid=17036 comm="syz.6.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1093.744229][T17045] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2707'. [ 1094.059735][T17045] 0·: renamed from hsr0 (while UP) [ 1094.302124][T17045] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1095.054054][ T9233] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1095.276100][ T9233] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.461068][ T9233] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1095.511593][ T9233] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.550845][ T9233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.610278][T17058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1095.626729][ T9233] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1098.038652][ T9233] usb 3-1: USB disconnect, device number 72 [ 1098.162426][T17078] syzkaller0: entered promiscuous mode [ 1098.167904][T17078] syzkaller0: entered allmulticast mode [ 1098.338278][T17086] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1100.318004][T17099] orangefs_mount: mount request failed with -4 [ 1100.355182][T17091] orangefs_mount: mount request failed with -4 [ 1101.782490][T17108] orangefs_mount: mount request failed with -4 [ 1105.090172][T17086] 1·: renamed from 70· (while UP) [ 1105.098068][T17086] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1105.592066][ T5827] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1105.989666][T17140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1106.525767][ T5827] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1106.634868][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 7 [ 1106.678425][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26282, setting to 1024 [ 1106.715498][ T5827] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1106.728920][ T5827] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1106.741754][ T5827] usb 8-1: Manufacturer: syz [ 1106.754788][ T5827] usb 8-1: config 0 descriptor?? [ 1106.790301][ T5827] igorplugusb 8-1:0.0: endpoint incorrect [ 1107.598495][ T24] usb 8-1: USB disconnect, device number 29 [ 1108.040216][T17152] fuse: Bad value for 'fd' [ 1108.072895][ T30] audit: type=1400 audit(1769145626.532:1160): avc: denied { getopt } for pid=17153 comm="syz.6.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1108.128143][T17156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.940177][ T30] audit: type=1400 audit(1769145627.362:1161): avc: denied { write } for pid=17153 comm="syz.6.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1109.818214][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1110.002514][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.021429][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.038923][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.072351][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.112501][T17164] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1110.150234][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.268207][ T30] audit: type=1326 audit(1769145629.722:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446959acb9 code=0x7fc00000 [ 1111.482134][T10439] usb 8-1: USB disconnect, device number 30 [ 1114.126015][T10439] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1114.311994][T10439] usb 4-1: Using ep0 maxpacket: 8 [ 1114.318640][T10439] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 1114.328499][T10439] usb 4-1: config 0 has no interface number 0 [ 1114.347029][T17226] orangefs_mount: mount request failed with -4 [ 1114.448947][T10439] usb 4-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1114.478055][T10439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.515755][T10439] usb 4-1: Product: syz [ 1114.519971][T10439] usb 4-1: Manufacturer: syz [ 1114.567640][T10439] usb 4-1: SerialNumber: syz [ 1114.594186][T10439] usb 4-1: config 0 descriptor?? [ 1114.708589][T17240] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2758'. [ 1114.755714][T17240] 1·: renamed from 70· (while UP) [ 1115.297065][ T5925] usb 4-1: USB disconnect, device number 77 [ 1115.329110][T17240] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1115.371360][ T30] audit: type=1326 audit(1769145633.832:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17233 comm="syz.7.2759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7fc00000 [ 1115.586450][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.278629][T17258] tc_dump_action: action bad kind [ 1116.702643][T17258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1116.803504][T17255] netlink: 'syz.2.2761': attribute type 39 has an invalid length. [ 1118.802941][ T30] audit: type=1326 audit(1769145637.252:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17280 comm="syz.4.2770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46259acb9 code=0x0 [ 1118.862640][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2770'. [ 1118.887194][T17287] loop9: detected capacity change from 0 to 7 [ 1118.896594][T17275] orangefs_mount: mount request failed with -4 [ 1118.973893][T17287] Dev loop9: unable to read RDB block 7 [ 1118.979783][T17287] loop9: unable to read partition table [ 1118.997521][T17287] loop9: partition table beyond EOD, truncated [ 1119.005145][T17287] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1119.807377][T17296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1121.101594][ T30] audit: type=1326 audit(1769145639.542:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1121.506783][T17311] Device name cannot be null; rc = [-22] [ 1121.540303][ T30] audit: type=1400 audit(1769145639.992:1166): avc: denied { remount } for pid=17310 comm="syz.6.2776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1121.562536][T17311] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1121.569104][T17311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1121.593112][T17311] vhci_hcd vhci_hcd.0: Device attached [ 1121.616364][T17312] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1121.662607][ T1037] vhci_hcd vhci_hcd.6: stop threads [ 1121.670256][ T1037] vhci_hcd vhci_hcd.6: release socket [ 1121.691928][ T1037] vhci_hcd vhci_hcd.6: disconnect device [ 1121.751689][ T9233] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1121.956332][ T9233] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.965034][ T9233] usb 3-1: config 0 has no interface number 0 [ 1121.973500][ T9233] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1121.990181][ T9233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.023165][ T9233] usb 3-1: config 0 descriptor?? [ 1122.044547][ T9233] usb 3-1: selecting invalid altsetting 1 [ 1122.054247][ T9233] dvb_ttusb_budget: ttusb_init_controller: error [ 1122.073782][ T9233] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1122.109070][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2780'. [ 1122.272416][T17309] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1122.738458][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 60 seconds [ 1122.777186][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 60 seconds [ 1122.792204][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 60 seconds [ 1122.804033][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 60 seconds [ 1122.895628][ T9233] DVB: Unable to find symbol cx22700_attach() [ 1123.368497][ T9233] DVB: Unable to find symbol tda10046_attach() [ 1123.396402][ T9233] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1123.561874][ T9233] usb 3-1: USB disconnect, device number 73 [ 1123.780970][ T30] audit: type=1400 audit(1769145642.212:1167): avc: denied { write } for pid=17333 comm="syz.7.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1123.929350][T17340] orangefs_mount: mount request failed with -4 [ 1123.955359][T17347] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2783'. [ 1124.088195][T10439] libceph: connect (1)[c::]:6789 error -101 [ 1124.102143][T10439] libceph: mon0 (1)[c::]:6789 connect error [ 1124.371201][T10439] libceph: connect (1)[c::]:6789 error -101 [ 1124.377280][T10439] libceph: mon0 (1)[c::]:6789 connect error [ 1124.733142][ T5925] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1124.895049][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 1125.013148][T10439] libceph: connect (1)[c::]:6789 error -101 [ 1125.019207][T10439] libceph: mon0 (1)[c::]:6789 connect error [ 1125.042199][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1125.156255][ T5925] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1125.166004][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.176152][ T5925] usb 3-1: Product: syz [ 1125.180333][ T5925] usb 3-1: Manufacturer: syz [ 1125.205810][ T5925] usb 3-1: SerialNumber: syz [ 1125.289828][T17347] ceph: No mds server is up or the cluster is laggy [ 1125.308163][ T5925] usb 3-1: config 0 descriptor?? [ 1125.338968][ T5925] gs_usb 3-1:0.0: Required endpoints not found [ 1125.593809][T10439] usb 3-1: USB disconnect, device number 74 [ 1126.289817][ T30] audit: type=1326 audit(1769145644.742:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.4.2787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46259acb9 code=0x0 [ 1126.564944][T17378] loop9: detected capacity change from 0 to 7 [ 1126.970279][T17378] Dev loop9: unable to read RDB block 7 [ 1127.041677][T17378] loop9: unable to read partition table [ 1127.048469][T17378] loop9: partition table beyond EOD, truncated [ 1127.074067][T17378] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1127.826190][T17389] orangefs_mount: mount request failed with -4 [ 1127.957323][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1127.970462][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1127.980272][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1127.995288][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.010438][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1128.029135][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1128.039941][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1128.049794][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.058096][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.103149][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1128.431498][T17394] chnl_net:caif_netlink_parms(): no params data found [ 1129.102615][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.159301][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.726002][T17394] bridge_slave_0: entered allmulticast mode [ 1129.758122][T17394] bridge_slave_0: entered promiscuous mode [ 1129.783214][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.812590][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.839600][T17394] bridge_slave_1: entered allmulticast mode [ 1129.867621][T17394] bridge_slave_1: entered promiscuous mode [ 1130.141708][ T5832] Bluetooth: hci3: command tx timeout [ 1130.198815][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.592181][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.753060][T17394] team0: Port device team_slave_0 added [ 1131.774938][T17394] team0: Port device team_slave_1 added [ 1131.995580][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.122759][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.150127][T17429] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 1132.158510][T17429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2802'. [ 1132.262989][ T5832] Bluetooth: hci3: command tx timeout [ 1132.395908][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.434873][T17429] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 1132.443806][T17429] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1132.450399][T17429] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.476956][T17429] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1132.497591][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.615147][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.694207][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.809935][T17394] hsr_slave_0: entered promiscuous mode [ 1132.819484][T17394] hsr_slave_1: entered promiscuous mode [ 1133.486822][ T30] audit: type=1326 audit(1769145651.942:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17432 comm="syz.4.2803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46259acb9 code=0x0 [ 1133.749553][T17437] loop9: detected capacity change from 0 to 7 [ 1133.768872][T17437] Dev loop9: unable to read RDB block 7 [ 1133.894085][T17437] loop9: unable to read partition table [ 1133.915172][T17437] loop9: partition table beyond EOD, truncated [ 1133.922093][T17437] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1134.308484][ T53] Bluetooth: hci3: command tx timeout [ 1134.799365][T17394] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.959072][T17394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1134.975289][T17448] ======================================================= [ 1134.975289][T17448] WARNING: The mand mount option has been deprecated and [ 1134.975289][T17448] and is ignored by this kernel. Remove the mand [ 1134.975289][T17448] option from the mount to silence this warning. [ 1134.975289][T17448] ======================================================= [ 1135.019354][T17394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.135271][T17394] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.177734][T17394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.213641][T17394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.288214][T17394] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.303632][T17394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.324703][T17394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.506332][T17394] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.532115][T17394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.890246][T17394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1136.261161][T17394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1136.292324][T17394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1136.313663][T17394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1136.325110][T17394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1136.391728][ T53] Bluetooth: hci3: command tx timeout [ 1136.974299][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.004811][ T30] audit: type=1326 audit(1769145655.442:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17468 comm="syz.7.2810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e0679acb9 code=0x0 [ 1137.043854][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.111702][T17476] loop9: detected capacity change from 0 to 7 [ 1137.122195][T17476] Dev loop9: unable to read RDB block 7 [ 1137.127989][T17476] loop9: unable to read partition table [ 1137.135498][T17476] loop9: partition table beyond EOD, truncated [ 1137.153799][T17476] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1137.165996][ T3842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.173113][ T3842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.228034][ T3842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.235235][ T3842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.783672][T17394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.855281][T17394] veth0_vlan: entered promiscuous mode [ 1137.878567][T17394] veth1_vlan: entered promiscuous mode [ 1137.971230][T17394] veth0_macvtap: entered promiscuous mode [ 1138.057967][T17394] veth1_macvtap: entered promiscuous mode [ 1138.153657][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.190386][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.215301][ T4531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.240288][ T4531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.271675][ T4531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.280412][ T4531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.383188][T10439] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1138.404749][T17497] Cannot find add_set index 2 as target [ 1138.589406][T10439] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1138.598821][T10439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 7 [ 1138.602583][T14871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.632247][T10439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26282, setting to 1024 [ 1138.686075][T14871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.759460][T10439] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1138.770907][T10439] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1138.786932][T10439] usb 3-1: Manufacturer: syz [ 1138.854466][T10439] usb 3-1: config 0 descriptor?? [ 1138.929350][T10439] igorplugusb 3-1:0.0: endpoint incorrect [ 1138.966750][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.977253][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.051595][ T9233] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1139.121449][ T30] audit: type=1400 audit(1769145657.582:1171): avc: denied { write } for pid=17505 comm="syz.3.2795" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1139.151469][T10439] usb 3-1: USB disconnect, device number 75 [ 1139.247960][ T9233] usb 8-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 1139.318829][ T9233] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1139.373053][ T9233] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1139.386229][ T9233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.416528][ T9233] usb 8-1: Product: syz [ 1139.434850][ T9233] usb 8-1: Manufacturer: syz [ 1139.439821][ T9233] usb 8-1: SerialNumber: syz [ 1139.560123][ T9233] usb 8-1: config 0 descriptor?? [ 1139.962393][T10439] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1140.085442][ T5925] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1140.085510][ T5897] usb 8-1: USB disconnect, device number 31 [ 1140.363012][T10439] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.374627][T10439] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1140.387511][T10439] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.397431][T10439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.902956][T17520] orangefs_mount: mount request failed with -4 [ 1140.909399][T10439] usb 5-1: Product: syz [ 1140.911480][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 1140.917722][T10439] usb 5-1: Manufacturer: syz [ 1140.920115][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1140.925581][T10439] usb 5-1: SerialNumber: syz [ 1140.944170][ T5925] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1140.949379][T10439] cdc_mbim 5-1:1.0: skipping garbage [ 1140.966765][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.987301][ T5925] usb 3-1: Product: syz [ 1140.999029][ T5925] usb 3-1: Manufacturer: syz [ 1141.016529][ T5925] usb 3-1: SerialNumber: syz [ 1141.159759][T17511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1141.161278][ T5925] usb 3-1: config 0 descriptor?? [ 1141.392968][ T5925] gs_usb 3-1:0.0: Required endpoints not found [ 1141.628085][ T5925] usb 3-1: USB disconnect, device number 76 [ 1142.383048][T17511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1142.393517][T10439] cdc_mbim 5-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 1142.403721][T10439] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1143.366868][T10439] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1143.410278][T10439] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1143.536292][T10439] wwan wwan0: port wwan0mbim0 attached [ 1143.769802][T10439] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 56:10:b3:e8:e3:8f [ 1143.841834][T10439] usb 5-1: USB disconnect, device number 69 [ 1143.848391][T10439] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1143.872258][T17557] bond6 (unregistering): Released all slaves [ 1144.109126][T10439] wwan wwan0: port wwan0mbim0 disconnected [ 1145.041633][T10439] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1145.459954][T10439] usb 4-1: Using ep0 maxpacket: 32 [ 1145.502349][T10439] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1145.556571][T10439] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1145.658423][T10439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.761618][T10439] usb 4-1: Product: syz [ 1145.768122][T10439] usb 4-1: Manufacturer: syz [ 1145.779395][T10439] usb 4-1: SerialNumber: syz [ 1145.864594][T17604] qrtr: Invalid version 0 [ 1146.794688][T10439] usb 4-1: config 0 descriptor?? [ 1147.774457][T10439] gs_usb 4-1:0.0: Required endpoints not found [ 1147.792728][T10439] usb 4-1: USB disconnect, device number 78 [ 1147.914037][T17608] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1148.235150][T10439] libceph: connect (1)[c::]:6789 error -101 [ 1148.281175][T10439] libceph: mon0 (1)[c::]:6789 connect error [ 1148.549278][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 1148.556105][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 1148.567194][T17608] ceph: No mds server is up or the cluster is laggy [ 1149.116265][ T5827] libceph: connect (1)[c::]:6789 error -101 [ 1149.122967][ T5827] libceph: mon0 (1)[c::]:6789 connect error [ 1149.254477][T17625] vivid-007: disconnect [ 1149.985461][T17622] vivid-007: reconnect [ 1150.416548][T17631] netlink: 'syz.3.2854': attribute type 2 has an invalid length. [ 1151.133397][T17641] tipc: Started in network mode [ 1151.138383][T17641] tipc: Node identity 6ab44a1be7b, cluster identity 4711 [ 1151.147848][T17641] tipc: Enabled bearer , priority 0 [ 1151.161111][T17641] syzkaller0: entered promiscuous mode [ 1151.166602][T17641] syzkaller0: entered allmulticast mode [ 1151.313565][ T30] audit: type=1400 audit(1769145669.542:1172): avc: denied { getopt } for pid=17634 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1151.793739][T17634] tipc: Resetting bearer [ 1151.814248][T17634] tipc: Disabling bearer [ 1152.450004][T17650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1152.842436][T17656] qrtr: Invalid version 0 [ 1153.617739][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 90 seconds [ 1153.629799][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 90 seconds [ 1153.641690][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 90 seconds [ 1153.653509][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 90 seconds [ 1153.830539][ T5192] udevd[5192]: worker [16369] /devices/virtual/block/nbd6 is taking a long time [ 1155.059408][T17662] team0: No ports can be present during mode change [ 1155.285823][T17670] FAULT_INJECTION: forcing a failure. [ 1155.285823][T17670] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.299948][T17670] CPU: 1 UID: 0 PID: 17670 Comm: syz.2.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.299982][T17670] Tainted: [L]=SOFTLOCKUP [ 1155.299991][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1155.300004][T17670] Call Trace: [ 1155.300012][T17670] [ 1155.300021][T17670] dump_stack_lvl+0x100/0x190 [ 1155.300055][T17670] should_fail_ex.cold+0x5/0xa [ 1155.300080][T17670] should_failslab+0xc2/0x120 [ 1155.300110][T17670] ? tomoyo_encode2+0xfb/0x3c0 [ 1155.300134][T17670] __kmalloc_noprof+0xf6/0x9c0 [ 1155.300165][T17670] ? tomoyo_encode2+0xfb/0x3c0 [ 1155.300188][T17670] tomoyo_encode2+0xfb/0x3c0 [ 1155.300214][T17670] tomoyo_encode+0x29/0x50 [ 1155.300237][T17670] tomoyo_realpath_from_path+0x18c/0x690 [ 1155.300271][T17670] tomoyo_path_number_perm+0x23c/0x580 [ 1155.300306][T17670] ? tomoyo_path_number_perm+0x22e/0x580 [ 1155.300343][T17670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1155.300411][T17670] ? find_held_lock+0x2b/0x80 [ 1155.300441][T17670] ? hook_file_ioctl_common+0x146/0x410 [ 1155.300470][T17670] ? __fget_files+0x215/0x3d0 [ 1155.300505][T17670] ? __fget_files+0x21f/0x3d0 [ 1155.300534][T17670] security_file_ioctl+0xd3/0x230 [ 1155.300560][T17670] __x64_sys_ioctl+0xb7/0x210 [ 1155.300585][T17670] do_syscall_64+0xc9/0xf80 [ 1155.300623][T17670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.300647][T17670] RIP: 0033:0x7f868ef9acb9 [ 1155.300665][T17670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.300688][T17670] RSP: 002b:00007f868fe9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.300710][T17670] RAX: ffffffffffffffda RBX: 00007f868f215fa0 RCX: 00007f868ef9acb9 [ 1155.300726][T17670] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1155.300741][T17670] RBP: 00007f868fe9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.300755][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.300768][T17670] R13: 00007f868f216038 R14: 00007f868f215fa0 R15: 00007ffd48c2fcb8 [ 1155.300801][T17670] [ 1155.519748][T17670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1155.698612][T17673] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2867'. [ 1155.712040][T17673] 1·: renamed from 70· (while UP) [ 1156.143885][T17673] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1156.227337][T17678] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2866'. [ 1156.290356][ T5925] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1156.344972][ T9233] libceph: connect (1)[c::]:6789 error -101 [ 1156.352273][ T9233] libceph: mon0 (1)[c::]:6789 connect error [ 1156.451522][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 1156.465802][ T5925] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 1156.477391][ T5925] usb 4-1: config 0 has no interface number 0 [ 1156.489699][ T5925] usb 4-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1156.501544][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.513228][ T5925] usb 4-1: Product: syz [ 1156.519019][ T5925] usb 4-1: Manufacturer: syz [ 1156.528264][ T5925] usb 4-1: SerialNumber: syz [ 1156.543863][ T5925] usb 4-1: config 0 descriptor?? [ 1156.626819][ T9233] libceph: connect (1)[c::]:6789 error -101 [ 1156.637999][ T5925] xr_serial 4-1:0.109: More than one union descriptor, skipping ... [ 1156.646646][ T9233] libceph: mon0 (1)[c::]:6789 connect error [ 1157.159393][ T5925] usb 4-1: USB disconnect, device number 79 [ 1157.184880][ T9079] libceph: connect (1)[c::]:6789 error -101 [ 1157.269216][ T9079] libceph: mon0 (1)[c::]:6789 connect error [ 1157.825051][T17678] ceph: No mds server is up or the cluster is laggy [ 1157.935753][ T30] audit: type=1400 audit(1769145676.392:1173): avc: denied { append } for pid=17702 comm="syz.2.2873" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1158.727743][T17716] vivid-007: disconnect [ 1159.401706][ T9079] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1159.449162][T17708] vivid-007: reconnect [ 1159.502231][T17719] qrtr: Invalid version 0 [ 1160.477301][ T9079] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1161.498073][ T9079] usb 5-1: config 0 has no interface number 0 [ 1161.707702][T17724] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2879'. [ 1161.717632][T17724] 0·: renamed from hsr0 (while UP) [ 1161.727287][T17724] 0·: entered allmulticast mode [ 1161.732621][T17724] hsr_slave_0: entered allmulticast mode [ 1161.738246][T17724] hsr_slave_1: entered allmulticast mode [ 1161.744996][T17724] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1162.244582][ T9079] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1162.257017][ T9079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.301581][ T9079] usb 5-1: config 0 descriptor?? [ 1162.332460][ T9079] usb 5-1: can't set config #0, error -71 [ 1162.343503][ T9079] usb 5-1: USB disconnect, device number 70 [ 1163.385169][ T30] audit: type=1326 audit(1769145681.742:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17730 comm="syz.4.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46259acb9 code=0x7fc00000 [ 1163.603287][T17752] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1163.845842][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1163.853249][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1163.884086][T17752] ceph: No mds server is up or the cluster is laggy [ 1164.250980][ T5897] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1164.414456][ T30] audit: type=1326 audit(1769145682.872:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.4.2890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46259acb9 code=0x0 [ 1164.414559][ T5897] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1164.499362][T17769] loop9: detected capacity change from 0 to 7 [ 1164.508806][T17769] Dev loop9: unable to read RDB block 7 [ 1164.515755][T17769] loop9: unable to read partition table [ 1164.521484][T17728] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1164.532654][T17769] loop9: partition table beyond EOD, truncated [ 1164.538813][T17769] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1164.575443][ T5897] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1164.639731][ T5897] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1164.650107][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.736842][T17761] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1164.747875][T17728] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1164.760243][T17728] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1164.773463][ T5897] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1164.815538][T17728] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1164.842569][T17728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.061502][T17766] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1165.208326][T17728] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1165.406464][ T5897] usb 8-1: USB disconnect, device number 32 [ 1165.621588][T17782] vivid-007: disconnect [ 1166.339522][T17779] vivid-007: reconnect [ 1167.154409][T10439] usb 4-1: USB disconnect, device number 80 [ 1168.553546][T17815] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1169.914341][ T9079] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1170.180322][ T9079] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1170.192569][ T9079] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1170.205577][ T9079] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1170.217430][ T9079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.381209][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1170.424614][T17825] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1170.481804][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1170.547521][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1170.562172][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1170.570245][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1170.592430][ T9079] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.893900][ T9079] usb 4-1: USB disconnect, device number 81 [ 1171.601988][ T5884] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1171.930324][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 1171.958223][ T5884] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1171.982793][ T5884] usb 5-1: config 0 has no interface number 0 [ 1172.101356][ T5884] usb 5-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1172.279403][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.305131][ T5884] usb 5-1: Product: syz [ 1172.323287][ T5884] usb 5-1: Manufacturer: syz [ 1172.365935][ T5884] usb 5-1: SerialNumber: syz [ 1172.400340][ T5884] usb 5-1: config 0 descriptor?? [ 1172.538986][T17828] chnl_net:caif_netlink_parms(): no params data found [ 1172.563513][ T5897] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1172.731700][ T5832] Bluetooth: hci1: command tx timeout [ 1172.761581][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1172.788586][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1172.844876][ T5897] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1172.893083][ T5897] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1173.006836][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1173.033005][ T5897] usb 4-1: SerialNumber: syz [ 1173.052745][ T5897] usb 4-1: config 0 descriptor?? [ 1173.063939][ T5897] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1173.305201][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.339162][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.373597][T17828] bridge_slave_0: entered allmulticast mode [ 1173.442221][T17828] bridge_slave_0: entered promiscuous mode [ 1173.460344][T17862] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1173.479904][ T5897] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1173.499863][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.510756][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.523871][T17828] bridge_slave_1: entered allmulticast mode [ 1173.540696][T17828] bridge_slave_1: entered promiscuous mode [ 1173.692550][ T5884] usb 4-1: USB disconnect, device number 82 [ 1173.780197][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.165318][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.550401][T17828] team0: Port device team_slave_0 added [ 1174.775172][T17872] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1174.870608][ T5832] Bluetooth: hci1: command tx timeout [ 1175.341430][T17828] team0: Port device team_slave_1 added [ 1175.588379][T17828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.598022][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1175.664469][T17828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.996344][T17828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.025967][ T5884] usb 5-1: USB disconnect, device number 71 [ 1176.039483][T17828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.116992][T17828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.260957][T17885] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1176.270232][T17885] 0·: renamed from 71· (while UP) [ 1176.311811][T17885] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1176.646593][T17890] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.2919'. [ 1176.693287][T17828] hsr_slave_0: entered promiscuous mode [ 1176.837331][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 1176.843490][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 1177.051676][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.073685][ T5832] Bluetooth: hci1: command tx timeout [ 1177.289673][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 1177.302098][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 1177.354788][T17828] hsr_slave_1: entered promiscuous mode [ 1177.586214][T17890] ceph: No mds server is up or the cluster is laggy [ 1177.847348][T17828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.141625][ T53] Bluetooth: hci1: command tx timeout [ 1179.393687][ T30] audit: type=1326 audit(1769145697.852:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1179.548663][T17828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.909858][ T30] audit: type=1326 audit(1769145697.852:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1179.966077][ T30] audit: type=1326 audit(1769145697.852:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1179.999302][T17828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.447573][ T30] audit: type=1326 audit(1769145697.852:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1180.503344][ T30] audit: type=1326 audit(1769145697.852:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1180.557902][ T30] audit: type=1326 audit(1769145697.852:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1180.995699][ T30] audit: type=1326 audit(1769145697.852:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1181.055904][T17828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.136473][ T30] audit: type=1326 audit(1769145697.852:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1181.212812][ T30] audit: type=1326 audit(1769145697.852:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1181.303780][ T30] audit: type=1326 audit(1769145697.852:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.6.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84639acb9 code=0x7fc00000 [ 1181.442227][ T5973] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1181.831590][ T5973] usb 5-1: Using ep0 maxpacket: 32 [ 1181.838117][ T5973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1181.846966][ T5973] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1181.862937][T17828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1181.869869][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.896984][T17828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1181.907611][ T5973] usb 5-1: Product: syz [ 1181.917182][ T5973] usb 5-1: Manufacturer: syz [ 1181.941573][ T5973] usb 5-1: SerialNumber: syz [ 1181.948493][T17828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1181.960189][ T5973] usb 5-1: config 0 descriptor?? [ 1181.969207][T17828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1181.983608][ T5973] gs_usb 5-1:0.0: Required endpoints not found [ 1182.358904][ T5925] usb 5-1: USB disconnect, device number 72 [ 1182.577428][T17828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.616632][T17828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.637008][T11859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.644108][T11859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.677419][T11859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.684581][T11859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.713009][T17960] comedi comedi2: ni_at_a2150: I/O port conflict (0x5,28) [ 1183.287015][T17967] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1183.298419][T17967] 1·: renamed from 70· (while UP) [ 1183.765857][T17967] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1184.073472][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 120 seconds [ 1184.084871][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 120 seconds [ 1184.098899][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 120 seconds [ 1184.132097][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 120 seconds [ 1184.507797][T17828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.684518][T17828] veth0_vlan: entered promiscuous mode [ 1184.703125][T17828] veth1_vlan: entered promiscuous mode [ 1184.834706][T17828] veth0_macvtap: entered promiscuous mode [ 1184.846787][T17828] veth1_macvtap: entered promiscuous mode [ 1184.912329][T17828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.947396][T17828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.987064][ T4514] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.996440][ T4514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.007491][ T4514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.019437][ T4514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.218458][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.226914][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.409775][T17994] CIFS mount error: No usable UNC path provided in device string! [ 1185.409775][T17994] [ 1185.435496][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.444542][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.446087][T17994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1187.295123][T10439] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1187.316184][T18017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1187.357296][T18017] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1187.471533][T10439] usb 3-1: Using ep0 maxpacket: 32 [ 1187.499223][T10439] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1187.537661][T10439] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1187.620835][T10439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.711467][T18028] netlink: 'syz.6.2956': attribute type 39 has an invalid length. [ 1187.968417][T10439] usb 3-1: Product: syz [ 1188.004246][T10439] usb 3-1: Manufacturer: syz [ 1188.049163][T10439] usb 3-1: SerialNumber: syz [ 1188.067809][T10439] usb 3-1: config 0 descriptor?? [ 1188.201252][T10439] gs_usb 3-1:0.0: Required endpoints not found [ 1188.518965][T18035] netlink: 'syz.4.2959': attribute type 1 has an invalid length. [ 1188.535388][T18040] vivid-007: disconnect [ 1188.552595][ T24] usb 3-1: USB disconnect, device number 77 [ 1188.661911][T18035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1189.040908][T18031] vivid-007: reconnect [ 1190.885483][ T5925] IPVS: starting estimator thread 0... [ 1191.203136][T18067] IPVS: using max 41 ests per chain, 98400 per kthread [ 1191.270400][T18071] FAULT_INJECTION: forcing a failure. [ 1191.270400][T18071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.362534][T18071] CPU: 0 UID: 0 PID: 18071 Comm: syz.3.2967 Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.362570][T18071] Tainted: [L]=SOFTLOCKUP [ 1191.362578][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1191.362591][T18071] Call Trace: [ 1191.362598][T18071] [ 1191.362607][T18071] dump_stack_lvl+0x100/0x190 [ 1191.362641][T18071] should_fail_ex.cold+0x5/0xa [ 1191.362667][T18071] _copy_from_user+0x2e/0xd0 [ 1191.362698][T18071] rtc_dev_ioctl+0x81f/0xd90 [ 1191.362728][T18071] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 1191.362752][T18071] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1191.362798][T18071] ? selinux_file_ioctl+0x139/0x290 [ 1191.362820][T18071] ? selinux_file_ioctl+0xb4/0x290 [ 1191.362846][T18071] ? __pfx_rtc_dev_ioctl+0x10/0x10 [ 1191.362873][T18071] __x64_sys_ioctl+0x18e/0x210 [ 1191.362898][T18071] do_syscall_64+0xc9/0xf80 [ 1191.362925][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.362948][T18071] RIP: 0033:0x7f020fd9acb9 [ 1191.362966][T18071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.362987][T18071] RSP: 002b:00007f0210c0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.363009][T18071] RAX: ffffffffffffffda RBX: 00007f0210015fa0 RCX: 00007f020fd9acb9 [ 1191.363025][T18071] RDX: 0000200000000140 RSI: 000000004028700f RDI: 0000000000000003 [ 1191.363039][T18071] RBP: 00007f0210c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.363053][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.363073][T18071] R13: 00007f0210016038 R14: 00007f0210015fa0 R15: 00007ffc2f7e4e18 [ 1191.363105][T18071] [ 1191.572191][T18075] futex_wake_op: syz.4.2969 tries to shift op by -1; fix this program [ 1192.121274][T18084] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1192.862440][T18094] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1192.873214][T18094] 1·: renamed from 70· (while UP) [ 1192.985075][T18094] 1·: failed to rename [ 1192.995515][T18094] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1193.234615][T18096] No source specified [ 1193.403298][T18086] comedi comedi2: reset error (fatal) [ 1193.941870][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1194.083516][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1194.095564][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2982'. [ 1194.132417][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1194.156801][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.216916][ T24] usb 5-1: Product: syz [ 1194.231908][ T24] usb 5-1: Manufacturer: syz [ 1194.260593][ T24] usb 5-1: SerialNumber: syz [ 1194.339694][ T24] hub 5-1:24.0: bad descriptor, ignoring hub [ 1194.373647][ T24] hub 5-1:24.0: probe with driver hub failed with error -5 [ 1194.514303][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 1194.681282][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1194.721129][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1194.721146][ T30] audit: type=1400 audit(1769145713.172:1187): avc: denied { setattr } for pid=18105 comm="syz.4.2978" name="secretmem" dev="secretmem" ino=62583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1194.770686][ T24] dib0700: firmware download failed at 7 with -22 [ 1194.849641][T18106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.001008][T18106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.183291][T18133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1196.421970][T10439] usb 5-1: USB disconnect, device number 73 [ 1196.630308][T18140] /dev/nullb0: Can't open blockdev [ 1197.668830][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1197.702545][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1197.732180][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1197.748826][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1197.758796][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1198.734988][T18143] chnl_net:caif_netlink_parms(): no params data found [ 1199.102111][T18143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.376740][T18143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.435401][T18143] bridge_slave_0: entered allmulticast mode [ 1199.497115][T18143] bridge_slave_0: entered promiscuous mode [ 1199.546784][T18143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.592564][T18143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.610207][T18143] bridge_slave_1: entered allmulticast mode [ 1199.632506][T18143] bridge_slave_1: entered promiscuous mode [ 1199.804692][T18143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.822321][ T53] Bluetooth: hci5: command tx timeout [ 1199.939939][T18143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.960886][ T5897] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1200.009247][T18143] team0: Port device team_slave_0 added [ 1200.018680][T18143] team0: Port device team_slave_1 added [ 1200.417868][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1200.443026][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1200.453470][ T5897] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1200.461779][T18143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.464209][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.515480][ T5897] usb 4-1: Product: syz [ 1200.520143][ T5897] usb 4-1: Manufacturer: syz [ 1200.528426][ T5897] usb 4-1: SerialNumber: syz [ 1200.541225][ T5897] usb 4-1: config 0 descriptor?? [ 1200.548071][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.614431][ T5897] gs_usb 4-1:0.0: Required endpoints not found [ 1200.681234][T18143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.821851][ T24] usb 4-1: USB disconnect, device number 83 [ 1200.837473][T18187] team0 (unregistering): Port device team_slave_0 removed [ 1200.847652][T18187] team0 (unregistering): Port device team_slave_1 removed [ 1200.889126][T18187] team0 (unregistering): Port device batadv1 removed [ 1200.904598][T18187] team0 (unregistering): Port device batadv2 removed [ 1200.922032][T18194] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1201.066633][T18143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.084469][T18143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.111593][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1201.117706][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1201.215686][T18143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.381804][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1201.387811][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1201.572468][T14871] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.857526][T14871] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.892974][T18194] ceph: No mds server is up or the cluster is laggy [ 1202.385821][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1202.392336][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1202.399932][ T53] Bluetooth: hci5: command tx timeout [ 1202.495284][T18143] hsr_slave_0: entered promiscuous mode [ 1202.537062][T18143] hsr_slave_1: entered promiscuous mode [ 1202.648531][T18143] debugfs: 'hsr0' already exists in 'hsr' [ 1202.657757][T18143] Cannot create hsr debugfs directory [ 1202.694089][T14871] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.223666][T18228] vivid-007: disconnect [ 1204.461828][ T53] Bluetooth: hci5: command tx timeout [ 1204.926767][T18224] vivid-007: reconnect [ 1205.224740][T14871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.234276][ T5897] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1205.248931][T14871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.262878][T14871] bond0 (unregistering): Released all slaves [ 1205.366756][T14871] bond1 (unregistering): Released all slaves [ 1205.394785][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 1205.412939][ T5897] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1205.445742][ T5897] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1205.455429][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.464360][ T5897] usb 8-1: Product: syz [ 1205.468600][ T5897] usb 8-1: Manufacturer: syz [ 1205.477552][ T5897] usb 8-1: SerialNumber: syz [ 1205.500472][ T5897] usb 8-1: config 0 descriptor?? [ 1205.533657][ T5897] gs_usb 8-1:0.0: Required endpoints not found [ 1205.534719][T14871] bond2 (unregistering): Released all slaves [ 1205.689358][T14871] bond3 (unregistering): Released all slaves [ 1205.733872][ T5897] usb 8-1: USB disconnect, device number 33 [ 1205.821663][T14871] bond4 (unregistering): Released all slaves [ 1205.925923][T14871] bond5 (unregistering): Released all slaves [ 1206.545517][ T53] Bluetooth: hci5: command tx timeout [ 1207.165413][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 1207.323381][T18257] veth0_macvtap: left promiscuous mode [ 1207.908589][T14871] hsr_slave_0: left promiscuous mode [ 1207.948295][T14871] hsr_slave_1: left promiscuous mode [ 1207.978663][T14871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.991498][T14871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.022119][T14871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.029507][T14871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.150179][T14871] veth1_macvtap: left promiscuous mode [ 1208.175778][T14871] veth0_macvtap: left promiscuous mode [ 1208.187478][T14871] veth1_vlan: left promiscuous mode [ 1208.835122][T18276] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1209.017646][T14871] batadv4 (unregistering): left allmulticast mode [ 1209.027401][T14871] team0 (unregistering): Port device batadv4 removed [ 1209.055232][T14871] batadv3 (unregistering): left allmulticast mode [ 1209.062634][T14871] team0 (unregistering): Port device batadv3 removed [ 1209.088904][T14871] team0 (unregistering): Port device batadv2 removed [ 1209.105866][T14871] team0 (unregistering): Port device batadv1 removed [ 1209.241545][T17728] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1209.421616][T17728] usb 3-1: Using ep0 maxpacket: 32 [ 1209.428479][T14871] team0 (unregistering): Port device team_slave_1 removed [ 1209.431199][T17728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1209.445553][T17728] usb 3-1: config 1 has an invalid interface number: 15 but max is 0 [ 1209.454826][T17728] usb 3-1: config 1 has no interface number 0 [ 1209.461941][T17728] usb 3-1: config 1 interface 15 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1209.476486][T17728] usb 3-1: config 1 interface 15 has no altsetting 0 [ 1209.485626][T17728] usb 3-1: New USB device found, idVendor=19d2, idProduct=7e26, bcdDevice=96.b3 [ 1209.499117][T17728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.507702][T17728] usb 3-1: Product: syz [ 1209.512512][T17728] usb 3-1: Manufacturer: syz [ 1209.517108][T17728] usb 3-1: SerialNumber: syz [ 1209.517275][T14871] team0 (unregistering): Port device team_slave_0 removed [ 1209.748978][T17728] rndis_host 3-1:1.15: skipping garbage [ 1209.760687][T17728] rndis_host 3-1:1.15: invalid descriptor buffer length [ 1209.769361][T17728] usb 3-1: bad CDC descriptors [ 1209.787662][T17728] usb 3-1: USB disconnect, device number 78 [ 1209.915708][T18274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1209.958037][T18276] 0·: renamed from 71· (while UP) [ 1209.986899][T18276] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1210.135994][T18283] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3021'. [ 1210.431092][T18283] 1·: renamed from 70· (while UP) [ 1210.446355][T18283] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1210.469506][T18285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1211.188614][T18143] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1211.367461][T14871] IPVS: stop unused estimator thread 0... [ 1211.376298][T18143] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1211.433487][T18143] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1211.475499][T18143] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1211.865761][T18143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.916124][T18143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.978492][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.985588][ T9371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.083428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.090596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.190124][ T30] audit: type=1326 audit(1769145730.642:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18319 comm="syz.2.3026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f105679acb9 code=0x0 [ 1212.719335][T18321] orangefs_mount: mount request failed with -4 [ 1212.777854][T18143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.837600][T18335] FAULT_INJECTION: forcing a failure. [ 1212.837600][T18335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.871264][T18335] CPU: 0 UID: 0 PID: 18335 Comm: syz.3.3028 Tainted: G L syzkaller #0 PREEMPT(full) [ 1212.871284][T18335] Tainted: [L]=SOFTLOCKUP [ 1212.871288][T18335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1212.871295][T18335] Call Trace: [ 1212.871300][T18335] [ 1212.871304][T18335] dump_stack_lvl+0x100/0x190 [ 1212.871325][T18335] should_fail_ex.cold+0x5/0xa [ 1212.871339][T18335] _copy_to_user+0x32/0xd0 [ 1212.871357][T18335] simple_read_from_buffer+0xcb/0x170 [ 1212.871372][T18335] proc_fail_nth_read+0x1af/0x230 [ 1212.871390][T18335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.871416][T18335] ? rw_verify_area+0xce/0x6d0 [ 1212.871436][T18335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.871464][T18335] vfs_read+0x1e4/0xb30 [ 1212.871487][T18335] ? __pfx_vfs_read+0x10/0x10 [ 1212.871499][T18335] ? find_held_lock+0x2b/0x80 [ 1212.871516][T18335] ? __fget_files+0x215/0x3d0 [ 1212.871533][T18335] ? __fget_files+0x21f/0x3d0 [ 1212.871552][T18335] ksys_read+0x12a/0x250 [ 1212.871564][T18335] ? __pfx_ksys_read+0x10/0x10 [ 1212.871582][T18335] do_syscall_64+0xc9/0xf80 [ 1212.871596][T18335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.871608][T18335] RIP: 0033:0x7f020fd5b58e [ 1212.871618][T18335] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1212.871630][T18335] RSP: 002b:00007f0210c0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1212.871642][T18335] RAX: ffffffffffffffda RBX: 00007f0210c0d6c0 RCX: 00007f020fd5b58e [ 1212.871650][T18335] RDX: 000000000000000f RSI: 00007f0210c0d0a0 RDI: 0000000000000006 [ 1212.871658][T18335] RBP: 00007f0210c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.871665][T18335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.871672][T18335] R13: 00007f0210016038 R14: 00007f0210015fa0 R15: 00007ffc2f7e4e18 [ 1212.871689][T18335] [ 1213.652924][T18143] veth0_vlan: entered promiscuous mode [ 1213.670395][T18143] veth1_vlan: entered promiscuous mode [ 1213.685439][ T30] audit: type=1400 audit(1769145732.142:1189): avc: denied { read } for pid=18347 comm="syz.7.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1214.253531][T18351] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1214.283592][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 150 seconds [ 1214.295451][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 150 seconds [ 1214.307530][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 150 seconds [ 1214.319420][ T30] audit: type=1400 audit(1769145732.772:1190): avc: denied { open } for pid=18347 comm="syz.7.3032" path="/dev/ttyr3" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1214.345037][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 150 seconds [ 1214.371941][ T30] audit: type=1400 audit(1769145732.822:1191): avc: denied { getopt } for pid=18347 comm="syz.7.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1214.399649][T18143] veth0_macvtap: entered promiscuous mode [ 1214.533715][T18143] veth1_macvtap: entered promiscuous mode [ 1214.623828][T18143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.803447][T18143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.369808][ T9371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.435780][ T9371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.455766][ T9371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.468234][ T9371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.443560][T12966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.451504][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.469829][T12966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.479299][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.483086][T18385] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1217.955772][T18379] orangefs_mount: mount request failed with -4 [ 1218.172084][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1218.260491][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1218.308288][T18395] overlayfs: overlapping lowerdir path [ 1218.687247][ T5973] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1219.434218][ T5973] usb 5-1: device descriptor read/64, error -71 [ 1220.311772][ T5973] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1220.326863][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1220.343490][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1220.355078][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1220.364961][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1220.374776][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1220.453530][ T5973] usb 5-1: device descriptor read/64, error -71 [ 1220.627025][ T5973] usb usb5-port1: attempt power cycle [ 1220.651557][ T5925] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1220.992865][ T5973] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1221.054923][ T5973] usb 5-1: device descriptor read/8, error -71 [ 1221.681139][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 1221.758376][T18431] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3052'. [ 1222.039135][T18431] 0·: renamed from hsr0 (while UP) [ 1222.072410][T18431] 0·: failed to rename [ 1222.078340][T18431] 0·: entered allmulticast mode [ 1222.209046][T18431] hsr_slave_0: entered allmulticast mode [ 1222.231777][T18431] hsr_slave_1: entered allmulticast mode [ 1222.253410][T18431] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1222.403130][T18438] overlayfs: overlapping lowerdir path [ 1222.461079][ T53] Bluetooth: hci0: command tx timeout [ 1222.495467][T18433] orangefs_mount: mount request failed with -4 [ 1223.574626][T18413] chnl_net:caif_netlink_parms(): no params data found [ 1224.668199][ T5832] Bluetooth: hci0: command tx timeout [ 1224.799323][T18413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.815490][T18413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.274725][T18413] bridge_slave_0: entered allmulticast mode [ 1225.320105][T18413] bridge_slave_0: entered promiscuous mode [ 1225.376616][ T5925] usb 4-1: device descriptor read/all, error -71 [ 1225.462133][T18413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.519433][T18413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.577576][T18413] bridge_slave_1: entered allmulticast mode [ 1225.664453][T18413] bridge_slave_1: entered promiscuous mode [ 1225.888799][T18470] bond2: entered allmulticast mode [ 1225.899110][T18470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1225.947579][T18413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.974791][T18413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.040382][T18413] team0: Port device team_slave_0 added [ 1226.063454][T18413] team0: Port device team_slave_1 added [ 1226.134124][T18475] Cannot find add_set index 1 as target [ 1226.293529][T18413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.306957][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.341904][T18413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.354359][T18413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.361908][T18413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.392353][T18413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.507336][T18413] hsr_slave_0: entered promiscuous mode [ 1226.530038][T18413] hsr_slave_1: entered promiscuous mode [ 1226.542654][T18413] debugfs: 'hsr0' already exists in 'hsr' [ 1226.548545][T18413] Cannot create hsr debugfs directory [ 1226.752691][ T5832] Bluetooth: hci0: command tx timeout [ 1226.832414][T18486] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3064'. [ 1227.069773][T18486] 1·: renamed from 70· (while UP) [ 1227.099534][T18486] 1·: failed to rename [ 1227.106941][T18486] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1227.736948][T18413] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1227.780243][T18413] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1228.209768][T18413] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1228.259118][T18413] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1228.782266][ T5832] Bluetooth: hci0: command tx timeout [ 1229.345139][T18413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.428871][T18522] vivid-007: disconnect [ 1229.968268][T18413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.001493][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.008562][T14952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.056813][T11859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.063919][T11859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.115121][T18519] vivid-007: reconnect [ 1230.432400][T18530] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3075'. [ 1230.697679][T18530] 0·: renamed from 71· (while UP) [ 1230.748980][T18530] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1231.415927][ T30] audit: type=1326 audit(1769145749.872:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.501787][ T30] audit: type=1326 audit(1769145749.892:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.591611][ T30] audit: type=1326 audit(1769145749.912:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.747330][T18413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.792506][ T30] audit: type=1326 audit(1769145749.912:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.834750][ T30] audit: type=1326 audit(1769145749.912:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.881600][ T30] audit: type=1326 audit(1769145749.912:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1231.915361][ T30] audit: type=1326 audit(1769145749.912:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1232.172216][T18562] syzkaller0: entered promiscuous mode [ 1232.177777][T18562] syzkaller0: entered allmulticast mode [ 1232.187772][T18534] kvm: kvm [18533]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1232.223007][T18562] tipc: Started in network mode [ 1232.236710][T18562] tipc: Node identity 46816c7bd9f8, cluster identity 4711 [ 1232.259079][T18562] tipc: Enabled bearer , priority 0 [ 1232.299826][T18561] tipc: Resetting bearer [ 1232.368551][T18561] tipc: Disabling bearer [ 1232.409615][T18413] veth0_vlan: entered promiscuous mode [ 1232.437887][ T30] audit: type=1326 audit(1769145749.912:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1232.487070][T18413] veth1_vlan: entered promiscuous mode [ 1232.572919][T18413] veth0_macvtap: entered promiscuous mode [ 1232.588756][T18413] veth1_macvtap: entered promiscuous mode [ 1232.680764][T18557] block device autoloading is deprecated and will be removed. [ 1232.699739][ T30] audit: type=1326 audit(1769145749.912:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1232.772853][ T30] audit: type=1326 audit(1769145749.912:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1233.099378][T18413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.149103][T18413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.188865][ T3729] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.208737][ T3729] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.239001][ T3729] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.268536][ T3729] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.469730][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.478308][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.583360][T12268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.609976][T12268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.498539][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.181523][ T5192] udevd[5192]: worker [16369] /devices/virtual/block/nbd6 timeout; kill it [ 1243.190229][ T5192] udevd[5192]: seq 20617 '/devices/virtual/block/nbd6' killed [ 1245.671951][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 180 seconds [ 1245.685105][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 180 seconds [ 1245.699420][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 180 seconds [ 1245.711704][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 180 seconds [ 1247.093189][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1247.093208][ T30] audit: type=1400 audit(1769145765.552:1204): avc: denied { name_bind } for pid=18664 comm="syz.7.3113" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1247.614994][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 1249.844711][T18677] Process accounting resumed [ 1250.784661][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 1251.564329][ T30] audit: type=1400 audit(1769145769.902:1205): avc: denied { mount } for pid=18686 comm="syz.7.3119" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1251.886350][ T30] audit: type=1400 audit(1769145769.902:1206): avc: denied { mounton } for pid=18686 comm="syz.7.3119" path="/277/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1252.027386][ T30] audit: type=1400 audit(1769145770.412:1207): avc: denied { unmount } for pid=13181 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1252.049526][T18697] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3121'. [ 1252.077857][T18697] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1253.615284][T18714] nvme_fabrics: missing parameter 'transport=%s' [ 1253.622401][T18714] nvme_fabrics: missing parameter 'nqn=%s' [ 1253.827505][T18724] ntfs3: Unknown parameter 'discardu/#/msr' [ 1254.655135][T18727] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 1254.664587][T18727] PKCS7: Only support pkcs7_signedData type [ 1255.241578][T18730] program syz.2.3130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1265.928867][T18792] tipc: Started in network mode [ 1265.946148][T18792] tipc: Node identity 1201e96098f8, cluster identity 4711 [ 1265.969503][T18792] tipc: Enabled bearer , priority 0 [ 1266.058960][T18792] tipc: Resetting bearer [ 1266.112992][T18796] syzkaller0: entered promiscuous mode [ 1266.159535][T18796] syzkaller0: entered allmulticast mode [ 1267.117410][T18791] tipc: Resetting bearer [ 1267.232753][T18791] tipc: Disabling bearer [ 1267.316721][T18661] tipc: Node number set to 2331634016 [ 1269.329662][ T30] audit: type=1326 audit(1769145787.782:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.426148][T18833] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1269.435036][ T9079] IPVS: starting estimator thread 0... [ 1269.444022][ T30] audit: type=1326 audit(1769145787.812:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.478712][ T30] audit: type=1326 audit(1769145787.812:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.591771][T18834] IPVS: using max 31 ests per chain, 74400 per kthread [ 1269.604898][ T30] audit: type=1326 audit(1769145787.812:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.901945][ T30] audit: type=1326 audit(1769145787.812:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.928819][ T30] audit: type=1326 audit(1769145787.812:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.953562][ T30] audit: type=1326 audit(1769145787.812:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1269.979662][ T30] audit: type=1326 audit(1769145787.882:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18828 comm="syz.7.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0679acb9 code=0x7ffc0000 [ 1271.634056][T18867] No such timeout policy "syz1" [ 1272.672829][ T5870] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1272.851588][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 1272.858717][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.901772][ T5870] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1273.938965][ T30] audit: type=1326 audit(1769145791.822:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.4.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1273.971712][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.022294][ T5870] usb 4-1: config 0 descriptor?? [ 1274.153730][ T30] audit: type=1326 audit(1769145791.822:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18889 comm="syz.4.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7ffc0000 [ 1274.690195][ T5870] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1274.995880][ T5870] usb 4-1: USB disconnect, device number 86 [ 1275.261326][T10439] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1275.320280][T18910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3172'. [ 1275.970371][T10439] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1275.982528][T10439] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1275.994614][T10439] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1276.004696][T10439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.024808][T18904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1276.069770][T10439] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1276.226155][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 210 seconds [ 1276.238324][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 210 seconds [ 1276.250415][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 210 seconds [ 1276.350169][T18916] Device name cannot be null; rc = [-22] [ 1276.471710][ T5870] usb 5-1: USB disconnect, device number 78 [ 1277.123001][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 210 seconds [ 1277.857762][T18925] orangefs_mount: mount request failed with -4 [ 1277.967997][T18930] orangefs_mount: mount request failed with -4 [ 1279.223306][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1279.223325][ T30] audit: type=1326 audit(1769145797.682:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18932 comm="syz.4.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea5859acb9 code=0x7fc00000 [ 1284.435118][T18969] orangefs_mount: mount request failed with -4 [ 1286.131555][ T9079] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1286.239316][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1286.261731][ T9079] usb 5-1: device descriptor read/64, error -71 [ 1286.306674][T18996] lo speed is unknown, defaulting to 1000 [ 1286.338845][T18996] lo speed is unknown, defaulting to 1000 [ 1286.369435][T18996] lo speed is unknown, defaulting to 1000 [ 1286.502249][ T9079] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1286.609377][T18996] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1286.651835][ T9079] usb 5-1: device descriptor read/64, error -71 [ 1286.763540][ T9079] usb usb5-port1: attempt power cycle [ 1286.847150][T18996] lo speed is unknown, defaulting to 1000 [ 1286.873289][T18996] lo speed is unknown, defaulting to 1000 [ 1286.887696][T18996] lo speed is unknown, defaulting to 1000 [ 1286.906455][T18996] lo speed is unknown, defaulting to 1000 [ 1286.942421][T18996] lo speed is unknown, defaulting to 1000 [ 1286.953134][T18996] lo speed is unknown, defaulting to 1000 [ 1286.961932][T18996] lo speed is unknown, defaulting to 1000 [ 1286.976176][T18996] lo speed is unknown, defaulting to 1000 [ 1286.988901][T18996] lo speed is unknown, defaulting to 1000 [ 1287.035466][T18998] orangefs_mount: mount request failed with -4 [ 1287.141546][ T9079] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1287.207706][ T9079] usb 5-1: device descriptor read/8, error -71 [ 1287.586103][ T9079] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1287.635410][ T9079] usb 5-1: device descriptor read/8, error -71 [ 1287.751877][ T9079] usb usb5-port1: unable to enumerate USB device [ 1288.083432][T19006] orangefs_mount: mount request failed with -4 [ 1288.655716][ T30] audit: type=1400 audit(1769145806.792:1252): avc: denied { write } for pid=19023 comm="syz.4.3207" path="socket:[67173]" dev="sockfs" ino=67173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1290.187954][T19039] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1290.199943][T19039] 0·: renamed from hsr0 (while UP) [ 1290.280193][T19039] 0·: entered allmulticast mode [ 1290.289833][T19039] hsr_slave_0: entered allmulticast mode [ 1290.298547][T19039] hsr_slave_1: entered allmulticast mode [ 1290.311615][T19039] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1290.534106][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3212'. [ 1290.620444][T19044] siw: device registration error -23 [ 1291.421654][ T5925] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1291.551929][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1291.811378][ T5925] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1291.991979][ T5925] usb 5-1: device descriptor read/64, error -71 [ 1292.155012][ T5925] usb usb5-port1: attempt power cycle [ 1292.271814][ T5884] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1292.441010][ T5884] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1292.443942][T19076] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3227'. [ 1292.465843][T19076] 1·: renamed from 70· (while UP) [ 1292.551973][T19076] 1·: failed to rename [ 1292.556869][T19076] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1292.687359][ T5884] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1292.721938][ T5925] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1292.729616][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1292.759873][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.776320][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1292.810368][T19069] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1292.824474][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1294.023353][ T5973] kernel read not supported for file /vcs (pid: 5973 comm: kworker/0:9) [ 1294.101690][ T5925] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1295.352110][ T5925] usb 5-1: device descriptor read/8, error -71 [ 1295.448236][ T24] usb 3-1: USB disconnect, device number 79 [ 1295.451961][T19090] orangefs_mount: mount request failed with -4 [ 1295.534135][ T5925] usb usb5-port1: unable to enumerate USB device [ 1296.592878][ T30] audit: type=1804 audit(1769145815.042:1253): pid=19102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3236" name="/newroot/37/file0" dev="tmpfs" ino=220 res=1 errno=0 [ 1296.973609][T19112] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3239'. [ 1296.993361][T19112] 0·: renamed from hsr0 (while UP) [ 1297.227436][T19112] 0·: entered allmulticast mode [ 1297.237834][T19112] hsr_slave_0: entered allmulticast mode [ 1298.007501][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 1298.015987][ T5925] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1298.064026][T19112] hsr_slave_1: entered allmulticast mode [ 1298.103986][T19112] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1298.232857][ T5925] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1299.620687][ T5925] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1299.697026][ T5925] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1299.739392][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.866509][ T5925] usb 3-1: can't set config #27, error -71 [ 1299.892008][ T5925] usb 3-1: USB disconnect, device number 80 [ 1299.912443][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.681136][ T5973] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1301.845311][T19160] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.3255'. [ 1301.869279][ T5973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1301.898111][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1301.912251][ T5973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1301.942119][ T5973] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1301.961955][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.969999][ T5973] usb 3-1: Product: syz [ 1301.975177][ T5973] usb 3-1: Manufacturer: syz [ 1301.981599][ T5973] usb 3-1: SerialNumber: syz [ 1302.003449][ T5973] usb 3-1: config 0 descriptor?? [ 1302.013449][T19146] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1302.031178][T19146] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1302.054567][ T5973] usb 3-1: ucan: probing device on interface #0 [ 1302.274454][ T5973] usb 3-1: ucan: could not read protocol version, ret=0 [ 1302.292526][ T5973] usb 3-1: ucan: probe failed; try to update the device firmware [ 1302.549039][ T5973] usb 3-1: USB disconnect, device number 81 [ 1302.592500][T19160] ceph: No mds server is up or the cluster is laggy [ 1303.303222][T19169] orangefs_mount: mount request failed with -4 [ 1303.858918][T19180] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3258'. [ 1303.877063][T19180] 0·: renamed from 71· (while UP) [ 1303.979839][T19180] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1305.421874][T19203] vivid-007: disconnect [ 1306.330168][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 240 seconds [ 1306.341515][ T9079] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1306.349231][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 240 seconds [ 1306.360346][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 240 seconds [ 1306.778740][ T9079] usb 4-1: device descriptor read/64, error -71 [ 1307.540284][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 240 seconds [ 1307.744726][T19191] vivid-007: reconnect [ 1307.812143][ T9079] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1308.341708][ T9079] usb 4-1: device descriptor read/64, error -71 [ 1308.501851][ T9079] usb usb4-port1: attempt power cycle [ 1308.598208][T19233] orangefs_mount: mount request failed with -4 [ 1308.608139][ T5870] kernel read not supported for file /vcs (pid: 5870 comm: kworker/1:3) [ 1308.862339][ T9079] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1308.896317][ T9079] usb 4-1: device descriptor read/8, error -71 [ 1309.171864][ T9079] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1309.879313][ T9079] usb 4-1: device descriptor read/8, error -71 [ 1310.144430][ T9079] usb usb4-port1: unable to enumerate USB device [ 1312.546081][T19275] qrtr: Invalid version 0 [ 1313.471626][T19273] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 1318.537327][T19300] orangefs_mount: mount request failed with -4 [ 1321.151652][ T5884] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1321.329480][ T5884] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.340835][ T5884] usb 3-1: config 0 has no interface number 0 [ 1321.347063][ T5884] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1321.373644][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.413854][ T5884] usb 3-1: config 0 descriptor?? [ 1321.440154][ T5884] usb 3-1: selecting invalid altsetting 1 [ 1321.465405][ T5884] dvb_ttusb_budget: ttusb_init_controller: error [ 1321.473695][ T5884] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1321.627875][ T5884] DVB: Unable to find symbol cx22700_attach() [ 1321.723524][ T5884] DVB: Unable to find symbol tda10046_attach() [ 1321.772090][ T5884] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1321.784649][ T5884] usb 3-1: USB disconnect, device number 82 [ 1321.802460][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1322.001915][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1322.018242][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1322.101783][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1322.111980][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.120094][ T24] usb 4-1: Product: syz [ 1322.132576][ T24] usb 4-1: Manufacturer: syz [ 1322.137555][ T24] usb 4-1: SerialNumber: syz [ 1322.477283][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 1322.804659][ T24] usb 4-1: config 0 descriptor?? [ 1322.832452][ T24] gs_usb 4-1:0.0: Required endpoints not found [ 1323.060267][ T24] usb 4-1: USB disconnect, device number 91 [ 1323.476282][T19363] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3313'. [ 1323.488469][T19363] 1·: renamed from 70· (while UP) [ 1323.752011][T19363] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1326.440802][ T5870] IPVS: starting estimator thread 0... [ 1326.611644][T19390] IPVS: using max 65 ests per chain, 156000 per kthread [ 1327.556289][T19399] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3325'. [ 1327.615805][T19399] 1·: renamed from 70· (while UP) [ 1327.684412][T19399] 1·: failed to rename [ 1327.719162][T19399] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 1328.191852][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3329'. [ 1328.576848][T19413] Bluetooth: MGMT ver 1.23 [ 1330.523376][T19433] binder: BINDER_SET_CONTEXT_MGR already set [ 1330.592811][T19433] binder: 19432:19433 ioctl 4018620d 200000000040 returned -16 [ 1331.761895][T19445] orangefs_mount: mount request failed with -4 [ 1331.970348][T19452] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3342'. [ 1336.157444][T19480] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1336.169470][T19480] 0·: renamed from 71· (while UP) [ 1336.431644][ T25] block nbd6: Possible stuck request ffff8880265c0000: control (read@0,1024B). Runtime 270 seconds [ 1336.442898][ T25] block nbd6: Possible stuck request ffff8880265c0200: control (read@1024,1024B). Runtime 270 seconds [ 1336.454320][ T25] block nbd6: Possible stuck request ffff8880265c0400: control (read@2048,1024B). Runtime 270 seconds [ 1336.502804][T19480] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1338.534537][ T25] block nbd6: Possible stuck request ffff8880265c0600: control (read@3072,1024B). Runtime 270 seconds [ 1340.649414][T19512] binder: BINDER_SET_CONTEXT_MGR already set [ 1340.671550][T19512] binder: 19511:19512 ioctl 4018620d 200000000040 returned -16 [ 1340.711755][T18633] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1341.828362][ T5926] kernel read not supported for file /vcs (pid: 5926 comm: kworker/0:6) [ 1341.882118][T18633] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1341.893052][T18633] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1341.906042][T18633] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1341.970234][T18633] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1341.980734][T18633] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.988726][T18633] usb 5-1: Product: syz [ 1342.011495][T18633] usb 5-1: Manufacturer: syz [ 1342.016096][T18633] usb 5-1: SerialNumber: syz [ 1342.064152][T18633] usb 5-1: config 0 descriptor?? [ 1342.069779][T19510] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1342.100669][T19510] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1342.122588][T18633] usb 5-1: ucan: probing device on interface #0 [ 1342.345068][T18633] usb 5-1: ucan: device protocol version -1996554243 is not supported [ 1342.371497][T18633] usb 5-1: ucan: probe failed; try to update the device firmware [ 1342.575978][ T5926] usb 5-1: USB disconnect, device number 87 [ 1344.332362][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3373'. [ 1344.551067][T17728] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1344.858694][T17728] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1344.961614][T17728] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.985323][T19552] binder: BINDER_SET_CONTEXT_MGR already set [ 1345.004210][T17728] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1345.016987][T19552] binder: 19551:19552 ioctl 4018620d 200000000040 returned -16 [ 1345.033944][T17728] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1345.043216][T17728] usb 9-1: Manufacturer: syz [ 1345.053201][T17728] usb 9-1: config 0 descriptor?? [ 1345.143052][T17728] rc_core: IR keymap rc-hauppauge not found [ 1345.151761][T17728] Registered IR keymap rc-empty [ 1345.168738][T17728] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1345.184762][T17728] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input112 [ 1345.242364][T19557] binder: BINDER_SET_CONTEXT_MGR already set [ 1345.242583][ T30] audit: type=1804 audit(1769145863.622:1254): pid=19555 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3375" name="/newroot/102/file0" dev="tmpfs" ino=548 res=1 errno=0 [ 1345.248367][T19557] binder: 19556:19557 ioctl 4018620d 200000000300 returned -16 [ 1345.310061][T17728] usb 9-1: USB disconnect, device number 2 [ 1345.473584][T19564] vivid-007: disconnect [ 1346.251824][T19560] vivid-007: reconnect [ 1348.348141][T19588] binder: BINDER_SET_CONTEXT_MGR already set [ 1348.373632][T19588] binder: 19586:19588 ioctl 4018620d 200000000040 returned -16 [ 1350.800578][ T5926] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1350.853532][T19610] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1350.958177][ T30] audit: type=1400 audit(1769145869.412:1255): avc: denied { connect } for pid=19612 comm="syz.8.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1351.018899][ T30] audit: type=1400 audit(1769145869.462:1256): avc: denied { read } for pid=19612 comm="syz.8.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1351.044046][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1351.632364][ T30] audit: type=1400 audit(1769145869.542:1257): avc: denied { write } for pid=19612 comm="syz.8.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1351.691565][ T5926] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 1351.708801][ T5926] usb 3-1: config 0 has no interface number 0 [ 1351.761714][ T5926] usb 3-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1351.817749][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.856765][ T5926] usb 3-1: Product: syz [ 1351.877555][ T5926] usb 3-1: Manufacturer: syz [ 1351.897892][ T5926] usb 3-1: SerialNumber: syz [ 1351.918247][ T5926] usb 3-1: config 0 descriptor?? [ 1352.229259][T19623] tc_dump_action: action bad kind [ 1353.687990][ T31] INFO: task syz.6.3009:18222 blocked for more than 143 seconds. [ 1353.753437][ T31] Tainted: G L syzkaller #0 [ 1353.760065][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1353.957438][ T31] task:syz.6.3009 state:D stack:29032 pid:18222 tgid:18221 ppid:11297 task_flags:0x400140 flags:0x00080002 [ 1353.962350][T19634] orangefs_mount: mount request failed with -4 [ 1354.162627][ T31] Call Trace: [ 1354.176140][ T31] [ 1354.194194][ T31] ? __schedule+0xf65/0x5e10 [ 1354.209742][ T31] __schedule+0xfe4/0x5e10 [ 1354.240375][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1354.282377][ T31] ? __pfx___schedule+0x10/0x10 [ 1354.289755][ T31] ? find_held_lock+0x2b/0x80 [ 1354.300598][ T31] ? schedule+0x2bf/0x390 [ 1354.318923][ T31] schedule+0xdd/0x390 [ 1354.339020][ T31] schedule_preempt_disabled+0x13/0x30 [ 1354.350257][T19643] orangefs_mount: mount request failed with -4 [ 1354.358870][ T31] __mutex_lock+0xc9a/0x1b90 [ 1354.369096][ T31] ? bdev_open+0xa2/0xe40 [ 1354.378332][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1354.407653][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 1354.428499][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1354.449421][ T31] ? file_init_path+0x48e/0x670 [ 1354.471750][ T31] ? bdev_open+0xa2/0xe40 [ 1354.476146][ T31] bdev_open+0xa2/0xe40 [ 1354.523249][ T31] ? iput+0x3a/0x40 [ 1354.527140][ T31] bdev_file_open_by_dev+0x179/0x210 [ 1354.533767][ T31] setup_bdev_super+0x385/0x730 [ 1354.538621][ T31] get_tree_bdev_flags+0x363/0x620 [ 1354.561513][ T31] ? __pfx_befs_fill_super+0x10/0x10 [ 1354.566879][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1354.580546][ T31] ? rcu_is_watching+0x12/0xc0 [ 1354.585382][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1354.590045][ T31] ? security_capable+0x80/0x260 [ 1354.606083][ T31] vfs_get_tree+0x92/0x320 [ 1354.622903][ T31] path_mount+0x7d0/0x23c0 [ 1354.627411][ T31] ? __pfx_path_mount+0x10/0x10 [ 1354.634128][ T31] ? kmem_cache_free+0x143/0x720 [ 1354.639131][ T31] ? strncpy_from_user+0x19d/0x2d0 [ 1354.645391][ T31] ? putname+0xf5/0x1a0 [ 1354.652050][ T31] ? putname+0xf5/0x1a0 [ 1354.658905][ T31] ? putname+0xfa/0x1a0 [ 1354.663790][ T31] ? __x64_sys_mount+0x293/0x310 [ 1354.668824][ T31] __x64_sys_mount+0x293/0x310 [ 1354.681560][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1354.689147][ T31] ? kcov_ioctl+0x16a/0x720 [ 1354.699448][ T31] ? fput+0x79/0x100 [ 1354.709153][ T31] do_syscall_64+0xc9/0xf80 [ 1354.709349][T17728] usb 3-1: USB disconnect, device number 83 [ 1354.715293][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.728237][ T31] RIP: 0033:0x7ff84639acb9 [ 1354.735227][ T31] RSP: 002b:00007ff84716e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1354.750842][ T31] RAX: ffffffffffffffda RBX: 00007ff846615fa0 RCX: 00007ff84639acb9 [ 1354.759300][ T31] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000280 [ 1354.767708][ T31] RBP: 00007ff846408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1354.777749][ T31] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 1354.787163][ T31] R13: 00007ff846616038 R14: 00007ff846615fa0 R15: 00007fff5042b618 [ 1354.796401][ T31] [ 1354.799500][ T31] [ 1354.799500][ T31] Showing all locks held in the system: [ 1354.814851][ T31] 1 lock held by khungtaskd/31: [ 1354.819685][ T31] #0: ffffffff8e5e3360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1354.861548][ T31] 2 locks held by klogd/5181: [ 1354.866232][ T31] 2 locks held by getty/5578: [ 1354.887163][ T31] #0: ffff88814dce60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1354.921621][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1354.940354][ T31] 4 locks held by kworker/u8:30/14429: [ 1354.946701][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1354.960331][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 [ 1354.970079][ T31] #2: ffff8880b85262d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 1354.979626][ T31] #3: ffffffff9b11fc10 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 1354.990831][ T31] 1 lock held by udevd/16369: [ 1354.995499][ T31] #0: ffff888026552358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1355.005437][ T31] 2 locks held by syz.6.3009/18222: [ 1355.011681][ T31] #0: ffff8880227e60e0 (&type->s_umount_key#93/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1355.022781][ T31] #1: ffff888026552358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1355.032649][ T31] [ 1355.034963][ T31] ============================================= [ 1355.034963][ T31] [ 1355.045180][ T31] NMI backtrace for cpu 0 [ 1355.045199][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.045230][ T31] Tainted: [L]=SOFTLOCKUP [ 1355.045238][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1355.045251][ T31] Call Trace: [ 1355.045258][ T31] [ 1355.045266][ T31] dump_stack_lvl+0x100/0x190 [ 1355.045299][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1355.045331][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1355.045357][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1355.045391][ T31] sys_info+0x141/0x190 [ 1355.045417][ T31] watchdog+0xcc3/0xfe0 [ 1355.045458][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.045491][ T31] ? __kthread_parkme+0x18c/0x230 [ 1355.045525][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.045564][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.045593][ T31] kthread+0x3b3/0x730 [ 1355.045618][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.045640][ T31] ? ret_from_fork+0x79/0xaf0 [ 1355.045664][ T31] ? ret_from_fork+0x79/0xaf0 [ 1355.045690][ T31] ? rcu_is_watching+0x12/0xc0 [ 1355.045719][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.045744][ T31] ret_from_fork+0x754/0xaf0 [ 1355.045770][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.045798][ T31] ? __switch_to+0x7b9/0x10c0 [ 1355.045828][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.045853][ T31] ret_from_fork_asm+0x1a/0x30 [ 1355.045889][ T31] [ 1355.045897][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1355.202207][ C1] NMI backtrace for cpu 1 [ 1355.202226][ C1] CPU: 1 UID: 0 PID: 9371 Comm: kworker/u8:22 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.202256][ C1] Tainted: [L]=SOFTLOCKUP [ 1355.202263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1355.202280][ C1] Workqueue: bat_events batadv_tt_purge [ 1355.202313][ C1] RIP: 0010:__lock_acquire+0x85f/0x2630 [ 1355.202335][ C1] Code: b7 c0 48 0f a3 05 e1 10 08 14 0f 83 b2 09 00 00 49 bc eb 83 b5 80 46 86 c8 61 4d 0f af e7 49 c1 ec 2d 4a 8b 04 e5 20 9b 28 97 <4e> 8d 34 e5 20 9b 28 97 48 85 c0 74 1f 48 83 e8 08 48 85 c0 74 16 [ 1355.202355][ C1] RSP: 0018:ffffc9000473fa88 EFLAGS: 00000802 [ 1355.202370][ C1] RAX: ffffffff93eb4ca8 RBX: ffff888032498b30 RCX: 0000000000000000 [ 1355.202384][ C1] RDX: 0000000015706fd8 RSI: 00000000af1bb56d RDI: 00000000ffed539b [ 1355.202397][ C1] RBP: ffff888032498000 R08: 0000000050d19e2e R09: 000000000000004a [ 1355.202411][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000070983 [ 1355.202423][ C1] R13: 000000000000004a R14: 0000000000000000 R15: a16ac8f415706fd8 [ 1355.202437][ C1] FS: 0000000000000000(0000) GS:ffff8881246dc000(0000) knlGS:0000000000000000 [ 1355.202456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1355.202470][ C1] CR2: 00007f10569e0ad8 CR3: 000000007d8b9000 CR4: 00000000003526f0 [ 1355.202483][ C1] Call Trace: [ 1355.202491][ C1] [ 1355.202501][ C1] ? batadv_tt_purge+0x959/0xbd0 [ 1355.202534][ C1] lock_acquire+0x17c/0x330 [ 1355.202553][ C1] ? process_one_work+0xbb6/0x1840 [ 1355.202578][ C1] ? __pfx___might_resched+0x10/0x10 [ 1355.202604][ C1] _raw_spin_lock_irq+0x36/0x50 [ 1355.202634][ C1] ? process_one_work+0xbb6/0x1840 [ 1355.202659][ C1] process_one_work+0xbb6/0x1840 [ 1355.202689][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1355.202717][ C1] ? assign_work+0x19c/0x250 [ 1355.202739][ C1] worker_thread+0x5da/0xe40 [ 1355.202768][ C1] ? kthread+0x17d/0x730 [ 1355.202793][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1355.202815][ C1] kthread+0x3b3/0x730 [ 1355.202836][ C1] ? __pfx_kthread+0x10/0x10 [ 1355.202855][ C1] ? ret_from_fork+0x79/0xaf0 [ 1355.202878][ C1] ? ret_from_fork+0x79/0xaf0 [ 1355.202901][ C1] ? rcu_is_watching+0x12/0xc0 [ 1355.202927][ C1] ? __pfx_kthread+0x10/0x10 [ 1355.202949][ C1] ret_from_fork+0x754/0xaf0 [ 1355.202972][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.202997][ C1] ? __switch_to+0x7b9/0x10c0 [ 1355.203025][ C1] ? __pfx_kthread+0x10/0x10 [ 1355.203047][ C1] ret_from_fork_asm+0x1a/0x30 [ 1355.203074][ C1] [ 1355.472633][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1355.479475][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.490145][ T31] Tainted: [L]=SOFTLOCKUP [ 1355.494437][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1355.504464][ T31] Call Trace: [ 1355.507719][ T31] [ 1355.510632][ T31] dump_stack_lvl+0x100/0x190 [ 1355.515298][ T31] vpanic+0x20d/0x630 [ 1355.519257][ T31] panic+0xd1/0xd1 [ 1355.522958][ T31] ? __pfx_panic+0x10/0x10 [ 1355.527386][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1355.533543][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1355.539677][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1355.545805][ T31] ? watchdog.cold+0x198/0x1ca [ 1355.550544][ T31] ? watchdog+0xcd3/0xfe0 [ 1355.554859][ T31] watchdog.cold+0x1a9/0x1ca [ 1355.559444][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.564099][ T31] ? __kthread_parkme+0x18c/0x230 [ 1355.569101][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.573765][ T31] ? __pfx_watchdog+0x10/0x10 [ 1355.578445][ T31] kthread+0x3b3/0x730 [ 1355.582506][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.587082][ T31] ? ret_from_fork+0x79/0xaf0 [ 1355.591750][ T31] ? ret_from_fork+0x79/0xaf0 [ 1355.596417][ T31] ? rcu_is_watching+0x12/0xc0 [ 1355.601172][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.605751][ T31] ret_from_fork+0x754/0xaf0 [ 1355.610329][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1355.615430][ T31] ? __switch_to+0x7b9/0x10c0 [ 1355.620100][ T31] ? __pfx_kthread+0x10/0x10 [ 1355.624679][ T31] ret_from_fork_asm+0x1a/0x30 [ 1355.629445][ T31] [ 1355.632738][ T31] Kernel Offset: disabled [ 1355.637040][ T31] Rebooting in 86400 seconds..