last executing test programs: 2m41.040387446s ago: executing program 0 (id=1632): socket$kcm(0x10, 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113100f9ffffff8510000002000000850000002a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfffffffffffffe02, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) read$FUSE(r0, 0x0, 0x0) 2m40.544367303s ago: executing program 0 (id=1635): socket$nl_netfilter(0x10, 0x3, 0xc) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00000001a7a00f0009058000000000000000", @ANYRESHEX], 0x0) 2m36.632525506s ago: executing program 0 (id=1648): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x13, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "9c979b3226"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x5}}}}]}, 0x30}}, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2000000, 0x0, 0x0, 0x0, 0x10000}]}) r9 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r9, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) 2m35.347735485s ago: executing program 0 (id=1651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0], 0x50) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) accept4$packet(r3, 0x0, 0x0, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x2b, 0x80805, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x101041, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() fallocate(r1, 0x6, 0x0, 0x6) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m35.051995406s ago: executing program 0 (id=1653): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x2, @from_mac=@broadcast, @broadcast}}, @NL80211_ATTR_FRAME={0x95, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x35}, @device_b, @device_a, @random="da98c051bd80", {0x1, 0x175}}, 0x11, @default, 0x120, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x4, 0x9, 0x200, 0xe}}, @val={0x6, 0x2, 0x7}, @val={0x2d, 0x1a, {0x1000, 0x3, 0x4, 0x0, {0x7, 0x0, 0x0, 0xf, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x6, 0x1, 0x2}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x5, 0x28}}, [{0xdd, 0x2a, "6cfc291d1e6a5f9d51373c6aa6467691a2ad7b8dd470ee696293bf969574dfba855d5816cb0b354dad64"}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x20044040) r2 = accept(0xffffffffffffffff, &(0x7f0000000240)=@nl=@unspec, &(0x7f00000002c0)=0x80) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff, 0x40}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4fb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000005}, 0x4000007) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000440)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf8, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "534da1c0c3328fcee667f543432ff0b5aba913ec25d62491f46f99c8d0d911c1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9cd743d0872d1e0f7c4f9b223d9c7e40"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a32fb82195a06ce2c285bb46c07af4f7b59fc8ead5432f3babd7857fcafb636b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5dc0f46e74db9409347725f4eb10244c4a09804042936f1500641c4a1508079c"}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) madvise(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xb) sendmsg$NL802154_CMD_GET_INTERFACE(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20064800}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x52050320}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x1407, 0x4, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000a40)={{@host, 0xfffffff8}, 0x8, 0x8}) ioctl$XFS_IOC_ERROR_CLEARALL(r7, 0x40085875) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r10 = openat(0xffffffffffffffff, &(0x7f0000000b00)='./file0\x00', 0xa4102, 0x15) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r10, 0xc0305615, &(0x7f0000000b40)={0x0, {0x610, 0x1ff}}) io_setup(0x44400000, &(0x7f0000000b80)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000000c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x191a}}, './file0/file0\x00'}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x8, &(0x7f0000000e00)=@raw=[@printk={@s}], &(0x7f0000000e40)='syzkaller\x00', 0x7, 0x9a, &(0x7f0000000e80)=""/154, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x5, 0x5, 0x8654}, 0x10, 0x0, r10, 0x6, &(0x7f0000000fc0)=[r10, r10, r10, r10, r10, r10, r10], &(0x7f0000001000)=[{0x3, 0x4, 0xe, 0x9}, {0x0, 0x5, 0x5, 0xc}, {0x4, 0x2, 0x8, 0x9}, {0x2, 0x4, 0x2, 0x2}, {0x1, 0x2, 0xf, 0x9}, {0x2, 0x5, 0x2, 0xa}], 0x10, 0x80}, 0x94) r14 = eventfd(0x7ff) io_submit(r11, 0x5, &(0x7f00000013c0)=[&(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x3ff, r2, &(0x7f0000000bc0)="ac42894a2e728fa32c4caf84782354fd3e0624f06bd532569606cdc886033a7863c21ed13c5d57a3ff208b3da5459b0c695665a38c4792528adbc3e36c80197d9f4319d8100b98d5377dc3b1d5b5d475e399ff5350b083e7fbc3fd17ee73286b592671487d42", 0x66, 0x0, 0x0, 0x2, r12}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0x2, r10, &(0x7f0000000cc0)="1437120928b9f22aff854e663bbfed81468be086945deb0d262df02a45c0d4ff9fce6a85e29e99cc9beb6840c4ef910d828a5e6538e54f8a748b9141f54fb42ea98e8a6403f7a388c898c12df64b18c41827330e365666de47dc3cc3d3d4d1ef5d45f65e377c5406bbf9524c4cb5296834b0a900ef48751a5c8ea062f5ad39f01f0d9bd104e7b169886e0c03b75dd6a6df2d02bddb54efa511406e27fc0fe3dbb42ff5030b318f5aa1e27d8adf6ee08d3dc5713188f8d74d498fc52c5292002481177d", 0xc3, 0x9, 0x0, 0x3}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x8, 0x2, r13, &(0x7f0000001140)="37caa1b23608d618c21ff8506591d79fead8ccc074d9b78e5c602cf906dd9f8984e1ad3371e8fd523f6685f6568f40dd55a56b75710ba31fffa6dd722528580e46cbb54a4258cdfe6147f574bf74cd170397d02d0b5f99c40f31709e6f1c2b46ee3d50752b151e8035d6699e48d7ab9d86bebe2f13f71ba1c25773ef3fbbb6d80ea4e15c89de175aa5bcd8b8db88d81f9f4e73f86c311c", 0x97, 0x7fffffff, 0x0, 0x2, r14}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3, 0x100, r8, &(0x7f0000001240)="0c9a6e51292c4f", 0x7, 0xd, 0x0, 0x0, r10}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x3, r9, &(0x7f00000012c0)="890f5027f86c5bd6f1c40220572805d439fb6f059506920b7bb7b2c78b2867c72cffe3d1e3e50ce62b164209e6e01796b8c259ccbc5fc221543de8febea423a47f478bb05ee2f6aa92f176a05f75ca15eec114d823bec8351c9088a85f4352339e75744335a5b3b9c4865a7e5dfb0d6ec2ac6db7654321e6fb8248483994b0068b5d8e59438fb63d5f4461936e073170b3f13de1151c3303e5", 0x99, 0x7f, 0x0, 0x1, r10}]) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x60, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x46}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x32}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8001, 0x7c}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x4810) 2m34.820759183s ago: executing program 0 (id=1654): socket(0x22, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000880)=ANY=[@ANYRES32=0xee01], 0x217) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x3) landlock_restrict_self(r5, 0xc) sync() sync() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x54, 0x0, 0xff4c) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$ndb(&(0x7f0000002040), 0x0, 0x6000) ioprio_get$uid(0x3, 0x0) 2m19.272415956s ago: executing program 32 (id=1654): socket(0x22, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000880)=ANY=[@ANYRES32=0xee01], 0x217) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x3) landlock_restrict_self(r5, 0xc) sync() sync() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000004c0)='hpfs\x00', 0xc4, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x54, 0x0, 0xff4c) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$ndb(&(0x7f0000002040), 0x0, 0x6000) ioprio_get$uid(0x3, 0x0) 1m20.732476844s ago: executing program 3 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x18, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="4840f12f643e20c366fa66f9a82d53c42aa13a8597a1fd3f055cd47ecc59b389cbb93f2a14c4b470df75e370aae99b91"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000500)={&(0x7f0000000200), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100230008000800352921565903000000080004006401010106000600"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpgid(0x0) syz_open_dev$video4linux(0x0, 0x71, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f0000000100)={'wlan0\x00'}) syz_open_dev$dri(0x0, 0x1ff, 0x80800) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 1m20.040091366s ago: executing program 3 (id=1832): socket$xdp(0x2c, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0xd, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x2000080, 0x6, 0x2, 0x5ba2}]}, 0x58) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1m19.808472459s ago: executing program 1 (id=1835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x0, &(0x7f0000000000)={0x7, 0x400}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) io_submit(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r3, 0x0, 0x0, 0x40000140, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000068b8775390e29f8780a82e261f9da250539512dc8ac6f00c8bfcf53e3a3cf655a0326c120c7d40209dd816d39df205ae456ca620c063dc24f9a0a983b9255fa79433fb9a03a8044fa221e076270603717e34f9f2832e03107a903a353f7f3802f3a4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r5, 0x4) socket(0x40000000015, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 1m18.304629173s ago: executing program 3 (id=1836): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x40000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000580)={0x6, 0xb0, 0x8001}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00fba3010cff4a635bc48ac1a11e421e42075c8a9a32dfd58f215cfebb8c3448e0a1de828b0be119310c991c8d88177ab470d0de4a33acbc40dffb1e91b399b084c6ee0bc4cc532dd5f98a0c75c3127ba02f7bd52734cb4c09072467a583a43fd418f5ed06900c795b64c8b7876e542e65e6ea4b9378e4176de73cc9a57cd224dbceb099bbcc50ec4874fd3d0c43b79cfc5c79e886c27cb83aaa98a6b613d8b74d5edb"], 0xa3, 0x1) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b80080002"], 0xd0}}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1m16.029980564s ago: executing program 1 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x54, 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) 1m15.740616538s ago: executing program 1 (id=1844): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000580)={0x48, 0x11, r3, 0x0, 0x3, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x20, 0x31, 0x2, "a4f7"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.242546916s ago: executing program 3 (id=1847): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) (async) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x16, 0x0, 0x4}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x4}}}}}}}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x14}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x84}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0xc004081) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (rerun: 64) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x14) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xe) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) 1m14.156905592s ago: executing program 3 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r2) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@null, 0x1, 'nicvf0\x00'}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 1m12.931984898s ago: executing program 3 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x1b, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m12.794781394s ago: executing program 1 (id=1853): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf2507000000140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000380)={0x5, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@dellinkprop={0x38, 0x6d, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m10.307226794s ago: executing program 1 (id=1859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x550}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioperm(0x2f2d, 0x1, 0x10001) r5 = getpid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000000300)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000001, 0x44, 0x2, 0x31237648, 0x1000006, 0x2, 0x83}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m9.895698644s ago: executing program 1 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='3', 0x1}], 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0xa29, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44881}, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 57.943986143s ago: executing program 33 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x1b, 0x48, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 54.260061086s ago: executing program 34 (id=1862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='3', 0x1}], 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0xa29, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44881}, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000683000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 42.289078347s ago: executing program 4 (id=1917): socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x52026, &(0x7f0000000200)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x3000, 0x2dd8806920477201, &(0x7f00000003c0)) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999b0dbe7, 0xdcf, 0x4005, 0x9, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 40.811825114s ago: executing program 4 (id=1920): syz_usb_connect$uac2(0x4, 0x8c, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 40.06102694s ago: executing program 4 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) write(0xffffffffffffffff, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b000000", 0x7e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x40009, 0xe, 0x5, 0x53, 0x1, 0x1, 0x0, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 36.396872025s ago: executing program 4 (id=1928): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000001c0)={0x1000000, 0xfcc, 0xffffffff, {0xed, 0x4}, 0xfffffff7, 0xfffffff8}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000640), &(0x7f0000000680)=r9}, 0x20) poll(&(0x7f0000000140)=[{r7, 0x8}, {r3, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) 35.527981867s ago: executing program 4 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x8100, r1, 0x1, 0x7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x4, 0x9, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x10, 0x4f, 0x401}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x130, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4, 0x2}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r7, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54e6cff3, 0xdf12, 0x2, 0x1, 0x1, 0x1, 0x6, 0xa22, 0x0, 0xc7c, 0x3, 0x40000007, 0x89, 0xcaa3, 0x0, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x0, 0x10004086, 0x0, 0xfffffff8]}) write(r0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x10) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000004c0)={0xa0, 0x19, 0x1, {0xc00, {0x1, 0x0, 0x5}, 0x58, 0xffffffffffffffff, 0x0, 0x100, 0x4, 0xfffffffffffffffe, 0x2, 0x8c6, 0x540b, 0x8, 0x9, 0xc, 0xf, 0x1, 0x8, 0x1, 0x6, 0x8}}, 0xa0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000180)={0x0, 0x1, 0x36, {0x36, 0xe, "94b64fb5a5f84399f173793cb385557cac0d47550c72a79544eb3fc363c9df1776f7a3386ff75d213f0a82f888a33a31751f51a2"}}, &(0x7f0000000280)={0x0, 0x3, 0x77, @string={0x77, 0x3, "a2c1765cbbd1306cb5585a573110bebef40a11c9a7c83141d630cee75cbd261fec56ddd76b595716e574cf6245c04f83532af22ef73e0f545ce68daa16301c1d5f007cfa8460fcbd2a629903108ec92ca142d3c3ecdddc156771bb3a742bb291cc9163bb08ce8627c4b194e20286a70bee866569b4"}}}, &(0x7f0000000980)={0x44, &(0x7f00000006c0)={0x20, 0x1, 0xe3, "2eaa9e77c31f3a1c766da2b5b88f7249da148ffbae771d12ef8f5ee8e6fadf31da557744e495530be9e414e636dfec0adf3e7381d298caa203961910ae6b53ea57de96d6e5cd0b7190db548ea390688136e4b2ce8f03453919c22e709d185de384fa4ba268dad194b20b14b3999de28ed6a457d6f058c16ff4aa6965f3c0335a7fdc1d3a31ae76bc7c919950c8d90bf81d6b5d32e7ee32fecfc18406cff125c5f30e0012ddffe2bb3207fa9b9ca252feb1852833f50529718fb92961575e7119f68fd62c7a2c9c2502962a80d2b637ae5da25e383d4133e30190bcc4a1eec309d3074d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x81, 0x1, '<'}, &(0x7f0000000880)={0x20, 0x82, 0x1, "ac"}, &(0x7f00000008c0)={0x20, 0x83, 0x1, "e5"}, &(0x7f0000000900)={0x20, 0x84, 0x1, '}'}, &(0x7f0000000940)={0x20, 0x85, 0x3, "0aea11"}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) 34.009155859s ago: executing program 4 (id=1934): pipe(&(0x7f00000002c0)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x2b6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7a, 0x0, &(0x7f00000002c0)="e3c20325c0df0b7604ea6bec5bcf881458a6e2e3a2eeed666dcac226f810bb94fbaf550ffac1731616882e212d30b326e49b88937932f320c0127789d3915f324d829667f2a45acce10fe4f74d5d312ff69a843551633db642713becaeb8fa64dbc3cb485bc7cad2b6f087c763bc540e67769d555fdb4c9b9297", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x7, 0x16, 0x0, 0x1, [@generic="92276d"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 17.434244922s ago: executing program 35 (id=1934): pipe(&(0x7f00000002c0)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x2b6, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0xc, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7a, 0x0, &(0x7f00000002c0)="e3c20325c0df0b7604ea6bec5bcf881458a6e2e3a2eeed666dcac226f810bb94fbaf550ffac1731616882e212d30b326e49b88937932f320c0127789d3915f324d829667f2a45acce10fe4f74d5d312ff69a843551633db642713becaeb8fa64dbc3cb485bc7cad2b6f087c763bc540e67769d555fdb4c9b9297", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000180)=ANY=[]) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x28, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x7, 0x16, 0x0, 0x1, [@generic="92276d"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) 13.881901898s ago: executing program 7 (id=1971): socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0xfffffffffffffffc, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x282}, 0x0, 0x0, &(0x7f0000000400)) pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000000, 0xffffffffffffffff, 0xffffffffffff7fff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xe, 0x0, 0x1, 0x4, 0xff}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r4 = creat(0x0, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000440000701fcffffff00000100017c0000040042800c00018006000600801c00000c000280080014800400068045daeef343b1388215bd43f66b543dd21d51e12adab84b6d288de7e18ec22c7eb5447bd922f762f9552c3c2aef5d2a36593a1560d9f348f7db9e516ef2f046245831b90da1dd5faeb5f9bf0da7bc410e2be74b9f776077eb552aff9d5d5f262d5ac91d7f193046717a9eb1c731996dbb7c4d11813eee18f9e972c88ed78cd8f6fb36d3383601e3a8ab"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000280), 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 12.741980721s ago: executing program 6 (id=1972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x21, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r6, 0xaeb, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x3c) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) close(r7) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x7fff, 0xf}, {0x41, 0x101}], 0xee01}, 0x14, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000fbffffffffffffff00000000000000000000000000004000020000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x13, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 11.799744087s ago: executing program 6 (id=1975): timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x32, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 11.624722785s ago: executing program 5 (id=1976): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) close(0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r4}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r8}, &(0x7f0000000640), &(0x7f0000000680)=r9}, 0x20) poll(&(0x7f0000000140)=[{r7, 0x8}, {r3, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) 11.184551593s ago: executing program 5 (id=1978): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x48000) r1 = creat(0x0, 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[], 0x28) setsockopt$sock_attach_bpf(r0, 0x110, 0x3, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000800000000000000000000000000002000000f5"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x3, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x101078a79b0cc442) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x22, 0xa, 0x6) socket$netlink(0x10, 0x3, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x11}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 9.898379358s ago: executing program 7 (id=1979): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000000c0)="a72112e1196f3a66c9f252acf0881186cd2588b07e49d36957a1ee6130703ea0a68ae82de82275694ea54b0174746b2bed4300653e4ef53176278f29ac9e90ade2d6eab59cabb21c94296a4440f6a0e03011de4bd1e8952d828db9f140f9bf5e8b644dffa6859f8d6b8a6efc740dd9e64fff91bef78d15b60788763407ad8557d7a391c4cdd8e357986a04f00bd24e8f1fade18f531ba31711661772ae063200a9585b0d5e99674433ba72ce72fbf60cb79c772c252e91d5074ad002f3a63037400c550347ef", 0xc6) 8.476911182s ago: executing program 6 (id=1982): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x90}, 0x6}, 0xe) getpeername(r0, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) ioctl$FIBMAP(r2, 0x1, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)) 8.33087916s ago: executing program 7 (id=1983): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x37140000) r2 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x44) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x105) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76", 0x5, 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) fanotify_init(0x3f, 0x0) mmap$xdp(&(0x7f0000893000/0x1000)=nil, 0x1000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000da020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x1a11c3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client0\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352340900", 0x0, 0xfffffffd}) write$P9_RVERSION(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="c04eb2bf16e27d630706efbf7de285285aaffe277ba807b3ae71e9f08b48433283dbab822e410564981d6521f5ceb046bdb0fb8a5da527bc16ca2becab42fef5989677f99e262e6ea3ef962f9e92b0634d15c20c880d5a033635d7180d6585d3489050ba27369a1c1c20dae990bb1d7ae51c99c95927a3b8d907b549da3b19b1d84e14e64dc8"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r4, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000100)={0x0}) 7.898426994s ago: executing program 7 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) pipe(&(0x7f0000000000)) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x24008800) 7.835992803s ago: executing program 5 (id=1985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup2(r2, r2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x8c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "54a78386948f6f25e85def02a7a4b734"}, @TCA_CT_PARMS={0x18, 0x1, {0x81, 0x3ff, 0x7, 0x2, 0x4003}}, @TCA_CT_LABELS={0x14, 0x7, "8653a596ac1ce59f58eace863f88e8c4"}, @TCA_CT_ZONE={0x6, 0x4, 0x149d}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004041}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc15) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000c000780080012407fffffff0500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7.51997689s ago: executing program 6 (id=1986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) write(0xffffffffffffffff, &(0x7f0000000300)="fc0000004a000700ab092500090007000aab80ff020000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07326ade01720e6cd5ed6e4e9bfcd772c74fb32c56ce1f0f156272f5b000000", 0x7e) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, &(0x7f0000000100)='barrier') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x40009, 0xe, 0x5, 0x53, 0x1, 0x1, 0x0, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 5.853081437s ago: executing program 7 (id=1987): socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$uac1(0xa66b445604afbc82, 0x7, 0x0, 0x0) poll(0x0, 0x0, 0x67e) alarm(0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x33f901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setscheduler(r2, 0x6, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x40010, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0xfffffffffffffff9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000023c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010003000000fedbdf2512"], 0x1c}, 0x1, 0x0, 0x0, 0x86}, 0x4010) faccessat(0xffffffffffffff9c, 0x0, 0x2) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x2, 0x4000, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfcd0, 0x0, 0x0, 0x10, 0x39}, 0xfffffffffffffd6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.997003948s ago: executing program 2 (id=1989): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0x0, 0x360, 0x1c0, 0xd0, 0x1c0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'netpci0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@local, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'team_slave_0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf, 0x1}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x50a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) symlink(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)='./control\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102384, 0x18ff0) umount2(0x0, 0xf00) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, 0x0, 0x600880d4) pivot_root(&(0x7f0000000180)='./control\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000780)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYBLOB="16e07ac49f840edca1466ac57639a515f4365fee505c560109a7d7901e5d1701bd0d26978569abb544a47bc014ade6e19afea7b984eb57f05f1caf442c4701570be4ed6613f6e3004e96d67dfa67f2d02f1436687eb22c18ee3125ae4c46f1ce09235a1b01b47bfbe45869965f6a65e7d653d6d54f94f42c5525d4fc5a853b82a25e29f7f00fe4f930950700c46804cdf866a4414fcb1ea7876297bf84cc22f66e2f1d32b7bea5fcf3a80067901a2ffd74de", @ANYRESDEC=r5, @ANYRES64=r4, @ANYRES64=r0], 0x17) write$binfmt_script(r6, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 4.49631525s ago: executing program 5 (id=1990): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x23) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0xfff, 0x88043) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2d2d}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8d0}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008810}, 0x840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.276466621s ago: executing program 2 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="fdfc19f52a929e03000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.136328271s ago: executing program 5 (id=1992): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000000c0)="a72112e1196f3a66c9f252acf0881186cd2588b07e49d36957a1ee6130703ea0a68ae82de82275694ea54b0174746b2bed4300653e4ef53176278f29ac9e90ade2d6eab59cabb21c94296a4440f6a0e03011de4bd1e8952d828db9f140f9bf5e8b644dffa6859f8d6b8a6efc740dd9e64fff91bef78d15b60788763407ad8557d7a391c4cdd8e357986a04f00bd24e8f1fade18f531ba31711661772ae063200a9585b0d5e99674433ba72ce72fbf60cb79c772c252e91d5074ad002f3a63037400c550347ef", 0xc6) 4.116701621s ago: executing program 2 (id=1993): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x1) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000240)='\b$', 0x2) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000040)=0x200) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x3c, r7, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x3000c000) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @pix_mp={0x3, 0x80000000, 0x3132564e, 0x1, 0x7, [{0x9, 0x2}, {0x4, 0xd888}, {0x3}, {0x2, 0x40}, {0xffff3916, 0x7f}, {0x2, 0x62}, {0x1d70ac4d, 0x200000}, {0x3, 0x7}], 0xb, 0x4, 0x4, 0x0, 0x5}}) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) 3.288655217s ago: executing program 2 (id=1994): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x3) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="37effdffecff0000f600050000fb0d119f3044395e52c1e1d6afcee3600cc831f8513736b89115bfe7af8a8e709500abdf8774361257731cae96b440add2b8a46473c574d2e33816c7668d4ee973fdf99883a73a132a4b902cdcf231881b052d8d48cac6de65b7989632fa233fcd"], 0x14}}, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_setup(0xd, &(0x7f0000000380)=0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') exit(0x100000000000035) getdents(r6, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)={0x4d00, 0x42, 0x10}, 0x18) io_destroy(r5) 2.586443551s ago: executing program 6 (id=1995): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000400)={0x0, 0xfb, 0x65, 0x4, 0x63, "c4ec44e42bff5d4f084f92e4ecccc6b7", "66fd5560d297eef22f3083155e9bd336ed622adffdb077eb17b7fd9b29bad795e6135e94981aa537dc3c122f27397ad36f50aa98edd47322284d6d51e44505b23f3e443583e461d379cd57df8479c387"}, 0x65, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e02, 0x5, @local, 0x100008}}, 0x0, 0xc66, 0x3fc, 0x0, 0x5b}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.362627278s ago: executing program 2 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000b1c0)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)="0e9e8631b84ebaeea9e72f44ce2c70cb13237c024554b4f0f90cdad21974fdc947685e40d7a2a0b817c0c8784b4e3564b7ab62bd0bd42d7dd60cb0abda72fef21ff6e248a575afb3afe740bdd9fbd938eb059d369f23e0e5307dc856554568611482c3fdb35db5bcfbe2856b24bfa80a09a4d8e322754c52f8a9413def5690d03a3e7fd8c8ac7c17f2a5d21be7cf8bd747d9e7f5c33ab503a10a131cff9831e7340843fefdab20c16e4e726a9b8943cd1c2c141120d4d4802c1d281bc5915b4375450399514d3f36ed9ac0cb8e21bdeb2d47e15b4160f119108bfdd34ec791562003ff13803040ea310e039add94f8596a2d90", 0xf3}, {&(0x7f0000000480)="0625b3a3195781e84754e5ec0086c717814bfb1fbd40c738bd20c0ea768a6ea3cd16313072d5cf22123d0dbd83ce9c59160afc01", 0x34}, {&(0x7f0000000580)="6a17c5e5f6", 0x5}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="7548762d53640e9cb5469a8df8252caede20ea59190e602b3ffce151b07b5ee0e1f7d315b22d247145eada3392a6b4658f0239bf809c18e015ad4aa13f022c83c0aadba91fbc105e5b8b17312fb2be", 0x4f}, {&(0x7f0000001640)="7f339c44147362990045c3b3524fa32f3d30d1b86bec47a92790621b5f542e4a46d64fab7b3b8ae10d14bf4b27352b7971dc438d41204f86f9d13c44faabf4c16c22cd1162aedc57fec3a543afb3b1417caf6d0bdad228a16d009edc4eab376b6c24504429f47795edeca43efcb8a00fdc6d45d627fe5ac59b5958eebcfcc6058e7c1f245a793b", 0x87}, {&(0x7f0000001700)="e75c2ab671a4263a31dd6e60ee96662c4fdb5a13c20213200e41516d14e0bb0839c22c81c8eb7f13217774a3550db9c900e4b802b011e052f1a367f4a5e3a9af003733adc7e22d2e722b7bacb185ae851b221e054ca762e41442eb9547d8bd0a1ef0c23b0fc02100bb2b151837c36a713ab809d549055594ca3e5b2ff632f0cd50dff05da6050324f2c7b29e3b27c6149f34c770bc3b8067804e53", 0x9b}, {&(0x7f00000017c0)="08d2d4dfcb874773a24680f9c6c116504a63dc4d59e54e3c8aebccdfa6f2b3059e15b9499b9ca540bcefce3270b803f92508e8e9e0f01696dc24b317501c1659f88ec3ac537ddcec085652b9ce0087b8263077e2e6ac49c708180b1e596f0a7d90a067800fa7e1df84027002e6f557b1ce9d33196b136a4a132460193ea89f08d4b4dd1d2dfcfe42c5d8597d9d7baa19b5272480e422a5cd63dee522572e39e22f6cbab8971828e212728c2f4983254d95e2f94eee753c1a1806fa3a66b7f6a65452", 0xc2}], 0x8}}, {{&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000019c0)="a70ad970ce7d64077f1dbf33a8f9d8db107690c0e8f27c8ecf7d905f1c3353f2f19a1c79778ffe14a96890513294a5c0994723f59b7989445a89813322e399d9dc6e61f2896508d01a8f29e6a9a7dc3e027eca36cec77708262324745834e3a6d351043ee9bb3a38832053c7aedd1f0398c53dea5baa220181c822c35701cef459e195cce67b9e181126bba34ba54c3ea8f5034ecce4622c04694d015213d2b0c34c557473e1e3cd1d55e7f981303aeb67490d0972902cc864676a67151c827115109706596621388431823aa8b50d21b2f3d43b875a76b45d1db75e3196e6a884e396e97d3e2405601a63554ae4699b544e5dd3a42e0aac88fcaf6520f024156996dcaad3b2af393a69b79783ee924e93b4c3a271b33566b891fe11244c60cd80f41f3fc01f262a55b2abbfd248aeffa47748a29499ae046151ca756574803b0871052d138c3cc5541bab81ef4ef9b1119fd8d22c426fde191fe5beb0e8030b34346e9787adb8d5ae2c27496620e681e1fa1818de1e83abf5bfa0ba48fd307b4d5ace10bf3a75a949f56b694451c88f0baa2cf8a833d584664eb0a66f2b4c3ef2ad941907167fffd144263dd085848bb4bc725d5c5dc1d3e3b3310bad98805602c1429ccc1fe3aaa45170c1b9ceeb82f9cd37c77d3c4ccd824c3a9a45c60e7c2b2f8374a208691e963da2b9cf337cdc0036b2331c97aa376faa2d88b56322113a5d2211b0c15c07aacbc288be9e8e9fbf824b04ce5496d1df08cd967ca646c08875e3305d294a4e8f9aa3719e5396e4f2cd8901390f0e9c6770cbb2ba0cae66f64acc9b522d5fa8a0a66379480dc9365ca90cf5b1cbfebafdd77d219f9a8ca0bcea10a64f9049eefcd9528eb788c31382c4f5568a033b88533f8b437cb913d81bfe748fa8dd322c138610d34fedbdcac27150698a487fcf32ca288e4ddd2ba4fd6c9cb65eb103ef1490345a4e4c694ebdbce462e17f1ea623f6b87f72b32b57dcb8fb5b18979645f3367adfe8cc9c181c40ab9e46ee216472c614c8c387c344648f9a1d431c555ef33def85409205b7722f7e505805356d88e43ef4cda2e4402955aa2614ff64c78c56a4aeb8f04e8a5b486695a1dd89c06e1532d8a44010a3b05788a56aef8d1b036142764b8ac7f8b35cb06b8ad4dda86b46f9d40885fc1bc788b606405d146eb6cac5159623a702b4531d70ca5ddae8a5500c84696d2333cd3953e0a760043924b46e010f31e81f54808d815a85f70180fbea76db18554407a104b576b02e903afefe5d8c2ab8b74f64a0092857e1947edefb7648cf28c63bc79f63f6c60dd3ebdd4c17dc468f3c43d53ec8f8cd8f1d0ef94ee44351589d832b536b109a54cdd24a3f1f9f58350d52f5d0da7a9c428b0494f1c3dc1948e973eb516ad8bb976a5add2f58198b16ceee9088435018a0bcaca4e35fb18cd1f76407498566d80406b2ae210f7a512d98fc9bb30783d5d3477abe6252473947514b9de432b585872e11dfd6eba68fc30a71e71e06e2b7bd0f673dfc883d5a07f32837d15374f3f374e60d00c8088561fc517abcd39deb958419e4537b78b934e25fd664ce31266485b367d8cb23f70de2b6193d22343e31e341f24beba755f2719538b0ebaba5d3869c236c89c971fd481191a33dc5844c960106b1b86a3a90af021b00f33788ff823ae25844841205847048bd502ff4810bab68ffebb268e64b27547c8e5841bc8cf66188066c0764da627882dd6f4b22a70c5e8ebbd8b330500cc68479b7adc85612156840b09ae40b5bc355dbb2578bca35826b7c364430143b8a46e6f45408b54ce0fe32ac1bda8eb449692a05857e27fc6b2e93c3a5a90a50f8f7cc9f1a1bc67ef59d4b1fe3526491f63b2a20d6eafaf426a79a736ad327990c0461223715b04d57c33c1b42117923a6872a58a9617b582502cd6bedc58a51fca0d0d301b222dabe930c6bc744902ac66c06acbbe7d39be53f7d0b339bbd393fbea812c25a3545846896756f4ea5cd45a33abf894e3fcd96f8740ec68cc4d0c897e49bd9f30260c61b48dc123d4402208cca511170a4d24667c1b1a745d2bdc32865b0332ea5bf1a690f1d9a883bcbb4d5d6144f433c87e1d7631ec24b6c7c672df88e9edc5da60bbc1ae6916b80b5add0add0984147340d8bb010d86020d3fa274ba1c02b76a8819a48c3c58174e979533eb3847216af9ac4418304b95eba08b479c55a5251713c8aceecf8b3fbff21d27168e2a61f5b6fb87a6567cdc54fe26114e6b84144d8247ec0258a39c2b7214f557ac3f3c15430b774c9ec3a76806c2ced035caf132a79347c1f9885c226040424a6a6492de13d10da45b3188f2e0ef8218b33e9f9b271d0e60ccf3d0da55845a15fcfd1c172410ca5f17c6276dd9f99172eb2fd344dcd5f01f96fc2dd3e8c9b35cf315e0ce7b441940111f59d1b66eebdf1b597230cab118ab9bf89fbebfae65da4e2166f980a0511650f0c1d737ba0807ce8d6e060f46aa1d41b0b5dfd20a5f37cdb34dd6358c4265576406d9bb5a10736cf1a7b298c510fc3165dd068904b564022ccd6dfa76d4cb1a910a8c86508ac806f10687737a13148e8df1cd63ce623c5e7015faffff762811c49bfc2849a891e3038b835c3b0691449722989a4bd146b728276c743a1b405569e744dfe0743a9827840a253636390a47aefbfea9731738283ac7f590df722c8a2d6ba1dd1a33ec16dc7237e8830be9717a9866a3919f8752dde1f590b4451e0f6d719aaba67d875801e19357e27e803f6851d64caf1c0902e55594f9bcaeebffa14dadf5d6e36815439cb7ac0ad5b45a12063876c9a79d88932084b281dbe557dc33aaaa3f81ffe175bf300a17b80b3b5da6317b65f09ca27a4765868796760e0db25950440cd6fde95a37fa0a13992bb428d2780f219a674edc2904e03b609e91a9490f5fc8a6ec88cf049b68ae739e4dc5d9e3c1cfcc3ac984a4f9ac0f494545b83043474c2a144a86b6b19ddf4ec9cfe6c92326b225f776dc5c074c14275694524b1ef5ed597e92af7618c647a86ca87eea03dbbc81b9927db6794e667490234f774645c8bc5d3f4e80927faf0d5c4a2f78c8f3986e4e1c837dcf9ee978c5d678be77e1fd139b905029e1a31ce8ba3aef869ff342acc37d54fd0aa4814237a77f24952cd4e70a459cf8dcbba6373812019de03041580af3576dc54056173d5cf2f5ba9f7ce62d13ca4d93234edfc63221b804b02c8f0bf8a9d00a593f8e32a9279fc2fe51206fe7472d55962e92a3e1f68c1cad3722b7cc549e513a2b22e2fd7a97ce571a8b0ca8098d41b08c34004d4157aed99dea0dd6097f65b1b99f3575758fd1eb904d2a40c8cb5f16edcfff1527b28f7b04ff67fa80030926e54345a38b40e9a683b3ddba1fa17d037d79f45d1d66f072f80a16dc8d265ae3d0e8b2f93edf64dbd2ad884115f7c99ddcf4665d871dd9829438d2583f4e06ca816399587269216ad69be9c168ce8450e370ab5e70b49fbea9254af8049a4531f886cfff0ac00aca9b7a30cd928b2333aec8e123961897bc54fd21d23b2dd85ee83064a3b3dea8242c68248d2b4ff0c139d791d5c396874a16dfc41f195b01e8415e3d37cccd5e72478480fd9c01c278d96ef6948f643eef075415c58c40da04821e33e18ffc6300055c664473f09936ee8544e925e16175e4a31e2d3ccc1f2d95e40043f7fb8730c98f6fcd1603972dbcf4fcdbb6f0e5c28832c761a64f52e59cfbddb17e78069c4202d8b2227a1d1cc011077e8603400b30faf2a9d31481b8740c0bada62cc6b919e492d5e1289ef9677f2678c312a124981d670cf60f93c8d7124a2e8dca5525acb883691ee0dbe6095b338011a59fd380de12c62d700aa8783a14fd998faa7d1817b7fa7e2d608cda652f4ee91eabb75c550cbe740bd999b83efc309aec6e5068b23c7062cdad776c348a842c7cd230826a74b80aeadeda39ffbe0a943b88846da2602448fb0e1ec0fb892cce5cc0a12f0af1d5ea96a643bb010665b9149113c60199a2be590c803bca20358f702ca458104fbda23940ff4e2bd247dee070ee6c11c6e86adfff6dfd5c16220bfcbbb3bfd57819ad106cc6abffae147b79ef36f2f82a0e9f0be5717830edc44d8b153dbef9cf3d5083a4383fa30e7206445a6a963da30c3724c51dec84595d0554f664a327ca9c4556da5898acf4abf8950e3171b25e3fd845168188d63761d10d456a1504a3137c1817c1295efecec10b4c13875e883267aa7378126c9722649a02a2872ef43510c91131658d5e6e2e4dea7e64e49622a63da9a68e1e9c735e746f02994b1a6bbe69882eeaf58cfcfd4dd7a8dc7c3bed769f4bc25ad55e3ebf23fa31a9a8aa74ce8e3d06a590fa93ecd9275c2b6fd894511dca551cac34ac8e50c0f600f7e3c4d086b7e4c0906dd41427a4491c8c9d7b0da2fa7ad6eff195de662a97be2020e0337cb830bc2a83e2ff5a7ef34840d3141b6f994635a2842d88ba68e69b08bda65f6900679fbc226dc0b08b2a9a154e432de9ca92bd849c345367ca4f1db46adfc846426af1fcc841589c85cfe412f4d0afdc74975d8588ab9cee6786643924047f2b3aa37d5697a5e9d7a9877cfdc6d59d8924d7d220cd74c211067d1e8a086b56f962e7842e1a4d4f2b432c871a04d56dafc278b09bf61170cf72729bdbf19c224a0670c8c84d1a4da39a1bcb2ca4295c9a4f918a2e75aea28d216876ff42695d7137b3fc6fd2f7be69910249519318a22f1b076bc4efd3a2889083a1381e4ca02ab7729408ecdf98ecb139a84d6846827dfe14194b148a50e66836b38144a855dc7d347a94ea85d166ea983a2e5469eb419b892c4547424fc00bae0e3a16cdaac1b354574c084d4219ce3ef824bb6c0f5bf93c31cfe1a1eded64e34ae9d2e08c7ee908be9fcc7b14d4562660d49cd5bfc7b43fb7182ec44e044045a56c2c91f10ca32086fba9f4258c256a8e9e47b300649ca2e45b2ae520ff1558813c2b176931b1648ae092d3c92c8b9cbab1863f802c075f6bdd7b1f92458ff65451b64a2c37f85b15a547feb67ef0f434ea0bc9d148cb9f56f03a2e27831dbf206e401031645b68e088ed46a9fea0b8b70f21aa03d0f94a2093823781c10c28314d96a3d1b3608084ca230e219d06f568475ab48a49d13591208c3b43f7ff5a74b2a916a01aace919a64811d8389f44a2ff7ebb37919ec819d8c399a9db989430e4a312f81848312a16d9342b772c270dd6ce77db7516c0008be8869e130fcf26dbe99bf2b730b9cc9fa405d98236716fe854d09386f9cfe8a025aae14f6c045691b4d04267f8706a3afb2e2ecd078886787038018a42d8c30b2922ae8e62b0633c34a72c00dc3c6f06c8eb95bc29bf6dcf8f590123c47ee91714f64b837b995115815e85c287094c342ed3ac1815640949225626a0df55e09e40e4ed2e05653d68ee8ae51bfc48e5fea61405c11a8aace743dda9664c3d99adfdbf67b07bbf32bf6a789376c87d783ad0d152d4ed93423622f453a43c111c8aeba3cd941f92c159d38d0e80ca9a0dee4ac9eede03ba8728ec05a0ffac27079f44ea9ef9911633f558cc3c6f559b27fcc082034aede1e5d3fd4532031fb3f609fa8bccbbfacd6f1c236ea282e7aad8ed5b71734f4cb80c8f127c09f0db59f4e129f4fc41b8fa02a480babd00bb6454d3360701cbd7a622ab0ba011ddf124b5b18d3aee3a6b05c2ad361af9b4ee9a14cb487b4c6cbd5ad52ea833f3153d0dfc40b8b6d8fa9f64a940b00bc7ea3c730ea59229c", 0x1000}], 0x1, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4}}, {{&(0x7f0000002b00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002b80)="c81c6ebe35d2660c8feeaa4aac6345af34a6326e2cb31e4f8804f3c5bff51b654899212ce98448cdd13b4c5ca10219a380c625cfc8d2428c7491d6a0c688cbfe4d5fed93fb25815659f6c9d35b9762eba3442431f731f2f8c87df089283a47e29081c18d3a15314b9d0adb873c888cb5528af7962a9c17ab595c286b6d9f5003cf2f23d8b866be9716fb85c5bd8d53d287cefd29a60189ad5bdf3b85a0f2b4b9ef5a8b20a5168ec911511801084ef25fd51e68e5c3bd436ceba9afb33df09ad905692491f7c0f4cfe114382b1ba2523245073693696007e32be3da91eba7c790c89173", 0xe3}, {&(0x7f0000002a00)="433306decbda59284517abd30f4c3c2fbc0381c47ffcbbe2de77d0c79833cda976c7d884aa28b46210fd0d3c9b3ee2322cd5a577cae4bf21784bd2ba4024879c6e68b3c46d4877bfe3b174ea6f00ba1eff0074966c02051ff5e941", 0x5b}, {&(0x7f0000002d00)="d7b5808c0c2130610304c023367873a1b6c94e283b639f23abda43daf44eef5178fee32d355b321b0ff9b971730a2b5554280db7334b3a03f59dcd5b0287672bce836df3e731dd667061f178d8d1d20fa56bb46b232edd184452781fbcea1ba61323dac27a1e700d1fdaa702ab08c55ec881afff6c80e0525361ac254acd7b085000fc7a477bb6ddc717ec535db044853493ab48bd69dc3eac79542e402197ea3ddb8de444e260ef8592b524f40ecc8ab79d2c00baa33602e0647674194e54791795b67a19c3fa75fa9e5f9ada22ea81a686c1f6d2cd9aa6ea033e57412a173d81b51e8fa0d56c869704cfd5f0433fa8c37333dcecf59b56d60e69ed2e8f7070a663aa160b151f37a827daa7948ac374ac96a478a8fa2c726f4076f2d5d035e021a19a44d4e7d482ebc748020fc7b5fbe066a82dd998a1e14fb62b279d27297bdd591bd3772866a04b8fbef94487cf35fd0ad0ca95e94b80e63787c041ab135e8336425431abf9dc66a4400c1be16b72ff0aedae1d12815bb064ffd8faddfabd2646713928a7c8c3e3d422396060fec7a55bdb83b7d0076b30510f827dfac7efdf91bb17b55cb9e00edc9c2de6a7df2e01386052a2d13532765390dfcaf59779e697d8b2a1ac57f0f23aef971a30dd1d8a69adb78368b55a4a1906455d9765566c50367433c36874ac5427cf4e011fe71f95ed4aaa43279fcb9f3b633f504b22d3a64ec4c893bd2c1f678107e57dd3a477852e8470345b36e27c3627e4c446c6f67115a1338ad9a34236d9aabf7e46e943329fa8817026b6b5189cee79d9ac741d59b27ae819bf287dbe1edfec0b6fdbf0c7c81c8e95276714e2fcc17d81e2a6ea7d96dcebc64a4f85a75bbd39b44cca28d15f7db7d1cfa4b6a97e355b0a32e470e3372309502d915569d572e325324ee534fda58462aabe60b12f25c0c88bcd4a124fc2b5943778cd21cae7544f096c5b93fcde459374fe3387fb5918024df352dcfada7012de550d1e563ce7905360fb9697453381ffaa519e603a6496382e1d87e4f53339467d72366c64f5a11d9ae91898f3de100115ed018267f1e5ec5cc2ac7a312c0b32ad3281c42f720cdb02bf00a70868ff969d9195dc9b5639f7eb392eff48486ba956d542161049ce45ed4db867e86fce31c4a6808d1ad4d7bcc89e61c2407dedf7bebb84ee8d32b9826fe851369e7084709537e7ac4d6f5c7b163e9aded432adcdd08eee8a904b40f58f3c8ff53fd71738ba90fb99308d6e956e6cc21534658b53bb6bfeab8efc1006134a181110bcaa327d47809173990da00fa7010775ceeb02f64d1faa73ac90fd88d81bdde4ac01141eaf54e20b9267ae8ca39de72d8a3e6fdaa27393163a84754dfd3f8a18edf26e8fb90cf75019e14d79a66dcfbfecfb45e37f74d8c19b635edd89f90a9bc53ba576cf81b9e95ebd91fc2ba52f4e5097f10ff1892f690fd113ee9522fe1d03623ea901c3608f250986c29a98b348b5c0ef88d7812df7cb33568155e6e683b0fdc6f36fdc8774a8af25b23d832d9babd842de18ce50db1cf4bedb5d8cac6c83a58dc25df7e82dde7ddb56153616ff312db08ffdb9ef91cb4301f29b6d1f4e088de4af4dc4156f549206ec00523128cab0bb7bf069a659afd458d8a10b6a96a48b4109d308ec2568a985246dfd93f92a7bd3b03b665f7d7e09e890d7701d960bf65216d94ae028f58f36e7056ef8c9abf7509ac50a121cbfdf32d65e021b9efe5ae2258421a9ef216d68e530356394691a83c3f98f7eda764b3033aea412542197baa594ae9999892731a9f0d9bcc02ffcb3729899680d39672aec8f278475e2c4952496ece2476c5cc565ca90fd6f2fe2b84bc758ff471f786a815831dde6cab46b402738bb928e0361740939dc19bdf67b3829dc407d16c5490fcad6770babaced2fdf9b3542c008508188d8bdd878b553c04321265a3aba809b56bd3e7ffec8ca4225da5545cac22e3a209bb567bab1e4b9f263d55e3e9a7f54a4683aa1f6fb7461fc7d847a306c9cf73a634ce8849b49fd8ec1961edeea186d75a49b037d9a100b98e8b3cedaf91f272bb5444f44d8c6e00564da2c68eb1e7377fbaecfe0e3b1e1965e3b9f8a554d9e997436812952154e2330afa6ff2781b3fe41451f3f9b98ca448b0218e8175bd834b61ae040248e08c43f22462986b009c4cdbe68c1441b63c77aa4fb75e8f4ce8a76550eb3519f38982a031dcbe1a9c3a554a8ea619e727158bea818296cf211ef28f0cae20f98eab4fff957f6ece1eb6d13d4a154626d4abae3c59e3aa7c275b4fa25c7a29cbcdeb90e054513d4f7e6a487f5c13ab65f5483a4b04c64c17c1a330905f43fed51a2c352d1207821448321071f666580a4539679d87d0e634cbcd7d103e67938d98d2f4c59a06fef48fa83e6d0cf8e125ea7f476ef749bba402ea38ca3cd312e290ec587797f11dbecbb944a044cdd288813a51ad32fbe6fd71ec6a823787f9c5ea14a3cb7eb74e22deeaa040bdb0d6b5be8571056174f854befb0923b709b124bd431a3088121d0a83248514c25d7923b6852a56717d6606eb578bc96695f12dee06ed99664daa7be53d1a6155468967623594119248b34c7daf809e81105e5616b01d7991f635a9fa0b6017d12629cb42c994e98837e2795d2c429d4049e08d406e323f0ff066594519d386f078c38c153cb9b5672a1d83ac176a2f625a4f30227ac82eccfc4ce42d54b11f0cfa9ab2e78db7fe46024da964dbdfd20dc5de0b9ce2fd6f6ee43577217934eddae936668b928658f1aa9c070d0d241bf4885e1d2a1c91bd02a2f1c5597ebe20ba195fb704ee81acc444140150d574ab2bffdc1e27a777a7911ca3ec37c86004a1a73f4fe5a1fcfb7e85710d96852f6ec90775668e9aaee2f340167f3c1934b95b80aac1ee3bce472e37b41f7d3e88ca190fe9d7340cc2dd1d002f4d3e5b1268b774c11f3753faa7921b9284558c708283ea77ee59a5409e7194c0ce7c51c3e2828ad9dafa5f604ef8136bf32d456d0e2bd36f0a4796bbb95c1092e315a9f82929648ba6b9c80881f65e7fb331ec8f24723582b70597dcfb922534b9be0161f8c58c316655ae6559a153cb6df32fd3bdcd2de4195e377d5d6da4d06c50461919f743ecb2a74b1f575319605cd2611b8167f4b4f4421c82eaba2efa0a61557c802fafee43656457a6734ebab3689a1f0d74b8fe69e33a1ba3b456686c4361476b1173fa21578f450f7877517fb9b4e89e6c3534d812ea7796f26d7a00b5d4f22c67ba2d5fe5d609962cbef4295964d3619c7e734bae36b356484be68fc8c1eecd87eb987b1195a9f5d8f3fda12998ed49e0b13abb33eb1f796ed04e717f05cd2e335aa03663dabaa20369f98fc975757aec33af972e049ff851152def17a25a2f6ba4f7258f61ed2d36b2278e4a91636ebf2a9279ada7517ecf90da64e04c5dd47afb9cf4fca9a97f444561a2693e9ff30923d258166317f74fe6fdc5795337b4e3e6f936d2e3210585402e3d8892d36963e7c13d10e98a2f57c962a576a5f81bfa2b80ca310bc1ea04d7a29611cb74eeda7ed000be3d8314a2c032e81819b91c080f6be5f79b3851a5f1ffcd3813435520ef7f970454feb3e3bdfe72e8eea2b387a29bb07aa93369419e64870de9e0e6a4b5c7577c77930c491e745d9817959d8afc35882a2fd387aa6c5d37554d7d1abd63f9c022993d4b127ce0356999ad8ef12ff1205d20d68dfeefede4f69e649625a8c13ec112bdadf229e925a8fe3ed10b86f59dc2ec5bce200524ab2d907c633f457c3b22523efa2d660f55d95cfa2ae38039d9cda84ee39a62152fe160ced1cee2d9f6aa3d382b140513de042d21227de30edca786a2101aabda1b0ae661638852f130cd8eac7d26182333d780cc0ccdef8e8af5296b708dd77c9491f5ca6a418cd296521df7540f498160a773b44a7b1bd525af138734786e3e2607ebd77649fc18ba1d74e89606766e5003513d3a990da226d223bc41cd440ac0e404600aa83c96edccfd83fd983ba8d5dc8a6a108682f93cbbd41e065af3d1dcf7b7150a46896618c235c387de02c8a0a8aca88e8eb785515f6798b5b263ec99ea423819c42608140ad4c7d8fb78e093b9e8bacc405308a704dab8da5ce653429a8c6fcb4f7ec2a3c48642a41a0684fd7d1c6df45ed7b09dc0dc4817fe2b1728fec6a6eadc2e3b6db4ed11adb3d8d38435ae8f022c6f194dc154ef4b950d94dd5389980d661d7a2ce1478ef325389af1cd6505cd088f7880a2babbe33f4d966dd53aff7b2750693c2246a83b01584c6ce0efda4565de71df400b8d3ba970ebfaaf3776cd6e5d63fb88c71ad71b7623a7893fa0bb6d3322fbad3e7a7dd634b3e6f2e6ba91126a4ab3005c53041b3ff97176dc106a263906d7e99ed798c53ad1baa15179448f6693b76a3ef8b0c68ddbe9f6a0c32d19a26f5db3fa977989ddc000b3fbf1c97e0e5e99a64e1b7c63b0d6d5788cf5cfbc6fd672bd4e3e09676ffffe7daadf5f8217aa752ea7e6f1f8c133fb5a3019eab78506fcc3980ded00674dea3aea272b685897d3270e176a84de5070c2ac55981add4e989e9b7b108da1cdca22aa44b4aaed9dea607f02d1758e233dcb825aa3946bbb4d094d05af0849e3c89239c8451284ba9ad2e1a4d9593ea37fcadf65d30b512a26d4712a329d26882dcdbfc1a9284fc51c0c78369130bd5ef017c069e4b06d2a1b723ad73582f5913e8deaa3290e5e73f07a59bba09609688b67bee37880a0f53fdc7bccd0eb87c48b77414651e708cf68e5d0e2e6d256ab793e559bf460548c42daf163612ef4b3d3d5ce271d19226c7cc2ac80adffe83dd351f1269ad7202520bd529fe8c06e81cad9e887ae0c534d9370413bc6350035dc88e7cb55e28b4456493cae31e5daae2ba27f3a60741d9dc932972fdbefc907f696d378b5d2eda9e74abfc3d9ce71683ac30ac619be12e1496d566466897e3577b2dd768507a394a2b519595fb7c8c0bdba3b5daa12670f7fc34be11fb59d4750d4f03e271cc3128b672af9a2f46067a24661ba420136ceef13f62eee1b60babddc5cb1ee08318d9670ebc3dbaec58aa279bfcdc0022a9a1b52f13dfc6e1df75e9393b7bba886ef26ab264cfafe3c774dc6673a1ad8e9ed278684a6de3927f4b57b5186ac3068d81f64731c9c67ce414ab0a5230a41c4401509f5c88ee752ac4d13768994503c2e19bb4d1a66d2a3df20ca0c92490511d3358d1066ab18b9eff8a6ea42bde7032b372247d9f10116cad72df23c4acc8642be9531fd74cfb1b494dc659c4402d37b51b3da00a9b9bfd9cbe298acf6b431875035663c278aa546e0c7c8ca72798495ae87ab6fdbd6896cb322823cf89cb228b34a9c0b5220fbb41aedd426152f1953c317c128f1870377724afc1b967fb4a649998e858e7144d13a4e9bf9c52f5fcf5d7a8f16ac8fd93add5811116cdba61bfe0573cd3959c2035634d453622bbd67935868a0364651e689986bd8ca406311c218500f962991ac421d2c3a356c0310b198b0b733f4b145c2653cfaaeec0584e487ab044d49b6be691b1a99d3677bdfc24fd12b5b7478812a37b69f97f2c43c987366eda0704b2f46dfbd8522fa0a51bfa159e14232ed456739ed4c39c6b66c0118153eac47bc90093cc9e69caf48c91da008a32c7983859a630382a5767f403dfe3487f091e7932bcd19238416e95244a2d54efc961c6010c95f76c6d5c72805efb371a4dc1c65e59aede82f73e11861fff8ddf12ccf27569a2", 0x1000}, {&(0x7f0000003d00)="2cce2965a37ad18ca9f0a1e55c3b1fe84299bf0f95d5843ffd98fa43504b5b7e810993cb3eee5a01ac550edaadea629006048d1075ed384f22a8fcd81828e75c92b2d3aef498865d38da2bb79c682f59d62fe88ed11f2f3f69133f2a3d77e4b7c2ae234b7b79ed294bf7f222f172af2d0799bf5d04b76a312d4693818e8ea9bfe018732c38ddd99796bd724cdef72481ed1fae7ceb061dbdce788f5ae19c86e1cd72", 0xa2}, {&(0x7f0000003dc0)="8381a6a3792b0b8b0897ca29ec5d07424a1a66a890740be6fc43850ff6dd30378878a7f25c0a900ec97d2e194990b7b18ab5a9461185d386f523895fa2eef55197067b68", 0x44}, {&(0x7f0000003e40)="b1c0d5dca00fe4a5dc9b472bba6f393d7d738a4a5b69fad93fd7dada2e16403cc267c476dae2e96606ae166c8946aeca6f2ca76200b79d1572584e2f936ca477cff873f3c7dbf20d813bacc298788837fe7c742db3923937d12b0f470b6457d91b797bd9f1cfe44fc183b1f695b0ffdb", 0x70}, {&(0x7f0000004140)="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", 0x15f}, {&(0x7f0000003fc0)="02ca696222b0f59578396e3c65cf66473aee449c896d89f6d236158074b23e39b138c4b03d", 0x25}, {&(0x7f0000004000)="cdfa5c641ca8a71a3587ca920f5ae636955b16993f12c4624a5e56fc6805dc87c0087545584ae34783c4ba96e8ef41cbd27a5e9598466e1dd6f004d1276fb04e3bc209ae2043176a0842923d987a18e0b6f46039c3725a9b981153ac24d2ca17bdd7d9023cb6f5362408227de10ec4ae2192f18a64fef1e2d5398f23b84cfb66", 0x80}], 0x9, &(0x7f0000004400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="094000001c0000000000000001000003000000005e95d9e757cbe5b5ebee1f6cec55f92ed44e81e6cadade36927149aea67f78880ff5c0110037f03978d050fa5c3f74ca4d45cbf32c65f2ffce2fba7606fd195513a245ed287b1c10cba1b9711593c448f67a3aed98c65c849ca01d25ff7e94f6ccd72982fa0a3fa6aeccce119feb1568995a7f5351015fd418e6a258ba0000000000000000", @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000034000000000000000100000001000010263a09e3af5f99d76eb92b203900", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0xca37fc8f817063cb}}, {{&(0x7f0000007a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008ec0)=[{&(0x7f0000007b00)="c5ec3b619b44604955ebaeb91ea42f48e5364a9f57855b6700b1e5dde94fbbfedfc81135e71fa2bc60337762ae119ef3b0ea327c214c45d44c", 0x39}, {&(0x7f0000007b40)="ee15e554a3155dacf5d4f565cb2ce120d8542091eaba6dcb66b89f6760c499a189d3e377390019516a8501858ae1185758f153b4a00184bb582d2f2c4982845cd59d1964bf73d2ca894328caf781720ba360cd390f8bb6ed09ecbe38f241bbf8d753aa69d90c81eb327763119b5cfd41394bdb59ea67518593a9d9447564422d277472198dc9fb940c8ca5d9d71ca788c509c639b0a527b521c66e02efcb160c7a58a87580e1ed2efaee2643d59c0745a21cc466a72345d9b047ae6592e3477cec", 0xc1}, {&(0x7f0000007c40)="e6ac22325eb765ab1c018f0048485378ce25096e1a8d7bac483773c4c57d53ab12462e26deddb3fcd06262f80bf1a325c5c8c931a1349556dadbb6547b3fe0bd0b7c242496fac0416ac0b495f1ee5c50e42c8bdedec38cdc7f1f8e51fe6265679714b4b1e46c98ea54764d2669cdb0a5ab88a9b91c3aa13a997bf1b7e3c4e4ce713063a4954fb8bfae85b9655b6e3eaf64c4fb90c6c90c8a41b4381736a0d24e389f8b9e272912948df841225258ba736caa0354ae7e500b654377125a6d1fe28041a3d60da5bdd4fe3f2a8660559e8bd5bd142cf87338c8f5e65703797658487a5756c9901235eb0451b97b", 0xec}, {&(0x7f0000007d40)="3a98d67b1e22eeb3923c44aee470acca6aae7e97aa9b8ab5d016827241d62571f08741f53b7d9bf670fff8a2c6fb6a3b21c6810b19e7e7583ea1d7d1bda88ddba2a7b6dd1e5b40dd1574f14c31c10b8817b54135fe0c508d26e63b447af1", 0x5e}, {&(0x7f0000007dc0)="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", 0x1000}, {&(0x7f0000008dc0)="009eaa59ee0d349dcfc040e50b2750c1bc1ab5210fe6cfd06e3fa3b10efd820946da2578d3464b0d0bacac6ebef517d86a26d1ab7b4042c04a71b855fe29be3b2dea3e329a1c5d0baf9a1111e338c38cfc85cc68241efd13cc2819ad0e49e88ae396e11caf9c30304db255b3f5c79f00f30149e59625498c88144c37aac0930b8a69cb93e9ea29ec4bce11e8562823de8454750f907eb45b99be071077a947fcd13e9cc26a491fe0aa8b89d5d53d74e497f5da3fd3b6a71cad7749debb5ef8c95f8512d02b99537ba17c7a9155224ca1280e1ebc3dbe1cd51777abf4f50993ddff20fbc81f9421ee23cf231a2b7dd6d89e451713a1", 0xf5}], 0x6, &(0x7f000000b080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x108, 0x44}}], 0x4, 0x1040) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d7501000000000000006374696f2c6c6f6f73652c00"]) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800003e000000000000ff000000000000000009000000aec386a36c91a2adbbff07ab3287e9e038ed66d2ad33deb99d95ea66bf96310b769b5584a77a1721f3808ba07e328055b332221090d9312c75b9c0b2"], 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b7030000ffffff90850000000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.820667874s ago: executing program 7 (id=1997): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) fcntl$lock(r3, 0x6, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf2507000000140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000380)={0x5, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@dellinkprop={0x38, 0x6d, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.207420475s ago: executing program 5 (id=1998): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x8, 0x20000000005, 0x6, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf5) 1.048571967s ago: executing program 2 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup2(r2, r2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001300), 0x802, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x8c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "54a78386948f6f25e85def02a7a4b734"}, @TCA_CT_PARMS={0x18, 0x1, {0x81, 0x3ff, 0x7, 0x2, 0x4003}}, @TCA_CT_LABELS={0x14, 0x7, "8653a596ac1ce59f58eace863f88e8c4"}, @TCA_CT_ZONE={0x6, 0x4, 0x149d}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004041}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc15) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000c000780080012407fffffff0500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 759.834775ms ago: executing program 6 (id=2000): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="2030b2"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x2, "afbf"}, 0x0}) syz_open_dev$video4linux(0x0, 0x2, 0x0) 0s ago: executing program 8 (id=1961): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setpriority(0x1, 0x0, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x80101, 0x101) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x80000000}) dup2(r4, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x7, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket(0xa, 0x800, 0x0) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) kernel console output (not intermixed with test programs): 58.301991][T15554] __skb_datagram_iter+0x129/0x900 [ 758.302005][T15554] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 758.302021][T15554] ? skb_recv_datagram+0x88/0xc0 [ 758.302038][T15554] skb_copy_datagram_iter+0xa1/0x270 [ 758.302055][T15554] netlink_recvmsg+0x27e/0xa90 [ 758.302076][T15554] ? __pfx_netlink_recvmsg+0x10/0x10 [ 758.302100][T15554] ? __pfx_netlink_recvmsg+0x10/0x10 [ 758.302120][T15554] sock_recvmsg+0x1a4/0x1f0 [ 758.302134][T15554] ____sys_recvmsg+0x218/0x640 [ 758.302150][T15554] ? __pfx_____sys_recvmsg+0x10/0x10 [ 758.302169][T15554] ? __lock_acquire+0x4a5/0x2630 [ 758.302186][T15554] ___sys_recvmsg+0x16a/0x1a0 [ 758.302201][T15554] ? __pfx____sys_recvmsg+0x10/0x10 [ 758.302246][T15554] __sys_recvmsg+0x16d/0x220 [ 758.302267][T15554] ? __pfx___sys_recvmsg+0x10/0x10 [ 758.302295][T15554] do_syscall_64+0x106/0xf80 [ 758.302306][T15554] ? clear_bhb_loop+0x40/0x90 [ 758.302322][T15554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.302334][T15554] RIP: 0033:0x7f2aee39c819 [ 758.302345][T15554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.302356][T15554] RSP: 002b:00007f2aef2dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 758.302367][T15554] RAX: ffffffffffffffda RBX: 00007f2aee615fa0 RCX: 00007f2aee39c819 [ 758.302375][T15554] RDX: 0000000000032120 RSI: 0000200000000380 RDI: 0000000000000003 [ 758.302382][T15554] RBP: 00007f2aef2dd090 R08: 0000000000000000 R09: 0000000000000000 [ 758.302389][T15554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.302396][T15554] R13: 00007f2aee616038 R14: 00007f2aee615fa0 R15: 00007ffe9e71e1e8 [ 758.302412][T15554] [ 761.192394][T15600] netlink: 'syz.5.1767': attribute type 11 has an invalid length. [ 761.766064][ T30] audit: type=1400 audit(2000000280.130:938): avc: denied { ioctl } for pid=15599 comm="syz.5.1767" path="socket:[37488]" dev="sockfs" ino=37488 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 761.994054][ T5807] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 762.043085][ T5872] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 762.256556][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.268852][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.284117][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.297255][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.324303][ T5807] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 762.354041][ T5872] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 762.363284][ T5807] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 762.371448][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.404017][ T5807] usb 4-1: Manufacturer: syz [ 762.435265][ T5872] usb 2-1: config 0 descriptor?? [ 762.464969][ T5807] usb 4-1: config 0 descriptor?? [ 762.493668][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 762.514129][ T30] audit: type=1400 audit(2000000280.870:939): avc: denied { ioctl } for pid=15626 comm="syz.2.1771" path="socket:[36474]" dev="sockfs" ino=36474 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 762.599726][ T30] audit: type=1400 audit(2000000280.910:940): avc: denied { bind } for pid=15626 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 762.620567][ T30] audit: type=1400 audit(2000000280.910:941): avc: denied { connect } for pid=15626 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 762.671018][ T30] audit: type=1400 audit(2000000280.910:942): avc: denied { write } for pid=15626 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 762.851573][ T30] audit: type=1400 audit(2000000281.200:943): avc: denied { setopt } for pid=15603 comm="syz.3.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 763.673442][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.704391][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.725705][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.831510][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.191596][ T5807] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71 [ 764.246659][ T9] usb 2-1: USB disconnect, device number 104 [ 764.249566][ T5807] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 764.275503][ T5807] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71 [ 764.289687][ T5807] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 764.311315][ T5807] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71 [ 764.343345][ T5807] usb 4-1: USB disconnect, device number 122 [ 764.518426][ T2024] block nbd0: Possible stuck request ffff8880277b0000: control (read@0,1024B). Runtime 180 seconds [ 764.529414][ T2024] block nbd0: Possible stuck request ffff8880277b0200: control (read@1024,1024B). Runtime 180 seconds [ 764.590412][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1775'. [ 764.624374][ T2024] block nbd0: Possible stuck request ffff8880277b0400: control (read@2048,1024B). Runtime 180 seconds [ 764.636702][ T2024] block nbd0: Possible stuck request ffff8880277b0600: control (read@3072,1024B). Runtime 180 seconds [ 768.237714][ T5180] udevd[5180]: worker [7685] /devices/virtual/block/nbd0 timeout; kill it [ 768.275058][ T5180] udevd[5180]: seq 17837 '/devices/virtual/block/nbd0' killed [ 770.548855][T15723] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 770.591673][T15723] audit: out of memory in audit_log_start [ 770.752048][T15718] tap0: tun_chr_ioctl cmd 1074025677 [ 770.768775][T15718] tap0: linktype set to 778 [ 770.804323][ T5807] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 771.055431][ T5807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.499786][ T5807] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.718620][ T5807] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 771.744052][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.886551][ T30] audit: type=1400 audit(2000000290.220:944): avc: denied { append } for pid=15731 comm="syz.2.1785" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 771.945376][ T5807] usb 6-1: config 0 descriptor?? [ 771.989979][ T5807] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 772.214169][ T30] audit: type=1400 audit(2000000290.570:945): avc: denied { load_policy } for pid=15747 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 772.214808][T15748] SELinux: policydb magic number 0x3f2dc97e does not match expected magic number 0xf97cff8c [ 772.263116][T15748] SELinux: failed to load policy [ 772.263251][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.297596][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.320677][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.340864][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.375089][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.413017][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.435772][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.454715][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.475292][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.495220][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 772.560349][T15761] tap0: tun_chr_ioctl cmd 1074025677 [ 772.574227][T15761] tap0: linktype set to 778 [ 772.903656][T11571] Bluetooth: hci5: sending frame failed (-49) [ 772.919740][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 773.171102][T15780] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 773.213595][ T30] audit: type=1400 audit(2000000291.570:946): avc: denied { ioctl } for pid=15782 comm="syz.3.1791" path="socket:[37695]" dev="sockfs" ino=37695 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 773.374247][ T7019] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 773.443929][ T5807] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 773.513918][ T5920] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 773.526292][T15794] tap0: tun_chr_ioctl cmd 1074025677 [ 773.531946][T15794] tap0: linktype set to 778 [ 773.538306][ T7019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 773.549153][ T7019] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 773.559501][ T7019] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 773.569384][ T7019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.603341][ T7019] usb 3-1: config 0 descriptor?? [ 773.608531][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 773.615938][ T5807] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.644760][ T5807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 773.653774][ T5807] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 773.654480][ T5920] usb 5-1: device descriptor read/64, error -71 [ 773.663170][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.749605][ T5807] usb 4-1: config 0 descriptor?? [ 773.841916][ T7019] ath6kl: Failed to submit usb control message: -71 [ 773.854582][ T7019] ath6kl: unable to send the bmi data to the device: -71 [ 773.861803][ T7019] ath6kl: Unable to send get target info: -71 [ 773.871848][ T7019] ath6kl: Failed to init ath6kl core: -71 [ 773.907868][ T7019] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 773.963979][ T5920] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 773.979984][ T7019] usb 3-1: USB disconnect, device number 109 [ 774.103956][ T5920] usb 5-1: device descriptor read/64, error -71 [ 774.173027][ T5807] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 774.214249][ T5920] usb usb5-port1: attempt power cycle [ 774.344351][ T10] usb 6-1: USB disconnect, device number 2 [ 774.948638][ T5920] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 774.975312][ T5807] usb 4-1: USB disconnect, device number 123 [ 774.983180][ T5920] usb 5-1: device descriptor read/8, error -71 [ 776.350156][ T5920] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 777.894435][ T30] audit: type=1400 audit(2000000296.220:947): avc: denied { execute } for pid=15878 comm="syz.3.1797" dev="hugetlbfs" ino=37756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 778.120854][ T30] audit: type=1400 audit(2000000296.240:948): avc: denied { execute_no_trans } for pid=15878 comm="syz.3.1797" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=37756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 778.485416][T15886] tipc: Started in network mode [ 778.511748][T15886] tipc: Node identity 00000000000000000000000000000001, cluster identity 3 [ 778.520448][ T5920] usb 5-1: device not accepting address 124, error -71 [ 778.536316][ T5920] usb usb5-port1: unable to enumerate USB device [ 778.549183][T15886] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 778.552271][ T30] audit: type=1400 audit(2000000296.400:949): avc: denied { accept } for pid=15878 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 778.579239][T15886] tipc: Enabled bearer , priority 10 [ 778.662247][ T30] audit: type=1400 audit(2000000296.650:950): avc: denied { map } for pid=15882 comm="syz.4.1798" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 778.697173][ T30] audit: type=1400 audit(2000000296.650:951): avc: denied { read write } for pid=15882 comm="syz.4.1798" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.648731][ T5920] tipc: Node number set to 1 [ 780.061958][ T30] audit: type=1400 audit(2000000298.420:952): avc: denied { listen } for pid=15906 comm="syz.2.1804" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 780.142671][ T30] audit: type=1400 audit(2000000298.500:953): avc: denied { ioctl } for pid=15911 comm="syz.1.1799" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 780.229026][T15907] tap0: tun_chr_ioctl cmd 1074025677 [ 780.249732][T15907] tap0: linktype set to 778 [ 780.405028][ T5872] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 780.573934][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 780.718134][ T5872] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 780.753935][ T5872] usb 2-1: config 251 has no interface number 0 [ 780.760279][ T5872] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 780.849516][ T5872] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 780.882298][ T5872] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 780.904489][ T5872] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 780.953194][ T5872] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.007678][ T5872] usb 2-1: config 251 interface 202 has no altsetting 0 [ 781.044683][ T5872] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 781.073953][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.106150][ T5872] usb 2-1: Product: syz [ 781.112425][ T5872] usb 2-1: Manufacturer: syz [ 781.131092][ T5872] usb 2-1: SerialNumber: syz [ 781.157788][T15912] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 781.252379][T15931] netlink: 'syz.5.1806': attribute type 4 has an invalid length. [ 781.578173][ T30] audit: type=1400 audit(2000000299.930:954): avc: denied { ioctl } for pid=15911 comm="syz.1.1799" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36656 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 782.424274][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 782.712895][ T5920] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 782.732075][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.745002][ T30] audit: type=1400 audit(2000000301.110:955): avc: denied { write } for pid=15958 comm="syz.2.1812" name="ip_vs" dev="proc" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 782.783659][T15959] FAULT_INJECTION: forcing a failure. [ 782.783659][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.801229][T15959] CPU: 1 UID: 0 PID: 15959 Comm: syz.2.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.801264][T15959] Tainted: [L]=SOFTLOCKUP [ 782.801273][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.801286][T15959] Call Trace: [ 782.801293][T15959] [ 782.801299][T15959] dump_stack_lvl+0x100/0x190 [ 782.801324][T15959] should_fail_ex.cold+0x5/0xa [ 782.801342][T15959] _copy_to_user+0x32/0xd0 [ 782.801364][T15959] simple_read_from_buffer+0xcb/0x170 [ 782.801391][T15959] proc_fail_nth_read+0x1af/0x230 [ 782.801425][T15959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.801447][T15959] ? rw_verify_area+0xce/0x6d0 [ 782.801465][T15959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.801482][T15959] vfs_read+0x1e4/0xb30 [ 782.801495][T15959] ? __pfx_vfs_read+0x10/0x10 [ 782.801506][T15959] ? __fget_files+0x215/0x3d0 [ 782.801523][T15959] ? __fget_files+0x21f/0x3d0 [ 782.801541][T15959] ksys_read+0x12a/0x250 [ 782.801551][T15959] ? __pfx_ksys_read+0x10/0x10 [ 782.801567][T15959] do_syscall_64+0x106/0xf80 [ 782.801580][T15959] ? clear_bhb_loop+0x40/0x90 [ 782.801595][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.801608][T15959] RIP: 0033:0x7f3d2eb5d04e [ 782.801620][T15959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.801632][T15959] RSP: 002b:00007f3d2f97cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.801644][T15959] RAX: ffffffffffffffda RBX: 00007f3d2f97d6c0 RCX: 00007f3d2eb5d04e [ 782.801652][T15959] RDX: 000000000000000f RSI: 00007f3d2f97d0a0 RDI: 0000000000000004 [ 782.801665][T15959] RBP: 00007f3d2f97d090 R08: 0000000000000000 R09: 0000000000000000 [ 782.801672][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.801679][T15959] R13: 00007f3d2ee16038 R14: 00007f3d2ee15fa0 R15: 00007ffdb4902b38 [ 782.801697][T15959] [ 783.002161][ T5920] usb 6-1: Product: syz [ 783.039416][ T5920] usb 6-1: Manufacturer: syz [ 783.067318][ T5920] usb 6-1: SerialNumber: syz [ 783.113395][ T5920] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.156597][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 783.259025][ T5872] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 783.321093][T15972] x_tables: ip_tables: osf match: only valid for protocol 6 [ 783.338728][ T30] audit: type=1400 audit(2000000301.700:956): avc: denied { module_load } for pid=15971 comm="syz.1.1814" path="/sys/kernel/uevent_seqnum" dev="sysfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 783.370682][ T5872] usb 2-1: USB disconnect, device number 105 [ 783.937308][ T30] audit: type=1400 audit(2000000301.730:957): avc: denied { setopt } for pid=15971 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 784.192383][ T30] audit: type=1400 audit(2000000302.550:958): avc: denied { read } for pid=15975 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 784.305683][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 784.324133][ T10] ath9k_htc: Failed to initialize the device [ 784.350998][T15992] XFS (nullb0): Invalid superblock magic number [ 784.405895][ T30] audit: type=1400 audit(2000000302.620:959): avc: denied { mounton } for pid=15991 comm="syz.3.1817" path="/syzcgroup/unified/syz3" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 784.432857][ T30] audit: type=1400 audit(2000000302.700:960): avc: denied { create } for pid=15991 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 784.481892][ T30] audit: type=1400 audit(2000000302.700:961): avc: denied { bind } for pid=15991 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 784.502675][ T30] audit: type=1400 audit(2000000302.700:962): avc: denied { prog_load } for pid=15991 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 784.526885][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 784.545288][ T30] audit: type=1400 audit(2000000302.700:963): avc: denied { bpf } for pid=15991 comm="syz.3.1817" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 784.651385][ T30] audit: type=1400 audit(2000000302.710:964): avc: denied { setopt } for pid=15991 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 784.724331][ T9] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 784.746787][ T30] audit: type=1400 audit(2000000302.710:965): avc: denied { accept } for pid=15991 comm="syz.3.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 784.795293][T16009] netlink: 'syz.4.1819': attribute type 4 has an invalid length. [ 784.829701][ T5920] usb 6-1: USB disconnect, device number 3 [ 785.053355][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 785.062729][ T9] usb 4-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 785.198240][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 785.235696][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 785.286528][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 785.315367][T16005] ALSA: mixer_oss: invalid OSS volume '' [ 785.319104][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.352500][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 785.361957][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 785.393997][ T9] usb 4-1: Manufacturer: syz [ 785.443233][ T9] usb 4-1: config 0 descriptor?? [ 785.457264][T16023] tap0: tun_chr_ioctl cmd 1074025677 [ 785.483500][T16023] tap0: linktype set to 778 [ 786.001956][T16041] __nla_validate_parse: 40 callbacks suppressed [ 786.001968][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1822'. [ 786.068077][ T9] rc_core: IR keymap rc-hauppauge not found [ 786.074123][ T5920] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 786.094155][ T9] Registered IR keymap rc-empty [ 786.109225][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.148212][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.190914][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 786.279023][ T5920] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.305732][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49 [ 786.323212][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.336656][ T5920] usb 2-1: Product: syz [ 786.341295][ T5920] usb 2-1: Manufacturer: syz [ 786.346195][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.355706][ T5920] usb 2-1: SerialNumber: syz [ 786.379341][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.418608][ T5920] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 786.445029][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.454273][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.484053][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.524100][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.574422][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.604338][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.655380][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.704833][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.745651][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 786.815038][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 786.833056][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 786.882886][ T9] usb 4-1: USB disconnect, device number 124 [ 787.591549][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 787.628001][ T10] ath9k_htc: Failed to initialize the device [ 787.681549][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 788.298874][ T5809] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 788.308529][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.308569][ T5809] Tainted: [L]=SOFTLOCKUP [ 788.308578][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.308595][ T5809] Workqueue: hci3 hci_rx_work [ 788.308631][ T5809] Call Trace: [ 788.308639][ T5809] [ 788.308648][ T5809] dump_stack_lvl+0x100/0x190 [ 788.308698][ T5809] sysfs_warn_dup.cold+0x1c/0x28 [ 788.308733][ T5809] sysfs_create_dir_ns+0x24b/0x2b0 [ 788.308770][ T5809] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 788.308805][ T5809] ? find_held_lock+0x2b/0x80 [ 788.308836][ T5809] ? kobject_add_internal+0x25f/0x930 [ 788.308864][ T5809] ? kobject_add_internal+0x25f/0x930 [ 788.308895][ T5809] ? do_raw_spin_unlock+0x145/0x1e0 [ 788.308925][ T5809] kobject_add_internal+0x2c8/0x930 [ 788.308959][ T5809] kobject_add+0x16a/0x1e0 [ 788.308985][ T5809] ? __pfx_kobject_add+0x10/0x10 [ 788.309010][ T5809] ? class_to_subsys+0x10f/0x150 [ 788.309046][ T5809] ? kobject_put+0xb9/0x640 [ 788.309079][ T5809] ? _raw_spin_unlock+0x28/0x50 [ 788.309122][ T5809] device_add+0x294/0x1950 [ 788.309152][ T5809] ? __pfx_dev_set_name+0x10/0x10 [ 788.309184][ T5809] ? __pfx_device_add+0x10/0x10 [ 788.309212][ T5809] ? mgmt_send_event_skb+0x2fb/0x460 [ 788.309254][ T5809] hci_conn_add_sysfs+0x1a3/0x260 [ 788.309292][ T5809] le_conn_complete_evt+0x11eb/0x1f60 [ 788.309333][ T5809] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 788.309375][ T5809] hci_le_conn_complete_evt+0x23c/0x3a0 [ 788.309410][ T5809] ? skb_pull_data+0x15f/0x1e0 [ 788.309440][ T5809] hci_le_meta_evt+0x34a/0x5f0 [ 788.309475][ T5809] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 788.309514][ T5809] hci_event_packet+0x51c/0xcd0 [ 788.309548][ T5809] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 788.309583][ T5809] ? __pfx_hci_event_packet+0x10/0x10 [ 788.309631][ T5809] hci_rx_work+0x451/0xfc0 [ 788.309669][ T5809] process_one_work+0xa23/0x19a0 [ 788.309711][ T5809] ? __pfx_process_one_work+0x10/0x10 [ 788.309748][ T5809] ? __pfx_hci_rx_work+0x10/0x10 [ 788.309783][ T5809] worker_thread+0x5ef/0xe50 [ 788.309823][ T5809] ? kthread+0x13a/0x450 [ 788.309844][ T5809] ? __pfx_worker_thread+0x10/0x10 [ 788.309869][ T5809] kthread+0x370/0x450 [ 788.309892][ T5809] ? __pfx_kthread+0x10/0x10 [ 788.309919][ T5809] ret_from_fork+0x754/0xd80 [ 788.309946][ T5809] ? __pfx_ret_from_fork+0x10/0x10 [ 788.309974][ T5809] ? __switch_to+0x7b4/0x1120 [ 788.310004][ T5809] ? __pfx_kthread+0x10/0x10 [ 788.310030][ T5809] ret_from_fork_asm+0x1a/0x30 [ 788.310082][ T5809] [ 788.313187][ T5809] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 788.595187][ T5809] Bluetooth: hci3: failed to register connection device [ 788.611891][ T5872] usb 2-1: USB disconnect, device number 106 [ 788.691478][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 788.691496][ T30] audit: type=1400 audit(2000000307.050:1012): avc: denied { sys_module } for pid=16094 comm="syz.4.1827" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 788.794890][ T30] audit: type=1400 audit(2000000307.160:1013): avc: denied { ioctl } for pid=16106 comm="syz.2.1828" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6f06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 788.955145][T16120] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 788.973733][ T30] audit: type=1400 audit(2000000307.190:1014): avc: denied { append } for pid=16106 comm="syz.2.1828" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 789.305311][ T30] audit: type=1400 audit(2000000307.210:1015): avc: denied { execmem } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 789.413543][ T30] audit: type=1400 audit(2000000307.370:1016): avc: denied { create } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 789.498108][ T30] audit: type=1400 audit(2000000307.370:1017): avc: denied { write } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 789.566060][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 789.575374][T16126] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 789.640207][ T30] audit: type=1400 audit(2000000307.370:1018): avc: denied { create } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.688827][ T30] audit: type=1400 audit(2000000307.370:1019): avc: denied { setopt } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 790.055105][ T30] audit: type=1400 audit(2000000307.370:1020): avc: denied { map_create } for pid=16113 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 790.257836][T16141] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.267938][T16141] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.947298][ T5809] Bluetooth: hci3: command 0x2016 tx timeout [ 790.994173][ T30] audit: type=1400 audit(2000000307.760:1021): avc: denied { mount } for pid=16125 comm="syz.5.1831" name="/" dev="configfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 791.233921][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 791.249702][T16155] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1836'. [ 791.321854][T16151] XFS (nullb0): Invalid superblock magic number [ 791.811267][ T10] usb 2-1: device descriptor read/64, error -71 [ 792.104436][ T9] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 792.482684][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 792.744416][ T10] usb 2-1: device descriptor read/64, error -71 [ 792.754080][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 792.761612][ T9] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 792.945765][T16178] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 793.209218][ T5809] Bluetooth: hci3: command 0x2016 tx timeout [ 793.367236][ T10] usb usb2-port1: attempt power cycle [ 793.373465][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 793.413448][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.426990][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 793.467101][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.481373][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.490492][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.498769][ T9] usb 4-1: Manufacturer: syz [ 793.514636][ T9] usb 4-1: config 0 descriptor?? [ 793.577186][T16188] program syz.1.1843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.794183][ T5921] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 793.804569][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 793.804585][ T30] audit: type=1400 audit(2000000312.170:1043): avc: denied { create } for pid=16185 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.806868][ T9] rc_core: IR keymap rc-hauppauge not found [ 793.837702][ T30] audit: type=1400 audit(2000000312.200:1044): avc: denied { write } for pid=16185 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.847154][ T9] Registered IR keymap rc-empty [ 793.858217][ T30] audit: type=1400 audit(2000000312.200:1045): avc: denied { connect } for pid=16185 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.862817][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 793.891172][ T30] audit: type=1400 audit(2000000312.200:1046): avc: denied { name_connect } for pid=16185 comm="syz.2.1842" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 793.914407][ T30] audit: type=1400 audit(2000000312.250:1047): avc: denied { setopt } for pid=16185 comm="syz.2.1842" lport=51040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.935100][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 793.942429][ T30] audit: type=1400 audit(2000000312.250:1048): avc: denied { name_bind } for pid=16185 comm="syz.2.1842" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 793.964954][ T30] audit: type=1400 audit(2000000312.250:1049): avc: denied { node_bind } for pid=16185 comm="syz.2.1842" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 793.978788][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 793.988438][ T30] audit: type=1400 audit(2000000312.250:1050): avc: denied { ioctl } for pid=16185 comm="syz.2.1842" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 794.018338][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 794.037422][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 794.049089][ T5921] usb 6-1: config 0 has no interfaces? [ 794.054682][ T5920] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 794.065549][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.073193][ T5921] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 794.083055][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 794.091732][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.099172][ T5921] usb 6-1: Product: syz [ 794.103661][ T5921] usb 6-1: Manufacturer: syz [ 794.108449][ T5921] usb 6-1: SerialNumber: syz [ 794.113703][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.124576][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 794.133651][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.141823][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.151926][ T5921] usb 6-1: config 0 descriptor?? [ 794.164014][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.176414][ T10] usb 2-1: config 0 descriptor?? [ 794.196234][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.205060][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 794.213944][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 794.219222][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.227989][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.238179][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 794.247174][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.256249][ T5920] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 794.265387][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.273463][ T5920] usb 5-1: Product: syz [ 794.277782][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.285170][ T5920] usb 5-1: Manufacturer: syz [ 794.289816][ T5920] usb 5-1: SerialNumber: syz [ 794.296758][ T5920] usb 5-1: config 0 descriptor?? [ 794.380877][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.390302][ T30] audit: type=1400 audit(2000000312.750:1051): avc: denied { setopt } for pid=16183 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 794.413979][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 794.438860][ T30] audit: type=1400 audit(2000000312.780:1052): avc: denied { write } for pid=16183 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 794.446125][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.469790][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.489615][ T9] usb 4-1: USB disconnect, device number 125 [ 794.510037][ T5920] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 794.518248][ T5920] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 794.554172][ T5920] usb 5-1: USB disconnect, device number 125 [ 794.637907][ T2024] block nbd0: Possible stuck request ffff8880277b0000: control (read@0,1024B). Runtime 210 seconds [ 794.649278][ T2024] block nbd0: Possible stuck request ffff8880277b0200: control (read@1024,1024B). Runtime 210 seconds [ 794.651592][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 794.669000][ T2024] block nbd0: Possible stuck request ffff8880277b0400: control (read@2048,1024B). Runtime 210 seconds [ 794.680317][ T2024] block nbd0: Possible stuck request ffff8880277b0600: control (read@3072,1024B). Runtime 210 seconds [ 794.689487][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 794.779543][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 794.862668][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 794.873132][T16196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.939498][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 794.971274][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 794.983422][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 794.997489][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 795.153989][ T5920] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 795.281327][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 795.303478][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 795.311109][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 795.319318][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 795.479655][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 795.480152][T16196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.537192][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.545473][T16196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.590041][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 795.638617][ T5920] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 795.738596][ T5920] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 795.747853][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.756924][ T5920] usb 5-1: Product: syz [ 795.761151][ T5920] usb 5-1: Manufacturer: syz [ 795.768342][ T5920] usb 5-1: SerialNumber: syz [ 795.777189][ T5920] usb 5-1: config 0 descriptor?? [ 795.935940][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 795.945628][ T10] pwc: Registered as video103. [ 795.960949][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 796.430261][ T5920] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 796.440456][ T5920] 31 db 99 aa [ 796.442961][ T10] usb 2-1: USB disconnect, device number 109 [ 796.469803][ T5920] dd 09 f1 37 [ 796.481537][ T5920] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 796.596711][ T5920] usb 6-1: USB disconnect, device number 4 [ 796.613704][T16286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.704438][T16286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.030484][T16312] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 797.561739][T16315] tap0: tun_chr_ioctl cmd 1074025677 [ 797.574249][T16315] tap0: linktype set to 778 [ 797.659954][T16316] 9p: Bad value for 'rq' [ 798.494021][ T5920] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 798.662213][ T5872] usb 5-1: USB disconnect, device number 126 [ 798.730839][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.840058][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.945790][ T5920] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 798.978447][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.014126][ T5920] usb 6-1: config 0 descriptor?? [ 799.336045][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 799.336064][ T30] audit: type=1400 audit(2000000317.700:1066): avc: denied { write } for pid=16347 comm="syz.1.1859" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 799.474310][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 799.653279][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 799.661774][ T30] audit: type=1400 audit(2000000318.020:1067): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 799.673919][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 800.348975][ T30] audit: type=1400 audit(2000000318.060:1068): avc: denied { create } for pid=16357 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 800.372569][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 800.410012][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 800.432498][ T30] audit: type=1400 audit(2000000318.110:1069): avc: denied { watch watch_reads } for pid=16354 comm="syz.2.1861" path="/357" dev="tmpfs" ino=1912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 800.464742][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 800.482337][ T5920] arvo 0003:1E7D:30D4.0027: unknown main item tag 0x0 [ 800.522121][ T5920] arvo 0003:1E7D:30D4.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 800.574810][ T5920] arvo 0003:1E7D:30D4.0027: couldn't init struct arvo_device [ 800.601379][ T5920] arvo 0003:1E7D:30D4.0027: couldn't install keyboard [ 800.636540][ T5920] arvo 0003:1E7D:30D4.0027: probe with driver arvo failed with error -5 [ 800.895710][ T5920] usb 6-1: USB disconnect, device number 5 [ 800.964102][ T5807] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 801.038455][T16394] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 801.334006][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 801.382687][ T5807] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 801.429171][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.465156][ T5807] usb 5-1: config 0 descriptor?? [ 801.713901][ T5807] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 801.763320][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 801.830428][ T5807] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 801.873949][ T5807] usb 5-1: media controller created [ 801.917611][ T30] audit: type=1400 audit(2000000320.280:1070): avc: denied { create } for pid=16374 comm="syz.4.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 801.921159][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.950551][ T30] audit: type=1400 audit(2000000320.320:1071): avc: denied { bind } for pid=16403 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 801.970814][ T30] audit: type=1400 audit(2000000320.320:1072): avc: denied { name_bind } for pid=16403 comm="syz.2.1868" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 801.993528][ T30] audit: type=1400 audit(2000000320.320:1073): avc: denied { node_bind } for pid=16403 comm="syz.2.1868" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 802.164069][ T5920] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 802.311187][ T30] audit: type=1400 audit(2000000320.460:1074): avc: denied { create } for pid=16403 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 802.589654][ T30] audit: type=1400 audit(2000000320.460:1075): avc: denied { write } for pid=16403 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 803.102782][ T5920] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 804.194731][ T5807] az6027: usb out operation failed. (-71) [ 804.289550][ T5807] az6027: usb out operation failed. (-71) [ 804.341861][ T5807] stb0899_attach: Driver disabled by Kconfig [ 804.413610][ T5807] az6027: no front-end attached [ 804.413610][ T5807] [ 804.415341][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.437093][ T5920] usb 6-1: config 0 has no interface number 0 [ 804.443300][ T5920] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 804.452588][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.463749][ T5920] usb 6-1: config 0 descriptor?? [ 804.471026][ T5807] az6027: usb out operation failed. (-71) [ 804.496094][ T5920] ldusb 6-1:0.55: Interrupt in endpoint not found [ 804.513519][ T5807] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 804.565169][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 804.635982][ T5807] dvb-usb: schedule remote query interval to 400 msecs. [ 804.651223][T16424] netlink: 'syz.4.1870': attribute type 4 has an invalid length. [ 804.666288][ T5807] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 804.992286][ T5920] usb 6-1: USB disconnect, device number 6 [ 805.059084][ T5807] usb 5-1: USB disconnect, device number 127 [ 805.274732][ T5807] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 805.851720][T16462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 805.864145][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 805.998968][T16470] FAULT_INJECTION: forcing a failure. [ 805.998968][T16470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.042930][T16470] CPU: 1 UID: 0 PID: 16470 Comm: syz.4.1875 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.042962][T16470] Tainted: [L]=SOFTLOCKUP [ 806.042969][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 806.042981][T16470] Call Trace: [ 806.042987][T16470] [ 806.042994][T16470] dump_stack_lvl+0x100/0x190 [ 806.043028][T16470] should_fail_ex.cold+0x5/0xa [ 806.043053][T16470] _copy_from_iter+0x1f4/0x1690 [ 806.043077][T16470] ? __asan_memset+0x23/0x50 [ 806.043103][T16470] ? __pfx__copy_from_iter+0x10/0x10 [ 806.043123][T16470] ? __pfx___alloc_skb+0x10/0x10 [ 806.043161][T16470] netlink_sendmsg+0x808/0xda0 [ 806.043186][T16470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.043205][T16470] ? __might_fault+0x10/0x140 [ 806.043256][T16470] ____sys_sendmsg+0x9e1/0xb70 [ 806.043274][T16470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 806.043295][T16470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.043326][T16470] ___sys_sendmsg+0x190/0x1e0 [ 806.043349][T16470] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.043414][T16470] __sys_sendmsg+0x170/0x220 [ 806.043446][T16470] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.043493][T16470] do_syscall_64+0x106/0xf80 [ 806.043512][T16470] ? clear_bhb_loop+0x40/0x90 [ 806.043540][T16470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.043564][T16470] RIP: 0033:0x7ff2eb19c819 [ 806.043583][T16470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.043603][T16470] RSP: 002b:00007ff2ebf93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.043624][T16470] RAX: ffffffffffffffda RBX: 00007ff2eb415fa0 RCX: 00007ff2eb19c819 [ 806.043639][T16470] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 806.043652][T16470] RBP: 00007ff2ebf93090 R08: 0000000000000000 R09: 0000000000000000 [ 806.043665][T16470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.043678][T16470] R13: 00007ff2eb416038 R14: 00007ff2eb415fa0 R15: 00007ffd89a1c9f8 [ 806.043710][T16470] [ 806.536094][ T30] audit: type=1400 audit(2000000324.900:1076): avc: denied { setopt } for pid=16472 comm="syz.4.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 806.841912][ T30] audit: type=1400 audit(2000000325.200:1077): avc: denied { mount } for pid=16472 comm="syz.4.1876" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 806.948650][ T30] audit: type=1400 audit(2000000325.310:1078): avc: denied { open } for pid=16479 comm="syz.5.1878" path="/dev/ptyqf" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 807.012773][ T30] audit: type=1400 audit(2000000325.370:1079): avc: denied { ioctl } for pid=16479 comm="syz.5.1878" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 807.041261][ T30] audit: type=1400 audit(2000000325.370:1080): avc: denied { read } for pid=16479 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.093162][ T30] audit: type=1400 audit(2000000325.450:1081): avc: denied { accept } for pid=16479 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.276108][ T30] audit: type=1400 audit(2000000325.450:1082): avc: denied { ioctl } for pid=16479 comm="syz.5.1878" path="socket:[38257]" dev="sockfs" ino=38257 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.433650][T16483] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 808.604066][ T5807] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 808.801596][ T5807] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 808.824341][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.839110][ T5807] usb 5-1: config 0 has no interface number 0 [ 808.849035][ T5807] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 808.858634][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.894714][ T5807] usb 5-1: config 0 descriptor?? [ 808.909699][ T5807] ldusb 5-1:0.55: Interrupt in endpoint not found [ 809.139237][ T10] usb 5-1: USB disconnect, device number 3 [ 809.436693][ T30] audit: type=1400 audit(2000000327.800:1083): avc: denied { create } for pid=16528 comm="syz.5.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.411130][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 810.844935][ T30] audit: type=1400 audit(2000000329.170:1084): avc: denied { getopt } for pid=16528 comm="syz.5.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.140275][T16536] FAT-fs (nullb0): bogus number of reserved sectors [ 811.257375][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.264292][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.272572][T16536] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 811.289599][ T30] audit: type=1400 audit(2000000329.190:1085): avc: denied { mounton } for pid=16532 comm="syz.4.1887" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 811.318394][T16543] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 811.575891][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 811.575909][ T30] audit: type=1400 audit(2000000329.940:1088): avc: denied { bind } for pid=16551 comm="syz.5.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 811.605081][ T5807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 811.744776][ T30] audit: type=1400 audit(2000000330.100:1089): avc: denied { bind } for pid=16551 comm="syz.5.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 811.793913][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 811.819970][ T5807] usb 5-1: config 0 has an invalid interface descriptor of length 5, skipping [ 811.861654][ T30] audit: type=1400 audit(2000000330.100:1090): avc: denied { setopt } for pid=16551 comm="syz.5.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 811.935394][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.946956][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.959352][ T30] audit: type=1400 audit(2000000330.110:1091): avc: denied { write } for pid=16551 comm="syz.5.1889" path="socket:[39436]" dev="sockfs" ino=39436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 811.960879][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.073953][ T5807] usb 5-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 812.101863][ T5807] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.124812][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.145808][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 812.230412][ T5807] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 812.245741][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=10, SerialNumber=3 [ 812.254164][ T5807] usb 5-1: Product: syz [ 812.255049][ T30] audit: type=1400 audit(2000000330.540:1092): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 812.258363][ T5807] usb 5-1: SerialNumber: syz [ 812.308015][T16557] lo speed is unknown, defaulting to 1000 [ 812.421359][T16557] wg1 speed is unknown, defaulting to 1000 [ 812.443982][ T5920] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 812.558438][ T5807] usb 5-1: config 0 descriptor?? [ 812.605386][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.638618][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.681035][ T5920] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 812.710249][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 812.730392][ T5920] usb 3-1: SerialNumber: syz [ 812.883366][ T5920] usb 3-1: 0:2 : does not exist [ 813.098731][ T30] audit: type=1400 audit(2000000331.460:1093): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 813.280625][ T5920] usb 3-1: USB disconnect, device number 110 [ 813.321085][T16557] chnl_net:caif_netlink_parms(): no params data found [ 813.479483][T12143] bridge_slave_1: left allmulticast mode [ 813.492572][T12143] bridge_slave_1: left promiscuous mode [ 813.511397][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.545190][T12143] bridge_slave_0: left allmulticast mode [ 813.570610][T12143] bridge_slave_0: left promiscuous mode [ 813.597717][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.222067][T12143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.234172][ T5809] Bluetooth: hci5: command tx timeout [ 814.298511][T12143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.376673][T12143] bond0 (unregistering): Released all slaves [ 815.132517][ T10] usb 5-1: USB disconnect, device number 4 [ 816.245291][ T30] audit: type=1400 audit(2000000333.610:1094): avc: denied { write } for pid=16717 comm="syz.4.1896" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 816.290404][T16718] input: syz0 as /devices/virtual/input/input53 [ 816.304227][ T5809] Bluetooth: hci5: command tx timeout [ 816.377039][ T30] audit: type=1400 audit(2000000333.610:1095): avc: denied { ioctl } for pid=16717 comm="syz.4.1896" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 816.456605][ T30] audit: type=1400 audit(2000000333.830:1096): avc: denied { search } for pid=5475 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.510948][ T30] audit: type=1400 audit(2000000333.850:1097): avc: denied { search } for pid=5475 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.597736][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 816.597752][ T30] audit: type=1400 audit(2000000333.970:1102): avc: denied { ioctl } for pid=16753 comm="syz.4.1898" path="socket:[39626]" dev="sockfs" ino=39626 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 816.629812][ T10] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 816.648187][T16557] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.661555][T16557] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.669304][T16557] bridge_slave_0: entered allmulticast mode [ 816.681676][T11571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 816.682789][T16557] bridge_slave_0: entered promiscuous mode [ 816.696314][T11571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 816.698978][T16557] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.714817][T16557] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.716048][T11571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 816.722169][T16557] bridge_slave_1: entered allmulticast mode [ 816.737504][T11571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 816.738918][T16557] bridge_slave_1: entered promiscuous mode [ 816.752161][T11571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 816.797492][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 816.805883][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.832050][ T10] usb 3-1: config 0 has no interface number 0 [ 816.841855][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 816.853927][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.867599][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 816.877979][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.886253][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 816.894798][T12143] hsr_slave_0: left promiscuous mode [ 816.897629][ T10] usb 3-1: config 0 descriptor?? [ 816.909051][ T10] ldusb 3-1:0.55: Interrupt in endpoint not found [ 816.915771][T12143] hsr_slave_1: left promiscuous mode [ 817.007710][ T30] audit: type=1400 audit(2000000334.380:1103): avc: denied { read open } for pid=16795 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.044564][ T30] audit: type=1400 audit(2000000334.410:1104): avc: denied { getattr } for pid=16795 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.070196][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 817.076961][ T5920] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.089272][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.096733][ T5920] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 817.112045][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.132515][ T5920] usb 5-1: config 0 descriptor?? [ 817.139454][ T10] usb 3-1: USB disconnect, device number 111 [ 817.196357][T12143] team0 (unregistering): Port device team_slave_1 removed [ 817.310570][T12143] team0 (unregistering): Port device team_slave_0 removed [ 817.513305][ T30] audit: type=1400 audit(2000000334.860:1105): avc: denied { add_name } for pid=16794 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.554303][ T30] audit: type=1400 audit(2000000334.860:1106): avc: denied { create } for pid=16794 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.032296][ T30] audit: type=1400 audit(2000000334.860:1107): avc: denied { write } for pid=16794 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=8701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.065045][ T5920] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 818.087413][ T30] audit: type=1400 audit(2000000334.870:1108): avc: denied { append } for pid=16794 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=8701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 818.112303][ T30] audit: type=1400 audit(2000000335.000:1109): avc: denied { read write } for pid=16812 comm="syz.5.1899" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 818.156436][ T30] audit: type=1400 audit(2000000335.000:1110): avc: denied { open } for pid=16812 comm="syz.5.1899" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 818.190475][ T5920] usb 5-1: USB disconnect, device number 5 [ 818.199157][T16557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.259094][T16557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.288521][ T30] audit: type=1400 audit(2000000335.510:1111): avc: denied { remove_name } for pid=16819 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=8701 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.381896][T16760] lo speed is unknown, defaulting to 1000 [ 818.388090][ T5809] Bluetooth: hci5: command tx timeout [ 818.412924][T16557] team0: Port device team_slave_0 added [ 818.435251][T16760] wg1 speed is unknown, defaulting to 1000 [ 818.452567][T16557] team0: Port device team_slave_1 added [ 818.557945][T16827] fido_id[16827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 818.581294][T16557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.621544][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.646676][ T5809] Bluetooth: hci4: command tx timeout [ 820.184918][T16557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.474052][ T5809] Bluetooth: hci5: command tx timeout [ 820.550817][T16897] 9p: Bad value for 'rq' [ 820.993354][T16557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.023728][T16557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.072051][T16557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.344948][T16926] FAULT_INJECTION: forcing a failure. [ 821.344948][T16926] name failslab, interval 1, probability 0, space 0, times 0 [ 821.394926][T16926] CPU: 1 UID: 0 PID: 16926 Comm: syz.5.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.394962][T16926] Tainted: [L]=SOFTLOCKUP [ 821.394969][T16926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 821.394981][T16926] Call Trace: [ 821.394988][T16926] [ 821.394996][T16926] dump_stack_lvl+0x100/0x190 [ 821.395033][T16926] should_fail_ex.cold+0x5/0xa [ 821.395061][T16926] should_failslab+0xc2/0x120 [ 821.395084][T16926] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 821.395117][T16926] ? do_getname+0x35/0x390 [ 821.395144][T16926] ? find_held_lock+0x2b/0x80 [ 821.395171][T16926] ? ksys_write+0x190/0x250 [ 821.395196][T16926] do_getname+0x35/0x390 [ 821.395229][T16926] do_sys_openat2+0xc5/0x1e0 [ 821.395256][T16926] ? __pfx_do_sys_openat2+0x10/0x10 [ 821.395285][T16926] ? __fget_files+0x21f/0x3d0 [ 821.395314][T16926] __x64_sys_open+0xfe/0x1d0 [ 821.395339][T16926] ? __pfx___x64_sys_open+0x10/0x10 [ 821.395364][T16926] ? ksys_write+0x1ac/0x250 [ 821.395393][T16926] do_syscall_64+0x106/0xf80 [ 821.395411][T16926] ? clear_bhb_loop+0x40/0x90 [ 821.395436][T16926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.395456][T16926] RIP: 0033:0x7f2aee39c819 [ 821.395473][T16926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.395491][T16926] RSP: 002b:00007f2aef2dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 821.395512][T16926] RAX: ffffffffffffffda RBX: 00007f2aee615fa0 RCX: 00007f2aee39c819 [ 821.395525][T16926] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0 [ 821.395538][T16926] RBP: 00007f2aef2dd090 R08: 0000000000000000 R09: 0000000000000000 [ 821.395549][T16926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.395562][T16926] R13: 00007f2aee616038 R14: 00007f2aee615fa0 R15: 00007ffe9e71e1e8 [ 821.395591][T16926] [ 821.826311][ T5809] Bluetooth: hci4: command tx timeout [ 822.035645][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1905'. [ 822.145980][T16557] hsr_slave_0: entered promiscuous mode [ 822.152577][T16557] hsr_slave_1: entered promiscuous mode [ 822.170183][T16557] debugfs: 'hsr0' already exists in 'hsr' [ 822.235098][T16557] Cannot create hsr debugfs directory [ 822.582911][T12143] IPVS: stop unused estimator thread 0... [ 822.647558][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 822.647577][ T30] audit: type=1400 audit(2000000340.020:1115): avc: denied { view } for pid=16968 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 822.853875][ T5920] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 822.889383][T16760] chnl_net:caif_netlink_parms(): no params data found [ 822.924356][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 822.955935][ T5865] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 823.006853][ T5920] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 823.024506][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.046530][ T5920] usb 3-1: config 0 has no interface number 0 [ 823.052678][ T5920] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.072393][ T5920] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.109954][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 823.129626][ T9] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 823.147456][ T5865] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 823.154397][ T5920] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 823.163863][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.166187][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.183623][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.193022][ T9] usb 5-1: Product: syz [ 823.218638][ T9] usb 5-1: Manufacturer: syz [ 823.223289][ T9] usb 5-1: SerialNumber: syz [ 823.224459][ T5865] usb 6-1: config 0 descriptor?? [ 823.229209][ T5920] usb 3-1: config 0 descriptor?? [ 823.246329][ T5865] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 823.297179][ T5920] ldusb 3-1:0.55: Interrupt in endpoint not found [ 823.339812][T16557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 823.356318][T16557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 823.370985][T16760] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.392454][T16760] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.401655][T16760] bridge_slave_0: entered allmulticast mode [ 823.410778][T16760] bridge_slave_0: entered promiscuous mode [ 823.420797][T16557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 823.437866][T16760] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.445566][T16760] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.455987][T16974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.464882][T16760] bridge_slave_1: entered allmulticast mode [ 823.477361][T16974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.485889][T16760] bridge_slave_1: entered promiscuous mode [ 823.525619][ T9] usb 5-1: selecting invalid altsetting 1 [ 823.549387][ T10] usb 3-1: USB disconnect, device number 112 [ 823.559831][ T5865] gspca_sunplus: reg_w_riv err -71 [ 823.565145][ T9] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 823.565239][ T9] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 823.574501][ T5865] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 823.620192][ T5865] usb 6-1: USB disconnect, device number 7 [ 823.645282][T16557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 823.661213][ T9] usb 5-1: USB disconnect, device number 6 [ 823.685862][T16760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.718757][T16760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.787489][T16760] team0: Port device team_slave_0 added [ 823.805783][T16760] team0: Port device team_slave_1 added [ 823.872543][T16760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.881488][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.914338][ T5809] Bluetooth: hci4: command tx timeout [ 823.917227][T16760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.933610][T16760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.942855][T16760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.970229][T16760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.029305][T16760] hsr_slave_0: entered promiscuous mode [ 824.044926][T16760] hsr_slave_1: entered promiscuous mode [ 824.053599][T16760] debugfs: 'hsr0' already exists in 'hsr' [ 824.059873][T16760] Cannot create hsr debugfs directory [ 824.227892][T16557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.474042][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 824.743903][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 824.762542][ T5921] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.804591][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 824.832513][ T5921] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 824.871191][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.925214][ T5921] usb 5-1: config 0 descriptor?? [ 825.035313][T16557] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.117154][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.124318][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.250502][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.257797][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.285686][ T2024] block nbd0: Possible stuck request ffff8880277b0000: control (read@0,1024B). Runtime 240 seconds [ 825.299914][ T2024] block nbd0: Possible stuck request ffff8880277b0200: control (read@1024,1024B). Runtime 240 seconds [ 825.311023][ T2024] block nbd0: Possible stuck request ffff8880277b0400: control (read@2048,1024B). Runtime 240 seconds [ 825.322422][ T2024] block nbd0: Possible stuck request ffff8880277b0600: control (read@3072,1024B). Runtime 240 seconds [ 825.384550][ T5921] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 825.809587][ T5872] usb 5-1: USB disconnect, device number 7 [ 825.832693][T16760] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 825.914705][T16760] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 825.971073][T16760] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 825.994058][ T5809] Bluetooth: hci4: command tx timeout [ 826.057321][T16760] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 826.523103][T16760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.763476][T16760] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.919276][ T30] audit: type=1400 audit(2000000344.290:1116): avc: denied { bind } for pid=17431 comm="syz.4.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 827.030652][T17434] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 827.034338][ T30] audit: type=1400 audit(2000000344.400:1117): avc: denied { setopt } for pid=17431 comm="syz.4.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 827.188184][T12145] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.195563][T12145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.207158][T12145] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.214375][T12145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.232090][T16557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.381716][ T30] audit: type=1400 audit(2000000344.750:1118): avc: denied { write } for pid=17441 comm="syz.2.1916" path="socket:[41276]" dev="sockfs" ino=41276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 827.386896][T17452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1916'. [ 827.457153][T17455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.465087][T17455] IPv6: NLM_F_CREATE should be set when creating new route [ 827.472701][T17455] IPv6: NLM_F_CREATE should be set when creating new route [ 827.481975][T17455] IPv6: NLM_F_CREATE should be set when creating new route [ 827.973953][ T5921] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 828.047233][T17470] vivid-007: ================= START STATUS ================= [ 828.055093][T17470] vivid-007: Enable Output Cropping: true [ 828.060947][T17470] vivid-007: Enable Output Composing: true [ 828.067220][T17470] vivid-007: Enable Output Scaler: true [ 828.072887][T17470] vivid-007: Tx RGB Quantization Range: Automatic [ 828.079584][T17470] vivid-007: Transmit Mode: HDMI [ 828.084667][T17470] vivid-007: Hotplug Present: 0x00000000 [ 828.090405][T17470] vivid-007: RxSense Present: 0x00000000 [ 828.096251][T17470] vivid-007: EDID Present: 0x00000000 [ 828.101745][T17470] vivid-007: ================== END STATUS ================== [ 828.263991][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 828.324017][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 828.378431][ T5921] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 828.401228][ T5921] usb 3-1: Product: syz [ 828.420905][ T5921] usb 3-1: Manufacturer: syz [ 828.432380][ T5921] usb 3-1: SerialNumber: syz [ 828.561393][ T5921] usb 3-1: config 0 descriptor?? [ 828.599649][ T5921] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 828.733423][T16760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.793508][T16557] veth0_vlan: entered promiscuous mode [ 828.804676][ T5872] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 828.819935][T16557] veth1_vlan: entered promiscuous mode [ 828.859631][T16557] veth0_macvtap: entered promiscuous mode [ 828.871159][T16557] veth1_macvtap: entered promiscuous mode [ 828.895876][T16557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.912481][T16557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.929389][T12145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.949053][T12145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.971141][T12145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.981475][ T5872] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 828.991514][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.002258][T12145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.011199][ T5872] usb 6-1: config 0 has no interface number 0 [ 829.017480][ T5872] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.028733][ T5872] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.043087][ T5872] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 829.055301][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.081391][ T5872] usb 6-1: config 0 descriptor?? [ 829.107338][ T5872] ldusb 6-1:0.55: Interrupt in endpoint not found [ 829.151553][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.157338][T16760] veth0_vlan: entered promiscuous mode [ 829.165372][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.200907][T16760] veth1_vlan: entered promiscuous mode [ 829.207791][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.217867][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.229664][ T5921] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 829.245721][ T30] audit: type=1400 audit(2000000346.620:1119): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.4NH2Mm/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 829.262065][T16760] veth0_macvtap: entered promiscuous mode [ 829.300304][ T30] audit: type=1400 audit(2000000346.650:1120): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 829.367410][ T30] audit: type=1400 audit(2000000346.650:1121): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 829.370139][ T5872] usb 6-1: USB disconnect, device number 8 [ 829.399601][T16760] veth1_macvtap: entered promiscuous mode [ 829.420712][ T30] audit: type=1400 audit(2000000346.650:1122): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.4NH2Mm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 829.564975][T16760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.615497][ T30] audit: type=1400 audit(2000000346.650:1123): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.4NH2Mm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 829.644064][ T30] audit: type=1400 audit(2000000346.670:1124): avc: denied { unmount } for pid=16557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 829.671721][T16760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.688251][ T30] audit: type=1400 audit(2000000346.710:1125): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 829.728752][T12143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.164384][ T30] audit: type=1400 audit(2000000346.710:1126): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="gadgetfs" ino=8302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 830.187877][ T30] audit: type=1400 audit(2000000346.710:1127): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 830.210764][ T30] audit: type=1400 audit(2000000346.710:1128): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 830.281213][ T5872] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 830.301921][T12143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.416691][T17548] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 830.474391][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 830.634953][ T5872] usb 5-1: not running at top speed; connect to a high speed hub [ 830.658042][ T5872] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 830.671264][ T5872] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 830.692385][ T5872] usb 5-1: config 4 has no interface number 0 [ 830.700380][ T7019] usb 3-1: USB disconnect, device number 113 [ 830.753478][ T5872] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 830.776998][T12143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.830285][T12143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.839299][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 830.839328][ T5872] usb 5-1: Product: syz [ 830.839346][ T5872] usb 5-1: Manufacturer: syz [ 830.839363][ T5872] usb 5-1: SerialNumber: syz [ 831.193665][T12145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.205994][T12145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.316752][T12145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.329451][ T7019] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 831.342569][T12145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.613999][ T7019] usb 3-1: Using ep0 maxpacket: 16 [ 831.628862][ T7019] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.172629][ T7019] usb 3-1: config 0 interface 0 has no altsetting 0 [ 832.196391][ T7019] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 832.207746][ T7019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.223331][ T7019] usb 3-1: config 0 descriptor?? [ 832.481754][ T5872] uvcvideo 5-1:4.147: probe with driver uvcvideo failed with error -22 [ 832.905038][ T5872] usb 5-1: USB disconnect, device number 8 [ 832.970211][ T7019] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 833.438029][T17629] vivid-007: ================= START STATUS ================= [ 833.445994][T17629] vivid-007: Enable Output Cropping: true [ 833.451839][T17629] vivid-007: Enable Output Composing: true [ 833.457970][T17629] vivid-007: Enable Output Scaler: true [ 833.463686][T17629] vivid-007: Tx RGB Quantization Range: Automatic [ 833.470270][T17629] vivid-007: Transmit Mode: HDMI [ 833.475420][T17629] vivid-007: Hotplug Present: 0x00000000 [ 833.481232][T17629] vivid-007: RxSense Present: 0x00000000 [ 833.487070][T17629] vivid-007: EDID Present: 0x00000000 [ 833.492623][T17629] vivid-007: ================== END STATUS ================== [ 833.670193][ T5807] usb 3-1: USB disconnect, device number 114 [ 834.089884][T17657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1929'. [ 834.389707][T17667] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 834.397561][T17667] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 834.406597][T17667] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 834.414446][T17667] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 834.914890][T17504] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 834.924574][ T5921] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 834.973947][ T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 835.065953][T17504] usb 8-1: unable to get BOS descriptor or descriptor too short [ 835.075034][T17504] usb 8-1: not running at top speed; connect to a high speed hub [ 835.084222][ T5921] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 835.092603][T17504] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 835.100916][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.111475][T17504] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 835.121897][ T5921] usb 3-1: config 0 has no interface number 0 [ 835.128323][T17504] usb 8-1: config 4 has no interface number 0 [ 835.134655][ T5921] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 835.145844][ T5921] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 835.156652][ T5921] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 835.166281][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.175397][ T980] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 835.183611][T17504] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 835.195263][ T980] usb 6-1: config 1 has no interface number 0 [ 835.202779][ T5921] usb 3-1: config 0 descriptor?? [ 835.207927][T17504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 835.216330][ T980] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 32 [ 835.227060][T17673] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 835.234711][T17504] usb 8-1: Product: syz [ 835.239266][T17504] usb 8-1: Manufacturer: syz [ 835.240895][ T5921] ldusb 3-1:0.55: Interrupt in endpoint not found [ 835.252394][T17504] usb 8-1: SerialNumber: syz [ 835.257134][ T980] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 835.275523][ T980] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 835.284718][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.292980][ T980] usb 6-1: Product: syz [ 835.304555][ T980] usb 6-1: Manufacturer: syz [ 835.309259][ T980] usb 6-1: SerialNumber: syz [ 835.347220][T17681] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.384127][T17681] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.591630][ T5872] usb 3-1: USB disconnect, device number 115 [ 835.695416][T17708] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 838.012006][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 838.012021][ T30] audit: type=1400 audit(2000000355.380:1132): avc: denied { bind } for pid=17679 comm="syz.5.1932" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 838.039700][T17504] uvcvideo 8-1:4.147: probe with driver uvcvideo failed with error -22 [ 838.094823][T17504] usb 8-1: USB disconnect, device number 2 [ 838.137149][ T30] audit: type=1400 audit(2000000355.380:1133): avc: denied { node_bind } for pid=17679 comm="syz.5.1932" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 838.913932][ T30] audit: type=1400 audit(2000000355.510:1134): avc: denied { setopt } for pid=17725 comm="syz.6.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 838.977863][T17735] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 840.425072][T17765] vivid-007: ================= START STATUS ================= [ 840.442823][T17765] vivid-007: Enable Output Cropping: true [ 840.448998][T17765] vivid-007: Enable Output Composing: true [ 840.454986][T17765] vivid-007: Enable Output Scaler: true [ 840.460646][T17765] vivid-007: Tx RGB Quantization Range: Automatic [ 840.467306][T17765] vivid-007: Transmit Mode: HDMI [ 840.472379][T17765] vivid-007: Hotplug Present: 0x00000000 [ 840.478212][T17765] vivid-007: RxSense Present: 0x00000000 [ 840.483989][T17765] vivid-007: EDID Present: 0x00000000 [ 840.489488][T17765] vivid-007: ================== END STATUS ================== [ 840.720948][ T980] usb 6-1: Error in usbnet_get_endpoints (-110) [ 841.102292][ T30] audit: type=1400 audit(2000000358.470:1135): avc: denied { read write } for pid=17778 comm="syz.6.1943" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 841.213138][ T30] audit: type=1400 audit(2000000358.470:1136): avc: denied { open } for pid=17778 comm="syz.6.1943" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 841.274734][ T30] audit: type=1400 audit(2000000358.550:1137): avc: denied { ioctl } for pid=17778 comm="syz.6.1943" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 841.279014][T17783] XFS (nullb0): Invalid superblock magic number [ 841.329532][T17791] netlink: 160 bytes leftover after parsing attributes in process `syz.7.1942'. [ 841.369877][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1943'. [ 841.430790][ T30] audit: type=1400 audit(2000000358.790:1138): avc: denied { map } for pid=17778 comm="syz.6.1943" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 841.464126][ T5807] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 841.583913][ T980] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 841.603669][T17504] usb 6-1: USB disconnect, device number 9 [ 841.644067][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 841.696404][ T5807] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.713974][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 841.725368][ T5807] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 841.744050][ T980] usb 8-1: Using ep0 maxpacket: 16 [ 841.751034][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.751313][ T980] usb 8-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 841.771840][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 841.783141][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 841.793670][ T980] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 841.795484][ T5807] usb 3-1: config 0 descriptor?? [ 841.812835][ T980] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.835031][ T980] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 841.844986][ T980] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 841.853014][ T980] usb 8-1: Manufacturer: syz [ 841.870292][ T980] usb 8-1: config 0 descriptor?? [ 842.013892][T17504] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 842.173844][T17504] usb 6-1: Using ep0 maxpacket: 32 [ 842.182781][T17504] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 842.204981][T17504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.213015][T17504] usb 6-1: Product: syz [ 842.217510][ T30] audit: type=1400 audit(2000000359.590:1139): avc: denied { setopt } for pid=17836 comm="syz.6.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 842.240445][T17504] usb 6-1: Manufacturer: syz [ 842.245147][T17504] usb 6-1: SerialNumber: syz [ 842.257369][ T5807] nzxt-smart2 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 842.260064][T17504] usb 6-1: config 0 descriptor?? [ 842.276125][ T980] rc_core: IR keymap rc-hauppauge not found [ 842.282079][ T980] Registered IR keymap rc-empty [ 842.379919][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 842.408477][ T30] audit: type=1400 audit(2000000359.720:1140): avc: denied { create } for pid=17836 comm="syz.6.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 842.514556][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 842.760323][ T980] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 842.803742][ T980] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input55 [ 842.843577][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 842.899385][T17504] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 842.908179][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 842.924124][T17504] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 842.931924][ T5807] usb 3-1: USB disconnect, device number 116 [ 842.944218][ T5920] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 842.964077][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 842.994311][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 843.150086][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 843.264290][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 844.156874][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 844.623938][ T5809] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 844.824511][ T5865] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 844.833835][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 844.842911][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.854329][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 844.884968][ T5920] usb 7-1: config 0 descriptor?? [ 844.903904][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 844.930366][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 844.953928][ T980] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 844.996371][ T980] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 845.024469][ T980] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 845.062417][ T980] usb 8-1: USB disconnect, device number 3 [ 845.271970][T17929] 9pnet_fd: Insufficient options for proto=fd [ 845.286836][T17929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.713204][T17923] FAULT_INJECTION: forcing a failure. [ 845.713204][T17923] name failslab, interval 1, probability 0, space 0, times 0 [ 845.726101][T17923] CPU: 1 UID: 0 PID: 17923 Comm: syz.5.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.726138][T17923] Tainted: [L]=SOFTLOCKUP [ 845.726147][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 845.726161][T17923] Call Trace: [ 845.726169][T17923] [ 845.726178][T17923] dump_stack_lvl+0x100/0x190 [ 845.726222][T17923] should_fail_ex.cold+0x5/0xa [ 845.726254][T17923] should_failslab+0xc2/0x120 [ 845.726280][T17923] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 845.726317][T17923] ? alloc_vmap_area+0x186c/0x2bd0 [ 845.726348][T17923] alloc_vmap_area+0x186c/0x2bd0 [ 845.726387][T17923] ? __pfx_alloc_vmap_area+0x10/0x10 [ 845.726421][T17923] __get_vm_area_node+0x1ca/0x330 [ 845.726455][T17923] __vmalloc_node_range_noprof+0x213/0x1530 [ 845.726486][T17923] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 845.726522][T17923] ? __lock_acquire+0x4a5/0x2630 [ 845.726551][T17923] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 845.726584][T17923] ? __lock_acquire+0x4a5/0x2630 [ 845.726615][T17923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 845.726643][T17923] ? find_held_lock+0x2b/0x80 [ 845.726673][T17923] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 845.726700][T17923] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 845.726733][T17923] ? avc_has_perm_noaudit+0x145/0x3b0 [ 845.726762][T17923] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 845.726794][T17923] __vmalloc_node_noprof+0xad/0xf0 [ 845.726823][T17923] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 845.726866][T17923] __vmalloc_noprof+0xa3/0x120 [ 845.726894][T17923] ? __pfx___vmalloc_noprof+0x10/0x10 [ 845.726925][T17923] ? rcu_is_watching+0x12/0xc0 [ 845.726953][T17923] ? cap_capable+0x107/0x460 [ 845.726984][T17923] bpf_prog_alloc_no_stats+0x59/0x630 [ 845.727016][T17923] ? security_capable+0x80/0x260 [ 845.727047][T17923] bpf_prog_alloc+0x3b/0x200 [ 845.727079][T17923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 845.727114][T17923] bpf_prog_load+0x494/0x2c20 [ 845.727145][T17923] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 845.727171][T17923] ? __pfx_bpf_prog_load+0x10/0x10 [ 845.727198][T17923] ? avc_has_perm_noaudit+0x145/0x3b0 [ 845.727227][T17923] ? avc_has_perm+0x135/0x1e0 [ 845.727263][T17923] ? selinux_bpf+0xfb/0x150 [ 845.727295][T17923] __sys_bpf+0x223a/0x4b90 [ 845.727326][T17923] ? __pfx___sys_bpf+0x10/0x10 [ 845.727349][T17923] ? proc_fail_nth_write+0x9f/0x220 [ 845.727382][T17923] ? find_held_lock+0x2b/0x80 [ 845.727418][T17923] ? find_held_lock+0x2b/0x80 [ 845.727446][T17923] ? ksys_write+0x190/0x250 [ 845.727475][T17923] ? __mutex_unlock_slowpath+0x15c/0x790 [ 845.727500][T17923] ? __fget_files+0x215/0x3d0 [ 845.727542][T17923] ? fput+0x79/0x100 [ 845.727569][T17923] ? ksys_write+0x1ac/0x250 [ 845.727589][T17923] ? __pfx_ksys_write+0x10/0x10 [ 845.727616][T17923] __x64_sys_bpf+0x7b/0xc0 [ 845.727642][T17923] ? lockdep_hardirqs_on+0x78/0x100 [ 845.727678][T17923] do_syscall_64+0x106/0xf80 [ 845.727699][T17923] ? clear_bhb_loop+0x40/0x90 [ 845.727728][T17923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.727751][T17923] RIP: 0033:0x7f2aee39c819 [ 845.727771][T17923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.727793][T17923] RSP: 002b:00007f2aef2bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 845.727816][T17923] RAX: ffffffffffffffda RBX: 00007f2aee616090 RCX: 00007f2aee39c819 [ 845.727832][T17923] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 845.727851][T17923] RBP: 00007f2aef2bc090 R08: 0000000000000000 R09: 0000000000000000 [ 845.727865][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.727878][T17923] R13: 00007f2aee616128 R14: 00007f2aee616090 R15: 00007ffe9e71e1e8 [ 845.727911][T17923] [ 846.105014][ T5920] ath6kl: Failed to submit usb control message: -110 [ 846.114610][ T5920] ath6kl: unable to send the bmi data to the device: -110 [ 846.126319][ T5865] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 846.134522][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.139638][ T5920] ath6kl: Unable to send get target info: -110 [ 846.145508][ T5865] usb 3-1: config 0 has no interface number 0 [ 846.157372][ T5865] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 846.160176][ T5920] ath6kl: Failed to init ath6kl core: -110 [ 846.169184][ T5865] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 846.184646][ T5920] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 846.185221][ T5865] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 846.202879][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.215327][ T5865] usb 3-1: config 0 descriptor?? [ 846.221651][T17901] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 846.250994][ T5865] ldusb 3-1:0.55: Interrupt in endpoint not found [ 846.305177][T17504] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 846.405944][T17504] usb 6-1: USB disconnect, device number 10 [ 846.420788][ T5920] usb 7-1: USB disconnect, device number 2 [ 847.069281][ T5865] usb 3-1: USB disconnect, device number 117 [ 847.406141][T17990] binder: Bad value for 'max' [ 847.444011][ T30] audit: type=1400 audit(2000000364.780:1141): avc: denied { mounton } for pid=17982 comm="syz.7.1952" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 849.919967][T17504] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 851.595202][ T30] audit: type=1400 audit(2000000368.970:1142): avc: denied { watch } for pid=18029 comm="syz.5.1958" path="/50/file1" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 851.899884][T17504] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 851.917927][T17504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.944412][ T30] audit: type=1400 audit(2000000368.990:1143): avc: denied { watch_sb watch_reads } for pid=18029 comm="syz.5.1958" path="/50/file1" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 851.996010][T17504] usb 3-1: can't set config #1, error -71 [ 852.054094][T17504] usb 3-1: USB disconnect, device number 118 [ 852.234279][ T30] audit: type=1400 audit(2000000369.000:1144): avc: denied { create } for pid=18029 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 852.653930][T11571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 852.664616][T11571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 852.679734][T11571] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 852.695582][T11571] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 852.708130][T11571] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 853.154576][T18065] lo speed is unknown, defaulting to 1000 [ 853.173568][T18065] wg1 speed is unknown, defaulting to 1000 [ 853.419315][ T30] audit: type=1400 audit(2000000370.780:1145): avc: denied { write } for pid=18088 comm="syz.7.1965" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 853.944124][ T5865] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 854.160823][ T5865] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 854.170150][ T30] audit: type=1400 audit(2000000371.530:1146): avc: denied { execute } for pid=18088 comm="syz.7.1965" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 854.223316][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 854.235359][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.284926][ T5865] usb 7-1: config 0 has no interface number 0 [ 854.311358][ T5865] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 854.386310][ T5865] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 854.462385][ T5865] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 854.483240][ T5865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.501545][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 854.525307][T18065] chnl_net:caif_netlink_parms(): no params data found [ 854.546829][ T5865] usb 7-1: config 0 descriptor?? [ 854.552701][T18089] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 854.590061][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 854.637774][ T5865] ldusb 7-1:0.55: Interrupt in endpoint not found [ 854.644513][ T9] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 854.644546][ T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 854.644568][ T9] usb 6-1: config 4 has no interface number 0 [ 854.646888][ T9] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 854.708052][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 854.716744][ T9] usb 6-1: Product: syz [ 854.721974][ T9] usb 6-1: Manufacturer: syz [ 854.730608][ T9] usb 6-1: SerialNumber: syz [ 854.814971][ T5921] usb 7-1: USB disconnect, device number 3 [ 854.917956][T18065] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.974356][T18065] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.982510][T18065] bridge_slave_0: entered allmulticast mode [ 855.009143][T18065] bridge_slave_0: entered promiscuous mode [ 855.049070][T18065] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.080157][T18065] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.104999][T11571] Bluetooth: hci7: command tx timeout [ 855.121569][T18065] bridge_slave_1: entered allmulticast mode [ 855.146715][T18065] bridge_slave_1: entered promiscuous mode [ 855.351397][ T2024] block nbd0: Possible stuck request ffff8880277b0000: control (read@0,1024B). Runtime 270 seconds [ 855.363668][ T2024] block nbd0: Possible stuck request ffff8880277b0200: control (read@1024,1024B). Runtime 270 seconds [ 855.374872][ T2024] block nbd0: Possible stuck request ffff8880277b0400: control (read@2048,1024B). Runtime 270 seconds [ 855.386357][ T2024] block nbd0: Possible stuck request ffff8880277b0600: control (read@3072,1024B). Runtime 270 seconds [ 855.452993][T18065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.520211][T18065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.672338][ T9] uvcvideo 6-1:4.147: probe with driver uvcvideo failed with error -22 [ 856.846901][ T30] audit: type=1400 audit(2000000374.100:1147): avc: denied { ioctl } for pid=18278 comm="syz.6.1972" path="socket:[43023]" dev="sockfs" ino=43023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 856.882401][ T9] usb 6-1: USB disconnect, device number 11 [ 856.894353][ T5921] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 856.902105][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 856.925681][T18065] team0: Port device team_slave_0 added [ 857.161628][T18065] team0: Port device team_slave_1 added [ 857.184003][T11571] Bluetooth: hci7: command tx timeout [ 857.463869][ T5921] usb 8-1: device descriptor read/64, error -32 [ 857.464765][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1973'. [ 857.478223][T18065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.502426][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.564856][T18065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.626623][ T30] audit: type=1400 audit(2000000375.000:1148): avc: denied { unmount } for pid=16557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 857.628958][T18065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.665617][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.695987][T18065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.705394][ T30] audit: type=1400 audit(2000000375.070:1149): avc: denied { mount } for pid=18254 comm="syz.2.1970" name="/" dev="autofs" ino=43054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 857.731287][T18322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1974'. [ 857.741070][T18324] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1974'. [ 857.764000][ T5921] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 857.875744][T18065] hsr_slave_0: entered promiscuous mode [ 857.882045][T18065] hsr_slave_1: entered promiscuous mode [ 857.895912][T18065] debugfs: 'hsr0' already exists in 'hsr' [ 857.906968][T18065] Cannot create hsr debugfs directory [ 857.962018][ T5921] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 857.976377][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.000669][ T5921] usb 8-1: Product: syz [ 858.016869][ T5921] usb 8-1: Manufacturer: syz [ 858.046689][ T5921] usb 8-1: SerialNumber: syz [ 858.072224][ T5921] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 858.116611][ T980] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 858.256583][ T30] audit: type=1400 audit(2000000631.630:1150): avc: denied { name_bind } for pid=18417 comm="syz.2.1977" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 859.024218][ T5921] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 859.189471][ T980] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 859.197386][ T980] ath9k_htc: Failed to initialize the device [ 859.204875][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.232863][ T5921] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 859.254798][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.267170][ T5812] Bluetooth: hci7: command tx timeout [ 859.287983][ T5921] usb 6-1: config 0 descriptor?? [ 859.311033][ T980] usb 8-1: ath9k_htc: USB layer deinitialized [ 859.344456][ T5812] Bluetooth: hci6: command 0x0406 tx timeout [ 859.488334][ T9] usb 8-1: USB disconnect, device number 5 [ 859.543522][T18065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 859.593482][T18065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 859.733949][T18065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 859.765548][T18065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 859.815266][T18491] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 859.901296][T18065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.933257][T18065] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.949159][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.956377][T12143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.034068][ T9] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 860.050423][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.057594][T12143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.207718][ T9] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 860.223010][ T9] usb 8-1: config 0 has no interface number 0 [ 860.230528][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 860.245315][ T9] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 860.262066][ T9] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 860.274357][ T9] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.288231][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 860.297624][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.312166][ T9] usb 8-1: config 0 descriptor?? [ 860.318471][T18481] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 860.331797][ T9] ldusb 8-1:0.55: Interrupt in endpoint not found [ 860.333605][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.394766][ T5921] ath6kl: Failed to submit usb control message: -110 [ 860.408340][ T5921] ath6kl: unable to send the bmi data to the device: -110 [ 860.416131][ T5921] ath6kl: Unable to send get target info: -110 [ 860.448165][ T5921] ath6kl: Failed to init ath6kl core: -110 [ 860.454641][ T5921] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 860.496073][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.549218][ T5921] usb 8-1: USB disconnect, device number 6 [ 860.573202][T18065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.630793][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.707891][T11571] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 860.714724][ T5809] Bluetooth: hci0: command 0x1003 tx timeout [ 860.743270][ T5807] usb 6-1: USB disconnect, device number 12 [ 860.793383][ T13] bond0: (slave netdevsim0): Releasing backup interface [ 860.808736][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.891670][T17504] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 860.962863][ T30] audit: type=1400 audit(2000000634.330:1151): avc: denied { connect } for pid=18532 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 861.031168][T18538] program syz.6.1982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.060814][ T13] bridge_slave_1: left allmulticast mode [ 861.072241][T17504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.096156][ T13] bridge_slave_1: left promiscuous mode [ 861.105513][T17504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.115585][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.126756][T17504] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.138450][T17504] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 861.147412][ T13] bridge_slave_0: left allmulticast mode [ 861.155577][ T13] bridge_slave_0: left promiscuous mode [ 861.163581][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.172573][T17504] usb 3-1: Manufacturer: syz [ 861.185666][T17504] usb 3-1: config 0 descriptor?? [ 861.333310][ T30] audit: type=1400 audit(2000000634.700:1152): avc: denied { setopt } for pid=18546 comm="syz.7.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 861.354780][T11571] Bluetooth: hci7: command tx timeout [ 861.854579][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.886106][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.325898][T18511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.344347][T18511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.996154][ T5865] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 864.043920][T17504] uclogic 0003:256C:006D.002C: failed retrieving string descriptor #200: -71 [ 864.052779][T17504] uclogic 0003:256C:006D.002C: failed retrieving pen parameters: -71 [ 864.072075][T17504] uclogic 0003:256C:006D.002C: failed probing pen v2 parameters: -71 [ 864.088701][T17504] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 864.098103][T17504] uclogic 0003:256C:006D.002C: probe with driver uclogic failed with error -71 [ 864.122141][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 864.157189][T17504] usb 3-1: USB disconnect, device number 119 [ 864.388719][ T5865] usb 7-1: unable to get BOS descriptor or descriptor too short [ 864.408226][ T5865] usb 7-1: not running at top speed; connect to a high speed hub [ 864.416806][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.427166][ T5865] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 864.436472][ T5865] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 864.448529][ T5865] usb 7-1: config 4 has no interface number 0 [ 864.448961][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.467789][ T5865] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 864.478603][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 864.487672][ T13] bond0 (unregistering): Released all slaves [ 864.495799][ T5865] usb 7-1: Product: syz [ 864.512440][ T5865] usb 7-1: Manufacturer: syz [ 864.519814][ T13] bond1 (unregistering): Released all slaves [ 864.526984][ T5865] usb 7-1: SerialNumber: syz [ 864.986157][T18065] veth0_vlan: entered promiscuous mode [ 865.035537][ T13] tipc: Disabling bearer [ 865.062317][ T13] tipc: Left network mode [ 865.107498][T18065] veth1_vlan: entered promiscuous mode [ 865.152554][ T30] audit: type=1400 audit(2000000638.520:1153): avc: denied { connect } for pid=18616 comm="syz.5.1990" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 865.235707][T18065] veth0_macvtap: entered promiscuous mode [ 865.281906][T18065] veth1_macvtap: entered promiscuous mode [ 865.412714][T18065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.440726][ T30] audit: type=1400 audit(2000000638.800:1154): avc: denied { create } for pid=18628 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 865.511308][T18065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.569558][ T13] hsr_slave_0: left promiscuous mode [ 865.580707][ T13] hsr_slave_1: left promiscuous mode [ 865.587875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.599750][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.611170][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.638202][ T13] veth1_macvtap: left promiscuous mode [ 865.644570][ T13] veth0_macvtap: left promiscuous mode [ 865.650204][ T13] veth1_vlan: left promiscuous mode [ 865.657602][ T13] veth0_vlan: left promiscuous mode [ 865.664913][ T5807] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 865.836726][ T5807] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 865.858989][ T5807] usb 6-1: config 0 has no interface number 0 [ 865.874298][ T5807] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.898243][ T5807] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 865.926187][ T5807] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.954333][ T5807] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 865.993964][ T5807] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 866.003081][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.046195][ T5807] usb 6-1: config 0 descriptor?? [ 866.052087][T18632] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 866.068533][ T13] team0 (unregistering): Port device team_slave_1 removed [ 866.081323][ T5807] ldusb 6-1:0.55: Interrupt in endpoint not found [ 866.101851][ T13] team0 (unregistering): Port device team_slave_0 removed [ 866.668652][ T5807] usb 6-1: USB disconnect, device number 13 [ 866.720812][ T3504] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.732291][ T3504] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.738056][ T5865] uvcvideo 7-1:4.147: probe with driver uvcvideo failed with error -22 [ 866.741557][ T3504] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.762316][ T5865] usb 7-1: USB disconnect, device number 4 [ 866.825463][ T3504] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.112808][T12141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.159736][T12141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.362683][T18691] loop9: detected capacity change from 0 to 8 [ 867.419389][T18691] Dev loop9: unable to read RDB block 8 [ 867.425303][T18691] loop9: unable to read partition table [ 867.432083][T18691] loop9: partition table beyond EOD, truncated [ 867.438632][T18691] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 868.392923][ T13] IPVS: stop unused estimator thread 0... [ 868.694766][T12143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.703030][T12143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.426667][ T31] INFO: task syz.0.1654:14283 blocked for more than 143 seconds. [ 869.439236][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 869.473939][ T5807] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 869.507798][ T30] audit: type=1400 audit(2000000642.860:1155): avc: denied { write } for pid=5791 comm="syz-executor" path="pipe:[4009]" dev="pipefs" ino=4009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 869.551013][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 869.742695][ T31] task:syz.0.1654 state:D stack:28216 pid:14283 tgid:14275 ppid:5811 task_flags:0x400140 flags:0x00080002 [ 869.839939][ T31] Call Trace: [ 869.843255][ T31] [ 869.865469][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.886006][T18739] vivid-007: ================= START STATUS ================= [ 869.893653][T18739] vivid-007: Enable Output Cropping: true [ 869.899719][T18739] vivid-007: Enable Output Composing: true [ 869.905565][T18739] vivid-007: Enable Output Scaler: true [ 869.911104][T18739] vivid-007: Tx RGB Quantization Range: Automatic [ 869.917565][T18739] vivid-007: Transmit Mode: HDMI [ 869.922499][T18739] vivid-007: Hotplug Present: 0x00000000 [ 869.928138][T18739] vivid-007: RxSense Present: 0x00000000 [ 869.933757][T18739] vivid-007: EDID Present: 0x00000000 [ 869.939161][T18739] vivid-007: ================== END STATUS ================== [ 870.009721][ T31] __schedule+0xfee/0x6120 [ 870.047991][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.063232][ T31] ? __lock_acquire+0x4a5/0x2630 [ 870.135507][ T31] ? __pfx___schedule+0x10/0x10 [ 870.140392][ T31] ? find_held_lock+0x2b/0x80 [ 870.155847][ T5807] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 870.203921][ T31] ? schedule+0x2bf/0x390 [ 870.209773][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.233107][ T31] schedule+0xdd/0x390 [ 870.241621][ T31] schedule_preempt_disabled+0x13/0x30 [ 870.315861][ T5807] usb 7-1: config 0 descriptor?? [ 870.324732][ T31] __mutex_lock+0xc9a/0x1b90 [ 870.329383][ T31] ? sync_bdevs+0x153/0x480 [ 870.354943][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 870.360142][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 870.366767][ T31] ? iput.part.0+0x1a0/0xf50 [ 870.374349][ T31] ? sync_bdevs+0x153/0x480 [ 870.378938][ T31] sync_bdevs+0x153/0x480 [ 870.383322][ T31] ksys_sync+0xb0/0xf0 [ 870.424386][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 870.434537][ T31] ? do_syscall_64+0x95/0xf80 [ 870.444213][ T31] __do_sys_sync+0xe/0x20 [ 870.454156][ T31] do_syscall_64+0x106/0xf80 [ 870.458856][ T31] ? clear_bhb_loop+0x40/0x90 [ 870.463585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.540712][ T31] RIP: 0033:0x7fa6fa39c819 [ 870.574081][ T31] RSP: 002b:00007fa6fb1c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 870.583009][ T31] RAX: ffffffffffffffda RBX: 00007fa6fa616090 RCX: 00007fa6fa39c819 [ 870.614097][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.623060][ T31] RBP: 00007fa6fa616090 R08: 0000000000000000 R09: 0000000000000000 [ 870.654041][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.662216][ T31] R13: 00007fa6fa616128 R14: 00007fa6fa616090 R15: 00007ffc7a4b14c8 [ 870.674643][ T31] [ 870.678043][ T31] INFO: task syz.0.1654:14286 blocked for more than 144 seconds. [ 870.747554][ T31] Tainted: G L syzkaller #0 [ 870.775471][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 870.817223][ T31] task:syz.0.1654 state:D stack:28136 pid:14286 tgid:14275 ppid:5811 task_flags:0x400040 flags:0x00080002 [ 870.835538][ T31] Call Trace: [ 870.857976][ T31] [ 870.861096][ T31] __schedule+0xfee/0x6120 [ 870.873939][ T31] ? __lock_acquire+0x4a5/0x2630 [ 870.879049][ T31] ? __pfx___schedule+0x10/0x10 [ 870.884539][ T31] ? find_held_lock+0x2b/0x80 [ 870.889383][ T31] ? schedule+0x2bf/0x390 [ 870.894481][ T31] schedule+0xdd/0x390 [ 870.898700][ T31] schedule_preempt_disabled+0x13/0x30 [ 870.906008][ T31] __mutex_lock+0xc9a/0x1b90 [ 870.910730][ T31] ? sync_bdevs+0x153/0x480 [ 870.924144][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 870.929305][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 870.935706][ T31] ? iput.part.0+0x1a0/0xf50 [ 870.940465][ T31] ? sync_bdevs+0x153/0x480 [ 870.946185][ T31] sync_bdevs+0x153/0x480 [ 870.952560][ T31] ksys_sync+0xb0/0xf0 [ 870.963578][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 870.975137][ T31] ? kcov_ioctl+0x16a/0x720 [ 870.979873][ T31] ? do_syscall_64+0x95/0xf80 [ 870.994369][ T31] __do_sys_sync+0xe/0x20 [ 870.998875][ T31] do_syscall_64+0x106/0xf80 [ 871.003528][ T31] ? clear_bhb_loop+0x40/0x90 [ 871.008953][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.015465][ T31] RIP: 0033:0x7fa6fa39c819 [ 871.020315][ T31] RSP: 002b:00007fa6fb1a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 871.036819][ T31] RAX: ffffffffffffffda RBX: 00007fa6fa616180 RCX: 00007fa6fa39c819 [ 871.054001][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.062157][ T31] RBP: 00007fa6fa616180 R08: 0000000000000000 R09: 0000000000000000 [ 871.078808][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.105398][ T31] R13: 00007fa6fa616218 R14: 00007fa6fa616180 R15: 00007ffc7a4b14c8 [ 871.125784][ T31] [ 871.153922][ T31] INFO: task syz.0.1654:14290 blocked for more than 145 seconds. [ 871.162202][ T31] Tainted: G L syzkaller #0 [ 871.213276][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.227152][ T31] task:syz.0.1654 state:D stack:28904 pid:14290 tgid:14275 ppid:5811 task_flags:0x400140 flags:0x00080002 [ 871.240264][ T31] Call Trace: [ 871.243617][ T31] [ 871.246706][ T31] __schedule+0xfee/0x6120 [ 871.261966][ T31] ? __lock_acquire+0x4a5/0x2630 [ 871.277053][ T31] ? __pfx___schedule+0x10/0x10 [ 871.281964][ T31] ? find_held_lock+0x2b/0x80 [ 871.286773][ T31] ? schedule+0x2bf/0x390 [ 871.291162][ T31] schedule+0xdd/0x390 [ 871.295369][ T31] schedule_preempt_disabled+0x13/0x30 [ 871.300994][ T31] __mutex_lock+0xc9a/0x1b90 [ 871.309618][ T31] ? bdev_open+0xa2/0xe40 [ 871.323847][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 871.328976][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 871.352286][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 871.363381][ T31] ? file_init_path+0x48e/0x670 [ 871.383967][ T31] ? bdev_open+0xa2/0xe40 [ 871.388351][ T31] bdev_open+0xa2/0xe40 [ 871.392527][ T31] ? iput+0x3a/0x40 [ 871.413850][ T31] bdev_file_open_by_dev+0x179/0x210 [ 871.436909][ T31] setup_bdev_super+0x385/0x730 [ 871.441832][ T31] get_tree_bdev_flags+0x363/0x620 [ 871.463832][ T31] ? __pfx_hpfs_fill_super+0x10/0x10 [ 871.469178][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 871.483844][ T31] ? cap_capable+0x107/0x460 [ 871.488489][ T31] ? bpf_lsm_capable+0x9/0x10 [ 871.493179][ T31] ? security_capable+0x80/0x260 [ 871.502439][ T31] vfs_get_tree+0x92/0x320 [ 871.507461][ T31] path_mount+0x7d0/0x23d0 [ 871.511912][ T31] ? __pfx_path_mount+0x10/0x10 [ 871.524104][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 871.529368][ T31] ? putname+0xb1/0x110 [ 871.533540][ T31] ? kmem_cache_free+0x124/0x6a0 [ 871.564662][ T31] ? __x64_sys_mount+0x293/0x310 [ 871.569710][ T31] __x64_sys_mount+0x293/0x310 [ 871.587408][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 871.593122][ T31] do_syscall_64+0x106/0xf80 [ 871.597904][ T31] ? clear_bhb_loop+0x40/0x90 [ 871.602784][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.609029][ T31] RIP: 0033:0x7fa6fa39c819 [ 871.613566][ T31] RSP: 002b:00007fa6fb187028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 871.635596][ T31] RAX: ffffffffffffffda RBX: 00007fa6fa616270 RCX: 00007fa6fa39c819 [ 871.645899][ T31] RDX: 00002000000004c0 RSI: 00002000000000c0 RDI: 0000200000000000 [ 871.654180][ T31] RBP: 00007fa6fa432c91 R08: 0000000000000000 R09: 0000000000000000 [ 871.662159][ T31] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000000 [ 871.671212][ T31] R13: 00007fa6fa616308 R14: 00007fa6fa616270 R15: 00007ffc7a4b14c8 [ 871.679507][ T31] [ 871.682666][ T31] INFO: task syz.0.1654:14300 blocked for more than 145 seconds. [ 871.690813][ T31] Tainted: G L syzkaller #0 [ 871.697632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.706647][ T31] task:syz.0.1654 state:D stack:28280 pid:14300 tgid:14275 ppid:5811 task_flags:0x400040 flags:0x00080002 [ 871.719154][ T31] Call Trace: [ 871.722461][ T31] [ 871.725824][ T31] __schedule+0xfee/0x6120 [ 871.730274][ T31] ? __lock_acquire+0x4a5/0x2630 [ 871.735615][ T31] ? __pfx___schedule+0x10/0x10 [ 871.740487][ T31] ? find_held_lock+0x2b/0x80 [ 871.748493][ T31] ? schedule+0x2bf/0x390 [ 871.752869][ T31] schedule+0xdd/0x390 [ 871.758383][ T31] schedule_preempt_disabled+0x13/0x30 [ 871.764115][ T31] __mutex_lock+0xc9a/0x1b90 [ 871.768771][ T31] ? bdev_open+0x41a/0xe40 [ 871.773525][ T31] ? find_held_lock+0x2b/0x80 [ 871.778708][ T31] ? find_inode_fast+0x5e3/0x910 [ 871.783677][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 871.789133][ T31] ? find_inode_fast+0x1fa/0x910 [ 871.794204][ T31] ? bdev_open+0x41a/0xe40 [ 871.798642][ T31] bdev_open+0x41a/0xe40 [ 871.802884][ T31] ? iput+0x3a/0x40 [ 871.806799][ T31] blkdev_open+0x34e/0x4f0 [ 871.811254][ T31] do_dentry_open+0x6d8/0x1660 [ 871.816119][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 871.821862][ T31] vfs_open+0x82/0x3f0 [ 871.830791][ T31] path_openat+0x208c/0x31a0 [ 871.835504][ T31] ? __pfx_path_openat+0x10/0x10 [ 871.840476][ T31] do_file_open+0x20e/0x430 [ 871.845472][ T31] ? __pfx_do_file_open+0x10/0x10 [ 871.850556][ T31] ? alloc_fd+0x476/0x790 [ 871.855139][ T31] ? do_getname+0x191/0x390 [ 871.859682][ T31] do_sys_openat2+0x10d/0x1e0 [ 871.864589][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 871.869829][ T31] __x64_sys_openat+0x12d/0x210 [ 871.874744][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 871.880298][ T31] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 871.886528][ T31] ? syscall_user_dispatch+0x76/0x130 [ 871.891918][ T31] do_syscall_64+0x106/0xf80 [ 871.896653][ T31] ? clear_bhb_loop+0x40/0x90 [ 871.901353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.907548][ T31] RIP: 0033:0x7fa6fa35d04e [ 871.911985][ T31] RSP: 002b:00007fa6f7df1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 871.920478][ T31] RAX: ffffffffffffffda RBX: 00007fa6f7df26c0 RCX: 00007fa6fa35d04e [ 871.928546][ T31] RDX: 0000000000006000 RSI: 00007fa6f7df1c00 RDI: ffffffffffffff9c [ 871.936585][ T31] RBP: 00007fa6f7df1c00 R08: 0000000000000000 R09: 0000000000000000 [ 871.944642][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 871.953029][ T31] R13: 00007fa6fa6163f8 R14: 00007fa6fa616360 R15: 00007ffc7a4b14c8 [ 871.961087][ T31] [ 871.964221][ T31] [ 871.964221][ T31] Showing all locks held in the system: [ 871.971984][ T31] 4 locks held by rcu_exp_gp_kthr/18: [ 872.005329][ T31] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 872.015621][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 872.024646][ T31] #2: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 872.033396][ T31] #3: ffffffff9b447ae0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 872.045482][ T31] 1 lock held by khungtaskd/31: [ 872.050827][ T31] #0: ffffffff8e7e77a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 872.061288][ T31] 3 locks held by kworker/u8:4/78: [ 872.066770][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 872.078686][ T31] #1: ffffc9000255fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 872.089471][ T31] #2: ffffffff906145a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 872.098895][ T31] 1 lock held by dhcpcd/5475: [ 872.103577][ T31] #0: ffffffff906145a8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 872.113513][ T31] 2 locks held by getty/5566: [ 872.118494][ T31] #0: ffff8880333c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 872.128541][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 872.138986][ T31] 5 locks held by kworker/1:3/5807: [ 872.144459][ T31] #0: ffff88801eee6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 872.161402][ T31] #1: ffffc90002f77d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 872.172974][ T31] #2: ffff88802aa081e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 872.182233][ T31] #3: ffff8880556b11e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 872.192244][ T31] #4: ffff88802a3b0368 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x23d/0x1c60 [ 872.203368][ T31] 2 locks held by syz-executor/5815: [ 872.208893][ T31] #0: ffff888032918ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 872.218583][ T31] #1: ffff8880329180c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 872.228375][ T31] 3 locks held by kworker/1:5/5872: [ 872.233577][ T31] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 872.244190][ T31] #1: ffffc900041d7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 872.254389][ T31] #2: ffffffff8e7f32f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 872.264528][ T31] 3 locks held by kworker/1:7/7019: [ 872.269725][ T31] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 872.280217][ T31] #1: ffffc9000d5cfd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 872.290703][ T31] #2: ffffffff8e7f31c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 872.300734][ T31] 1 lock held by udevd/7685: [ 872.305449][ T31] #0: ffff888027715358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 872.314801][ T31] 1 lock held by syz.0.1654/14283: [ 872.319911][ T31] #0: ffff888027715358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 872.329392][ T31] 1 lock held by syz.0.1654/14286: [ 872.334579][ T31] #0: ffff888027715358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 872.344051][ T31] 2 locks held by syz.0.1654/14290: [ 872.349251][ T31] #0: ffff8880378bc0e0 (&type->s_umount_key#90/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 872.359912][ T31] #1: ffff888027715358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 872.369288][ T31] 1 lock held by syz.0.1654/14300: [ 872.374433][ T31] #0: ffff888027715358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 872.384102][ T31] 2 locks held by syz.1.1862/16358: [ 872.390451][ T31] #0: ffff88807ba940f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 872.399583][ T31] #1: ffff88807bf22420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 872.408531][ T31] 1 lock held by syz.7.1997/18702: [ 872.413624][ T31] #0: ffffffff906145a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 872.422713][ T31] 1 lock held by syz.5.1998/18706: [ 872.427879][ T31] #0: ffffffff8e7f31c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 872.437859][ T31] 3 locks held by syz.6.2000/18710: [ 872.443055][ T31] #0: ffff88805af40ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 872.452715][ T31] #1: ffff88805af400c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 872.462872][ T31] #2: ffffffff8e7f32f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 872.473111][ T31] 4 locks held by syz.8.1961/18734: [ 872.478342][ T31] #0: ffff88805f1d0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 872.488061][ T31] #1: ffff88805f1d00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 872.497778][ T31] #2: ffffffff908ada88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 872.507875][ T31] #3: ffff888028d11300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 872.517295][ T31] [ 872.520850][ T31] ============================================= [ 872.520850][ T31] [ 872.556568][ T31] NMI backtrace for cpu 0 [ 872.556589][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 872.556616][ T31] Tainted: [L]=SOFTLOCKUP [ 872.556623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.556636][ T31] Call Trace: [ 872.556644][ T31] [ 872.556653][ T31] dump_stack_lvl+0x100/0x190 [ 872.556693][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 872.556718][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 872.556742][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 872.556773][ T31] sys_info+0x141/0x190 [ 872.556796][ T31] watchdog+0xd25/0x1050 [ 872.556831][ T31] ? __pfx_watchdog+0x10/0x10 [ 872.556872][ T31] ? __kthread_parkme+0x18c/0x230 [ 872.556905][ T31] ? kthread+0x13a/0x450 [ 872.556923][ T31] ? __pfx_watchdog+0x10/0x10 [ 872.556948][ T31] kthread+0x370/0x450 [ 872.556966][ T31] ? __pfx_kthread+0x10/0x10 [ 872.556993][ T31] ret_from_fork+0x754/0xd80 [ 872.557016][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 872.557038][ T31] ? __switch_to+0x7b4/0x1120 [ 872.557063][ T31] ? __pfx_kthread+0x10/0x10 [ 872.557084][ T31] ret_from_fork_asm+0x1a/0x30 [ 872.557120][ T31] [ 872.557373][ T31] Sending NMI from CPU 0 to CPUs 1: [ 872.634945][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.635001][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.711602][ C1] NMI backtrace for cpu 1 [ 872.711623][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.711652][ C1] Tainted: [L]=SOFTLOCKUP [ 872.711660][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.711672][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 872.711708][ C1] Code: 88 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 31 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 872.711727][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 872.711743][ C1] RAX: 0000000004ba1fed RBX: ffff88801e6924c0 RCX: ffffffff8b915c75 [ 872.711757][ C1] RDX: 0000000000000000 RSI: ffffffff8de7b1a3 RDI: ffffffff8c1b1ea0 [ 872.711770][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a679d [ 872.711783][ C1] R10: ffff8880b8533ceb R11: 0000000000000000 R12: 0000000000000001 [ 872.711796][ C1] R13: ffffed1003cd2498 R14: 0000000000000001 R15: ffffffff90d9d910 [ 872.711809][ C1] FS: 0000000000000000(0000) GS:ffff888124438000(0000) knlGS:0000000000000000 [ 872.711827][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.711841][ C1] CR2: 00007f2745002286 CR3: 000000000e598000 CR4: 00000000003526f0 [ 872.711853][ C1] Call Trace: [ 872.711860][ C1] [ 872.711867][ C1] default_idle+0x9/0x10 [ 872.711891][ C1] default_idle_call+0x6c/0xb0 [ 872.711913][ C1] do_idle+0x464/0x590 [ 872.711942][ C1] ? __pfx_do_idle+0x10/0x10 [ 872.711972][ C1] cpu_startup_entry+0x4f/0x60 [ 872.711997][ C1] start_secondary+0x21d/0x2d0 [ 872.712029][ C1] ? __pfx_start_secondary+0x10/0x10 [ 872.712062][ C1] common_startup_64+0x13e/0x148 [ 872.712095][ C1] [ 872.904012][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 872.910931][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 872.921614][ T31] Tainted: [L]=SOFTLOCKUP [ 872.925929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 872.935974][ T31] Call Trace: [ 872.939240][ T31] [ 872.942154][ T31] dump_stack_lvl+0x100/0x190 [ 872.946843][ T31] vpanic+0x552/0x970 [ 872.950816][ T31] ? __pfx_vpanic+0x10/0x10 [ 872.955395][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 872.961547][ T31] panic+0xd1/0xe0 [ 872.965261][ T31] ? __pfx_panic+0x10/0x10 [ 872.969671][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 872.975822][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 872.981974][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 872.988124][ T31] ? watchdog.cold+0x198/0x1ca [ 872.992888][ T31] ? watchdog+0xd35/0x1050 [ 872.997305][ T31] watchdog.cold+0x1a9/0x1ca [ 873.001903][ T31] ? __pfx_watchdog+0x10/0x10 [ 873.006581][ T31] ? __kthread_parkme+0x18c/0x230 [ 873.011608][ T31] ? kthread+0x13a/0x450 [ 873.015843][ T31] ? __pfx_watchdog+0x10/0x10 [ 873.020517][ T31] kthread+0x370/0x450 [ 873.024580][ T31] ? __pfx_kthread+0x10/0x10 [ 873.029165][ T31] ret_from_fork+0x754/0xd80 [ 873.033866][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 873.038971][ T31] ? __switch_to+0x7b4/0x1120 [ 873.043733][ T31] ? __pfx_kthread+0x10/0x10 [ 873.048407][ T31] ret_from_fork_asm+0x1a/0x30 [ 873.053299][ T31] [ 873.056667][ T31] Kernel Offset: disabled [ 873.060982][ T31] Rebooting in 86400 seconds..