last executing test programs: 6m50.888174243s ago: executing program 32 (id=1650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008000}, 0x90) 6m48.408853937s ago: executing program 33 (id=1683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007003a00000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m7.399240155s ago: executing program 34 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r3, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 4m44.118398051s ago: executing program 35 (id=2401): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) r6 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x0}, &(0x7f00000004c0)="4fd4a147eedee25a8224e669e1b372ef851248c4d87d852d627cc22a00d9433a207b7a405494fe8d3fd415faecc15accd1df26aa1aa6bc755f40300ea32e379f370540cee58ce7f2b97afb12a984461f87b9de5e7ad6bd670593b088b7b133343e6c772787140c6b58e96e8e669061148dbec55b9cf0a4112fb54f9ee3cbce3efd31022322992fb86d74bcebf674c4d58d4212dbbb1c1257a065c1810da6f02b5ff7100b3905ead37076b86bb6a86a6f26", 0xb1, r2) r7 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x26) keyctl$invalidate(0x15, r7) keyctl$dh_compute(0x17, &(0x7f0000000580)={0x0, r6, r7}, &(0x7f00000005c0)=""/84, 0x54, &(0x7f00000006c0)={&(0x7f0000000640)={'blake2s-256-x86\x00'}, &(0x7f0000000680)="d6e8a0680e2432bd95fa", 0xa}) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x737}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x50}}, 0x0) r10 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x30, r1, 0x83000000) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0x0, 0x3}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x3c}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0x3}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000100), 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44050) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4m36.639521998s ago: executing program 36 (id=2424): open(0x0, 0x100, 0x123) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 4m33.08010026s ago: executing program 37 (id=2435): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = request_key(0x0, &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r1, 0x7) sendmsg$kcm(r0, 0x0, 0x40) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003140)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xee8}, 0x0, 0x0, '\x00', {0x1, 0x2f7, 0x0, 0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ipv6_route\x00') syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1b2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7541, 0x1, 0x0, 0x14c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x20, 0x0, 0x1c3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x7ffffffe, {}, 0x1f, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, 0x0, &(0x7f00000010c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0) 4m28.675871079s ago: executing program 38 (id=2446): mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c00010100803209"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x1ab) mount(0x0, &(0x7f0000000280)='mnt\x00', &(0x7f0000000300)='devtmpfs\x00', 0x440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) 4m20.058248606s ago: executing program 39 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x455d37cdd48576cf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) 4m10.350711733s ago: executing program 40 (id=2467): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]}) socket(0x25, 0x803, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000028c0)={0x7, 0x0, [{0x4000, 0x51, &(0x7f0000002a00)=""/81}, {0x0, 0x28, &(0x7f0000002540)=""/40}, {0x60000, 0xd6, &(0x7f0000002580)=""/214}, {0x30000, 0x30, &(0x7f00000029c0)=""/48}, {0x0, 0xb1, &(0x7f00000026c0)=""/177}, {0x58000, 0x81, &(0x7f0000002780)=""/129}, {0xc000, 0x43, &(0x7f0000002840)=""/67}]}) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="c7fbe6", 0x3}, {&(0x7f0000000140)="52142779f39a9bc4f7b1fed85aa73db93c920a6e79535ce8b0530c95e15e0d871fdc0b2e9a67a7d2ddbac3a879c976df2c37447535075c618129fa2d60317ecc5bbd11420b06602396f954fa7a9e8dea191fe0f370cbdf182e8611929a5afa0d9feebe7e4b179b0a7ff952000f1a0758a36f26f7f25b6adea2441adc0b7a02c353301edef96f191e27a24e16908d3bffc95b2526c4824d10496b91a6a89662ff49f43e4fd5259339408c31b611dee31bb6b4c0157f0aa2cde92d7a2d0560d7", 0xbf}, {&(0x7f0000000280)="3df1d13929763dc87424cd47c1f26c4b8c6dadf7d6c98f3a1228861c0973d40ac35fc1ee8278edffb9ce89469f51d9e8ee407ee67937f299167412f31911887cf642cba8ec10fecc433827eb883e2f18b109adea6f8919c927", 0x59}, {&(0x7f0000000380)="1fece8605605f86ae5ed2f9d4a694a3c5efa1cee7653147e2455e6ed2e83c0518fe605b3ceed14ef2915f13e5f39ad32e27997c1ce8ce898a7f16d474cb11e8efd", 0x41}, {&(0x7f0000000480)="fcf6b777a5376144c4c6377c8baa124c6fb60e252b01582f26a457b434fd1b106378bde77c3964fd4ca4849b9c86bb7b50bbd279e219a4a1045a4e503df6b2a2", 0x40}, {&(0x7f0000000540)="a84401c3530bb51f838d889c2089613d4ec8538db72fe35909fdb19691ec55e83cc29fd2", 0x24}], 0x6}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x20, 0x1, 0x37, {0x37, 0x23, "9aae8b2aa03cd52747777f030552063a747ae1d30a907eee13e9bd871362a5f6ab65b1d466979d7134926c234b35f99e34fe9a782d"}}, &(0x7f0000000a80)={0x0, 0x3, 0x23, @string={0x23, 0x3, "2416b8cb4f5f4bbcc296fd024bae85740e1da3a2a0b3a1ff526a497f72d8e2566d"}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000b00)=ANY=[@ANYBLOB="001879000000c03c2bc6f86514cdece1ef35b4d7079c497217e9691f6b8eea29e460066b96f2bc4ed13ce5db87ae7ca198a22f29b0142924aa523c224d63c29d4a4bd348b16909edb6e834a59bea32ec132320153aab73bd5906c7e93ea51a33d00c3642e20700000000000044f6998430d627"], &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x64, {0x62, "56c0000fc80ffaed7b1bf58a1b3018ad5f596287e9479ecd80ca10e9ad880865163ff6bad785da0c20f21c2c4ff524e01978577685a162480858ad5386e345e1e1786daa452205f7a596cc6ca55d3e3334966371f822e93667b655e530b04fc03791"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0xbe}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x39}}) 4m5.785956431s ago: executing program 41 (id=2476): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40186f40, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x6, 0xd6, 0x2}) ioctl(r1, 0x51106f03, &(0x7f00000002c0)) 4m0.02512926s ago: executing program 42 (id=2486): syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230820090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)='\x00', 0x1}, {&(0x7f0000000600)="d9417e", 0x3}], 0x2, 0x8000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m50.389972226s ago: executing program 43 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3m29.149382227s ago: executing program 44 (id=2553): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c010310"], 0xf) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="3e0000000b000100000000000003400000", 0x11) 3m24.580762499s ago: executing program 45 (id=2563): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x9, 0x1, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x3f, 0x9, 0x0, 0x80, 0x0, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xf, 0xf}, {0x3, 0x7}}, [{0x8, 0xb, 0xca}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000085}, 0x90) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3m19.197272033s ago: executing program 46 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x71, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) chdir(0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="32120f7a2bc5739e11ac36882c2a0c653e605c3eef1931d491be5bd2bd815de995c57936498c1e9e1b441a43548e1fbf2b546597ad9377f1c5120956308b53841ee2144e1dad0c4eccc1e88c080baa0a4e6b58c6d0119b85ca1ab16325156ad2f369e30095dc4af5ce4113fc6a1e2951a1a958e987866bee0e953004817ef91b314b6a3a3c050e852d68778fc11493871b199520742eba9655a9201643e16ba9e0002bae0bd4f96e9bff3a3edbde7f10c179e3e6ac3bdb25b6a5d1f80fedc9511dfdd820ada1a1cb9407c3a14621af89e2ef2fe57d277bc36616828c799f696bea416407e07acb0c"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000940)="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", 0x3b) bpf$PROG_LOAD(0x5, 0x0, 0xa0) unshare(0x6a040000) write(r3, &(0x7f0000000000)='9', 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x104, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffc4d6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40060}, 0x48085) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000600)=""/64, 0x40) syz_usb_ep_write(r4, 0x81, 0x40, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c36302725166") 3m14.661669184s ago: executing program 47 (id=2584): syz_open_dev$media(&(0x7f0000000780), 0x0, 0x20004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x28, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') read$eventfd(r3, 0x0, 0x0) 2m44.055890117s ago: executing program 1 (id=2625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r5, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2m43.30041213s ago: executing program 1 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m41.618476352s ago: executing program 1 (id=2628): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 2m38.680929766s ago: executing program 1 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 2m35.608212929s ago: executing program 1 (id=2636): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m30.912687246s ago: executing program 1 (id=2643): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m27.941995841s ago: executing program 8 (id=2647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n', 0x4) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000006c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r1, &(0x7f0000000a40)='active\n', 0x7) 2m26.543214558s ago: executing program 8 (id=2650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m26.013497473s ago: executing program 8 (id=2651): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m24.628854767s ago: executing program 8 (id=2652): r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m22.60169588s ago: executing program 8 (id=2658): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 2m21.807903167s ago: executing program 8 (id=2660): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r2, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 2m15.635017071s ago: executing program 48 (id=2643): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m13.766438197s ago: executing program 9 (id=2681): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x234, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x507}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ad3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xacd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffdd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x36}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0000000}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8044}, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x1b, "55d509601023d99d4c1d66e1171a681540fe38537262635495aad2"}, &(0x7f00000000c0)=0x23) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03", 0x1}], 0x1}}], 0x1, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x8, 0x1, 0x6, 0x5, 0x0, 0x24f, 0x94}, 0x9c) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20", @ANYBLOB="111fa28ab9c6ae3fb965f0b0f6cb9dfe92676c440eefb6b1c1a4637c6fe77f8df0c3f66645b76353ea01ba3cf5d01918", @ANYRESOCT=0x0, @ANYBLOB="c2100f5efe67d31d378f64d0fa7529b81de7d80010066c15c9863742def172eb972214ffa9c2f6893b6a393a2c189d6fa199728ff4e45351623cb745dd122e2a0e35561e40fa85b51ff0d555fb2d9123dd43f3b1832ee0828dc613cdf339854f6f94f66cd0230dab020e0311fc3f1627c98c2258c087c9b8a130c69819f2184090ad89dda84c8f3da3cb595465c96505de2aa80a31756188817a5414423eb76971aa5318100d147647d73435063adc3a9b8578ce94f9f100f1e100cbc4a2974235951ce87eea", @ANYBLOB="7199282814db981ed6d504f9ed6ff6866051e905894a52b10ef09471fdbb831d2447d783c5152fa97e6c83b7effd170b99981a3618232292fed51ba3c237f8541e9b101ddfd46044c3a543a05d895ca619acbd1f6a7dcf6f8940fa97229e1e6efa0d7a946a1a343837bf4a7e06eb0b2d6274ed63b707ca316f6e1d60ddf0e403ec94a58706c79da5dfd86aaa414af3ae7d718b727b622e00ede20e6ac9879b5df245d118480632312da9affdd16aa02db87d8d1869d79986f2fce1eeda9b673ca03d740f3bac4b63a1b0fcc5f4f11a12f2b50cb589d735c909f40262"], 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_usb_control_io(r5, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c0000000000000000000001040000002000000005000000010000040400000001000000010000000000000018"], 0x0, 0x80}, 0x28) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 2m11.26935211s ago: executing program 9 (id=2683): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m11.156940426s ago: executing program 9 (id=2684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 2m11.028305781s ago: executing program 9 (id=2685): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000000000"], 0xd0}, 0x480c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$SEG6(0x0, r2) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082055530824649a00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a9cd6338ff27a7be9f7", 0x2c, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 2m10.757394862s ago: executing program 9 (id=2686): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x62, &(0x7f00000006c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1000, r1, 0x0, 0x0, 0x8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000600)="d6a56fc86d46e012bec4483b0469b714f251576734e5533eb62c05ed9a0aac59f471c7ede4f6d44659370b76692be3adc35ed0e05e02a9d3944f71304cd02dc7915f3dbd1069f5a49b210865ad8779ea862e39c7c7970400"/99, 0x0, 0x7, 0x0, 0x3}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) syz_emit_ethernet(0x362, &(0x7f0000000d80)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x324, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x2, 0x2, 0x8, 0x0, [@mcast1]}, @dstopts={0x87, 0x45, '\x00', [@generic={0x1, 0x30, "e000731020c057f02e10531c5b5fa0e8090048e611c957e880b89efb752fc657280b83c5fb2142538512d4d54293f5e7"}, @calipso={0x7, 0x20, {0x0, 0x6, 0xb0, 0x2, [0x3, 0x0, 0x6]}}, @ra={0x5, 0x2, 0xef2b}, @generic={0x0, 0xe2, "b8e2e81f4eee3a7db03574dd7909fa6c4d9441818992c03384c9fb4cefa0d20bf20a6ac06c8cc6d33db6a303d252c0a55d77bfcba3db23f112f31ac1b3ff4e3444bd4ce5d7f1733b1208c42ca25e21865b03250c30fa8795da8435c2318fd1bc6f700cc12f4a74bc0a83dffaa7d7d76e5f0528526a0a2f622a161bebec3d42b6c74693c0d0ef93ac323e4e84dad148431b0ee92204ad59146a7eb059ed22ca317e1a4afc9026755b1b906d33d3a52dfe7ac92652ad35397e7d85400cb732aae4d62837edb2f1150d9362503eb3aed96575a8feee9a60a39ac20e99e4f2dd534e5e91"}, @pad1, @pad1, @pad1, @generic={0xb, 0xd6, "62d5edd5abc8b253afafec1953f1ce7bb38a7bd8387fb58ab52a5d9c463f19d49fa0679549912c0a26c2378554bcdeecb66ed07e083794738f5482cddc835a302f038bd0ce86b3c6d53cf473045b554c1855c64c51536e954b96ec81806f114edf24b1c6ea5833e749f6d3987256df7e81410f761bb7be5fe12a2d479f03036c51acd811845d0defbce11ab46ee006090c421d96794cad80a24a3f9f5bcee5582539319fcb97bf8ea3d11a542f3e9b5bf23767412c1819c2a3cb6eea53997d90944ce9f206e3c0a98e63f8dd68a919ca6fb0f9a2d7fb"}, @ra={0x5, 0x2, 0xfff8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2f, 0x200000000000020f, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @remote, @mcast1, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @fragment={0x8, 0x0, 0xa, 0x1, 0x0, 0xd, 0x64}, @routing={0x16, 0x8, 0x0, 0x4, 0x0, [@local, @remote, @mcast2, @mcast2]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003440)=""/4096) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback={0xff00000000000000}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a2401"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 2m8.91847401s ago: executing program 9 (id=2687): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 2m6.352306938s ago: executing program 49 (id=2660): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r2, {0xeffe068f8514295, 0xfff2}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 1m52.841434827s ago: executing program 50 (id=2687): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) 1m51.38665201s ago: executing program 3 (id=2713): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000"], 0xd0}, 0x480c4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) syz_genetlink_get_family_id$SEG6(0x0, r2) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082055530824649a00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a9cd6338ff27a7be9f7", 0x2c, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 1m51.100621808s ago: executing program 3 (id=2714): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1m50.728389996s ago: executing program 3 (id=2715): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 1m50.287013341s ago: executing program 3 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1m49.989592542s ago: executing program 3 (id=2719): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1m49.061458081s ago: executing program 3 (id=2720): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xfb, 0x0, &(0x7f0000000500)="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", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=@deltaction={0x128, 0x31, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7920}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) kexec_load(0xd0ffbf, 0x0, &(0x7f0000000000), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) shutdown(r0, 0x1) 1m33.873568168s ago: executing program 51 (id=2720): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xfb, 0x0, &(0x7f0000000500)="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", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=@deltaction={0x128, 0x31, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7920}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) kexec_load(0xd0ffbf, 0x0, &(0x7f0000000000), 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) shutdown(r0, 0x1) 1m2.846185259s ago: executing program 2 (id=2833): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f1080006"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 1m2.760291177s ago: executing program 2 (id=2834): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) 1m0.851924773s ago: executing program 2 (id=2840): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") write(r0, &(0x7f0000000000)='8', 0x1) 59.581417094s ago: executing program 2 (id=2846): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x62, &(0x7f00000006c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1000, r1, 0x0, 0x0, 0x8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000600)="d6a56fc86d46e012bec4483b0469b714f251576734e5533eb62c05ed9a0aac59f471c7ede4f6d44659370b76692be3adc35ed0e05e02a9d3944f71304cd02dc7915f3dbd1069f5a49b210865ad8779ea862e39c7c7970400"/99, 0x0, 0x7, 0x0, 0x3}]) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) syz_emit_ethernet(0x362, &(0x7f0000000d80)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x324, 0x2b, 0x0, @private2, @local, {[@routing={0x1, 0x2, 0x2, 0x8, 0x0, [@mcast1]}, @dstopts={0x87, 0x45, '\x00', [@generic={0x1, 0x30, "e000731020c057f02e10531c5b5fa0e8090048e611c957e880b89efb752fc657280b83c5fb2142538512d4d54293f5e7"}, @calipso={0x7, 0x20, {0x0, 0x6, 0xb0, 0x2, [0x3, 0x0, 0x6]}}, @ra={0x5, 0x2, 0xef2b}, @generic={0x0, 0xe2, "b8e2e81f4eee3a7db03574dd7909fa6c4d9441818992c03384c9fb4cefa0d20bf20a6ac06c8cc6d33db6a303d252c0a55d77bfcba3db23f112f31ac1b3ff4e3444bd4ce5d7f1733b1208c42ca25e21865b03250c30fa8795da8435c2318fd1bc6f700cc12f4a74bc0a83dffaa7d7d76e5f0528526a0a2f622a161bebec3d42b6c74693c0d0ef93ac323e4e84dad148431b0ee92204ad59146a7eb059ed22ca317e1a4afc9026755b1b906d33d3a52dfe7ac92652ad35397e7d85400cb732aae4d62837edb2f1150d9362503eb3aed96575a8feee9a60a39ac20e99e4f2dd534e5e91"}, @pad1, @pad1, @pad1, @generic={0xb, 0xd6, "62d5edd5abc8b253afafec1953f1ce7bb38a7bd8387fb58ab52a5d9c463f19d49fa0679549912c0a26c2378554bcdeecb66ed07e083794738f5482cddc835a302f038bd0ce86b3c6d53cf473045b554c1855c64c51536e954b96ec81806f114edf24b1c6ea5833e749f6d3987256df7e81410f761bb7be5fe12a2d479f03036c51acd811845d0defbce11ab46ee006090c421d96794cad80a24a3f9f5bcee5582539319fcb97bf8ea3d11a542f3e9b5bf23767412c1819c2a3cb6eea53997d90944ce9f206e3c0a98e63f8dd68a919ca6fb0f9a2d7fb"}, @ra={0x5, 0x2, 0xfff8}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2f, 0x200000000000020f, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @remote, @mcast1, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @fragment={0x8, 0x0, 0xa, 0x1, 0x0, 0xd, 0x64}, @routing={0x16, 0x8, 0x0, 0x4, 0x0, [@local, @remote, @mcast2, @mcast2]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x1, 0x100, @void}}}}}}}}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003440)=""/4096) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback={0xff00000000000000}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a2401"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 57.122997212s ago: executing program 2 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 56.690073448s ago: executing program 2 (id=2856): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") write(r0, &(0x7f0000000000)='8', 0x1) 41.174306711s ago: executing program 52 (id=2856): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") write(r0, &(0x7f0000000000)='8', 0x1) 25.713492301s ago: executing program 4 (id=2935): listen(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$pppoe(0x18, 0x1, 0x0) 24.227638826s ago: executing program 4 (id=2940): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) 19.457698684s ago: executing program 4 (id=2949): listen(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) socket$pppoe(0x18, 0x1, 0x0) 18.630551584s ago: executing program 4 (id=2951): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x20) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 18.057735603s ago: executing program 4 (id=2952): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / ', 0xb) 17.776734967s ago: executing program 4 (id=2954): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 16.469956773s ago: executing program 6 (id=2956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 14.176686549s ago: executing program 5 (id=2899): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) 14.060219424s ago: executing program 5 (id=2959): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 13.339603096s ago: executing program 7 (id=2963): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 12.26476352s ago: executing program 6 (id=2964): socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) accept4(r0, 0x0, 0x0, 0x800) syz_open_dev$dmmidi(&(0x7f0000000000), 0x2, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x1, 0x8000, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.291535757s ago: executing program 0 (id=2965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0x40045304, &(0x7f0000000000)) tkill(0x0, 0x7) 10.716511277s ago: executing program 0 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0x40045304, &(0x7f0000000000)) tkill(r2, 0x7) 9.454599596s ago: executing program 0 (id=2967): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 8.57586555s ago: executing program 7 (id=2968): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x234, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x507}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ad3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xacd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffdd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x36}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe0000000}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8044}, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x1b, "55d509601023d99d4c1d66e1171a681540fe38537262635495aad2"}, &(0x7f00000000c0)=0x23) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03", 0x1}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000011c0)={r2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r1, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x8, 0x1, 0x6, 0x5, 0x0, 0x24f, 0x94}, 0x9c) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20", @ANYBLOB="111fa28ab9c6ae3fb965f0b0f6cb9dfe92676c440eefb6b1c1a4637c6fe77f8df0c3f66645b76353ea01ba3cf5d01918", @ANYRESOCT=0x0, @ANYBLOB="c2100f5efe67d31d378f64d0fa7529b81de7d80010066c15c9863742def172eb972214ffa9c2f6893b6a393a2c189d6fa199728ff4e45351623cb745dd122e2a0e35561e40fa85b51ff0d555fb2d9123dd43f3b1832ee0828dc613cdf339854f6f94f66cd0230dab020e0311fc3f1627c98c2258c087c9b8a130c69819f2184090ad89dda84c8f3da3cb595465c96505de2aa80a31756188817a5414423eb76971aa5318100d147647d73435063adc3a9b8578ce94f9f100f1e100cbc4a2974235951ce87eea", @ANYBLOB="7199282814db981ed6d504f9ed6ff6866051e905894a52b10ef09471fdbb831d2447d783c5152fa97e6c83b7effd170b99981a3618232292fed51ba3c237f8541e9b101ddfd46044c3a543a05d895ca619acbd1f6a7dcf6f8940fa97229e1e6efa0d7a946a1a343837bf4a7e06eb0b2d6274ed63b707ca316f6e1d60ddf0e403ec94a58706c79da5dfd86aaa414af3ae7d718b727b622e00ede20e6ac9879b5df245d118480632312da9affdd16aa02db87d8d1869d79986f2fce1eeda9b673ca03d740f3bac4b63a1b0fcc5f4f11a12f2b50cb589d735c909f40262"], 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_usb_control_io(r5, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 7.861938657s ago: executing program 5 (id=2969): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) 7.741184832s ago: executing program 5 (id=2970): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) 6.534461972s ago: executing program 5 (id=2971): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) 5.001035293s ago: executing program 0 (id=2972): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.848512766s ago: executing program 7 (id=2973): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 4.847327931s ago: executing program 6 (id=2974): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x3, 0x0, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xee00}}, 0x230) socket$nl_route(0x10, 0x3, 0x0) 3.586939084s ago: executing program 6 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.490900415s ago: executing program 53 (id=2954): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r1, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1.764798082s ago: executing program 0 (id=2977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0x40045304, &(0x7f0000000000)) tkill(r2, 0x7) 897.997778ms ago: executing program 0 (id=2978): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 880.234285ms ago: executing program 7 (id=2979): syz_usb_connect$uac3(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000080c200b1040100102030109029f0003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a00bfbf07000000132403020504020604810200007f008000ff0711240a05", @ANYRESOCT], 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="08040000000000000100000001"], 0x408}, 0x4001804) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1186dd6c00000000082b010000000000000000000e868d1d87f915d67f7b5900000000000000fe8000000000000000000000000000aa000003a166000000"], 0x0) 153.682699ms ago: executing program 5 (id=2980): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 1082.067730][T16557] dump_stack_lvl+0x100/0x190 [ 1082.067775][T16557] dump_header+0xfb/0x606 [ 1082.067804][T16557] oom_kill_process.cold+0xd/0x380 [ 1082.067833][T16557] out_of_memory+0x340/0x14f0 [ 1082.067865][T16557] ? __pfx_out_of_memory+0x10/0x10 [ 1082.067889][T16557] mem_cgroup_out_of_memory+0xc6/0x130 [ 1082.067905][T16557] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1082.067919][T16557] ? find_held_lock+0x2b/0x80 [ 1082.067941][T16557] ? do_raw_spin_unlock+0x145/0x1e0 [ 1082.067958][T16557] ? _raw_spin_unlock+0x28/0x50 [ 1082.067977][T16557] try_charge_memcg+0x783/0xf60 [ 1082.068000][T16557] ? __pfx_try_charge_memcg+0x10/0x10 [ 1082.068019][T16557] ? find_held_lock+0x2b/0x80 [ 1082.068036][T16557] ? rcu_read_unlock+0x17/0x60 [ 1082.068047][T16557] ? rcu_read_unlock+0x17/0x60 [ 1082.068064][T16557] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1082.068084][T16557] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 1082.068110][T16557] ? kasan_unpoison+0x27/0x60 [ 1082.068125][T16557] __kvmalloc_node_noprof+0x750/0x9b0 [ 1082.068143][T16557] ? nf_hook_entries_grow+0x255/0x870 [ 1082.068162][T16557] nf_hook_entries_grow+0x255/0x870 [ 1082.068178][T16557] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 1082.068201][T16557] __nf_register_net_hook+0x112/0x780 [ 1082.068219][T16557] nf_register_net_hook+0xdb/0x170 [ 1082.068236][T16557] nf_register_net_hooks+0x5d/0xd0 [ 1082.068254][T16557] nf_ct_netns_do_get+0x225/0x610 [ 1082.068271][T16557] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1082.068294][T16557] ? find_held_lock+0x2b/0x80 [ 1082.068313][T16557] ? net_generic+0xea/0x2a0 [ 1082.068327][T16557] ? net_generic+0xea/0x2a0 [ 1082.068344][T16557] nf_ct_netns_get+0x3d/0x160 [ 1082.068362][T16557] synproxy_tg6_check+0x1d6/0x330 [ 1082.068378][T16557] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 1082.068391][T16557] xt_check_target+0x117/0x1c0 [ 1082.068411][T16557] find_check_entry.isra.0+0x808/0xa00 [ 1082.068432][T16557] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 1082.068455][T16557] ? kasan_quarantine_put+0x104/0x240 [ 1082.068486][T16557] ? translate_table+0xbd8/0x1770 [ 1082.068500][T16557] ? kfree+0x22b/0x6d0 [ 1082.068517][T16557] ? xt_check_table_hooks+0x206/0x330 [ 1082.068536][T16557] translate_table+0xcb9/0x1770 [ 1082.068559][T16557] ? __pfx_translate_table+0x10/0x10 [ 1082.068580][T16557] do_ip6t_set_ctl+0x689/0xd00 [ 1082.068596][T16557] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1082.068613][T16557] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1082.068632][T16557] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1082.068647][T16557] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1082.068663][T16557] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1082.068693][T16557] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1082.068721][T16557] nf_setsockopt+0x8d/0xf0 [ 1082.068739][T16557] ipv6_setsockopt+0x135/0x170 [ 1082.068759][T16557] rawv6_setsockopt+0xee/0x5a0 [ 1082.068793][T16557] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1082.068808][T16557] ? selinux_socket_setsockopt+0x6a/0x80 [ 1082.068821][T16557] ? sock_common_setsockopt+0x2e/0xf0 [ 1082.068840][T16557] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1082.068860][T16557] do_sock_setsockopt+0xf3/0x1d0 [ 1082.068885][T16557] __sys_setsockopt+0x195/0x220 [ 1082.068917][T16557] __x64_sys_setsockopt+0xbd/0x160 [ 1082.068944][T16557] ? do_syscall_64+0xae/0x790 [ 1082.068965][T16557] ? lockdep_hardirqs_on+0x7d/0x110 [ 1082.068984][T16557] do_syscall_64+0x123/0x790 [ 1082.068998][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.069011][T16557] RIP: 0033:0x7f42e9d9e159 [ 1082.069024][T16557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.069037][T16557] RSP: 002b:00007f42eabf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1082.069051][T16557] RAX: ffffffffffffffda RBX: 00007f42ea025fa0 RCX: 00007f42e9d9e159 [ 1082.069060][T16557] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 1082.069067][T16557] RBP: 00007f42e9e3506b R08: 00000000000003a0 R09: 0000000000000000 [ 1082.069078][T16557] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1082.069086][T16557] R13: 00007f42ea026038 R14: 00007f42ea025fa0 R15: 00007ffc798a96f8 [ 1082.069104][T16557] [ 1082.075874][T16557] memory: usage 8kB, limit 8kB, failcnt 248 [ 1082.075895][T16557] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1082.075910][T16557] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1082.075924][T16557] Memory cgroup stats for /syz2/test: [ 1082.076153][T16557] cache 0 [ 1082.076162][T16557] rss 0 [ 1082.076170][T16557] rss_huge 0 [ 1082.076179][T16557] shmem 0 [ 1082.076187][T16557] mapped_file 0 [ 1082.076195][T16557] dirty 0 [ 1082.076203][T16557] writeback 0 [ 1082.076211][T16557] workingset_refault_anon 0 [ 1082.076220][T16557] workingset_refault_file 0 [ 1082.076230][T16557] swap 0 [ 1082.076238][T16557] swapcached 0 [ 1082.076252][T16557] pgpgin 2 [ 1082.076260][T16557] pgpgout 2 [ 1082.076268][T16557] pgfault 67 [ 1082.076277][T16557] pgmajfault 0 [ 1082.076286][T16557] inactive_anon 0 [ 1082.076294][T16557] active_anon 0 [ 1082.076309][T16557] inactive_file 0 [ 1082.076319][T16557] active_file 0 [ 1082.076327][T16557] unevictable 0 [ 1082.076336][T16557] hierarchical_memory_limit 8192 [ 1082.076346][T16557] hierarchical_memsw_limit 9223372036854771712 [ 1082.076356][T16557] total_cache 0 [ 1082.076365][T16557] total_rss 0 [ 1082.076375][T16557] total_rss_huge 0 [ 1082.076384][T16557] total_shmem 0 [ 1082.076393][T16557] total_mapped_file 0 [ 1082.076402][T16557] total_dirty 0 [ 1082.076412][T16557] total_writeback 0 [ 1082.076421][T16557] total_workingset_refault_anon 0 [ 1082.076431][T16557] total_workingset_refault_file 0 [ 1082.076441][T16557] total_swap 0 [ 1082.076450][T16557] total_swapcached 0 [ 1082.076459][T16557] total_pgpgin 2 [ 1082.076468][T16557] total_pgpgout 2 [ 1082.076476][T16557] total_pgfault 67 [ 1082.076485][T16557] total_pgmajfault 0 [ 1082.076493][T16557] total_inactive_anon 0 [ 1082.076502][T16557] total_active_anon 0 [ 1082.076511][T16557] total_inactive_file 0 [ 1082.076519][T16557] total_active_file 0 [ 1082.076528][T16557] total_unevictable 0 [ 1082.076537][T16557] anon_cost 0 [ 1082.076545][T16557] file_cost 0 [ 1082.076553][T16557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2724,pid=16556,uid=0 [ 1082.081524][T16557] Memory cgroup out of memory: Killed process 16556 (syz.2.2724) total-vm:104300kB, anon-rss:1424kB, file-rss:22964kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1082.518407][ C1] net_ratelimit: 225 callbacks suppressed [ 1082.903464][T16561] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1083.456616][ T31] audit: type=1400 audit(1790444045.790:2177): avc: denied { create } for pid=16567 comm="syz.2.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1083.456855][ T31] audit: type=1400 audit(1790444045.790:2178): avc: denied { setopt } for pid=16567 comm="syz.2.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1083.457625][ T31] audit: type=1400 audit(1790444045.790:2179): avc: denied { connect } for pid=16567 comm="syz.2.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1083.711801][ T5604] Bluetooth: hci2: command tx timeout [ 1084.466470][T16575] FAULT_INJECTION: forcing a failure. [ 1084.466470][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.466500][T16575] CPU: 0 UID: 0 PID: 16575 Comm: syz.2.2729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.466535][T16575] Tainted: [L]=SOFTLOCKUP [ 1084.466544][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1084.466559][T16575] Call Trace: [ 1084.466566][T16575] [ 1084.466576][T16575] dump_stack_lvl+0x100/0x190 [ 1084.466612][T16575] should_fail_ex.cold+0x5/0xa [ 1084.466646][T16575] should_failslab+0xc2/0x120 [ 1084.466677][T16575] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1084.466703][T16575] ? __pfx_acct_collect+0x10/0x10 [ 1084.466725][T16575] ? taskstats_exit+0x6d3/0xca0 [ 1084.466757][T16575] taskstats_exit+0x6d3/0xca0 [ 1084.466784][T16575] ? __pfx_acct_update_integrals+0x10/0x10 [ 1084.466813][T16575] ? __pfx_taskstats_exit+0x10/0x10 [ 1084.466838][T16575] ? _raw_spin_unlock_irq+0x23/0x50 [ 1084.466870][T16575] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1084.466899][T16575] ? sched_mm_cid_exit+0x234/0x490 [ 1084.466926][T16575] do_exit+0x65c/0x2ae0 [ 1084.466961][T16575] ? __pfx_do_exit+0x10/0x10 [ 1084.466991][T16575] ? do_raw_spin_lock+0x128/0x260 [ 1084.467021][T16575] ? find_held_lock+0x2b/0x80 [ 1084.467052][T16575] ? get_signal+0x7e0/0x21e0 [ 1084.467089][T16575] do_group_exit+0xd5/0x2a0 [ 1084.467124][T16575] get_signal+0x1ec7/0x21e0 [ 1084.467162][T16575] ? __pfx_get_signal+0x10/0x10 [ 1084.467191][T16575] ? do_futex+0x190/0x440 [ 1084.467226][T16575] arch_do_signal_or_restart+0x91/0x7e0 [ 1084.467261][T16575] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1084.467312][T16575] exit_to_user_mode_loop+0x139/0x700 [ 1084.467341][T16575] ? rcu_is_watching+0x13/0xc0 [ 1084.467374][T16575] do_syscall_64+0x661/0x790 [ 1084.467400][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.467424][T16575] RIP: 0033:0x7f42e9d9e159 [ 1084.467444][T16575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.467467][T16575] RSP: 002b:00007f42eabf80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1084.467489][T16575] RAX: fffffffffffffe00 RBX: 00007f42ea025fa8 RCX: 00007f42e9d9e159 [ 1084.467505][T16575] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42ea025fa8 [ 1084.467520][T16575] RBP: 00007f42ea025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.467535][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.467550][T16575] R13: 00007f42ea026038 R14: 00007ffc798a9610 R15: 00007ffc798a96f8 [ 1084.467582][T16575] [ 1085.124539][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.124688][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.124875][T16512] bridge_slave_0: entered allmulticast mode [ 1085.130818][T16512] bridge_slave_0: entered promiscuous mode [ 1085.172528][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.172631][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.172823][T16512] bridge_slave_1: entered allmulticast mode [ 1085.176265][T16512] bridge_slave_1: entered promiscuous mode [ 1085.211508][T15051] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1085.363895][T15051] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1085.364839][T15051] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1085.364856][T15051] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1085.364871][T15051] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1085.364907][T15051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.368648][T16583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1085.368692][T16583] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1085.370196][T15051] pl2303 3-1:1.0: pl2303 converter detected [ 1085.418259][T15051] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1085.454254][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.457388][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.624574][T15051] usb 3-1: USB disconnect, device number 82 [ 1085.639991][T15051] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1085.642790][T15051] pl2303 3-1:1.0: device disconnected [ 1085.700249][T16512] team0: Port device team_slave_0 added [ 1085.703350][T16512] team0: Port device team_slave_1 added [ 1085.793981][ T5604] Bluetooth: hci2: command tx timeout [ 1085.815691][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.815701][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.815721][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.820456][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.820466][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.820487][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.007366][ T43] hsr_slave_0: left promiscuous mode [ 1086.011913][ T43] hsr_slave_1: left promiscuous mode [ 1086.012821][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.012840][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.039660][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.039678][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.067688][ T43] hsr_slave_0: left promiscuous mode [ 1086.068458][ T43] hsr_slave_1: left promiscuous mode [ 1086.069335][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.069354][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.070210][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.070226][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.134729][ T43] hsr_slave_0: left promiscuous mode [ 1086.135275][ T43] hsr_slave_1: left promiscuous mode [ 1086.135802][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.135814][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.136919][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.136929][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.182996][ T43] hsr_slave_0: left promiscuous mode [ 1086.184984][ T43] hsr_slave_1: left promiscuous mode [ 1086.185792][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.185804][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.188019][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.188035][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.246962][ T43] hsr_slave_0: left promiscuous mode [ 1086.250786][ T43] hsr_slave_1: left promiscuous mode [ 1086.272396][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.272408][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.277834][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.277848][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.328861][ T43] hsr_slave_0: left promiscuous mode [ 1086.333045][ T43] hsr_slave_1: left promiscuous mode [ 1086.333917][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.333935][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.362023][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.362040][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.388190][ T43] hsr_slave_0: left promiscuous mode [ 1086.393973][ T43] hsr_slave_1: left promiscuous mode [ 1086.394896][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.394913][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.401309][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.401325][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.465305][ T43] hsr_slave_0: left promiscuous mode [ 1086.466129][ T43] hsr_slave_1: left promiscuous mode [ 1086.467049][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.467067][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.467990][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.468006][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.516314][ T43] hsr_slave_0: left promiscuous mode [ 1086.518604][ T43] hsr_slave_1: left promiscuous mode [ 1086.519545][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.519562][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.547084][ T43] hsr_slave_0: left promiscuous mode [ 1086.547863][ T43] hsr_slave_1: left promiscuous mode [ 1086.548810][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.548828][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.549765][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.549780][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.598862][ T43] hsr_slave_0: left promiscuous mode [ 1086.601236][ T43] hsr_slave_1: left promiscuous mode [ 1086.609141][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.609158][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.630723][ T43] hsr_slave_0: left promiscuous mode [ 1086.636656][ T43] hsr_slave_1: left promiscuous mode [ 1086.637671][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.721447][T13736] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1086.856653][ T43] veth1_macvtap: left promiscuous mode [ 1086.856687][ T43] veth0_macvtap: left promiscuous mode [ 1086.856750][ T43] veth1_vlan: left promiscuous mode [ 1086.856851][ T43] veth0_vlan: left promiscuous mode [ 1086.859301][ T43] veth1_macvtap: left promiscuous mode [ 1086.859320][ T43] veth0_macvtap: left promiscuous mode [ 1086.859369][ T43] veth1_vlan: left promiscuous mode [ 1086.859415][ T43] veth0_vlan: left promiscuous mode [ 1086.860297][ T43] veth1_macvtap: left promiscuous mode [ 1086.860315][ T43] veth0_macvtap: left promiscuous mode [ 1086.860362][ T43] veth1_vlan: left promiscuous mode [ 1086.860401][ T43] veth0_vlan: left promiscuous mode [ 1086.873086][T13736] usb 3-1: Using ep0 maxpacket: 32 [ 1086.878606][ T43] veth1_macvtap: left promiscuous mode [ 1086.878656][ T43] veth0_macvtap: left promiscuous mode [ 1086.878783][ T43] veth1_vlan: left promiscuous mode [ 1086.878842][ T43] veth0_vlan: left promiscuous mode [ 1086.883962][T13736] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1086.890924][ T43] veth1_macvtap: left promiscuous mode [ 1086.895365][ T43] veth0_macvtap: left promiscuous mode [ 1086.895467][ T43] veth1_vlan: left promiscuous mode [ 1086.895572][ T43] veth0_vlan: left promiscuous mode [ 1086.901693][T13736] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.901737][T13736] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1086.901765][T13736] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.901794][T13736] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1086.916378][ T43] veth1_macvtap: left promiscuous mode [ 1086.916417][ T43] veth0_macvtap: left promiscuous mode [ 1086.916501][ T43] veth1_vlan: left promiscuous mode [ 1086.916560][ T43] veth0_vlan: left promiscuous mode [ 1086.937028][ T43] veth1_macvtap: left promiscuous mode [ 1086.937060][ T43] veth0_macvtap: left promiscuous mode [ 1086.937146][ T43] veth1_vlan: left promiscuous mode [ 1086.937206][ T43] veth0_vlan: left promiscuous mode [ 1086.958537][ T43] veth1_macvtap: left promiscuous mode [ 1086.958569][ T43] veth0_macvtap: left promiscuous mode [ 1086.958749][ T43] veth1_vlan: left promiscuous mode [ 1086.958810][ T43] veth0_vlan: left promiscuous mode [ 1086.983946][ T43] veth1_macvtap: left promiscuous mode [ 1086.983978][ T43] veth0_macvtap: left promiscuous mode [ 1086.984064][ T43] veth1_vlan: left promiscuous mode [ 1086.984123][ T43] veth0_vlan: left promiscuous mode [ 1087.005194][ T43] veth1_macvtap: left promiscuous mode [ 1087.005226][ T43] veth0_macvtap: left promiscuous mode [ 1087.005309][ T43] veth1_vlan: left promiscuous mode [ 1087.005368][ T43] veth0_vlan: left promiscuous mode [ 1087.046734][ T43] veth1_macvtap: left promiscuous mode [ 1087.046785][ T43] veth0_macvtap: left promiscuous mode [ 1087.046875][ T43] veth1_vlan: left promiscuous mode [ 1087.046944][ T43] veth0_vlan: left promiscuous mode [ 1087.150396][T13736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.150417][T13736] usb 3-1: Product: syz [ 1087.150433][T13736] usb 3-1: Manufacturer: syz [ 1087.150450][T13736] usb 3-1: SerialNumber: syz [ 1087.208451][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1087.210715][T13736] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input109 [ 1087.441821][T13736] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1087.441845][T13736] (id 0x00) [ 1087.533688][T13736] rc_core: IR keymap rc-imon-pad not found [ 1087.533702][T13736] Registered IR keymap rc-empty [ 1087.533809][T13736] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1087.533826][T13736] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1087.551172][ C0] net_ratelimit: 276 callbacks suppressed [ 1087.633749][T13736] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1087.652891][T13736] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input110 [ 1087.675463][T13736] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:83> initialized [ 1089.058456][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1089.090681][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1089.886642][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1089.918770][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1090.477549][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1090.492528][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1090.733684][ T5798] usb 3-1: USB disconnect, device number 83 [ 1091.231701][ T5798] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1091.329220][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1091.364229][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1091.392149][ T5798] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1091.393239][ T5798] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1091.393268][ T5798] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1091.393296][ T5798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1091.393357][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.397867][T16598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1091.397906][T16598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1091.469399][ T5798] pl2303 3-1:1.0: pl2303 converter detected [ 1091.482700][ T5798] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1091.740297][ T31] audit: type=1400 audit(1790444054.070:2180): avc: denied { append } for pid=16597 comm="syz.2.2735" name="ttyUSB0" dev="devtmpfs" ino=7430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1091.861429][T16598] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1091.861856][T16598] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1091.862346][T16598] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1091.862753][T16598] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1091.866564][T16598] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1092.405158][T16597] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1092.406392][T16597] pl2303 ttyUSB0: error sending break = -32 [ 1092.409068][ T5727] usb 3-1: USB disconnect, device number 84 [ 1092.482976][ T5727] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1092.483980][ T5727] pl2303 3-1:1.0: device disconnected [ 1092.550752][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1092.569001][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1093.151023][ C0] net_ratelimit: 87 callbacks suppressed [ 1093.367627][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1093.397149][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1094.178081][T16602] FAULT_INJECTION: forcing a failure. [ 1094.178081][T16602] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.178113][T16602] CPU: 1 UID: 0 PID: 16602 Comm: syz.2.2737 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.178146][T16602] Tainted: [L]=SOFTLOCKUP [ 1094.178155][T16602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1094.178170][T16602] Call Trace: [ 1094.178179][T16602] [ 1094.178189][T16602] dump_stack_lvl+0x100/0x190 [ 1094.178230][T16602] should_fail_ex.cold+0x5/0xa [ 1094.178269][T16602] ? prepare_alloc_pages+0x16d/0x5b0 [ 1094.178303][T16602] should_fail_alloc_page+0xeb/0x140 [ 1094.178337][T16602] prepare_alloc_pages+0x1f0/0x5b0 [ 1094.178374][T16602] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1094.178405][T16602] ? lock_acquire+0x1d1/0x380 [ 1094.178431][T16602] ? page_table_check_set+0x11d/0x580 [ 1094.178464][T16602] ? find_held_lock+0x2b/0x80 [ 1094.178497][T16602] ? page_table_check_set+0x30f/0x580 [ 1094.178528][T16602] ? page_table_check_set+0x30f/0x580 [ 1094.178566][T16602] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1094.178592][T16602] ? page_table_check_set+0x31e/0x580 [ 1094.178628][T16602] ? __page_table_check_ptes_set+0x1d5/0x530 [ 1094.178665][T16602] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1094.178701][T16602] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1094.178737][T16602] ? xas_find+0x32c/0x8e0 [ 1094.178767][T16602] ? find_held_lock+0x2b/0x80 [ 1094.178799][T16602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.178829][T16602] ? policy_nodemask+0xed/0x4f0 [ 1094.178865][T16602] alloc_pages_mpol+0x201/0x550 [ 1094.178899][T16602] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1094.178941][T16602] folio_alloc_mpol_noprof+0x36/0x260 [ 1094.178980][T16602] vma_alloc_folio_noprof+0xed/0x1d0 [ 1094.179017][T16602] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1094.179063][T16602] do_anonymous_page+0xac9/0x2050 [ 1094.179107][T16602] ? __pfx_do_anonymous_page+0x10/0x10 [ 1094.179136][T16602] ? rcu_read_unlock+0x2d/0xb0 [ 1094.179168][T16602] ? rcu_read_unlock+0x2d/0xb0 [ 1094.179200][T16602] ? __pte_offset_map+0x179/0x310 [ 1094.179246][T16602] __handle_mm_fault+0x1ff3/0x2f60 [ 1094.179286][T16602] ? lock_vma_under_rcu+0x11d/0x590 [ 1094.179320][T16602] ? __pfx___handle_mm_fault+0x10/0x10 [ 1094.179360][T16602] ? lock_vma_under_rcu+0x17c/0x590 [ 1094.179413][T16602] handle_mm_fault+0x363/0xa20 [ 1094.179454][T16602] do_user_addr_fault+0x59c/0x12f0 [ 1094.179493][T16602] exc_page_fault+0x6f/0xd0 [ 1094.179528][T16602] asm_exc_page_fault+0x26/0x30 [ 1094.179551][T16602] RIP: 0033:0x7f42e9c5f6cb [ 1094.179570][T16602] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1094.179593][T16602] RSP: 002b:00007f42eabf6fa0 EFLAGS: 00010206 [ 1094.179612][T16602] RAX: 0000000000000000 RBX: 00007f42ea025fa0 RCX: 0000000000000000 [ 1094.179628][T16602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1094.179642][T16602] RBP: 00007f42e9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1094.179656][T16602] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1094.179670][T16602] R13: 00007f42ea026038 R14: 00007f42ea025fa0 R15: 00007ffc798a96f8 [ 1094.179704][T16602] [ 1094.179801][T16602] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1094.375253][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1094.424071][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1094.755624][T16608] syz.2.2740 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1094.755722][T16608] CPU: 1 UID: 0 PID: 16608 Comm: syz.2.2740 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.755757][T16608] Tainted: [L]=SOFTLOCKUP [ 1094.755767][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1094.755782][T16608] Call Trace: [ 1094.755791][T16608] [ 1094.755801][T16608] dump_stack_lvl+0x100/0x190 [ 1094.755843][T16608] dump_header+0xfb/0x606 [ 1094.755872][T16608] oom_kill_process.cold+0xd/0x380 [ 1094.755902][T16608] out_of_memory+0x340/0x14f0 [ 1094.755940][T16608] ? __pfx_out_of_memory+0x10/0x10 [ 1094.755980][T16608] mem_cgroup_out_of_memory+0xc6/0x130 [ 1094.756010][T16608] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1094.756037][T16608] ? find_held_lock+0x2b/0x80 [ 1094.756075][T16608] ? do_raw_spin_unlock+0x145/0x1e0 [ 1094.756106][T16608] ? _raw_spin_unlock+0x28/0x50 [ 1094.756142][T16608] try_charge_memcg+0x783/0xf60 [ 1094.756184][T16608] ? __pfx_try_charge_memcg+0x10/0x10 [ 1094.756219][T16608] ? find_held_lock+0x2b/0x80 [ 1094.756250][T16608] ? rcu_read_unlock+0x17/0x60 [ 1094.756270][T16608] ? rcu_read_unlock+0x17/0x60 [ 1094.756302][T16608] obj_cgroup_charge_pages+0x2b/0x1f0 [ 1094.756341][T16608] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 1094.756388][T16608] ? kasan_save_track+0x14/0x30 [ 1094.756420][T16608] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 1094.756450][T16608] ? sock_alloc_inode+0x26/0x2c0 [ 1094.756487][T16608] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1094.756524][T16608] sock_alloc_inode+0x26/0x2c0 [ 1094.756571][T16608] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1094.756607][T16608] alloc_inode+0x68/0x250 [ 1094.756633][T16608] sock_alloc+0x44/0x280 [ 1094.756663][T16608] ? security_socket_create+0x7f/0x250 [ 1094.756690][T16608] __sock_create+0xc2/0x860 [ 1094.756720][T16608] __sys_socket+0x14d/0x260 [ 1094.756746][T16608] ? __pfx___sys_socket+0x10/0x10 [ 1094.756781][T16608] __x64_sys_socket+0x72/0xb0 [ 1094.756805][T16608] ? lockdep_hardirqs_on+0x7d/0x110 [ 1094.756841][T16608] do_syscall_64+0x123/0x790 [ 1094.756866][T16608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.756891][T16608] RIP: 0033:0x7f42e9d9e159 [ 1094.756911][T16608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.756935][T16608] RSP: 002b:00007f42eabf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1094.756959][T16608] RAX: ffffffffffffffda RBX: 00007f42ea025fa0 RCX: 00007f42e9d9e159 [ 1094.756976][T16608] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1094.756991][T16608] RBP: 00007f42e9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1094.757006][T16608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.757024][T16608] R13: 00007f42ea026038 R14: 00007f42ea025fa0 R15: 00007ffc798a96f8 [ 1094.757058][T16608] [ 1094.757681][T16608] memory: usage 8kB, limit 8kB, failcnt 286 [ 1094.757697][T16608] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1094.757712][T16608] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1094.757727][T16608] Memory cgroup stats for /syz2/test: [ 1094.757863][T16608] cache 0 [ 1094.757873][T16608] rss 0 [ 1094.757881][T16608] rss_huge 0 [ 1094.757889][T16608] shmem 0 [ 1094.757899][T16608] mapped_file 0 [ 1094.757908][T16608] dirty 0 [ 1094.757916][T16608] writeback 0 [ 1094.757925][T16608] workingset_refault_anon 0 [ 1094.757935][T16608] workingset_refault_file 0 [ 1094.757945][T16608] swap 0 [ 1094.757954][T16608] swapcached 0 [ 1094.757961][T16608] pgpgin 2 [ 1094.757969][T16608] pgpgout 2 [ 1094.757977][T16608] pgfault 87 [ 1094.757986][T16608] pgmajfault 0 [ 1094.757994][T16608] inactive_anon 0 [ 1094.758003][T16608] active_anon 0 [ 1094.758011][T16608] inactive_file 0 [ 1094.758020][T16608] active_file 0 [ 1094.758029][T16608] unevictable 0 [ 1094.758037][T16608] hierarchical_memory_limit 8192 [ 1094.758047][T16608] hierarchical_memsw_limit 9223372036854771712 [ 1094.758058][T16608] total_cache 0 [ 1094.758066][T16608] total_rss 0 [ 1094.758074][T16608] total_rss_huge 0 [ 1094.758083][T16608] total_shmem 0 [ 1094.758091][T16608] total_mapped_file 0 [ 1094.758100][T16608] total_dirty 0 [ 1094.758109][T16608] total_writeback 0 [ 1094.758118][T16608] total_workingset_refault_anon 0 [ 1094.758128][T16608] total_workingset_refault_file 0 [ 1094.758138][T16608] total_swap 0 [ 1094.758146][T16608] total_swapcached 0 [ 1094.758155][T16608] total_pgpgin 2 [ 1094.758163][T16608] total_pgpgout 2 [ 1094.758173][T16608] total_pgfault 87 [ 1094.758181][T16608] total_pgmajfault 0 [ 1094.758190][T16608] total_inactive_anon 0 [ 1094.758199][T16608] total_active_anon 0 [ 1094.758208][T16608] total_inactive_file 0 [ 1094.758217][T16608] total_active_file 0 [ 1094.758227][T16608] total_unevictable 0 [ 1094.758235][T16608] anon_cost 0 [ 1094.758244][T16608] file_cost 0 [ 1094.758253][T16608] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.2740,pid=16607,uid=0 [ 1094.760235][T16608] Memory cgroup out of memory: Killed process 16607 (syz.2.2740) total-vm:104304kB, anon-rss:1424kB, file-rss:22956kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1095.690000][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1095.724633][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1095.965067][T10760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1095.969931][T10760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1095.975130][T10760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.004031][T10760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.005340][T10760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1096.637468][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1096.670918][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1097.507602][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1097.543805][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1098.111287][T10760] Bluetooth: hci3: command tx timeout [ 1098.271012][ C0] net_ratelimit: 99 callbacks suppressed [ 1098.300711][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1098.340207][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1099.560867][T16512] hsr_slave_0: entered promiscuous mode [ 1099.573107][T16512] hsr_slave_1: entered promiscuous mode [ 1100.133193][T16387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1100.188403][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1100.193312][T10760] Bluetooth: hci3: command tx timeout [ 1100.198331][T16387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1100.243838][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1100.370515][T16387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1100.428648][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.429345][T16387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1100.495760][T16387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.023788][ T31] audit: type=1400 audit(1790444063.360:2181): avc: denied { setopt } for pid=16647 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1101.025150][ T31] audit: type=1400 audit(1790444063.360:2182): avc: denied { listen } for pid=16647 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1101.027710][ T31] audit: type=1400 audit(1790444063.360:2183): avc: denied { accept } for pid=16647 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1101.595922][T16417] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1101.621418][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1101.646296][T16417] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1101.679919][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.680595][T16417] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1101.723180][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.724969][T16417] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1101.750640][T16417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1102.271388][T10760] Bluetooth: hci3: command tx timeout [ 1102.573465][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.691182][T15092] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1102.716558][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.747631][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.747682][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.861628][T15092] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1102.871965][T15092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.872032][T15092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.915270][T15092] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1102.915459][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1102.915537][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1102.916927][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1102.917004][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1102.963182][T15092] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1102.965164][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1102.965256][T15092] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1102.994364][T15092] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1103.037706][T15125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.037813][T15125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.320660][T15092] usb 3-1: USB disconnect, device number 85 [ 1103.336975][T15092] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1103.353631][T15092] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1103.354638][T15092] keyspan 3-1:1.0: device disconnected [ 1103.580635][T16621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.580782][T16621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.580931][T16621] bridge_slave_0: entered allmulticast mode [ 1103.603523][T16621] bridge_slave_0: entered promiscuous mode [ 1103.611752][T16621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.611826][T16621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.611952][T16621] bridge_slave_1: entered allmulticast mode [ 1103.613370][T16621] bridge_slave_1: entered promiscuous mode [ 1103.633959][ C1] net_ratelimit: 123 callbacks suppressed [ 1103.660164][T16417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.824712][T16512] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1103.853396][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1103.854911][T16417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.859694][T16512] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1103.900916][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.916304][T16621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.944933][T16512] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1103.962412][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.964169][T15125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.964251][T15125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.967981][T16621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.006589][T16512] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1104.038311][T16512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.274577][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.274634][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.297302][T16621] team0: Port device team_slave_0 added [ 1104.302425][T16621] team0: Port device team_slave_1 added [ 1104.353978][T10760] Bluetooth: hci3: command tx timeout [ 1104.466470][T16672] mac80211_hwsim hwsim42 wlan0: left allmulticast mode [ 1104.479183][T16621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.479193][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.479216][T16621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.548236][T16621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.548247][T16621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.548269][T16621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.845208][T16621] hsr_slave_0: entered promiscuous mode [ 1104.846282][T16621] hsr_slave_1: entered promiscuous mode [ 1104.846986][T16621] debugfs: 'hsr0' already exists in 'hsr' [ 1104.847002][T16621] Cannot create hsr debugfs directory [ 1105.639014][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 1105.731107][T16698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.840413][T16700] bond1: (slave ip6erspan0): making interface the new active one [ 1105.849424][T16700] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1105.921871][T16387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.928295][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.028162][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.078882][T16069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.078982][T16069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.085099][T16069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.085189][T16069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.470090][T16387] veth0_vlan: entered promiscuous mode [ 1106.640282][T16387] veth1_vlan: entered promiscuous mode [ 1106.751862][T16387] veth0_macvtap: entered promiscuous mode [ 1106.812789][T16387] veth1_macvtap: entered promiscuous mode [ 1106.940215][T16387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.004371][T16387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.070628][T16417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.093535][T16069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.094269][T16069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.094333][T16069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.166660][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.362529][T16724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1107.538391][T16729] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1107.764530][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.764548][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.811624][ T43] IPVS: stop unused estimator thread 0... [ 1107.819032][ T43] IPVS: stop unused estimator thread 0... [ 1107.956591][ T43] IPVS: stop unused estimator thread 0... [ 1107.958692][ T43] IPVS: stop unused estimator thread 0... [ 1107.961205][ T43] IPVS: stop unused estimator thread 0... [ 1108.076807][T16735] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1108.122909][T16621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1108.151997][T16621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.152738][T16621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1108.259109][T16621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.270368][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.270385][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.295920][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.313908][T16621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1108.371955][T16621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.372654][T16621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1108.420175][T16621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1108.485515][T16746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1108.588184][T16417] veth0_vlan: entered promiscuous mode [ 1108.629770][T16417] veth1_vlan: entered promiscuous mode [ 1108.693551][T16756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1108.766005][T16621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.795744][T16417] veth0_macvtap: entered promiscuous mode [ 1108.806403][T16746] md/raid:md0: not clean -- starting background reconstruction [ 1108.831021][ C1] net_ratelimit: 225 callbacks suppressed [ 1108.850560][T16621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.851593][T16746] md/raid:md0: device ram1 operational as raid disk 1 [ 1108.863118][T16417] veth1_macvtap: entered promiscuous mode [ 1108.898249][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.898346][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.954566][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.954653][T16188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.958844][T16746] md/raid:md0: starting dirty degraded array with PPL. [ 1108.958856][T16746] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 1108.959019][T16746] sysfs: cannot create duplicate filename '/devices/virtual/block/md0/md/stripe_cache_size' [ 1108.959042][T16746] CPU: 0 UID: 0 PID: 16746 Comm: syz.2.2764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.959075][T16746] Tainted: [L]=SOFTLOCKUP [ 1108.959083][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1108.959098][T16746] Call Trace: [ 1108.959106][T16746] [ 1108.959116][T16746] dump_stack_lvl+0x100/0x190 [ 1108.959157][T16746] sysfs_warn_dup.cold+0x1c/0x28 [ 1108.959193][T16746] sysfs_add_file_mode_ns+0x33f/0x3c0 [ 1108.959231][T16746] internal_create_group+0x593/0xfb0 [ 1108.959272][T16746] ? __pfx_internal_create_group+0x10/0x10 [ 1108.959310][T16746] ? print_raid5_conf+0x14c/0x440 [ 1108.959347][T16746] raid5_run.cold+0x9a3/0xd51 [ 1108.959399][T16746] md_run+0xc2f/0x2510 [ 1108.959431][T16746] ? __pfx_md_run+0x10/0x10 [ 1108.959454][T16746] ? set_disk_ro+0x1b7/0x210 [ 1108.959486][T16746] ? __pfx_set_disk_ro+0x10/0x10 [ 1108.959524][T16746] do_md_run+0x36/0x660 [ 1108.959549][T16746] array_state_store+0x9c5/0xcf0 [ 1108.959581][T16746] md_attr_store+0x1c5/0x330 [ 1108.959612][T16746] ? __pfx_md_attr_store+0x10/0x10 [ 1108.959652][T16746] sysfs_kf_write+0xf2/0x150 [ 1108.959684][T16746] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1108.959708][T16746] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1108.959742][T16746] vfs_write+0x6af/0x1050 [ 1108.959769][T16746] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1108.959796][T16746] ? __fget_files+0x34/0x3d0 [ 1108.959824][T16746] ? __pfx_vfs_write+0x10/0x10 [ 1108.959845][T16746] ? find_held_lock+0x2b/0x80 [ 1108.959897][T16746] ksys_write+0x12a/0x250 [ 1108.959922][T16746] ? __pfx_ksys_write+0x10/0x10 [ 1108.959956][T16746] do_syscall_64+0x123/0x790 [ 1108.959980][T16746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.960006][T16746] RIP: 0033:0x7f42e9d9e159 [ 1108.960025][T16746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.960049][T16746] RSP: 002b:00007f42eabf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1108.960072][T16746] RAX: ffffffffffffffda RBX: 00007f42ea025fa0 RCX: 00007f42e9d9e159 [ 1108.960088][T16746] RDX: 0000000000000007 RSI: 0000200000000a40 RDI: 000000000000000b [ 1108.960102][T16746] RBP: 00007f42e9e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1108.960115][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.960129][T16746] R13: 00007f42ea026038 R14: 00007f42ea025fa0 R15: 00007ffc798a96f8 [ 1108.960162][T16746] [ 1108.965614][T16746] raid5: failed to create sysfs attributes for md0 [ 1109.007168][T16746] md/raid:md0: PPL space too small on ram1 [ 1109.278208][T16417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.327095][T16417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.619913][T16746] md/raid:md0: failed to run raid set. [ 1109.619926][T16746] md: pers->run() failed ... [ 1109.683248][T16512] veth0_vlan: entered promiscuous mode [ 1109.715103][T16188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.715117][T16188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.765733][T16512] veth1_vlan: entered promiscuous mode [ 1109.912673][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.912688][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.918442][T16512] veth0_macvtap: entered promiscuous mode [ 1109.922994][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.933656][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.953410][ T1013] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.966815][ T6582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.983505][T16512] veth1_macvtap: entered promiscuous mode [ 1110.018833][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.034053][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.142537][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.142592][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.142629][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.192241][T16069] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.325050][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.325064][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.464314][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.464357][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.498422][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.498451][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.780322][T16791] input: syz1 as /devices/virtual/input/input111 [ 1111.551765][ T985] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 1111.555190][T16621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.721878][ T985] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1111.724160][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.724218][ T985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.730089][ T985] usb 8-1: config 0 descriptor?? [ 1111.796815][ T985] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1111.943581][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.945822][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.947845][ T985] usb 8-1: USB disconnect, device number 17 [ 1112.101130][T15051] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1112.153082][T16621] veth0_vlan: entered promiscuous mode [ 1112.168089][T16621] veth1_vlan: entered promiscuous mode [ 1112.209176][T16621] veth0_macvtap: entered promiscuous mode [ 1112.222270][T16621] veth1_macvtap: entered promiscuous mode [ 1112.243157][T16621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.251043][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1112.267481][T15051] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1112.268794][T15051] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1112.268823][T15051] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1112.268850][T15051] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1112.268921][T15051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.269105][T16621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.277804][T16805] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1112.277871][T16805] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1112.286826][T15051] pl2303 3-1:1.0: pl2303 converter detected [ 1112.295915][T15051] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1112.381124][T16069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.381164][T16069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.381199][T16069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.381233][T16069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.401070][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1112.402530][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1112.403562][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.403602][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1112.403629][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.403657][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1112.405763][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.405784][ T10] usb 7-1: Product: syz [ 1112.405801][ T10] usb 7-1: Manufacturer: syz [ 1112.405817][ T10] usb 7-1: SerialNumber: syz [ 1112.429664][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1112.449758][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input112 [ 1112.539602][T15092] usb 3-1: USB disconnect, device number 86 [ 1112.598944][T15092] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1112.600082][T15092] pl2303 3-1:1.0: device disconnected [ 1112.701092][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1112.701110][ T10] (id 0x00) [ 1112.765703][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.765718][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.772607][ T10] rc_core: IR keymap rc-imon-pad not found [ 1112.772621][ T10] Registered IR keymap rc-empty [ 1112.772732][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1112.772750][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1112.902284][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1112.914001][T16818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1112.922778][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input113 [ 1112.943418][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:16> initialized [ 1112.987119][T16821] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 1113.013254][T16821] bond1: (slave wlan0): Enslaving as a backup interface with a down link [ 1113.037245][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.037259][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.527325][ T31] audit: type=1400 audit(1790444075.860:2184): avc: denied { mount } for pid=16834 comm="syz.7.2784" name="/" dev="ramfs" ino=62071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1114.111016][ C1] net_ratelimit: 764 callbacks suppressed [ 1114.387148][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2787'. [ 1114.770384][T15866] usb 7-1: USB disconnect, device number 16 [ 1116.333930][T16866] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2795'. [ 1116.501156][ T10] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1116.651711][ T10] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1116.652804][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.652862][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.656785][ T10] usb 8-1: config 0 descriptor?? [ 1116.661889][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1116.871587][T16858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.882939][T16858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.889102][T16768] usb 8-1: USB disconnect, device number 18 [ 1117.665611][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 1117.816335][ T31] audit: type=1400 audit(1790444080.150:2185): avc: denied { mount } for pid=16877 comm="syz.6.2799" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1118.716994][ T31] audit: type=1400 audit(1790444081.050:2186): avc: denied { unmount } for pid=16417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1119.134441][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2806'. [ 1119.194718][T16892] md/raid:md0: not clean -- starting background reconstruction [ 1119.198321][T16892] md/raid:md0: device ram1 operational as raid disk 1 [ 1119.230993][ C1] net_ratelimit: 329 callbacks suppressed [ 1119.238329][T16892] md/raid:md0: cannot start dirty degraded array. [ 1120.194909][T16892] md/raid:md0: failed to run raid set. [ 1120.194915][T16892] md: pers->run() failed ... [ 1120.909655][T15866] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1121.076340][T15866] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1121.079774][T15866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1121.079790][T15866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.079821][T15866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.087641][T15866] usb 3-1: config 0 descriptor?? [ 1121.253050][T16922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1121.347962][T16911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.348699][T16911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.367429][T15866] usbhid 3-1:0.0: can't add hid device: -71 [ 1121.367557][T15866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1121.374728][T15866] usb 3-1: USB disconnect, device number 87 [ 1121.590787][T16922] md/raid:md0: not clean -- starting background reconstruction [ 1121.591470][T16922] md/raid:md0: device ram1 operational as raid disk 1 [ 1121.667487][T16922] md/raid:md0: starting dirty degraded array with PPL. [ 1121.667496][T16922] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 0 [ 1121.715856][T16922] md/raid:md0: PPL space too small on ram1 [ 1122.146226][T16922] md/raid:md0: failed to run raid set. [ 1122.146235][T16922] md: pers->run() failed ... [ 1122.220315][T15866] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1122.372223][T15866] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1122.373222][T15866] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1122.373239][T15866] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1122.373255][T15866] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1122.373289][T15866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.375139][T16928] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1122.375164][T16928] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1122.376473][T15866] pl2303 7-1:1.0: pl2303 converter detected [ 1122.396576][T15866] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 1122.561078][T16768] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1122.713523][T16768] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1122.714447][T16768] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1122.714464][T16768] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1122.714479][T16768] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1122.714513][T16768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.722970][T16932] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1122.723058][T16932] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1122.733570][T16768] pl2303 3-1:1.0: pl2303 converter detected [ 1122.747230][T16768] usb 3-1: pl2303 converter now attached to ttyUSB1 [ 1122.833237][T16928] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 1122.833680][T16928] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1122.833970][T16928] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1122.849900][T16928] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1123.106288][ T5714] usb 3-1: USB disconnect, device number 88 [ 1123.258638][ T5714] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 1123.259593][ T5714] pl2303 3-1:1.0: device disconnected [ 1123.314876][ T31] audit: type=1400 audit(1790444085.570:2187): avc: denied { create } for pid=16942 comm="syz.7.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1123.984429][T16946] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1124.271107][ C1] net_ratelimit: 340 callbacks suppressed ** 278 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 157 printk messages dropped ** ** 124 printk messages dropped ** ** 116 printk messages dropped ** ** 108 printk messages dropped ** ** 149 printk messages dropped ** ** 118 printk messages dropped ** ** 108 printk messages dropped ** ** 153 printk messages dropped ** ** 108 printk messages dropped ** ** 107 printk messages dropped ** ** 109 printk messages dropped ** ** 104 printk messages dropped ** ** 107 printk messages dropped ** ** 152 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 165 printk messages dropped ** ** 109 printk messages dropped ** ** 151 printk messages dropped ** ** 105 printk messages dropped ** ** 150 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 253 printk messages dropped ** ** 107 printk messages dropped ** ** 48 printk messages dropped ** ** 1826 printk messages dropped ** ** 110 printk messages dropped ** ** 128 printk messages dropped ** ** 158 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 144 printk messages dropped ** ** 106 printk messages dropped ** ** 104 printk messages dropped ** ** 101 printk messages dropped ** ** 130 printk messages dropped ** ** 104 printk messages dropped ** ** 97 printk messages dropped ** ** 102 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 102 printk messages dropped ** ** 106 printk messages dropped ** ** 147 printk messages dropped ** ** 98 printk messages dropped ** ** 117 printk messages dropped ** ** 103 printk messages dropped ** ** 154 printk messages dropped ** ** 100 printk messages dropped ** ** 106 printk messages dropped ** ** 100 printk messages dropped ** ** 145 printk messages dropped ** ** 104 printk messages dropped ** ** 102 printk messages dropped ** ** 106 printk messages dropped ** ** 97 printk messages dropped ** ** 104 printk messages dropped ** ** 152 printk messages dropped ** ** 104 printk messages dropped ** ** 134 printk messages dropped ** ** 150 printk messages dropped ** ** 104 printk messages dropped ** ** 304 printk messages dropped ** ** 105 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 107 printk messages dropped ** ** 105 printk messages dropped ** ** 101 printk messages dropped ** ** 96 printk messages dropped ** ** 149 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 150 printk messages dropped ** ** 150 printk messages dropped ** ** 104 printk messages dropped ** ** 156 printk messages dropped ** ** 158 printk messages dropped ** ** 103 printk messages dropped ** ** 106 printk messages dropped ** ** 104 printk messages dropped ** ** 109 printk messages dropped ** ** 105 printk messages dropped ** ** 117 printk messages dropped ** ** 164 printk messages dropped ** ** 111 printk messages dropped ** ** 112 printk messages dropped ** ** 136 printk messages dropped ** ** 318 printk messages dropped ** ** 101 printk messages dropped ** ** 106 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 100 printk messages dropped ** ** 108 printk messages dropped ** ** 110 printk messages dropped ** ** 95 printk messages dropped ** ** 100 printk messages dropped ** ** 103 printk messages dropped ** ** 147 printk messages dropped ** ** 99 printk messages dropped ** ** 146 printk messages dropped ** ** 159 printk messages dropped ** ** 62 printk messages dropped ** ** 104 printk messages dropped ** ** 117 printk messages dropped ** ** 190 printk messages dropped ** ** 103 printk messages dropped ** ** 105 printk messages dropped ** ** 151 printk messages dropped ** ** 105 printk messages dropped ** ** 144 printk messages dropped ** ** 369 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 104 printk messages dropped ** ** 104 printk messages dropped ** ** 153 printk messages dropped ** ** 40 printk messages dropped ** [ 1125.249135][ T31] audit: type=1400 audit(1790444087.580:2188): avc: denied { setopt } for pid=16942 comm="syz.7.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1125.359550][T16927] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1125.373822][T16927] pl2303 ttyUSB0: error sending break = -32 [ 1125.379222][T15866] usb 7-1: USB disconnect, device number 17 [ 1125.417601][T16944] could not allocate digest TFM handle blake2s-256-x86 [ 1125.445199][T15866] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1125.546289][T15866] pl2303 7-1:1.0: device disconnected [ 1126.171743][T15866] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1126.323463][T15866] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1126.324579][T15866] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.324620][T15866] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.324649][T15866] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1126.329703][T15866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1126.329725][T15866] usb 7-1: Product: syz [ 1126.329742][T15866] usb 7-1: Manufacturer: syz [ 1126.413034][T15866] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 1126.414594][T15866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1126.438415][T15866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1126.531628][ T985] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 1126.670738][T15866] usb 7-1: USB disconnect, device number 18 [ 1126.681735][ T985] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1126.685758][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1126.685787][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.685844][ T985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.686203][T15866] garmin_gps 7-1:1.0: device disconnected [ 1126.739938][ T985] usb 8-1: config 0 descriptor?? [ 1126.948910][T16963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.949332][T16963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.969981][ T985] usbhid 8-1:0.0: can't add hid device: -71 [ 1126.970065][ T985] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1126.997604][ T985] usb 8-1: USB disconnect, device number 19 [ 1127.294359][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1127.462737][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1127.463717][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1127.463733][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1127.463748][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.463783][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.465772][T16979] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1127.465802][T16979] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1127.467212][ T10] pl2303 3-1:1.0: pl2303 converter detected [ 1127.469537][ T10] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1127.611053][ T985] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1127.763711][ T985] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1127.765105][ T985] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1127.765128][ T985] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1127.765142][ T985] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1127.765193][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.781332][T16981] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1127.781370][T16981] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1127.793184][ T985] pl2303 7-1:1.0: pl2303 converter detected [ 1127.803362][T16979] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1127.815027][T16979] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1127.816858][T16979] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1127.817274][T16979] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1127.820598][T16979] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1127.894278][ T985] usb 7-1: pl2303 converter now attached to ttyUSB1 [ 1127.952907][T15866] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1128.007454][ T985] usb 7-1: USB disconnect, device number 19 [ 1128.060761][ T985] pl2303 ttyUSB1: pl2303 converter now disconnected from ttyUSB1 [ 1128.077331][ T985] pl2303 7-1:1.0: device disconnected [ 1128.101445][T16978] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1128.105091][T16978] pl2303 ttyUSB0: error sending break = -32 [ 1128.107594][ T10] usb 3-1: USB disconnect, device number 89 [ 1128.128539][T15866] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1128.129578][T15866] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.129616][T15866] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.129643][T15866] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1128.160440][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1128.172988][ T10] pl2303 3-1:1.0: device disconnected [ 1128.182310][T15866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1128.182332][T15866] usb 8-1: Product: syz [ 1128.182349][T15866] usb 8-1: Manufacturer: syz [ 1128.225163][T15866] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 1128.226648][T15866] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1128.227049][T15866] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1128.475115][ T985] usb 8-1: USB disconnect, device number 20 [ 1128.490740][ T985] garmin_gps 8-1:1.0: device disconnected [ 1129.573589][T16642] net_ratelimit: 166 callbacks suppressed [ 1129.697913][ T6239] IPVS: starting estimator thread 0... [ 1129.783198][T16994] IPVS: using max 33 ests per chain, 79200 per kthread [ 1130.259957][T17013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1130.596941][T16768] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 1130.674220][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2849'. [ 1130.676105][T17016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.901753][T16768] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1130.902948][T16768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1130.902978][T16768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.903036][T16768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.906786][T16768] usb 3-1: config 0 descriptor?? [ 1130.909199][T17017] md/raid:md0: not clean -- starting background reconstruction [ 1130.909482][T17017] md/raid:md0: device ram1 operational as raid disk 1 [ 1130.954687][T13073] svc: failed to register nfsaclv3 RPC service (errno 110). [ 1130.954704][T13073] failed to unregister tcp with rpcbind [ 1130.954887][T13073] svc: failed to register nfsdv3 RPC service (errno 97). [ 1130.954902][T13073] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1130.954915][T13073] failed to unregister tcp with rpcbind [ 1131.035092][T17016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.119158][T17007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.119919][T17007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.140493][T16768] usbhid 3-1:0.0: can't add hid device: -71 [ 1131.140621][T16768] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1131.161781][T16768] usb 3-1: USB disconnect, device number 90 [ 1131.214759][T17017] md/raid:md0: couldn't allocate thread. [ 1132.370582][T17017] md: pers->run() failed ... [ 1132.542316][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1132.634852][T17032] bond1: option mode: unable to set because the bond device has slaves [ 1132.692815][ T10] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1132.695383][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1132.695414][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1132.695441][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1132.695503][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.725037][T17030] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1132.725083][T17030] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1132.749313][ T10] pl2303 8-1:1.0: pl2303 converter detected [ 1132.832306][ T10] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 1132.958851][ T10] usb 8-1: USB disconnect, device number 21 [ 1132.999355][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1133.000281][ T10] pl2303 8-1:1.0: device disconnected [ 1133.748685][T17043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1134.585777][T16653] net_ratelimit: 306 callbacks suppressed [ 1134.613271][T17043] md/raid:md0: not clean -- starting background reconstruction [ 1134.614515][T17043] md/raid:md0: device ram1 operational as raid disk 1 [ 1134.688184][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'. [ 1134.767724][T17043] md/raid:md0: couldn't allocate thread. [ 1135.058418][T17060] could not allocate digest TFM handle blake2s-256-x86 [ 1135.083645][T17043] md: pers->run() failed ... [ 1135.110256][T17062] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1135.174804][ T31] audit: type=1400 audit(1790444097.510:2189): avc: denied { write } for pid=17065 comm="syz.6.2866" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1135.443054][ T31] audit: type=1400 audit(1790444097.780:2190): avc: denied { create } for pid=17070 comm="syz.7.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1135.470814][ T31] audit: type=1400 audit(1790444097.780:2191): avc: denied { write } for pid=17070 comm="syz.7.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1135.470847][ T31] audit: type=1400 audit(1790444097.790:2192): avc: denied { write } for pid=17070 comm="syz.7.2867" name="ipv6_route" dev="proc" ino=4026535291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1135.529284][T17075] FAULT_INJECTION: forcing a failure. [ 1135.529284][T17075] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1135.529317][T17075] CPU: 1 UID: 0 PID: 17075 Comm: syz.4.2870 Tainted: G L syzkaller #0 PREEMPT(full) [ 1135.529348][T17075] Tainted: [L]=SOFTLOCKUP [ 1135.529357][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1135.529372][T17075] Call Trace: [ 1135.529380][T17075] [ 1135.529389][T17075] dump_stack_lvl+0x100/0x190 [ 1135.529431][T17075] should_fail_ex.cold+0x5/0xa [ 1135.529465][T17075] get_futex_key+0x1d0/0x14f0 [ 1135.529515][T17075] ? __pfx_get_futex_key+0x10/0x10 [ 1135.529544][T17075] ? find_held_lock+0x2b/0x80 [ 1135.529574][T17075] ? futex_wake+0x4ea/0x5e0 [ 1135.529604][T17075] futex_wake+0xf4/0x5e0 [ 1135.529629][T17075] ? __pfx_futex_wake+0x10/0x10 [ 1135.529656][T17075] ? vfs_write+0x15d/0x1050 [ 1135.529687][T17075] do_futex+0x2b2/0x440 [ 1135.529719][T17075] ? __pfx_do_futex+0x10/0x10 [ 1135.529752][T17075] __x64_sys_futex+0x34f/0x4d0 [ 1135.529770][T17075] ? fput+0x7c/0x100 [ 1135.529786][T17075] ? __pfx___x64_sys_futex+0x10/0x10 [ 1135.529805][T17075] ? ksys_write+0x1ac/0x250 [ 1135.529818][T17075] ? __pfx_ksys_write+0x10/0x10 [ 1135.529836][T17075] do_syscall_64+0x123/0x790 [ 1135.529850][T17075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.529863][T17075] RIP: 0033:0x7f2f4fd9e159 [ 1135.529874][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.529887][T17075] RSP: 002b:00007f2f50bac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1135.529900][T17075] RAX: ffffffffffffffda RBX: 00007f2f50025fa8 RCX: 00007f2f4fd9e159 [ 1135.529909][T17075] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f50025fac [ 1135.529917][T17075] RBP: 00007f2f50025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1135.529925][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.529933][T17075] R13: 00007f2f50026038 R14: 00007ffc7b1d8c90 R15: 00007ffc7b1d8d78 [ 1135.529951][T17075] [ 1135.802775][ T31] audit: type=1400 audit(1790444098.140:2193): avc: denied { map } for pid=17070 comm="syz.7.2867" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1135.802894][ T31] audit: type=1400 audit(1790444098.140:2194): avc: denied { read write } for pid=17070 comm="syz.7.2867" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1136.043724][ T31] audit: type=1400 audit(1790444098.380:2195): avc: denied { map } for pid=17070 comm="syz.7.2867" path="socket:[62395]" dev="sockfs" ino=62395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1136.094503][ T31] audit: type=1400 audit(1790444098.430:2196): avc: denied { shutdown } for pid=17070 comm="syz.7.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1136.100827][ T31] audit: type=1400 audit(1790444098.430:2197): avc: denied { getopt } for pid=17070 comm="syz.7.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1136.289329][T17087] ./dev/sda1: Can't lookup blockdev [ 1136.642425][T13736] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1137.302042][T13736] usb 7-1: Using ep0 maxpacket: 32 [ 1137.305162][T13736] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1137.306371][T13736] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.306411][T13736] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1137.306439][T13736] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1137.306471][T13736] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1137.308302][T13736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.308315][T13736] usb 7-1: Product: syz [ 1137.308324][T13736] usb 7-1: Manufacturer: syz [ 1137.308338][T13736] usb 7-1: SerialNumber: syz [ 1137.365638][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1137.393412][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 1137.476511][T13736] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input115 [ 1137.548496][T17095] FAULT_INJECTION: forcing a failure. [ 1137.548496][T17095] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.548517][T17095] CPU: 1 UID: 0 PID: 17095 Comm: syz.7.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.548535][T17095] Tainted: [L]=SOFTLOCKUP [ 1137.548540][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1137.548551][T17095] Call Trace: [ 1137.548556][T17095] [ 1137.548562][T17095] dump_stack_lvl+0x100/0x190 [ 1137.548582][T17095] should_fail_ex.cold+0x5/0xa [ 1137.548601][T17095] should_failslab+0xc2/0x120 [ 1137.548618][T17095] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1137.548638][T17095] ? __proc_create+0xc1/0x8f0 [ 1137.548660][T17095] ? __proc_create+0x247/0x8f0 [ 1137.548677][T17095] __proc_create+0x247/0x8f0 [ 1137.548690][T17095] ? __pfx___proc_create+0x10/0x10 [ 1137.548704][T17095] ? _raw_write_unlock+0x28/0x50 [ 1137.548722][T17095] ? proc_register+0x56d/0x910 [ 1137.548736][T17095] proc_create_reg+0x75/0x170 [ 1137.548750][T17095] proc_create_net_data+0x8e/0x1c0 [ 1137.548764][T17095] ? __pfx_proc_create_net_data+0x10/0x10 [ 1137.548783][T17095] ipmr_net_init+0x394/0x5e0 [ 1137.548801][T17095] ? __pfx_ipmr_net_init+0x10/0x10 [ 1137.548819][T17095] ? __pfx_ipmr_net_init+0x10/0x10 [ 1137.548838][T17095] ? ops_init+0x1d9/0x5f0 [ 1137.548855][T17095] ? __pfx_ipmr_net_init+0x10/0x10 [ 1137.548871][T17095] ops_init+0x1e2/0x5f0 [ 1137.548889][T17095] setup_net+0x118/0x3a0 [ 1137.548907][T17095] ? __pfx_setup_net+0x10/0x10 [ 1137.548928][T17095] copy_net_ns+0x345/0x7a0 [ 1137.548948][T17095] create_new_namespaces+0x3ea/0xac0 [ 1137.548966][T17095] unshare_nsproxy_namespaces+0xf2/0x220 [ 1137.548983][T17095] ksys_unshare+0x4a2/0xa70 [ 1137.548998][T17095] ? __pfx_ksys_unshare+0x10/0x10 [ 1137.549019][T17095] __x64_sys_unshare+0x31/0x40 [ 1137.549033][T17095] do_syscall_64+0x123/0x790 [ 1137.549047][T17095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.549060][T17095] RIP: 0033:0x7ff38db9e159 [ 1137.549071][T17095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.549083][T17095] RSP: 002b:00007ff38eb10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1137.549095][T17095] RAX: ffffffffffffffda RBX: 00007ff38de25fa0 RCX: 00007ff38db9e159 [ 1137.549104][T17095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1137.549112][T17095] RBP: 00007ff38dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1137.549120][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.549128][T17095] R13: 00007ff38de26038 R14: 00007ff38de25fa0 R15: 00007ffed56456b8 [ 1137.549146][T17095] [ 1137.601816][T13736] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1137.601834][T13736] (id 0x00) [ 1137.932660][T15866] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1138.063048][T13736] rc_core: IR keymap rc-imon-pad not found [ 1138.063056][T13736] Registered IR keymap rc-empty [ 1138.063119][T13736] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1138.063130][T13736] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1138.113867][T13736] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1138.125298][T15866] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1138.126490][T15866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.126552][T15866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.129158][T13736] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input116 [ 1138.142338][T15866] usb 8-1: config 0 descriptor?? [ 1138.256424][T13736] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:20> initialized [ 1138.758187][T17095] FAULT_INJECTION: forcing a failure. [ 1138.758187][T17095] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.758217][T17095] CPU: 0 UID: 0 PID: 17095 Comm: syz.7.2877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.758250][T17095] Tainted: [L]=SOFTLOCKUP [ 1138.758259][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.758273][T17095] Call Trace: [ 1138.758280][T17095] [ 1138.758290][T17095] dump_stack_lvl+0x100/0x190 [ 1138.758330][T17095] should_fail_ex.cold+0x5/0xa [ 1138.758373][T17095] should_failslab+0xc2/0x120 [ 1138.758405][T17095] __kmalloc_noprof+0xfc/0x840 [ 1138.758433][T17095] ? kobject_get_path+0xcf/0x2c0 [ 1138.758466][T17095] kobject_get_path+0xcf/0x2c0 [ 1138.758495][T17095] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1138.758528][T17095] kobject_uevent_env+0x287/0x18b0 [ 1138.758565][T17095] ? gadget_unbind_driver+0x371/0x4f0 [ 1138.758595][T17095] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 1138.758621][T17095] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1138.758651][T17095] device_remove+0xcb/0x180 [ 1138.758680][T17095] device_release_driver_internal+0x44e/0x620 [ 1138.758717][T17095] driver_detach+0xd8/0x1b0 [ 1138.758750][T17095] bus_remove_driver+0x13b/0x2e0 [ 1138.758781][T17095] driver_unregister+0x76/0xb0 [ 1138.758813][T17095] usb_gadget_unregister_driver+0x49/0x70 [ 1138.758840][T17095] raw_release+0x19b/0x260 [ 1138.758867][T17095] ? __pfx_raw_release+0x10/0x10 [ 1138.758890][T17095] __fput+0x3ff/0xb50 [ 1138.758929][T17095] fput_close_sync+0x118/0x250 [ 1138.758962][T17095] ? __pfx_fput_close_sync+0x10/0x10 [ 1138.759003][T17095] __x64_sys_close+0x8b/0x120 [ 1138.759037][T17095] do_syscall_64+0x123/0x790 [ 1138.759062][T17095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.759087][T17095] RIP: 0033:0x7ff38db5e98e [ 1138.759106][T17095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1138.759129][T17095] RSP: 002b:00007ff38eb0ff98 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1138.759152][T17095] RAX: ffffffffffffffda RBX: 00007ff38eb106c0 RCX: 00007ff38db5e98e [ 1138.759169][T17095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1138.759183][T17095] RBP: 00007ff38dc3506b R08: 0000000000000000 R09: 0000000000000000 [ 1138.759199][T17095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.759214][T17095] R13: 00007ff38de26038 R14: 00007ff38de25fa0 R15: 00007ffed56456b8 [ 1138.759247][T17095] [ 1138.764448][T15866] usbhid 8-1:0.0: can't add hid device: -71 [ 1138.764576][T15866] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1138.802626][T15866] usb 8-1: USB disconnect, device number 22 [ 1138.807824][ T31] audit: type=1400 audit(1790444101.130:2198): avc: denied { name_bind } for pid=17101 comm="syz.0.2865" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1139.401022][T15866] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1139.553047][T15866] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1139.553946][T15866] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1139.553970][T15866] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1139.553985][T15866] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.555938][T15866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.555954][T15866] usb 8-1: Product: syz [ 1139.555963][T15866] usb 8-1: Manufacturer: syz [ 1139.555972][T15866] usb 8-1: SerialNumber: syz [ 1139.721015][ C0] net_ratelimit: 264 callbacks suppressed [ 1139.863457][ T5714] usb 7-1: USB disconnect, device number 20 [ 1140.144544][T15866] usb 8-1: USB disconnect, device number 23 [ 1140.586191][T17113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1141.535825][T17113] md/raid:md0: not clean -- starting background reconstruction [ 1141.536105][T17113] md/raid:md0: device ram1 operational as raid disk 1 [ 1141.825277][T17113] md/raid:md0: couldn't allocate thread. [ 1141.840813][T17124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1142.277611][T17113] md: pers->run() failed ... [ 1142.537204][T17138] ./dev/sda1: Can't lookup blockdev [ 1143.045786][T17139] could not allocate digest TFM handle blake2s-256-x86 [ 1143.504218][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2888'. [ 1144.831071][ C0] net_ratelimit: 171 callbacks suppressed [ 1145.135877][T15806] IPVS: starting estimator thread 0... [ 1145.221467][T17156] IPVS: using max 63 ests per chain, 151200 per kthread [ 1145.558476][T17158] ubi0: attaching mtd0 [ 1145.601117][T17159] FAULT_INJECTION: forcing a failure. [ 1145.601117][T17159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1145.601160][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.6.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.601195][T17159] Tainted: [L]=SOFTLOCKUP [ 1145.601205][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1145.601220][T17159] Call Trace: [ 1145.601229][T17159] [ 1145.601239][T17159] dump_stack_lvl+0x100/0x190 [ 1145.601284][T17159] should_fail_ex.cold+0x5/0xa [ 1145.601320][T17159] get_futex_key+0x1d0/0x14f0 [ 1145.601355][T17159] ? __pfx_get_futex_key+0x10/0x10 [ 1145.601385][T17159] ? find_held_lock+0x2b/0x80 [ 1145.601417][T17159] ? futex_wake+0x4ea/0x5e0 [ 1145.601447][T17159] futex_wake+0xf4/0x5e0 [ 1145.601473][T17159] ? __pfx_futex_wake+0x10/0x10 [ 1145.601509][T17159] ? vfs_write+0x15d/0x1050 [ 1145.601540][T17159] do_futex+0x2b2/0x440 [ 1145.601576][T17159] ? __pfx_do_futex+0x10/0x10 [ 1145.601620][T17159] __x64_sys_futex+0x34f/0x4d0 [ 1145.601654][T17159] ? fput+0x7c/0x100 [ 1145.601684][T17159] ? __pfx___x64_sys_futex+0x10/0x10 [ 1145.601715][T17159] ? ksys_write+0x1ac/0x250 [ 1145.601739][T17159] ? __pfx_ksys_write+0x10/0x10 [ 1145.601773][T17159] do_syscall_64+0x123/0x790 [ 1145.601799][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.601823][T17159] RIP: 0033:0x7fb16a19e159 [ 1145.601842][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.601864][T17159] RSP: 002b:00007fb16b00b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1145.601886][T17159] RAX: ffffffffffffffda RBX: 00007fb16a425fa8 RCX: 00007fb16a19e159 [ 1145.601902][T17159] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb16a425fac [ 1145.601917][T17159] RBP: 00007fb16a425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1145.601931][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.601945][T17159] R13: 00007fb16a426038 R14: 00007ffca40b3230 R15: 00007ffca40b3318 [ 1145.601978][T17159] [ 1145.658435][T17158] ubi0: scanning is finished [ 1145.658502][T17158] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1147.127708][T17158] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1147.603816][T17170] mac80211_hwsim hwsim46 wlan0: left allmulticast mode [ 1148.404241][T17187] ./dev/sda1: Can't lookup blockdev [ 1148.848581][T17196] ./dev/sda1: Can't lookup blockdev [ 1148.898879][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1148.918270][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1148.920029][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1148.937577][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1148.947945][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1149.196100][T17207] FAULT_INJECTION: forcing a failure. [ 1149.196100][T17207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1149.196138][T17207] CPU: 0 UID: 0 PID: 17207 Comm: syz.0.2902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.196168][T17207] Tainted: [L]=SOFTLOCKUP [ 1149.196176][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1149.196190][T17207] Call Trace: [ 1149.196198][T17207] [ 1149.196208][T17207] dump_stack_lvl+0x100/0x190 [ 1149.196250][T17207] should_fail_ex.cold+0x5/0xa [ 1149.196285][T17207] get_futex_key+0x1d0/0x14f0 [ 1149.196320][T17207] ? __pfx_get_futex_key+0x10/0x10 [ 1149.196349][T17207] ? find_held_lock+0x2b/0x80 [ 1149.196385][T17207] ? futex_wake+0x4ea/0x5e0 [ 1149.196415][T17207] futex_wake+0xf4/0x5e0 [ 1149.196441][T17207] ? __pfx_futex_wake+0x10/0x10 [ 1149.196470][T17207] ? vfs_write+0x15d/0x1050 [ 1149.196500][T17207] do_futex+0x2b2/0x440 [ 1149.196534][T17207] ? __pfx_do_futex+0x10/0x10 [ 1149.196574][T17207] __x64_sys_futex+0x34f/0x4d0 [ 1149.196608][T17207] ? fput+0x7c/0x100 [ 1149.196647][T17207] ? __pfx___x64_sys_futex+0x10/0x10 [ 1149.196679][T17207] ? ksys_write+0x1ac/0x250 [ 1149.196705][T17207] ? __pfx_ksys_write+0x10/0x10 [ 1149.196740][T17207] do_syscall_64+0x123/0x790 [ 1149.196767][T17207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.196791][T17207] RIP: 0033:0x7f07f3d9e159 [ 1149.196811][T17207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.196832][T17207] RSP: 002b:00007f07f4d480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1149.196853][T17207] RAX: ffffffffffffffda RBX: 00007f07f4025fa8 RCX: 00007f07f3d9e159 [ 1149.196869][T17207] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f07f4025fac [ 1149.196883][T17207] RBP: 00007f07f4025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1149.196897][T17207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.196911][T17207] R13: 00007f07f4026038 R14: 00007ffd8059cc40 R15: 00007ffd8059cd28 [ 1149.196944][T17207] [ 1150.031076][ C0] net_ratelimit: 121 callbacks suppressed [ 1150.991155][ T5604] Bluetooth: hci4: command tx timeout [ 1152.237992][T17239] device-mapper: ioctl: Invalid target message parameters. [ 1152.361324][T17238] ./dev/sda1: Can't lookup blockdev [ 1152.694105][T17242] ./dev/sda1: Can't lookup blockdev [ 1153.585968][ T5604] Bluetooth: hci4: command tx timeout [ 1154.515414][T17261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1155.206928][T15946] net_ratelimit: 167 callbacks suppressed [ 1155.274954][ T6239] IPVS: starting estimator thread 0... [ 1155.361380][T17266] IPVS: using max 62 ests per chain, 148800 per kthread [ 1155.433885][T17261] md/raid:md0: not clean -- starting background reconstruction [ 1155.434083][T17261] md/raid:md0: device ram1 operational as raid disk 1 [ 1155.539893][T17261] md/raid:md0: couldn't allocate thread. [ 1155.631015][ T5604] Bluetooth: hci4: command tx timeout [ 1155.885560][T17261] md: pers->run() failed ... [ 1156.283888][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.283976][T17197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.284170][T17197] bridge_slave_0: entered allmulticast mode [ 1156.292241][T17197] bridge_slave_0: entered promiscuous mode [ 1156.308542][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.335992][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.336206][T17197] bridge_slave_1: entered allmulticast mode [ 1156.368400][T17197] bridge_slave_1: entered promiscuous mode [ 1156.732404][T17197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.764663][T17197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.041124][T13736] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1157.072766][T17197] team0: Port device team_slave_0 added [ 1157.080466][T17197] team0: Port device team_slave_1 added [ 1157.191508][T13736] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1157.193243][T13736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1157.193260][T13736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1157.193274][T13736] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1157.198664][T13736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.198675][T13736] usb 8-1: Product: syz [ 1157.198685][T13736] usb 8-1: Manufacturer: syz [ 1157.198694][T13736] usb 8-1: SerialNumber: syz [ 1157.209053][T13736] usb 8-1: config 0 descriptor?? [ 1157.454036][T17197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.454050][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.454076][T17197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.462937][T17197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.462948][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.462972][T17197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.468020][T13736] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1157.793497][ T5604] Bluetooth: hci4: command tx timeout [ 1157.810897][ T10] usb 8-1: USB disconnect, device number 24 [ 1158.004806][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1158.178649][T17197] hsr_slave_0: entered promiscuous mode [ 1158.204535][T17197] hsr_slave_1: entered promiscuous mode [ 1158.204934][T17197] debugfs: 'hsr0' already exists in 'hsr' [ 1158.204944][T17197] Cannot create hsr debugfs directory [ 1158.528793][T17288] ./dev/sda1: Can't lookup blockdev [ 1159.573000][ T31] audit: type=1400 audit(1790444121.910:2199): avc: denied { read write } for pid=16512 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1159.573032][ T31] audit: type=1400 audit(1790444121.910:2200): avc: denied { open } for pid=16512 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1159.573056][ T31] audit: type=1400 audit(1790444121.910:2201): avc: denied { ioctl } for pid=16512 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1159.677316][T17299] ./dev/sda1: Can't lookup blockdev [ 1159.677619][ T31] audit: type=1400 audit(1790444122.010:2202): avc: denied { mounton } for pid=17298 comm="syz.0.2924" path="/37/mnt" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1160.271003][ C0] net_ratelimit: 145 callbacks suppressed [ 1160.778582][ T31] audit: type=1400 audit(1790444122.120:2203): avc: denied { execmem } for pid=17301 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1160.778629][ T31] audit: type=1400 audit(1790444122.450:2204): avc: denied { read } for pid=17301 comm="syz.7.2927" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1160.778672][ T31] audit: type=1400 audit(1790444122.450:2205): avc: denied { open } for pid=17301 comm="syz.7.2927" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1160.778716][ T31] audit: type=1400 audit(1790444122.600:2206): avc: denied { map_create } for pid=17301 comm="syz.7.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1160.778758][ T31] audit: type=1400 audit(1790444122.620:2207): avc: denied { read } for pid=17301 comm="syz.7.2927" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1160.778801][ T31] audit: type=1400 audit(1790444122.630:2208): avc: denied { open } for pid=17301 comm="syz.7.2927" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1162.991923][T15092] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1163.152030][T15092] usb 7-1: Using ep0 maxpacket: 8 [ 1163.167573][T15092] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1163.168754][T15092] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1163.168779][T15092] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1163.168804][T15092] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 4384, setting to 1024 [ 1163.168833][T15092] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1163.168859][T15092] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.168919][T15092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.497476][T15092] usb 7-1: GET_CAPABILITIES returned 0 [ 1163.497512][T15092] usbtmc 7-1:16.0: can't read capabilities [ 1163.770460][ T10] usb 7-1: USB disconnect, device number 21 [ 1163.865328][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2934'. [ 1163.987202][T17197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1164.055516][T17197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1164.058525][T17197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1164.114185][T17329] ./dev/sda1: Can't lookup blockdev [ 1164.130306][T17197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.146590][T17197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1164.236830][T17197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1164.237397][T17197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1164.730692][T17197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.968729][T17340] ./dev/sda1: Can't lookup blockdev [ 1165.631172][ C0] net_ratelimit: 143 callbacks suppressed [ 1166.147947][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 1166.147958][ T31] audit: type=1400 audit(1790444128.470:2248): avc: denied { unmount } for pid=16512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1167.304361][T17197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.889287][ T31] audit: type=1400 audit(1790444130.220:2249): avc: denied { read write } for pid=16417 comm="syz-executor" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1167.889770][ T31] audit: type=1400 audit(1790444130.220:2250): avc: denied { open } for pid=16417 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1167.891058][ T31] audit: type=1400 audit(1790444130.220:2251): avc: denied { ioctl } for pid=16417 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1168.208696][T17197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1168.264013][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.264126][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.329102][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.329216][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.356813][ T31] audit: type=1400 audit(1790444130.690:2252): avc: denied { read } for pid=17338 comm="syz.0.2939" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1168.357014][ T31] audit: type=1400 audit(1790444130.690:2253): avc: denied { open } for pid=17338 comm="syz.0.2939" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1168.411523][ T31] audit: type=1400 audit(1790444130.750:2254): avc: denied { create } for pid=17368 comm="syz.6.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1168.446387][ T31] audit: type=1400 audit(1790444130.780:2255): avc: denied { read write } for pid=17338 comm="syz.0.2939" name="mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1168.446433][ T31] audit: type=1400 audit(1790444130.780:2256): avc: denied { open } for pid=17338 comm="syz.0.2939" path="/dev/input/mouse0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1168.450386][ T31] audit: type=1400 audit(1790444130.780:2257): avc: denied { write } for pid=17368 comm="syz.6.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1168.539617][T17197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1168.539634][T17197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1170.301981][T17379] ./dev/sda1: Can't lookup blockdev [ 1170.831389][ C0] net_ratelimit: 262 callbacks suppressed [ 1171.250734][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1171.250748][ T31] audit: type=1400 audit(1790444133.580:2272): avc: denied { sys_module } for pid=17197 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1171.250789][ T31] audit: type=1400 audit(1790444133.580:2273): avc: denied { module_request } for pid=17197 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1171.340159][ T31] audit: type=1400 audit(1790444133.670:2274): avc: denied { mounton } for pid=17385 comm="syz.4.2951" path="/35/dev" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1171.345258][T17387] ./dev/sda1: Can't lookup blockdev [ 1171.685979][ T31] audit: type=1400 audit(1790444134.020:2275): avc: denied { mount } for pid=17391 comm="syz.4.2952" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1171.725358][ T31] audit: type=1400 audit(1790444134.060:2276): avc: denied { search } for pid=17391 comm="syz.4.2952" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1171.725964][ T31] audit: type=1400 audit(1790444134.060:2277): avc: denied { read write } for pid=17391 comm="syz.4.2952" name="filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1171.726010][ T31] audit: type=1400 audit(1790444134.060:2278): avc: denied { open } for pid=17391 comm="syz.4.2952" path="/36/nfsd/filehandle" dev="nfsd" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1171.839643][ T31] audit: type=1400 audit(1790444134.170:2279): avc: denied { unmount } for pid=16621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1171.880682][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.880731][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.065908][ T31] audit: type=1400 audit(1790444134.400:2280): avc: denied { execmem } for pid=17396 comm="syz.6.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1173.065942][ T31] audit: type=1400 audit(1790444134.740:2281): avc: denied { read } for pid=17396 comm="syz.6.2955" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1173.342070][T17197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.703338][T17197] veth0_vlan: entered promiscuous mode [ 1173.710861][T17197] veth1_vlan: entered promiscuous mode [ 1173.782338][T17197] veth0_macvtap: entered promiscuous mode [ 1173.787415][T17197] veth1_macvtap: entered promiscuous mode [ 1173.817643][T17197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.848836][T17197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.906462][T15092] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1173.942185][ T6540] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.943671][ T6540] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.944671][ T6540] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.944707][ T6540] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.061889][T15092] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1174.063023][T15092] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1174.063054][T15092] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1174.063082][T15092] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1174.063143][T15092] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.067594][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.067609][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.069761][T17407] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1174.069802][T17407] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1174.153447][T15092] pl2303 8-1:1.0: pl2303 converter detected [ 1174.156880][T15092] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 1174.278318][T12662] usb 8-1: USB disconnect, device number 25 [ 1174.292522][T12662] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1174.293454][T12662] pl2303 8-1:1.0: device disconnected [ 1174.308455][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.308471][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.955991][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 1174.957596][T17413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.395644][T17413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.420735][ T6239] IPVS: starting estimator thread 0... [ 1175.583600][T17415] IPVS: using max 43 ests per chain, 103200 per kthread [ 1176.031379][T15806] net_ratelimit: 383 callbacks suppressed [ 1176.175299][T17426] ./dev/sda1: Can't lookup blockdev [ 1176.839567][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2962'. [ 1177.990113][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 1178.578995][T17441] Bluetooth: MGMT ver 1.23 [ 1178.663941][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 1178.663980][ T31] audit: type=1400 audit(1790444140.910:2316): avc: denied { bind } for pid=17438 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1178.664204][ T31] audit: type=1400 audit(1790444140.910:2317): avc: denied { write } for pid=17438 comm="syz.0.2965" path="socket:[65616]" dev="sockfs" ino=65616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1181.150981][ C1] net_ratelimit: 166 callbacks suppressed [ 1181.207194][ T31] audit: type=1400 audit(1790444143.540:2318): avc: denied { name_bind } for pid=17449 comm="syz.7.2968" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1181.207355][ T31] audit: type=1400 audit(1790444143.540:2319): avc: denied { node_bind } for pid=17449 comm="syz.7.2968" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1181.235682][ T31] audit: type=1400 audit(1790444143.550:2320): avc: denied { perfmon } for pid=17449 comm="syz.7.2968" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1181.235730][ T31] audit: type=1400 audit(1790444143.550:2321): avc: denied { prog_run } for pid=17449 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1181.235769][ T31] audit: type=1400 audit(1790444143.550:2322): avc: denied { create } for pid=17449 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1181.258093][ T31] audit: type=1400 audit(1790444143.570:2323): avc: denied { ioctl } for pid=17449 comm="syz.7.2968" path="socket:[65123]" dev="sockfs" ino=65123 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1181.258142][ T31] audit: type=1400 audit(1790444143.570:2324): avc: denied { write } for pid=17449 comm="syz.7.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1181.581310][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1181.582866][ T31] audit: type=1400 audit(1790444143.920:2325): avc: denied { mount } for pid=17451 comm="syz.6.2964" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1181.762497][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1181.764127][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.769483][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1181.769509][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1181.769537][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 4384, setting to 1024 [ 1181.769566][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1181.769593][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.769657][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.113106][T15125] IPVS: starting estimator thread 0... [ 1183.161833][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 1183.161869][ T9] usbtmc 8-1:16.0: can't read capabilities [ 1183.201970][T17460] IPVS: using max 32 ests per chain, 76800 per kthread [ 1183.438023][ T5714] usb 8-1: USB disconnect, device number 26 [ 1184.204084][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1184.780631][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1184.780650][ T31] audit: type=1400 audit(1790444147.110:2330): avc: denied { unmount } for pid=16417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1186.014773][ T31] audit: type=1400 audit(1790444148.350:2331): avc: denied { mount } for pid=17469 comm="syz.7.2973" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1186.262152][T16768] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1186.271039][ C0] net_ratelimit: 142 callbacks suppressed [ 1186.391960][T16768] usb 8-1: device descriptor read/64, error -71 [ 1186.631123][T16768] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1186.766870][T16768] usb 8-1: device descriptor read/64, error -71 [ 1186.877319][T16768] usb usb8-port1: attempt power cycle [ 1187.243485][T16768] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1187.261572][T16768] usb 8-1: device descriptor read/8, error -71 [ 1187.501140][T16768] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1187.521181][T15866] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1187.527972][T16768] usb 8-1: device descriptor read/8, error -71 [ 1187.592513][ T31] audit: type=1400 audit(1790444149.930:2332): avc: denied { read } for pid=17477 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1187.592789][ T31] audit: type=1400 audit(1790444149.930:2333): avc: denied { open } for pid=17477 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1187.630347][ T31] audit: type=1400 audit(1790444149.960:2334): avc: denied { ioctl } for pid=17477 comm="syz-executor" path="socket:[65662]" dev="sockfs" ino=65662 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1187.631737][T10760] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1187.638167][T16768] usb usb8-port1: unable to enumerate USB device [ 1187.641657][T10760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1187.654073][T10760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1187.658382][T10760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1187.661851][T10760] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1187.696074][T15866] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1187.722180][T15866] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1187.722209][T15866] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1187.722236][T15866] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1187.722296][T15866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.742438][ T31] audit: type=1400 audit(1790444150.080:2335): avc: denied { mounton } for pid=17477 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1187.764870][T17476] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1187.764931][T17476] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1187.784198][T15866] pl2303 6-1:1.0: pl2303 converter detected [ 1187.813268][T15866] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 1188.754717][ T31] audit: type=1400 audit(1790444151.090:2336): avc: denied { unmount } for pid=16512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1188.799175][T13736] usb 6-1: USB disconnect, device number 25 [ 1188.865417][T13736] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1188.865959][T13736] pl2303 6-1:1.0: device disconnected [ 1189.211194][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1189.295039][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2975'. [ 1189.361067][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1189.362688][ T9] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice=10.40 [ 1189.363625][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.363639][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1189.369965][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.369978][ T9] usb 8-1: Product: syz [ 1189.369987][ T9] usb 8-1: Manufacturer: syz [ 1189.369996][ T9] usb 8-1: SerialNumber: syz [ 1189.711866][ T5604] Bluetooth: hci5: command tx timeout [ 1189.788705][ T9] usb 8-1: Found last interface = 0 [ 1189.788787][ T9] usb 8-1: invalid unit 5 [ 1189.788878][ T9] device: 'card3': device_add [ 1189.788927][ T9] kobject: 'sound' (ffff888076477a00): kobject_add_internal: parent: '8-1:1.0', set: '(null)' [ 1189.789004][ T9] kobject: 'card3' (ffff88807e26a378): kobject_add_internal: parent: 'sound', set: 'devices' [ 1189.789100][ T9] sound card3: No ACPI support [ 1189.789633][ T9] PM: Adding info for No Bus:card3 [ 1189.789653][ T9] kobject: 'card3' (ffff88807e26a378): kobject_uevent_env [ 1189.789729][ T9] kobject: 'card3' (ffff88807e26a378): fill_kobj_path: path = '/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3' [ 1189.790059][ T9] device: 'controlC3': device_add [ 1189.790078][ T9] kobject: 'controlC3' (ffff8880226cc000): kobject_add_internal: parent: 'card3', set: 'devices' [ 1189.792204][ T32] INFO: task syz.1.2643:16264 blocked for more than 143 seconds. [ 1189.792228][ T32] Tainted: G L syzkaller #0 [ 1189.792241][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1189.792251][ T32] task:syz.1.2643 state:D stack:27208 pid:16264 tgid:16263 ppid:15756 task_flags:0x400140 flags:0x00080002 [ 1189.792326][ T32] Call Trace: [ 1189.792333][ T32] [ 1189.792346][ T32] __schedule+0x1259/0x6920 [ 1189.792382][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1189.792736][ ** replaying previous printk message ** [ 1189.792736][ T32] ? do_raw_spin_lock+0x128/0x260 [ 1189.792775][ T32] ? __pfx___schedule+0x10/0x10 [ 1189.792804][ T32] ? find_held_lock+0x2b/0x80 [ 1189.792837][ T32] ? schedule+0x225/0x2c0 [ 1189.792873][ T32] schedule+0xdd/0x2c0 [ 1189.792904][ T32] schedule_preempt_disabled+0x13/0x30 [ 1189.792937][ T32] __mutex_lock+0xccb/0x1bd0 [ 1189.792960][ T32] ? write_ports+0xa5/0xcc0 [ 1189.792991][ T32] ? nfsctl_transaction_write+0xcd/0x1a0 [ 1189.793019][ T32] ? ksys_write+0x12a/0x250 [ 1189.793042][ T32] ? do_syscall_64+0x123/0x790 [ 1189.793066][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1189.793104][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1189.793138][ T32] ? write_ports+0xa5/0xcc0 [ 1189.793165][ T32] write_ports+0xa5/0xcc0 [ 1189.793195][ T32] ? __pfx_write_ports+0x10/0x10 [ 1189.793223][ T32] ? lock_acquire+0x1d1/0x380 [ 1189.793245][ T32] ? __might_fault+0xc5/0x140 [ 1189.793276][ T32] ? find_held_lock+0x2b/0x80 [ 1189.793304][ T32] ? __might_fault+0xc5/0x140 [ 1189.793333][ T32] ? __might_fault+0xc5/0x140 [ 1189.793369][ T32] ? __pfx_write_ports+0x10/0x10 [ 1189.793399][ T32] ? _copy_from_user+0x59/0xd0 [ 1189.793427][ T32] ? __pfx_write_ports+0x10/0x10 [ 1189.793455][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 1189.793487][ T32] vfs_write+0x2aa/0x1050 [ 1189.793513][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1189.793541][ T32] ? lock_acquire+0x1d1/0x380 [ 1189.793564][ T32] ? __fget_files+0x34/0x3d0 [ 1189.793592][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1189.793635][ T32] ? find_held_lock+0x2b/0x80 [ 1189.793667][ T32] ? __fget_files+0x215/0x3d0 [ 1189.793701][ T32] ? __fget_files+0x21f/0x3d0 [ 1189.793738][ T32] ksys_write+0x12a/0x250 [ 1189.793762][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1189.793796][ T32] do_syscall_64+0x123/0x790 [ 1189.793821][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.793844][ T32] RIP: 0033:0x7f789cf9e159 [ 1189.793863][ T32] RSP: 002b:00007f789df3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1189.793885][ T32] RAX: ffffffffffffffda RBX: 00007f789d225fa0 RCX: 00007f789cf9e159 [ 1189.793901][ T32] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1189.793916][ T32] RBP: 00007f789d03506b R08: 0000000000000000 R09: 0000000000000000 [ 1189.793931][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1189.793944][ T32] R13: 00007f789d226038 R14: 00007f789d225fa0 R15: 00007ffd29effce8 [ 1189.793976][ T32] [ 1189.794047][ T32] [ 1189.794047][ T32] Showing all locks held in the system: [ 1189.794056][ T32] locks held by kworker/0:0/9: 8, last CPU#0: [ 1189.794073][ T32] #0: ffff8880242f9140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1189.794143][ T32] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1189.794199][ T32] #2: ffff88802b3071d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1189.794258][ T32] #3: ffff88807dd3b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1189.794311][ T32] #4: ffff88807ad3f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1189.794442][ T32] #5: ffffffff90bce3a0 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x385/0x3b10 [ 1189.794503][ T32] #6: ffffffff90b8c7e0 (sound_mutex){+.+.}-{4:4}, at: snd_register_device+0x1ac/0x6d0 [ 1189.794564][ T32] #7: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1189.794626][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1189.794641][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1189.794723][ T32] locks held by udevd/4969: 1, last CPU#0: [ 1189.794739][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0 [ 1189.794792][ T32] locks held by getty/5357: 2, on CPU#1: [ 1189.794808][ T32] #0: ffff888038e940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1189.794861][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1189.794923][ T32] locks held by kworker/u8:12/6540: 2, on CPU#1: [ 1189.794939][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1189.795000][ T32] #1: ffffc9000db27d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1189.795065][ T32] locks held by kworker/u8:15/6585: 4, last CPU#1: [ 1189.795081][ T32] #0: ffff888034e6c140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1189.795153][ T32] #1: ffffc9000518fd08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1189.795218][ T32] #2: ffff888057ef49c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 1189.795288][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0 [ 1189.795354][ T32] locks held by syz.0.1943/13073: 2, on CPU#0: [ 1189.795369][ T32] #0: ffff8880312be0e8 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1189.795424][ T32] #1: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1189.795483][ T32] locks held by kworker/1:0/13736: 2, last CPU#1: [ 1189.795500][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1189.795561][ T32] #1: ffffc9000e41fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1189.795624][ T32] locks held by syz-executor/15987: 2, on CPU#1: [ 1189.795640][ T32] #0: ffff88807acca0e8 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1189.795701][ T32] #1: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1189.795757][ T32] locks held by syz-executor/16023: 2, on CPU#1: [ 1189.795773][ T32] #0: ffff888033ada0e8 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1189.795830][ T32] #1: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1189.795888][ T32] locks held by syz.1.2643/16264: 3, on CPU#0: [ 1189.795904][ T32] #0: ffff88807399f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1189.795971][ T32] #1: [ 1189.832952][ C0] virtqueue callback for ffff888028745200 (ffffffff86ec52a0) [ 1189.833026][ C0] No more buffers in queue [ 1189.833059][ C0] Receiving skb proto 0x0800 len 196 type 0 [ 1189.833086][ C0] No more buffers in queue [ 1189.833282][ C0] eth0: xmit ffff88803a358280 42:01:0a:80:00:01 [ 1189.833315][ C0] Added buffer head 40 to ffff888028745000 [ 1189.833343][ C0] virtqueue callback for ffff888028745000 (ffffffff86ece050) [ 1189.833368][ C0] Sent skb ffff88803a358280 [ 1189.833409][ C0] No more buffers in queue [ 1189.891139][ T32] ffff88809cc66460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1189.891204][ T32] #2: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1189.891263][ T32] locks held by syz.8.2660/16348: 3, on CPU#0: [ 1189.891280][ T32] #0: ffff88807a7e22b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1189.891349][ T32] #1: ffff88809cc66460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1189.891404][ T32] #2: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1189.891459][ T32] locks held by syz-executor/16387: 2, last CPU#1: [ 1189.891475][ T32] #0: ffff88803788a460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1189.891547][ T32] #1: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1189.891609][ T32] locks held by syz.9.2687/16415: 3, on CPU#1: [ 1189.891624][ T32] #0: ffff88807d6b8470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1189.891681][ T32] #1: ffff88809cc66460 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1189.891747][ T32] #2: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1189.891811][ T32] locks held by syz-executor/16417: 4, last CPU#1: [ 1189.891827][ T32] #0: ffffffff8ef3deb0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x4806/0x8370 [ 1189.891880][ T32] #1: ffff88801c0836b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1189.891935][ T32] #2: ffff88807cf436b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1189.891999][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1189.892060][ T32] locks held by syz-executor/16621: 2, on CPU#1: [ 1189.892076][ T32] #0: ffff88807baf60e8 (&type->s_umount_key#93){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1189.892132][ T32] #1: ffffffff8f289a40 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1189.897885][ T32] locks held by syz.6.2975/17493: 5, last CPU#1: [ 1189.897905][ T32] #0: ffff888067b2a460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1189.897969][ T32] #1: ffff88807c18e9b8 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x151/0xad0 [ 1189.898033][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: do_fault+0x9a8/0x1830 [ 1189.898087][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d7/0x2060 [ 1189.898144][ T32] #4: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1189.898200][ T32] locks held by syz.5.2980/17498: 2, last CPU#1: [ 1189.898215][ T32] #0: ffff888024952a68 [ 1189.901971][T17501] async_waiting @ 17501 [ 1189.901991][T17501] async_continuing @ 17501 after 1 usec [ 1189.908124][ T32] (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0x55e/0xd30 [ 1189.908190][ T32] #1: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1189.908250][ T32] locks held by kworker/u8:15/17501: 1, last CPU#1: [ 1189.908266][ T32] #0: ffff888030f81ba0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xa3/0x1940 [ 1189.908329][ T32] [ 1189.908334][ T32] ============================================= [ 1189.908334][ T32] [ 1189.908365][ T32] NMI backtrace for cpu 1 [ 1189.908382][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1189.908412][ T32] Tainted: [L]=SOFTLOCKUP [ 1189.908420][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.908433][ T32] Call Trace: [ 1189.908441][ T32] [ 1189.908450][ T32] dump_stack_lvl+0x100/0x190 [ 1189.908483][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1189.908518][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1189.908544][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1189.908576][ T32] sys_info+0x141/0x190 [ 1189.908601][ T32] watchdog+0xcb1/0x1030 [ 1189.908631][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1189.908664][ T32] ? __pfx_watchdog+0x10/0x10 [ 1189.908692][ T32] ? __kthread_parkme+0x18f/0x230 [ 1189.908723][ T32] ? kthread+0x13a/0x450 [ 1189.908750][ T32] ? __pfx_watchdog+0x10/0x10 [ 1189.908774][ T32] kthread+0x373/0x450 [ 1189.908802][ T32] ? __pfx_kthread+0x10/0x10 [ 1189.908833][ T32] ret_from_fork+0x730/0xd60 [ 1189.908860][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1189.908888][ T32] ? __switch_to+0x800/0x10f0 [ 1189.908919][ T32] ? __pfx_kthread+0x10/0x10 [ 1189.908950][ T32] ret_from_fork_asm+0x1a/0x30 [ 1189.908987][ T32] [ 1189.909001][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1189.909032][ C0] NMI backtrace for cpu 0 [ 1189.909046][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1189.909075][ C0] Tainted: [L]=SOFTLOCKUP [ 1189.909082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.909095][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 1189.909121][ C0] Code: a6 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 28 10 ce fc eb a2 e8 b1 10 [ 1189.909141][ C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 1189.909157][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1189.909171][ C0] RDX: 00000000000003fd RSI: ffffffff85b18c50 RDI: ffffffff9bc72f60 [ 1189.909186][ C0] RBP: ffffffff9bc72f20 R08: 0000000000000001 R09: 000000000000001f [ 1189.909200][ C0] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1189.909213][ C0] R13: 0000000000000020 R14: fffffbfff378e641 R15: dffffc0000000000 [ 1189.909228][ C0] FS: 0000000000000000(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 1189.909249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1189.909263][ C0] CR2: 00007f9b5d4d94b7 CR3: 0000000059143000 CR4: 00000000003526f0 [ 1189.909277][ C0] Call Trace: [ 1189.909284][ C0] [ 1189.909292][ C0] wait_for_lsr+0x13a/0x210 [ 1189.909322][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1189.909352][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 1189.909381][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 1189.909407][ C0] serial8250_console_write+0xf46/0x1330 [ 1189.909441][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1189.909473][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1189.909496][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1189.909522][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 1189.909545][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1189.909566][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1189.909599][ C0] ? do_raw_spin_lock+0xf0/0x260 [ 1189.909634][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 1189.909662][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1189.909692][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 1189.909712][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1189.909736][ C0] nbcon_kthread_func+0x613/0x7d0 [ 1189.909759][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1189.909784][ C0] ? __kthread_parkme+0x18f/0x230 [ 1189.909810][ C0] ? kthread+0x13a/0x450 [ 1189.909837][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1189.909857][ C0] kthread+0x373/0x450 [ 1189.909885][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.909914][ C0] ret_from_fork+0x730/0xd60 [ 1189.909937][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1189.909961][ C0] ? __switch_to+0x800/0x10f0 [ 1189.909990][ C0] ? __pfx_kthread+0x10/0x10 [ 1189.910019][ C0] ret_from_fork_asm+0x1a/0x30 [ 1189.910049][ C0] [ 1189.953797][ C0] virtqueue callback for ffff888028745200 (ffffffff86ec52a0) [ 1189.953870][ C0] No more buffers in queue [ 1189.954081][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1189.954099][ C0] No more buffers in queue [ 1189.954381][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1191.558661][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1191.569939][ T32] Tainted: [L]=SOFTLOCKUP [ 1191.574250][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1191.584290][ T32] Call Trace: [ 1191.587554][ T32] [ 1191.590469][ T32] dump_stack_lvl+0x100/0x190 [ 1191.595147][ T32] vpanic+0x553/0x970 [ 1191.599117][ T32] ? __pfx_vpanic+0x10/0x10 [ 1191.603615][ T32] panic+0xd1/0xe0 [ 1191.607318][ T32] ? __pfx_panic+0x10/0x10 [ 1191.611723][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1191.617879][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1191.624033][ T32] ? watchdog.cold+0x1ec/0x234 [ 1191.628792][ T32] watchdog.cold+0x1fd/0x234 [ 1191.633375][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1191.639175][ T32] ? __pfx_watchdog+0x10/0x10 [ 1191.643841][ T32] ? __kthread_parkme+0x18f/0x230 [ 1191.648861][ T32] ? kthread+0x13a/0x450 [ 1191.653098][ T32] ? __pfx_watchdog+0x10/0x10 [ 1191.657761][ T32] kthread+0x373/0x450 [ 1191.661823][ T32] ? __pfx_kthread+0x10/0x10 [ 1191.666407][ T32] ret_from_fork+0x730/0xd60 [ 1191.670989][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1191.676088][ T32] ? __switch_to+0x800/0x10f0 [ 1191.680758][ T32] ? __pfx_kthread+0x10/0x10 [ 1191.685338][ T32] ret_from_fork_asm+0x1a/0x30 [ 1191.690101][ T32] [ 1191.693340][ T32] Kernel Offset: disabled [ 1191.697653][ T32] Rebooting in 86400 seconds..