last executing test programs: 2m47.263176369s ago: executing program 1 (id=2287): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000016) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x785543, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) 2m46.821150645s ago: executing program 1 (id=2290): bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) pwritev2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="ec563ccd4c9b197ca14d8f19b79bf79b6530198d9cd08bb63d0037b5f4f3b40bcf17067282e26db58f1b24d0babe11f266532ddc5c5c0ee7bbb474d8b22d3c1d147e309931e24bb4935bb6b6a9838bf00f9b183d8bbe0c82fca7d5ca012abc60a1e4c4878f7b3ce56e9545aa8f90f7ca550432fadf4bc9b168d81f922977d68d3b471a2151f38858d53ce290faa857e9cf96348c7751be553827070d1a66f3fb76", 0xa1}, {&(0x7f00000004c0)="9d755466f04d725442155e7b7d1db53a596ca2bae88f4fe0dc4c6d7f8c90e2e697043ecae5326a114bfebff00a4288ca01a4339c4cbcb901a1cbbe42ed8e79bf40873e13b78a0313597ac404799194f81b523b5826403b5c1d8802f532adb390c02106a48287e70f14fec1d37fbb73a7eb3b1828a6c761848dcc73befdc04198feac10672c", 0x85}, {&(0x7f0000000240)="0dab47ff3a5ef48b19a611bf94d7beee0fda5ea808e8496ec0dee25f2c", 0x1d}, {&(0x7f00000007c0)}], 0x4, 0x3, 0x10000, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m43.764553145s ago: executing program 1 (id=2298): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioperm(0x7, 0x81, 0x2) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x11f, &(0x7f0000000000)=ANY=[], 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0xb, 0x2, 0x2, 'syz0\x00'}) 2m42.799842374s ago: executing program 1 (id=2304): syz_usb_connect(0x3, 0x3f, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002528bf5088205cae60bd30102030109022d00010301600209042d0202ff7229010a24010c000302010209050101000203ff0609050a030800030101"], 0x0) 2m41.471464236s ago: executing program 1 (id=2310): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="030008"], 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f046}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) 2m40.397324347s ago: executing program 1 (id=2313): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00008a1000/0x1000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x14, 0x5a, 0x6a, 0x46}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000f5, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r7, 0x60000000000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r8, 0x9b, 0x0, 0x9}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0x9b40, 0x1}) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000440)={0x0, 0x4}) 2m25.034458017s ago: executing program 32 (id=2313): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00008a1000/0x1000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x14, 0x5a, 0x6a, 0x46}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000f5, 0x2) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r7, 0x60000000000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r7, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r8, 0x9b, 0x0, 0x9}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0x9b40, 0x1}) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000440)={0x0, 0x4}) 1m4.546213892s ago: executing program 4 (id=2625): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d0001071000"], 0x18}}, 0x880) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'nr0\x00', @ifru_names='bridge0\x00'}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1m3.276524602s ago: executing program 4 (id=2628): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x3) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007"], 0x64}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fsopen(&(0x7f00000000c0)='hfs\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x44040) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x10, 0x788, 0x9, 0x1, {{0x8, 0x4, 0x3, 0x15, 0x20, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0x9d, [@multicast1, @loopback]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000180)=@newchain={0x1874, 0x64, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x7, 0xc}, {0x3, 0x9}, {0x8, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_basic={{0xa}, {0x1824, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x10}}, @TCA_BASIC_POLICE={0x448, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x81d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4df, 0x8, 0x0, 0x2, 0x8, 0x3, 0x0, 0x1ff, 0xf43b, 0x2, 0x9, 0x6, 0x0, 0x3, 0x400, 0x6, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x5, 0x4, 0x5, 0x1, 0x5, 0xfffffff9, 0x80000000, 0x8, 0x0, 0x0, 0xffff82a7, 0x1000, 0x2, 0x800, 0x10, 0x7a0e, 0xffff735b, 0xde3, 0x8, 0x7, 0x6, 0x2615, 0x2, 0x9, 0x6, 0x2, 0xffffffff, 0x3, 0x5, 0x6, 0x40, 0x9, 0x3, 0x8, 0x3, 0x1, 0xa50, 0xbb, 0xffff, 0x2, 0x8, 0x9, 0xfd0, 0x9, 0x25eb, 0x80, 0x7, 0x3, 0x4, 0x5, 0x8, 0x3, 0x1ff, 0x6, 0x9, 0x7, 0x6, 0xffffffff, 0xc, 0x40, 0x2c308705, 0xf, 0x6, 0x7, 0x101, 0x2, 0xc, 0x1000000, 0x7, 0x3, 0x5, 0x1000, 0x2, 0x2, 0x4, 0x7ff, 0x3, 0xf, 0x1, 0x600, 0x100, 0x9, 0xb316, 0x1, 0x7, 0x400, 0x6, 0x200, 0x0, 0xf4, 0x2, 0x80, 0xff, 0x8, 0x2, 0x7, 0xbd0f, 0x5, 0x7, 0x3, 0xf, 0x3, 0x1428, 0x6, 0xd7ab, 0x4, 0x9, 0x3, 0x7, 0x40, 0xcd, 0x6, 0x7, 0x7, 0x8, 0xfffffffb, 0x800, 0x0, 0x2, 0x4, 0x13b, 0x7, 0x3, 0x400000, 0x7fff, 0x10001, 0x5, 0x1, 0x8, 0x800, 0xad61, 0x849e, 0x56780000, 0x77, 0x5, 0x4, 0x81, 0x8, 0x7, 0x80, 0xd, 0x10, 0x8, 0x10000000, 0x9, 0x8, 0x0, 0x5d, 0xb, 0xfffffff5, 0xc, 0x0, 0x80000000, 0x7, 0x2, 0xb059, 0xc5a2, 0x7fffffff, 0x8, 0x0, 0xa, 0x80000001, 0x43, 0x7, 0x5, 0x2000, 0x80000001, 0x5, 0x6, 0x7, 0x3ff, 0x6, 0x2, 0xa0, 0x7, 0xc, 0x5, 0x8001, 0x2, 0xffffffff, 0xffff, 0x4, 0x1ff, 0xe, 0xcb5c, 0x4d4, 0x8, 0x4, 0x6, 0x3, 0x9d, 0x7, 0x6, 0x57c4, 0x1, 0xb, 0xab17, 0x64, 0x5, 0xe4e6, 0x3ff, 0x3, 0x2, 0x4, 0x4, 0x10000, 0x101, 0x0, 0xa75, 0x1, 0x1, 0x780, 0xd, 0xdab, 0xffffffff, 0xf8000000, 0xfffffffd, 0xfffffff9, 0x3, 0x8, 0x10001, 0x35, 0xffffe2be, 0x2, 0x8000, 0x1, 0x6, 0x6, 0x5, 0x12, 0x7, 0x2, 0x4, 0x7fff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb06}, @TCA_POLICE_RESULT={0x8, 0x5, 0x33}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x4}}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc129}}]}, @TCA_BASIC_EMATCHES={0x13ac, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10a0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x5, 0x9, 0xf760}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa1}]}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x9, 0x1}, {0x7, 0xd}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x75, 0x3, 0x1}, {0x40, 0x80000001, 0x40, 0xfacd}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x20, 0x7, 0x1800}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x10, 0x2, 0x4800}, {0x6269, 0x7, 0x2, "dc58213b59cb12"}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x40}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x308, 0x2, 0x0, 0x1, [@TCF_EM_META={0x104, 0x1, 0x0, 0x0, {{0xfff8, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe8, 0x9}, {0xff, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x3, 0x1}, {0x55, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR='\b', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="3955ffdb408114afbe69", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="fe57791467"]}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d7", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="4a58749bf920b4", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="020e238a68acaa5a", @TCF_META_TYPE_VAR="7c4aadf5cac66f81", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="6e631c", @TCF_META_TYPE_VAR="6286527bdd8b", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe65, 0xb7, 0x2}, {0x5, 0x80}}}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="03bd", @TCF_META_TYPE_VAR="97a4c07a", @TCF_META_TYPE_VAR="4a1c", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="fcb03c19266aa6", @TCF_META_TYPE_VAR="46e0aef6"]}, @TCA_EM_META_LVALUE={0x41, 0x2, [@TCF_META_TYPE_VAR="5fc77732b55a8b1a43c1", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="ac0eb9", @TCF_META_TYPE_VAR="f87ce8c3adf06089", @TCF_META_TYPE_VAR="6dd6b2d9c7cb224d", @TCF_META_TYPE_VAR="74e7856dd7f94bd99a", @TCF_META_TYPE_VAR="83d30d7554badadc", @TCF_META_TYPE_VAR="cc", @TCF_META_TYPE_VAR="1452a6aefb7ea96b8876"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x8b}, {0x6, 0x5, 0x2}}}]}}, @TCF_EM_IPT={0x10c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_DATA={0xf3, 0x5, "97ece5eca88afd6d4fb8d71a39aabff8a77fdf4972af9850f13c62a449f326b4e6b4809d90e7daa7a36df9bb04ea70560260aff5f1f116fb22123047e6c1e6de421ea34adec0fd4d99d9ea46f7942676752afa14a647270b68311c60c75b60cc36b2a0503d8ed9a770f19b8ede0f052be1b06b5bc4b3d8a777d8c7951a937da8762f0c6f518feb3eff1abaa78e36b391b3349becd62cb0c6a630be4ad8d37a4944723179b0a46616aeb098798db248e021281d0d65d96a90f53aaeaabab61d057c85193585f2388cc3e4a9f6334bdb977705a7cad3d13d9bbceb318e65e78f84a3dbe2919810678159efc7224e1e9c"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd, 0x8, 0x5}, {0x4, 0x5, 0x1}}}, @TCF_EM_CONTAINER={0xb4, 0x1, 0x0, 0x0, {{0x800, 0x0, 0xffae}, "ed2b04cf1211b9223e87849883c2c44cef7b5e157c7a421d410e5b1b6b0f19238bb545c3ca4f3b0a8eed62895b2c6dbe3ce57d0d02cab375ab56f95ddca33334a1d11c853290ebf0fda0cb6155459c99806684161ff9e833abb9066b342dd8525e50b52c3715930badd9dadd5f4688109370af182e1965acadf75ca72785a7e185273b993b6d2d509c464fc6c8ed7bb11f87c241ac12543f0fba6ff262946796ca90f4ed6a77c331"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x237}, {0x59, 0x6, 0x0, "5169f6ba7ec3"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe, 0x1, 0x8}, {0x5, 0x400, 0x8, 0x1, 0xf}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x97}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0x1874}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m3.062006848s ago: executing program 4 (id=2631): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r1, 0x0, 0x8811) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="030008"], 0x18) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f046}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) 1m1.87929957s ago: executing program 4 (id=2635): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) lstat(&(0x7f0000002400)='\x00', &(0x7f0000000240)) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc2400) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x10, 0x5, {0x5, 0xb, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) (async) sendmmsg$inet(r1, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="9a", 0x1}], 0x1}}], 0x1, 0x40805) r5 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4951, 0x0, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 1m1.665235552s ago: executing program 4 (id=2636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6f}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 1m1.576172819s ago: executing program 4 (id=2637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) setns(r3, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 45.41314314s ago: executing program 33 (id=2637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) setns(r3, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 30.558645527s ago: executing program 3 (id=2723): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@gettaction={0x14, 0x32, 0x400, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r6) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000080)) mkdirat(r6, &(0x7f0000000000)='./file0\x00', 0x26) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)={0x2f}) 29.568063953s ago: executing program 3 (id=2726): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x89}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x5, {0x0}, {0xee01}, 0x757, 0x7}) sched_setaffinity(r2, 0xfffffe02, &(0x7f0000000040)=0x2000000000006) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000280)={{0x5, 0x4, 0xa, 0xfffffff7, '\x00', 0x9}, 0x4, 0x200, 0x5, r4, 0x4, 0x6, 'syz1\x00', &(0x7f0000000200)=['/dev/cpu/#/msr\x00', '^.[\xd1!{*/&%\x7f\x00', ':m&,\x00', '\x00'], 0x21}) (async) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x42ac80) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x5) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000480)={0xa0, 0x4a0, 0x3c00, 0x960, 0xa, 0x5a4169cc, 0x4, 0x1, {0xb7, 0x5}, {0xd, 0x242, 0x1}, {0x4, 0x10001}, {0x677b, 0xfffffff8, 0x21}, 0x1, 0x100, 0x1, 0x3d25, 0x1, 0x2, 0x0, 0x8, 0x0, 0xa407, 0x100, 0x7ff, 0x5, 0x78830a28dc468bf3, 0x0, 0x9}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000004180)={'wlan0\x00'}) 29.275770819s ago: executing program 3 (id=2727): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc010}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x8000000010, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) r7 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) r8 = eventfd2(0x6, 0x80800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000a00)={{@local, 0x1000}, {@host, 0xa000}, 0x400, "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"}, 0x418}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000340)=r8, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 28.155819477s ago: executing program 3 (id=2730): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000003980)}}, {{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @private1, 0x80000001}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="48000000000000002900000039000000290601b800000000fe880000000000000000000000000101fc000000000000000000000000000000fe8000000000000000000000000000bb580000000000000029000000040000002f070000000000000639fd6a6f63a0f8202cf1d4c64e2383fc7c198c1f4b29aeed420112d4cad38d1bde5a9093143939871e64ce6453adca6bb26a139fff1a8fe50b6700000000002400000000000000290000003200000020010000000000000000000000000001", @ANYRES32, @ANYBLOB="00000000500000000000000029000000370000000406000000000000040108010500000000000728000000000807070005000000000000006a000000000000000500000000001200070000000000000000000000280000000000000029000000360000006c01000000000000010300000001030000000000000000001400000000000000290000000b0001000000800100000000"], 0x158}}], 0x2, 0x4001c00) 28.019027753s ago: executing program 3 (id=2732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r1, 0x202, 0x0) sched_getattr(r1, &(0x7f0000000080)={0x38}, 0x38, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) fchmod(r0, 0x40) 27.4672311s ago: executing program 3 (id=2733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0xd4c6, 0x200, 0x4003, 0x79}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x5603, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x181001, 0x0) write$vga_arbiter(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa) socket$nl_generic(0x10, 0x3, 0x10) 13.493560997s ago: executing program 0 (id=2766): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 13.46245696s ago: executing program 2 (id=2767): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x12) listen(r3, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x8000000000000002, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0xc, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0xf507, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffb, 0x2, 0x0, 0x0, 0xdbe]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000602010018010000646c6c250000000000a02020731af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x6, 0x23, &(0x7f0000000240)=""/35, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) 12.525250041s ago: executing program 0 (id=2768): syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x8140, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 11.791438963s ago: executing program 6 (id=2770): mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x40, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xf, 0x6, 0x8, 0x1]}]}, 0x40}}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e21, @multicast1}, {0x306, @local}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 'vlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4048884) r11 = socket(0x10, 0xa, 0x1004) syz_genetlink_get_family_id$nl80211(0x0, r11) 11.324193856s ago: executing program 5 (id=2771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400000004"], 0x48) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1d0}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xa}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xda}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x5, 0x8000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004845}, 0x240050d0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000003280), 0x0, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRESDEC, @ANYRES16=r1, @ANYRESHEX=r6, @ANYRES8, @ANYRESOCT=0x0], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x138}}, 0x0) 11.1678734s ago: executing program 0 (id=2772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002292039ef12d19"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="062ed970160b4deeec777f4bdb967adce66eced8ad0d09bcfc7d57f8339de5d0fdc97361586004ac4315342705d17e5861ff3a7a559329709036da1a948064ef3f1f7b5620e1afdddace81a1f82c1b47195fc4d75afc1edbb59d", 0x5a}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_setup(0x13, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x8b8e, 0x80, 0x803, 0x7}, &(0x7f0000000340), 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0x0, 0x0) pread64(r8, 0x0, 0x0, 0xadc) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="0f30f4f30fc7310f019cca4e65f30f07f2670f08b813010f00d0b873000f00d88fc98802f7b895000f00d0", 0x2b}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 10.709692295s ago: executing program 6 (id=2773): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000140)=@objname={'system_u:object_r:kmsg_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x0, 0x20, './file1\x00'}, 0x57) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file1\x00') fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x655}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x3, 0xa0}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x2, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x0, 0x81, 0x80, 0x10, 0x6}, 0x62, &(0x7f0000000240)={0x5, 0xf, 0x62, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "364b01b75d6cce375d60123daef84c2d"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x4, 0x0, 0x8, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0xa9, 0x9, 0x0, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x98, 0x6, 0x8, 0xf00, 0x4, [0x50, 0xc000, 0xf, 0xc0f0, 0x3ff0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x8, 0x81}]}, 0x2, [{0x68, &(0x7f00000002c0)=@string={0x68, 0x3, "d16cec069162d2ffe307c4634583a40ca1236421ae7d5e0fe531a95bdc4560d4c9e7801a192178f2707d0cdaa23e9d12b738f1e0f7e13b41619878bdcb9ec07390afa259873bb1a18e68cbb006e85d1bc958519e41e852bb8c809040a813877508bed070dde5"}}, {0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "b214b018552c53d226be73d6e84be5b2428c38cbb07ef0b8674f756e4e1a26787e1b505e200aa51e89a450b3c94c4472049078c6c504e97f937cd31383f5a784d1029caad61df6e0fe4db0b573790f1e245de3a715ccb12001a08351984d65334c144220cf0108801d0267e465aa684471d1fdca89dddd9f62f418a44f9f23d54f75c361b80319b92fd760ae178faafdfea3f7b5aa1d483c00193497ebddb466e0c695afbc35ac42d5351e4f952e7a2d56aa9bce358ae25ce1b43530becb88a30d81bfeadabb4728fe28bad437e4b83be412"}}]}) 10.017453607s ago: executing program 2 (id=2774): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000015c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x24000081) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000010401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800fa0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf639d1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40094) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x24004000}, 0x801) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000012c0)={0x5c, r3, 'id1\x00'}) sendmmsg$inet6(r9, &(0x7f0000000180)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @local, 0x1}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001380)="f04067134c7d855b1aad2052fa508e9f58e950ebb6741ae85167a8e7dfc7cf028681324945e48df3ad0d5ea6be41c58e3d24ae4d65edfd654823235cc8821e56f349001e4ec900c380cad5b0551af52fdcae44300bf0fe2698c65cc75a044fa91b92ace17a1a5bf0ecbbb58b00803fb4057e2260c10e03e92dac4b301d5e1608f1d6ea1a050cef6f171e3e0555e3841248f14a3135096dae4b76236f69c29ef310db088722781c18c2515ae34746c6ea0809e834d68f07164c733596c694fcf3", 0xc0}, {&(0x7f0000001480)="df25701fabd9d3a162fa2b53d1fe23167c5cbbb1405d88aa090534533cf52d49185a0660426adfa016811c6b415b672e19d95cd982465073727eb8aa85ed9b11d05cf27a67919103315519e6d7f1aa7a02edc36edde8ce9af93b95be6f74de19905095e005a83147394e43e0db3247e2f2dfeb2c37d8f21ce370ee373184856848af23201d5f198fb56499da4585175fc4c3b17748203eb1bae042f734f9fb6821baa5e5ea52cb7e48cb4c102a404a487df377fe7f52b504ea5c3b90a43bc38bbba0c075ca7b8f2c8e51e764d87d", 0xce}, {&(0x7f0000001580)="78be9b9e17536c4c0409cba74bde2aee7c5686e10eaef28ef7773c4c30a1a9eba476996b37cd38788bb245c54667f40406266f7845822cf8154810f012", 0x3d}, {&(0x7f0000001600)="695852660395274fdbfb4ad39cea7683c6d299e07b605fddf2e2f02ff2f04c7f2b653810e572b4948d7b9a7a2438408c85901fbd4283ef036df800869c22302ca6976c112a8e6f041d4a7717e10260c1c6a8076f6f5dc4ce5617c9c2cfb75bc930f713bff520206af7a471a34e1a940a6702e32ed1a3460adb4b09a0a5a0a735745aca86ec2aac42490c91f64190ab0b6fe24f1e4ae71f96d58d3652fbb35d0f9b4f97ac72948e61806aac8db15cc22c21c9cec8ea11f1a99e26bdee9eebf5106f3d57217d72630f79811c68ed03c166fa38a756900e35de7a7d1ea76b764c93462057dedd832306ff66", 0xea}, {&(0x7f0000001700)="5838f8ca664a4468c7b6120a109d2591b24a562c5102c6fc17847699d8b31add0bcb776e7ba143b134cb30bc8a47c0f60c533921b9e374e80383d8fa0aa44289d6389245166e42f91948449ca4c80eafbbfed48978a7598c22a85f2218d2d327ff1c5c7f77968f27a6eb2bb55da700c2ea079414039d34b988b8ca2f9882a963e538773471527aed0ff97c437aebc117c1984db5ecf07f3fa2ff398543dc9ba4d6f5c01c4b4b7500ee1870b126f560913acc41c9de572d37db37b476db3667993502a0f07681df8e6573798eb8429eaa95ccb064534e543132c014c9bb85d77e54508eebb4c36e8142351586", 0xec}, {&(0x7f0000001800)="19a7e4045e2f32a3beb2c9dbc365cfea25b34199a47061a2275a769a057fb93b2ad7b474896ea10ecf24687687d58b2d511f0331bb04ce56db4390431137f00687290fd4", 0x44}, {&(0x7f0000001880)="6542717a0161ead80b5cd537fd1f6fb414e94a3aa8d046e5798aa5d8f5cc11fb1fb7d74abbea85b4d1de99254ef5c727003143ea386ece66ade319941966abad1fc8749aaf6464dd6d8137eda2a387f8def410fa584d1dded5a933022fa56d3285c979bdd5039b58895c750470f335ba28", 0x71}, {&(0x7f00000023c0)="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", 0x1000}], 0x8, &(0x7f00000043c0)=ANY=[@ANYBLOB="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"], 0x1100}}], 0x1, 0x4000084) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r8, 0x2, 0x0, 0x0, 0x0, [0x0], [0x0, 0x5, 0x0, 0x546], [0xfff, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x400]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r10}) 8.143611408s ago: executing program 5 (id=2775): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) fsopen(0x0, 0x1) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x7, @remote, 0x8000004}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB="040000020000000000000000000000000000000010e95aa178a6537c36b390d5524464bb72284b047d1ee65afd4dd5ca0e6383dbe4655fbf14f2d39b9d2a8f4a7104ab22f28e04bc9fa3f3578af4785c541b8fc7f647fc0fcaf10f199845890930490f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) openat$zero(0xffffffffffffff9c, 0x0, 0x448001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.056237976s ago: executing program 0 (id=2776): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181700, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0xb, 0x2, @generic=0x9, 0x10, 0x7, 0x8b}) 7.672363964s ago: executing program 6 (id=2777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 6.525331859s ago: executing program 6 (id=2778): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) recvfrom(r0, &(0x7f0000000040)=""/150, 0x96, 0x40000100, &(0x7f0000000100)=@isdn={0x22, 0x1, 0x6, 0xd8, 0x2}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0xe19) 6.416053486s ago: executing program 5 (id=2779): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 5.524986101s ago: executing program 5 (id=2780): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0x3d8c3144653f8606, 0x102000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r9, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x20000082) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 5.522312888s ago: executing program 6 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0xe7f, 0xe876, 0x3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000006d40)={0x200a}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r6, 0x540a, 0x2) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="cd45664f193fe416bd2e2014a561d772d91b0fdc1af0942bdbe6f139fe67cff8308564474b8cdc3db71c06b7a2893e1aa519d34b383314a7a07eab87ebdcb1962637ee49f478b2816df50b9ee78dfca539ae9712", 0x54}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24}], 0x1, 0x24000020) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x3, 0x0, 0x2f}, 0x10) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f90f, 0x10f, '\x00', @string=0x0}}) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r11 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) tkill(r10, 0x18) r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r12, 0x541b, 0x0) 3.67477332s ago: executing program 5 (id=2782): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x12) listen(r3, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x8000000000000002, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0xc, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0xf507, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x8000000000000000, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xfffffffb, 0x2, 0x0, 0x0, 0xdbe]}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000602010018010000646c6c250000000000a02020731af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x6, 0x23, &(0x7f0000000240)=""/35, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000140), 0xe, 0x480) 3.117854228s ago: executing program 2 (id=2783): futex_waitv(&(0x7f0000001cc0)=[{0x7ff, &(0x7f0000000000)=0x84a2, 0x82}, {0x2, &(0x7f0000000080)=0xfffffffffffffeff, 0x82}, {0x10, &(0x7f00000000c0)=0x4, 0x2}, {0x3, &(0x7f0000000140)=0x2, 0x82}, {0x8, &(0x7f0000000240)=0x80000001, 0x82}, {0x4, &(0x7f0000000280), 0x82}, {0x2, &(0x7f00000002c0)=0xfffffffffffffff7, 0x82}, {0x8, &(0x7f0000000300)=0x5, 0x82}, {0x0, &(0x7f0000000340)=0x5, 0x82}, {0x2, &(0x7f0000000380)=0x100000000, 0x2}, {0x6, &(0x7f00000003c0)=0xfffffffffffffffd, 0x82}, {0xdb, &(0x7f0000000400)=0xb, 0x2}, {0x4, &(0x7f0000000440)=0x800, 0x2}, {0x80, &(0x7f0000000480)=0x7fffffffffffffff, 0x82}, {0xdb62, &(0x7f00000004c0)=0x2, 0x82}, {0x2, &(0x7f0000000500)=0x5, 0x82}, {0x6, &(0x7f0000000540)=0x8000, 0x82}, {0x7, &(0x7f0000000580)=0x101, 0x82}, {0x1000, &(0x7f00000005c0)=0x7, 0x2}, {0x2, &(0x7f0000000600)=0xe, 0x82}, {0x9, &(0x7f0000000640)=0xf, 0x82}, {0xfffffffffffffffe, &(0x7f0000000680)=0x3, 0x6f0ecad80ce5f448}, {0x5, &(0x7f00000006c0)=0xc, 0x2}, {0x0, &(0x7f0000000700)=0x9, 0x2}, {0x4, &(0x7f0000000740)=0x2, 0x2}, {0x1ff, &(0x7f0000000780)=0x4, 0x82}, {0x9c4, &(0x7f00000007c0)=0xfffffffffffffffc, 0x82}, {0x99, &(0x7f0000000800)=0x2, 0x82}, {0xcb, &(0x7f0000000840), 0x82}, {0x81, &(0x7f0000000880)=0x8, 0x2}, {0x971, &(0x7f00000008c0)=0xc, 0x82}, {0x6, &(0x7f0000000900)=0xf, 0x2}, {0x7ff, &(0x7f0000000940)=0xff, 0x82}, {0x7, &(0x7f0000000980)=0x5f84, 0x2}, {0x1813, &(0x7f00000009c0)=0xfffffffffffffff8, 0x2}, {0xd, &(0x7f0000000a00), 0x82}, {0x5, &(0x7f0000000a40)=0x3, 0x2}, {0xe319, &(0x7f0000000a80)=0x6}, {0x73dc4a30, &(0x7f0000000ac0)=0x2, 0x82}, {0x2, &(0x7f0000000b00), 0x2}, {0x7, &(0x7f0000000b40)=0x1, 0x2}, {0xa, &(0x7f0000000b80)=0x7, 0x2}, {0x59be373e, &(0x7f0000000bc0)=0x80000000}, {0xffffffff, &(0x7f0000000c00)=0x89, 0x2}, {0x4ae, &(0x7f0000000c40)=0x7fffffff, 0x2}, {0xfff, &(0x7f0000000c80)=0x2, 0x82}, {0x0, &(0x7f0000000cc0)=0x2, 0x2}, {0x100000001, &(0x7f0000000d00)=0xea, 0x2}, {0x7, &(0x7f0000000d40)=0x1, 0x82}, {0x7, &(0x7f0000000d80)=0x3, 0x2}, {0x127, &(0x7f0000000dc0)=0x8}, {0x7, &(0x7f0000000e00)=0x8000, 0x82}, {0x1, &(0x7f0000000e40)=0x2, 0x2}, {0x3ff, &(0x7f0000000e80)=0x7277, 0x82}, {0x3, &(0x7f0000000ec0)=0x7fffffff, 0x2}, {0x0, &(0x7f0000000f00)=0x7, 0x82}, {0x4, &(0x7f0000000f40)=0x401, 0x2}, {0x5, &(0x7f0000000f80)=0x83, 0x80}, {0xd, &(0x7f0000000fc0)=0x2, 0x82}, {0x9, &(0x7f0000001000)=0x9, 0x82}, {0x7a, &(0x7f0000001040)=0x3, 0x2}, {0xd, &(0x7f0000001080)=0x80000001, 0x2}, {0x2, &(0x7f00000010c0)=0x3, 0x80}, {0x0, &(0x7f0000001100)=0x2}, {0x9, &(0x7f0000001140)=0x7f, 0x80}, {0x8, &(0x7f0000001180)=0x1, 0x80}, {0x1, &(0x7f00000011c0)=0x3}, {0x4, &(0x7f0000001200)=0x7ff, 0x2}, {0x1, &(0x7f0000001240)=0x4, 0x82}, {0x4, &(0x7f0000001280)=0x11e3b80c, 0x82}, {0x9, &(0x7f00000012c0)=0x7, 0x82}, {0x9, &(0x7f0000001300)=0xffffffff, 0xde4dcff2ce43fe17}, {0x1ff, &(0x7f0000001340)=0x7, 0x2}, {0x6274, &(0x7f0000001380)=0x8, 0x2}, {0x1, &(0x7f00000013c0)=0x6, 0x82}, {0x2, &(0x7f0000001400)=0xd2, 0x82}, {0x0, &(0x7f0000001440)=0xfffffffffffffffd, 0x82}, {0x2, &(0x7f0000001480)=0x3, 0x82}, {0x7, &(0x7f00000014c0)=0x8, 0x2}, {0x2, &(0x7f0000001500)=0x8, 0x2}, {0xf8, &(0x7f0000001540)=0x2f6, 0x82}, {0x3, &(0x7f0000001580)=0x20000000000, 0x2}, {0x3, &(0x7f00000015c0)=0x6}, {0xe34, &(0x7f0000001600)=0x4, 0x82}, {0x1, &(0x7f0000001640)=0x101, 0x82}, {0x9, &(0x7f0000001680)=0x9, 0x82}, {0x2, &(0x7f00000016c0)=0x6, 0x82}, {0x4, &(0x7f0000001700)=0x1ff, 0x84}, {0x3, &(0x7f0000001740)=0x8, 0x2}, {0x80000000, &(0x7f0000001780)=0x6, 0x2}, {0x3, &(0x7f00000017c0)=0x7, 0x82}, {0x4, &(0x7f0000001800)=0x1, 0x82}, {0x1, &(0x7f0000001840)=0x3, 0x2}, {0x200, &(0x7f0000001880)=0x5, 0x82}, {0x0, &(0x7f00000018c0)=0x72c1, 0x2}, {0x9, &(0x7f0000001900)=0x7, 0x82}, {0x5825, &(0x7f0000001940)=0x6, 0x2}, {0x5, &(0x7f0000001980)=0xdbc, 0x2}, {0x4, &(0x7f00000019c0)=0x3, 0x2}, {0x2, &(0x7f0000001a00)=0xdc66, 0x82}, {0x5, &(0x7f0000001a40)=0x2, 0x82}, {0xffffffffffffffe8, &(0x7f0000001a80)=0x7, 0x2}, {0x2, &(0x7f0000001ac0)=0xfff, 0x82}, {0x6, &(0x7f0000001b00)=0x200, 0x2}, {0x7f, &(0x7f0000001b40), 0xdbc746b6a895e53e}, {0x8, &(0x7f0000001b80)=0xffff, 0x82}, {0x0, &(0x7f0000001bc0)=0x6, 0x82}, {0x27f, &(0x7f0000001c00)=0x6, 0x82}, {0xfffffffffffffffe, &(0x7f0000001c40)=0xc2, 0x2}, {0x101, &(0x7f0000001c80)=0x9, 0x2}], 0x6e, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000002e00090027bd700000000000040000002500118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d90157400000028b896ecbe137e4d998740d0c2521f75c9305e25fd0bea335de49cee33637d0b9ba7e4d7de31709ef297c938c20940fd08aed55c579d512298990fdbeb5abbc7c051dc71ecc737eb7b88220000"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.835444978s ago: executing program 2 (id=2784): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x8811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) 2.784016876s ago: executing program 0 (id=2785): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) r0 = getpid() getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2002042, &(0x7f0000000400)={'trans=virtio,', {[{@cache_readahead}, {@uname={'uname', 0x3d, 'syz2\x00'}}, {@cache_readahead}, {@loose}, {@mmap}, {@access_any}, {@cachetag={'cachetag', 0x3d, 'sched_switch\x00'}}], [{@obj_type={'obj_type', 0x3d, '(\'){'}}, {@obj_user={'obj_user', 0x3d, ',&\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x35, 0x31, 0x33, 0x64, 0x65, 0x39], 0x2d, [0x62, 0x64, 0x54, 0x33], 0x2d, [0x32, 0x39, 0x39, 0x66], 0x2d, [0x38, 0x66, 0x38, 0x66], 0x2d, [0x37, 0x65, 0x37, 0x33, 0x31, 0x62, 0x65, 0x30]}}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000007c0)="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", 0x1f7}, {&(0x7f0000000780)="0b2d48198d03a2a04c339ad24d59d45dec592f4b0e0800000013a11319d700000000000000", 0x25}], 0x2, 0x0, 0x0, 0x40001}}], 0x2c, 0x20000800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000000b0300"/24], 0x18}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff8001}]}, 0x3c}}, 0x10) 2.131325083s ago: executing program 6 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write$selinux_create(0xffffffffffffffff, &(0x7f0000000140)=@objname={'system_u:object_r:kmsg_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x0, 0x20, './file1\x00'}, 0x57) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000540)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file1\x00') fsmount(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x7f, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0x655}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x3, 0xa0}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x2, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x0, 0x81, 0x80, 0x10, 0x6}, 0x62, &(0x7f0000000240)={0x5, 0xf, 0x62, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "364b01b75d6cce375d60123daef84c2d"}, @ssp_cap={0x10, 0x10, 0xa, 0xf1, 0x1, 0x4, 0x0, 0x8, [0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xe, 0x0, 0xa9, 0x9, 0x0, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x98, 0x6, 0x8, 0xf00, 0x4, [0x50, 0xc000, 0xf, 0xc0f0, 0x3ff0, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x8, 0x81}]}, 0x2, [{0x68, &(0x7f00000002c0)=@string={0x68, 0x3, "d16cec069162d2ffe307c4634583a40ca1236421ae7d5e0fe531a95bdc4560d4c9e7801a192178f2707d0cdaa23e9d12b738f1e0f7e13b41619878bdcb9ec07390afa259873bb1a18e68cbb006e85d1bc958519e41e852bb8c809040a813877508bed070dde5"}}, {0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "b214b018552c53d226be73d6e84be5b2428c38cbb07ef0b8674f756e4e1a26787e1b505e200aa51e89a450b3c94c4472049078c6c504e97f937cd31383f5a784d1029caad61df6e0fe4db0b573790f1e245de3a715ccb12001a08351984d65334c144220cf0108801d0267e465aa684471d1fdca89dddd9f62f418a44f9f23d54f75c361b80319b92fd760ae178faafdfea3f7b5aa1d483c00193497ebddb466e0c695afbc35ac42d5351e4f952e7a2d56aa9bce358ae25ce1b43530becb88a30d81bfeadabb4728fe28bad437e4b83be412"}}]}) 1.786237553s ago: executing program 2 (id=2787): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 782.47771ms ago: executing program 2 (id=2788): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x80, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r2 = open$dir(0x0, 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) setresuid(0x0, 0x0, r3) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c00008008000340000000026000"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) 44.812951ms ago: executing program 5 (id=2789): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) 0s ago: executing program 0 (id=2790): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) kernel console output (not intermixed with test programs): int descriptors, different from the interface descriptor's value: 23 [ 727.644085][ T8961] usb 3-1: config 179 interface 65 has no altsetting 0 [ 727.651081][ T8961] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 728.068447][ T8961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.262843][ T8961] usb 3-1: can't set config #179, error -71 [ 728.281206][ T8961] usb 3-1: USB disconnect, device number 84 [ 728.816404][T13880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.565838][ T30] audit: type=1400 audit(1767471914.095:1217): avc: denied { ioctl } for pid=13891 comm="syz.0.2118" path="/428/file0/file0" dev="fuse" ino=63 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 730.669146][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 730.737277][T13903] 9p: Bad value for 'aname' [ 730.915533][ T30] audit: type=1400 audit(1767471914.445:1218): avc: denied { setopt } for pid=13897 comm="syz.1.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 731.275258][ T30] audit: type=1400 audit(1767471914.745:1219): avc: denied { mount } for pid=13897 comm="syz.1.2121" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 731.300154][ T30] audit: type=1400 audit(1767471914.745:1220): avc: denied { connect } for pid=13897 comm="syz.1.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 731.547516][ T30] audit: type=1400 audit(1767471915.065:1221): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 733.151376][ T8961] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 733.301324][ T8961] usb 4-1: Using ep0 maxpacket: 16 [ 733.316620][ T8961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.329225][ T8961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.339776][ T8961] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 733.355078][ T8961] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 733.364187][ T8961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.376077][ T8961] usb 4-1: config 0 descriptor?? [ 733.524910][ T30] audit: type=1326 audit(1767471917.055:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x0 [ 733.772314][T13951] 9p: Bad value for 'aname' [ 733.789158][ T30] audit: type=1400 audit(1767471917.315:1223): avc: denied { ioctl } for pid=13938 comm="syz.3.2131" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 733.789203][T13939] random: crng reseeded on system resumption [ 733.857254][ T8961] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 733.945619][ T8961] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 733.991782][ T8961] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 734.127333][ T934] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 734.138961][ T934] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 734.151523][ T5880] usb 4-1: USB disconnect, device number 87 [ 734.167220][ T934] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 734.189074][ T934] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 734.475497][ T30] audit: type=1400 audit(1767471917.985:1224): avc: denied { map } for pid=13958 comm="syz.0.2138" path="socket:[49875]" dev="sockfs" ino=49875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 735.332557][T13979] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 736.153362][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 738.102600][T14014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2152'. [ 738.164924][T14016] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 738.467423][T14016] bond0: (slave rose0): Releasing backup interface [ 738.713355][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 739.911330][ T8961] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 740.102837][ T8961] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 740.138303][ T8961] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 740.145232][ T30] audit: type=1326 audit(1767471923.665:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.171342][ T8961] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 740.183090][ T30] audit: type=1326 audit(1767471923.705:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.196231][ T8961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.220323][ T30] audit: type=1326 audit(1767471923.705:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.286345][ T30] audit: type=1326 audit(1767471923.705:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.292259][T14049] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 740.345930][ T8961] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.376527][ T30] audit: type=1326 audit(1767471923.705:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.676651][ T30] audit: type=1326 audit(1767471923.705:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 740.874714][ T30] audit: type=1326 audit(1767471923.705:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 741.015364][ T30] audit: type=1326 audit(1767471923.705:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 741.076989][ T30] audit: type=1326 audit(1767471923.705:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 741.100707][ T30] audit: type=1326 audit(1767471923.705:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14070 comm="syz.1.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f0b8f749 code=0x7ffc0000 [ 741.403992][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2171'. [ 741.671758][T14088] block nbd4: shutting down sockets [ 741.788075][T14118] futex_wake_op: syz.4.2173 tries to shift op by -1; fix this program [ 741.865548][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 742.161847][ T5901] usb 4-1: USB disconnect, device number 88 [ 743.141677][ T8961] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 743.338664][T14135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2177'. [ 743.351547][ T8961] usb 3-1: Using ep0 maxpacket: 32 [ 743.364362][ T8961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.383532][ T8961] usb 3-1: no configurations [ 743.398441][ T8961] usb 3-1: can't read configurations, error -22 [ 743.551418][ T8961] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 743.728896][T14141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2178'. [ 743.923124][ T8961] usb 3-1: Using ep0 maxpacket: 32 [ 743.937982][ T8961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 743.945791][ T8961] usb 3-1: no configurations [ 743.950387][ T8961] usb 3-1: can't read configurations, error -22 [ 743.961055][ T8961] usb usb3-port1: attempt power cycle [ 744.323411][ T8961] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 744.361867][ T8961] usb 3-1: Using ep0 maxpacket: 32 [ 744.369255][ T8961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 744.379960][ T8961] usb 3-1: no configurations [ 744.911587][ T8961] usb 3-1: can't read configurations, error -22 [ 745.108364][ T8961] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 745.142914][ T8961] usb 3-1: Using ep0 maxpacket: 32 [ 745.149761][ T8961] usb 3-1: unable to get BOS descriptor or descriptor too short [ 745.186968][ T8961] usb 3-1: no configurations [ 745.202840][ T8961] usb 3-1: can't read configurations, error -22 [ 745.218108][ T8961] usb usb3-port1: unable to enumerate USB device [ 746.772387][T14172] ubi: mtd0 is already attached to ubi31 [ 746.854912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.092705][T14181] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 747.327024][T14186] hub 8-0:1.0: USB hub found [ 747.334812][T14186] hub 8-0:1.0: 1 port detected [ 747.381391][ T5880] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 747.677090][ T5880] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 747.995869][ T5880] usb 4-1: config 0 has no interface number 0 [ 749.215198][T14205] openvswitch: netlink: Unknown key attributes 1 [ 749.745643][T14207] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 749.766638][T14207] cramfs: wrong magic [ 750.447619][ T5880] usb 4-1: New USB device found, idVendor=1782, idProduct=4055, bcdDevice=cf.21 [ 750.506121][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.553924][ T5880] usb 4-1: config 0 descriptor?? [ 750.584756][ T5880] usb 4-1: can't set config #0, error -71 [ 750.597291][ T5880] usb 4-1: USB disconnect, device number 89 [ 750.607295][T14218] loop9: detected capacity change from 0 to 7 [ 750.615523][T14218] buffer_io_error: 6847 callbacks suppressed [ 750.615534][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.629334][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.637283][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.645103][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.652948][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.660785][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.668636][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.676467][T14218] ldm_validate_partition_table(): Disk read failed. [ 750.683064][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.690862][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.698730][T14218] Buffer I/O error on dev loop9, logical block 0, async page read [ 750.706555][T14218] Dev loop9: unable to read RDB block 0 [ 750.712149][T14218] loop9: unable to read partition table [ 750.717849][T14218] loop9: partition table beyond EOD, truncated [ 750.723988][T14218] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 750.723988][T14218] ) failed (rc=-5) [ 750.883228][T14220] ldm_validate_partition_table(): Disk read failed. [ 750.889899][T14220] Dev loop9: unable to read RDB block 0 [ 750.895531][T14220] loop9: unable to read partition table [ 750.901326][T14220] loop9: partition table beyond EOD, truncated [ 750.914679][T14223] overlayfs: missing 'lowerdir' [ 750.932488][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 750.932504][ T30] audit: type=1400 audit(1767471934.465:1246): avc: denied { create } for pid=14221 comm="syz.0.2201" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 750.960197][T14223] netlink: 'syz.0.2201': attribute type 3 has an invalid length. [ 750.967969][T14223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2201'. [ 752.005968][ T5873] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 752.359269][ T5873] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 752.384093][ T5873] usb 2-1: USB disconnect, device number 91 [ 752.602740][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.609956][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.886582][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.909265][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.028250][ T4231] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.056588][ T4231] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.082103][ T4231] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.093972][ T4231] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.121709][ T4231] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.141068][ T4231] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.157896][T14254] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2209'. [ 753.218861][ T4231] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.244465][ T4231] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.484361][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 757.235725][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 757.442474][T14298] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 757.449954][T14298] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 757.713344][ T5901] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 757.811028][T14306] overlayfs: missing 'lowerdir' [ 758.300409][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 758.385292][T14310] random: crng reseeded on system resumption [ 758.566334][ T5901] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 758.580277][ T5901] usb 2-1: config 179 has no interface number 0 [ 758.683297][T14308] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 758.689811][T14308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.718376][ T5901] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 759.144984][ T5901] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 759.156872][ T5901] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 759.160836][T14308] vhci_hcd vhci_hcd.0: Device attached [ 759.168247][ T5901] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 759.168279][ T5901] usb 2-1: config 179 interface 65 has no altsetting 0 [ 759.168313][ T5901] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 759.168334][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.611388][ T5901] usb 40-1: SetAddress Request (2) to port 0 [ 759.628357][ T5901] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 759.690163][T14311] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 759.696361][T14309] vhci_hcd: connection closed [ 759.703489][ T1153] vhci_hcd vhci_hcd.3: stop threads [ 759.894428][ T1153] vhci_hcd vhci_hcd.3: release socket [ 759.902310][ T1153] vhci_hcd vhci_hcd.3: disconnect device [ 760.044308][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 761.197909][T14333] netlink: 'syz.3.2229': attribute type 1 has an invalid length. [ 761.217439][ T5936] usb 2-1: USB disconnect, device number 92 [ 761.966447][T14351] syzkaller0: entered promiscuous mode [ 761.990994][T14351] syzkaller0: entered allmulticast mode [ 763.262053][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 763.751328][ T5936] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 764.011365][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 764.018437][ T5936] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 764.028463][ T5936] usb 3-1: config 179 has no interface number 0 [ 764.036775][ T5936] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 764.549925][ T5936] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 764.561387][ T5936] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 764.572697][ T5936] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 764.585999][ T5936] usb 3-1: config 179 interface 65 has no altsetting 0 [ 764.605387][ T5936] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 764.716439][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.784444][ T5901] usb 40-1: device descriptor read/8, error -110 [ 765.172600][ T5901] usb usb40-port1: attempt power cycle [ 765.732867][ T5901] usb usb40-port1: unable to enumerate USB device [ 765.898848][T14377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2236'. [ 765.912645][T14385] macvtap2: entered allmulticast mode [ 765.918026][T14385] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 765.927516][T14385] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 767.583359][ T5873] usb 3-1: USB disconnect, device number 89 [ 767.921333][ T5901] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 768.001650][ T5873] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 768.013250][T14426] xt_nat: multiple ranges no longer supported [ 768.082895][ T5901] usb 2-1: config 1 interface 0 has no altsetting 0 [ 768.101783][ T5901] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 768.111078][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.119797][ T5901] usb 2-1: Product: syz [ 768.124918][ T5901] usb 2-1: Manufacturer: syz [ 768.126689][ T30] audit: type=1400 audit(1767471951.655:1247): avc: denied { getopt } for pid=14434 comm="syz.3.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 768.129505][ T5901] usb 2-1: SerialNumber: syz [ 768.172696][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 768.179331][ T5873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.201296][ T5873] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.211124][ T5873] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 768.221000][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.232450][ T5873] usb 3-1: config 0 descriptor?? [ 768.595844][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 768.603617][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 768.627437][T14443] ceph: No mds server is up or the cluster is laggy [ 768.694957][T14446] macvtap1: left promiscuous mode [ 768.700042][T14446] macvtap1: left allmulticast mode [ 768.708916][T14446] ip6tnl1: left promiscuous mode [ 768.941968][ T5901] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 769.320187][T14448] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2248'. [ 769.356927][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 770.703082][ T5901] usb 3-1: USB disconnect, device number 90 [ 770.829747][ T5873] usb 2-1: USB disconnect, device number 93 [ 770.840976][ T5873] usblp0: removed [ 771.203746][ T5901] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 771.432603][ T5901] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 771.465456][ T5901] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 63529, setting to 1024 [ 771.479326][ T5901] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 771.491340][ T5901] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 771.500579][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.853875][T14468] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 771.864313][ T5901] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.124012][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.133155][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.136447][ T5901] usb 3-1: USB disconnect, device number 91 [ 774.701448][ T5936] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 774.741580][T14515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2274'. [ 774.750618][T14515] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2274'. [ 774.871660][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 774.917777][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.084178][ T5936] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.093358][ T5936] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 775.102468][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.119152][ T5936] usb 4-1: config 0 descriptor?? [ 776.112882][ T5880] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 776.521301][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 776.528149][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.539129][ T5880] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 776.558157][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.579400][ T5880] usb 2-1: config 0 descriptor?? [ 777.645749][ T5880] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0020/input/input45 [ 777.673499][ T5880] uclogic 0003:28BD:0933.0020: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 777.693378][ T5936] usb 4-1: USB disconnect, device number 90 [ 777.993045][T14549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=14549 comm=syz.3.2283 [ 778.754261][T14553] syzkaller0: entered promiscuous mode [ 778.804140][T14553] syzkaller0: entered allmulticast mode [ 779.079838][ T5880] usb 2-1: USB disconnect, device number 94 [ 779.117087][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 779.131074][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 779.290934][T14556] ceph: No mds server is up or the cluster is laggy [ 779.730367][T14573] hugetlbfs: syz.4.2288 (14573): Using mlock ulimits for SHM_HUGETLB is obsolete [ 780.233590][T14579] 9p: Bad value for 'aname' [ 782.688631][T14600] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 782.919885][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 782.971595][ T5880] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 783.121295][ T5880] usb 4-1: device descriptor read/64, error -71 [ 783.195098][T14581] kexec: Could not allocate control_code_buffer [ 783.217147][T14609] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 783.428304][ T5880] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 783.530055][T14603] Process accounting resumed [ 783.631320][ T5880] usb 4-1: device descriptor read/64, error -71 [ 783.741673][ T5880] usb usb4-port1: attempt power cycle [ 783.851362][ T5936] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 784.001398][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 784.007850][ T5936] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 784.016116][ T5936] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 784.024850][ T5936] usb 2-1: config 3 has no interface number 0 [ 784.030914][ T5936] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.044295][ T5936] usb 2-1: config 3 interface 45 has no altsetting 0 [ 784.052827][ T5936] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 784.062318][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.070325][ T5936] usb 2-1: Product: syz [ 784.074565][ T5936] usb 2-1: Manufacturer: syz [ 784.079142][ T5936] usb 2-1: SerialNumber: syz [ 784.083761][ T5880] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 784.112132][ T5880] usb 4-1: device descriptor read/8, error -71 [ 784.304485][ T5936] usb 2-1: USB disconnect, device number 95 [ 784.351607][ T5880] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 784.379770][ T5880] usb 4-1: device descriptor read/8, error -71 [ 784.491584][ T5880] usb usb4-port1: unable to enumerate USB device [ 784.613174][ T30] audit: type=1400 audit(784.575:1248): avc: denied { setopt } for pid=14624 comm="syz.2.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 784.868716][T14635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2309'. [ 785.869993][T14642] binder: 14641:14642 ioctl c0306201 200000000300 returned -14 [ 786.746686][T14649] Failed to get privilege flags for destination (handle=0x0:0x0) [ 788.301411][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2317'. [ 790.256332][ T5901] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 790.548029][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 790.579125][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 790.611307][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 790.651283][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.686088][ T5901] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 790.705465][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.725651][ T5901] usb 4-1: Product: syz [ 790.729906][ T5901] usb 4-1: Manufacturer: syz [ 790.751323][ T5901] usb 4-1: SerialNumber: syz [ 790.768077][ T5901] usb 4-1: config 0 descriptor?? [ 790.791641][T14682] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 790.901374][ T5901] rc_core: IR keymap rc-imon-rsc not found [ 790.907211][ T5901] Registered IR keymap rc-empty [ 790.932323][ T5901] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 790.983975][ T5901] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 791.048628][ T5880] usb 4-1: USB disconnect, device number 95 [ 796.494383][ T1153] Bluetooth: (null): Too short H5 packet [ 796.500333][ T1153] Bluetooth: (null): Invalid header checksum [ 796.787494][ T30] audit: type=1400 audit(796.759:1249): avc: denied { connect } for pid=14728 comm="syz.0.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 797.411449][T14737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2339'. [ 802.512149][T14776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.534747][T14776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.543372][T14776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.558914][T14776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.569620][T14776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.584314][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.591637][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.598921][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.606856][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.614408][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.628205][ T30] audit: type=1400 audit(802.599:1250): avc: denied { mounton } for pid=14774 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 802.695584][T14774] lo speed is unknown, defaulting to 1000 [ 802.818556][T14784] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2351'. [ 802.827778][T14784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2351'. [ 802.842982][T14784] Bluetooth: MGMT ver 1.23 [ 803.181417][ T5936] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 803.338683][T14774] lo speed is unknown, defaulting to 1000 [ 803.350332][T14796] (syz.0.2355,14796,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 803.411302][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 803.463423][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.504824][ T5936] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 803.546059][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.571257][ T5936] usb 3-1: Product: syz [ 803.581354][ T5936] usb 3-1: Manufacturer: syz [ 803.585975][ T5936] usb 3-1: SerialNumber: syz [ 803.606220][ T5936] usb 3-1: config 0 descriptor?? [ 803.875567][ T30] audit: type=1400 audit(803.839:1251): avc: denied { accept } for pid=14778 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 803.937822][T14774] chnl_net:caif_netlink_parms(): no params data found [ 804.168239][T14774] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.183173][T14774] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.196221][T14774] bridge_slave_0: entered allmulticast mode [ 804.215356][T14774] bridge_slave_0: entered promiscuous mode [ 804.227979][T14774] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.240977][T14774] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.251879][T14774] bridge_slave_1: entered allmulticast mode [ 804.266289][T14774] bridge_slave_1: entered promiscuous mode [ 804.395851][T14774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.520955][T14774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.843394][T14776] Bluetooth: hci5: command tx timeout [ 804.888842][T14774] team0: Port device team_slave_0 added [ 804.902251][T14774] team0: Port device team_slave_1 added [ 804.956293][T14774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.971359][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.026347][T14774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.050819][T14774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.067094][T14774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.120852][T14774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.200163][T14774] hsr_slave_0: entered promiscuous mode [ 805.208844][T14774] hsr_slave_1: entered promiscuous mode [ 805.272132][T14774] debugfs: 'hsr0' already exists in 'hsr' [ 805.282691][T14774] Cannot create hsr debugfs directory [ 806.213180][ T5936] usb 3-1: probing VID:PID(0424:012C) [ 806.220664][ T5936] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 806.268295][ T5936] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 806.295175][ T5936] usb 3-1: USB disconnect, device number 92 [ 806.891505][T14776] Bluetooth: hci5: command tx timeout [ 806.942699][T14774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 807.055178][T14774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 807.078647][T14774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 807.095870][T14774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 807.534233][T14774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.642762][T14774] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.676970][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.684156][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.746750][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.753900][ T8848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.121914][ T30] audit: type=1326 audit(808.089:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.304004][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.354567][ T30] audit: type=1326 audit(808.099:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.421476][ T30] audit: type=1326 audit(808.099:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.515451][ T30] audit: type=1326 audit(808.099:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.603068][ T30] audit: type=1326 audit(808.099:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.691280][ T30] audit: type=1326 audit(808.099:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.776310][ T30] audit: type=1326 audit(808.099:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.851593][ T30] audit: type=1326 audit(808.099:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.902356][ T30] audit: type=1326 audit(808.099:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 808.931329][T14776] Bluetooth: hci5: command tx timeout [ 808.947005][ T30] audit: type=1326 audit(808.099:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14851 comm="syz.2.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4598f749 code=0x7ffc0000 [ 809.548753][T14774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.011517][T14776] Bluetooth: hci5: command tx timeout [ 811.212643][T14774] veth0_vlan: entered promiscuous mode [ 811.232646][T14774] veth1_vlan: entered promiscuous mode [ 811.290602][T14774] veth0_macvtap: entered promiscuous mode [ 811.318504][T14774] veth1_macvtap: entered promiscuous mode [ 811.357462][T14774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.379213][T14774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.406350][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.427070][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.624183][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.711709][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.012850][ T3956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.036896][ T3956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.101610][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 812.138673][ T4804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.277757][T14906] tipc: Enabled bearer , priority 10 [ 812.440202][ T4804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.874963][T14913] syzkaller0: entered promiscuous mode [ 812.890742][T14913] syzkaller0: entered allmulticast mode [ 813.031698][T14918] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 813.103779][T14920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2383'. [ 813.522030][ T5936] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 813.698588][T14931] 9pnet_fd: Insufficient options for proto=fd [ 813.704836][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 813.711240][ T5936] usb 4-1: config 0 has no interfaces? [ 813.722409][ T5936] usb 4-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 813.741281][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.763633][ T5936] usb 4-1: Product: syz [ 813.819397][ T5936] usb 4-1: Manufacturer: syz [ 813.831393][ T5936] usb 4-1: SerialNumber: syz [ 813.922354][ T5936] usb 4-1: config 0 descriptor?? [ 814.094491][T14934] FAULT_INJECTION: forcing a failure. [ 814.094491][T14934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.248633][T14934] CPU: 1 UID: 0 PID: 14934 Comm: syz.2.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.248655][T14934] Tainted: [L]=SOFTLOCKUP [ 814.248659][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.248666][T14934] Call Trace: [ 814.248671][T14934] [ 814.248676][T14934] dump_stack_lvl+0x16c/0x1f0 [ 814.248699][T14934] should_fail_ex+0x512/0x640 [ 814.248721][T14934] _copy_to_user+0x32/0xd0 [ 814.248740][T14934] drm_ioctl+0x5eb/0xc30 [ 814.248758][T14934] ? __pfx_drm_mode_get_lease_ioctl+0x10/0x10 [ 814.248776][T14934] ? __pfx_drm_ioctl+0x10/0x10 [ 814.248797][T14934] ? selinux_file_ioctl+0x180/0x270 [ 814.248812][T14934] ? selinux_file_ioctl+0xb4/0x270 [ 814.248827][T14934] ? __pfx_drm_ioctl+0x10/0x10 [ 814.248843][T14934] __x64_sys_ioctl+0x18e/0x210 [ 814.248859][T14934] do_syscall_64+0xcd/0xf80 [ 814.248875][T14934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.248886][T14934] RIP: 0033:0x7fca4598f749 [ 814.248896][T14934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.248907][T14934] RSP: 002b:00007fca46780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.248918][T14934] RAX: ffffffffffffffda RBX: 00007fca45be5fa0 RCX: 00007fca4598f749 [ 814.248925][T14934] RDX: 0000200000000980 RSI: 00000000c01064c8 RDI: 0000000000000003 [ 814.248932][T14934] RBP: 00007fca46780090 R08: 0000000000000000 R09: 0000000000000000 [ 814.248939][T14934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.248945][T14934] R13: 00007fca45be6038 R14: 00007fca45be5fa0 R15: 00007ffc42f44108 [ 814.248960][T14934] [ 814.535958][ T5936] usb 4-1: USB disconnect, device number 96 [ 814.609657][T14938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14938 comm=syz.0.2389 [ 814.773062][T14938] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2389'. [ 814.801927][T14938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2389'. [ 815.591079][T14960] fuse: Bad value for 'fd' [ 815.605213][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 815.605230][ T30] audit: type=1400 audit(815.579:1273): avc: denied { read } for pid=14958 comm="syz.3.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 816.385925][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2401'. [ 816.542003][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2402'. [ 817.653095][T14990] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 817.661334][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.670394][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.909669][ T30] audit: type=1400 audit(817.809:1274): avc: denied { getopt } for pid=14988 comm="syz.3.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 817.961463][T14345] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 818.141511][T14345] usb 6-1: Using ep0 maxpacket: 8 [ 818.184932][T14345] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 818.239904][T14345] usb 6-1: config 179 has no interface number 0 [ 818.287306][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 818.364849][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 818.450010][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 818.572934][T14345] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 818.680403][T14345] usb 6-1: config 179 interface 65 has no altsetting 0 [ 818.736067][T14345] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 818.797051][T14345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.707338][T15005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2410'. [ 820.349744][ T30] audit: type=1326 audit(820.318:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.011396][ T30] audit: type=1326 audit(820.328:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.034333][ T30] audit: type=1326 audit(820.328:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.355696][T15023] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 821.363604][T15023] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 821.372285][T15023] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 821.380069][T15023] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 821.461086][T14345] usb 6-1: USB disconnect, device number 2 [ 821.514882][ T30] audit: type=1326 audit(820.328:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.601355][ T30] audit: type=1326 audit(820.328:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.665976][ T30] audit: type=1326 audit(820.328:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.711404][ T30] audit: type=1326 audit(820.338:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.762019][ T30] audit: type=1326 audit(820.338:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.821410][ T30] audit: type=1326 audit(820.338:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.874874][ T30] audit: type=1326 audit(820.338:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 821.901305][T14968] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 821.928119][ T30] audit: type=1326 audit(820.338:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15015 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a0778f749 code=0x7ffc0000 [ 822.051491][T14968] usb 6-1: Using ep0 maxpacket: 16 [ 822.078189][T14968] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.118331][T14968] usb 6-1: config 0 interface 0 has no altsetting 0 [ 822.119604][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2420'. [ 822.138541][T14968] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 822.169776][T14968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.201048][T14968] usb 6-1: config 0 descriptor?? [ 822.627616][T14968] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 822.772116][T15057] kAFS: unable to lookup cell '(' [ 822.793215][T15057] kAFS: unable to lookup cell '(,c¾ûL' [ 823.163830][T14968] usb 6-1: USB disconnect, device number 3 [ 823.174699][ T5825] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 823.374659][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 823.416076][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.489506][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.566085][ T5825] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.608602][ T5825] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 823.649885][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 823.666538][ T5825] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 823.679891][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.705748][ T5825] usb 4-1: config 0 descriptor?? [ 824.160471][T15088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2435'. [ 824.409647][ T5825] usbhid 4-1:0.0: can't add hid device: -71 [ 824.442597][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 824.515852][ T5825] usb 4-1: USB disconnect, device number 97 [ 825.129680][T15090] 9p: Bad value for 'wfdno' [ 826.151317][ T5936] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 826.317208][ T5936] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 826.336600][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.415387][ T5936] usb 4-1: Product: syz [ 826.419580][ T5936] usb 4-1: Manufacturer: syz [ 826.579841][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 826.608825][ T5936] usb 4-1: SerialNumber: syz [ 826.618796][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 826.619873][ T5936] r8152-cfgselector 4-1: Unknown version 0x0000 [ 827.072689][ T5936] r8152-cfgselector 4-1: config 0 descriptor?? [ 828.014662][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.137154][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.322531][T14968] r8152-cfgselector 4-1: USB disconnect, device number 98 [ 828.603846][T15130] SELinux: failed to load policy [ 830.642263][T14968] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 830.952780][T14968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.971425][T14968] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 830.992749][T14968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.018027][T14968] usb 4-1: config 0 descriptor?? [ 831.112717][T14968] pwc: Askey VC010 type 2 USB webcam detected. [ 831.170536][T15167] loop6: detected capacity change from 0 to 2640 [ 831.177676][T15167] buffer_io_error: 18 callbacks suppressed [ 831.177686][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.191413][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.199242][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.207460][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.215335][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.223200][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.231023][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.239066][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.246897][T15167] ldm_validate_partition_table(): Disk read failed. [ 831.253547][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.261263][T14345] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 831.261680][T15167] Buffer I/O error on dev loop6, logical block 0, async page read [ 831.276704][T15167] Dev loop6: unable to read RDB block 0 [ 831.282394][T15167] loop6: unable to read partition table [ 831.288122][T15167] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 831.411455][T14345] usb 6-1: Using ep0 maxpacket: 16 [ 831.421937][T14345] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.441093][T14345] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.462384][T14345] usb 6-1: config 1 interface 0 has no altsetting 0 [ 831.478558][T14345] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.490801][T14345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.505029][T14345] usb 6-1: Product: 《 [ 831.519091][T14345] usb 6-1: Manufacturer: à  [ 831.531243][T14345] usb 6-1: SerialNumber: 㳦ê¤æ…¿ï©€è ®é£•ë¿Šæš¸çŸæ‚‚刲é½ê¿ã˜å¢¹æ„¹å«¼ï¯·í‹ æœŒà¢ ê£¢ã›Žæ±§äººåª‰è¤±ï¶³ë–•ê—變혮ﴻâ“ç“»ê⌜ã­î©¨é ™à¤¯æ±ˆá§ã£„囬æ¦è·§ï‚©î‹µïœä®Šëº‰ë¶‘೩潉ã•é¡ á²Œà±ˆåƒ‘乶욗䱀᥸竃渽ꦓ香呣ꫢࡃ췈璇硉ࡩꈺ䲖拓á“⼢့쬿á…䂳ë¥å°î–ê‘£ê£á†”ä¸æ¦´è½€æˆŒ [ 831.531566][T14968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 831.583171][T14968] pwc: recv_control_msg error -32 req 02 val 2700 [ 831.590586][T14968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 831.598335][T14968] pwc: recv_control_msg error -32 req 04 val 1000 [ 831.606316][T14968] pwc: recv_control_msg error -32 req 04 val 1300 [ 831.614106][T14968] pwc: recv_control_msg error -32 req 04 val 1400 [ 831.622487][T14968] pwc: recv_control_msg error -32 req 02 val 2000 [ 831.629685][T14968] pwc: recv_control_msg error -32 req 02 val 2100 [ 831.637916][T14968] pwc: recv_control_msg error -32 req 04 val 1500 [ 831.646192][T14968] pwc: recv_control_msg error -32 req 02 val 2500 [ 831.653928][T14968] pwc: recv_control_msg error -32 req 02 val 2400 [ 831.882673][T14968] pwc: recv_control_msg error -71 req 02 val 2900 [ 831.889861][T14968] pwc: recv_control_msg error -71 req 02 val 2800 [ 831.897038][T14968] pwc: recv_control_msg error -71 req 04 val 1100 [ 831.906053][T14968] pwc: recv_control_msg error -71 req 04 val 1200 [ 831.933698][T14968] pwc: Registered as video103. [ 831.953970][T14968] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 831.996525][T14968] usb 4-1: USB disconnect, device number 99 [ 832.120787][T15166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.154897][T15166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.197903][T14345] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 832.237971][T14345] usb 6-1: USB disconnect, device number 4 [ 832.524223][T15184] FAULT_INJECTION: forcing a failure. [ 832.524223][T15184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.547980][T15184] CPU: 1 UID: 0 PID: 15184 Comm: syz.0.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.548016][T15184] Tainted: [L]=SOFTLOCKUP [ 832.548023][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.548034][T15184] Call Trace: [ 832.548043][T15184] [ 832.548052][T15184] dump_stack_lvl+0x16c/0x1f0 [ 832.548083][T15184] should_fail_ex+0x512/0x640 [ 832.548116][T15184] _copy_from_user+0x2e/0xd0 [ 832.548145][T15184] kstrtouint_from_user+0xd6/0x1d0 [ 832.548167][T15184] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 832.548187][T15184] ? __lock_acquire+0x436/0x2890 [ 832.548214][T15184] ? lock_acquire+0x179/0x330 [ 832.548242][T15184] proc_fail_nth_write+0x83/0x220 [ 832.548263][T15184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 832.548290][T15184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 832.548309][T15184] vfs_write+0x2a0/0x11d0 [ 832.548335][T15184] ? __pfx___mutex_lock+0x10/0x10 [ 832.548363][T15184] ? __pfx_vfs_write+0x10/0x10 [ 832.548394][T15184] ? __fget_files+0x20e/0x3c0 [ 832.548429][T15184] ksys_write+0x12a/0x250 [ 832.548452][T15184] ? __pfx_ksys_write+0x10/0x10 [ 832.548483][T15184] do_syscall_64+0xcd/0xf80 [ 832.548510][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.548530][T15184] RIP: 0033:0x7f5a0778e1ff [ 832.548546][T15184] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 832.548564][T15184] RSP: 002b:00007f5a085f2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 832.548581][T15184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a0778e1ff [ 832.548593][T15184] RDX: 0000000000000001 RSI: 00007f5a085f20a0 RDI: 0000000000000004 [ 832.548604][T15184] RBP: 00007f5a085f2090 R08: 0000000000000000 R09: 0000000000000000 [ 832.548614][T15184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 832.548625][T15184] R13: 00007f5a079e6038 R14: 00007f5a079e5fa0 R15: 00007fff60050018 [ 832.548656][T15184] [ 832.821435][T14345] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 833.125088][T14345] usb 4-1: Using ep0 maxpacket: 32 [ 833.131918][T14345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.163524][T14345] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 833.183347][T14345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.220888][T14345] usb 4-1: Product: syz [ 833.514862][T14345] usb 4-1: Manufacturer: syz [ 833.527727][T14345] usb 4-1: SerialNumber: syz [ 833.534626][T14345] usb 4-1: config 0 descriptor?? [ 833.541895][T14345] usb 4-1: bad CDC descriptors [ 833.547612][T14345] usb 4-1: unsupported MDLM descriptors [ 833.750604][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.768768][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.791941][T14968] usb 4-1: USB disconnect, device number 100 [ 834.077742][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2469'. [ 834.385902][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'. [ 834.400569][ T5825] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 834.566315][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 834.640305][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 834.686359][ T5825] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 834.717605][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.744771][ T5825] usb 3-1: config 0 descriptor?? [ 834.916289][T15214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2470'. [ 835.126450][T15216] fuse: Unknown parameter '0x0000000000000009' [ 836.122565][ T5825] ath6kl: Failed to submit usb control message: -110 [ 836.129316][ T5825] ath6kl: unable to send the bmi data to the device: -110 [ 836.554836][ T5825] ath6kl: Unable to send get target info: -110 [ 836.587744][ T5825] ath6kl: Failed to init ath6kl core: -110 [ 836.605673][ T5825] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 837.208236][T15234] xt_ecn: cannot match TCP bits for non-tcp packets [ 837.216092][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 837.216108][ T30] audit: type=1326 audit(837.158:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 837.367096][ T30] audit: type=1326 audit(837.168:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 837.456390][ T30] audit: type=1326 audit(837.168:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 837.586993][ T30] audit: type=1326 audit(837.178:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 837.628684][ T30] audit: type=1326 audit(837.178:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 837.652916][T15248] FAULT_INJECTION: forcing a failure. [ 837.652916][T15248] name failslab, interval 1, probability 0, space 0, times 0 [ 837.665947][T15248] CPU: 1 UID: 0 PID: 15248 Comm: syz.0.2481 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.665977][T15248] Tainted: [L]=SOFTLOCKUP [ 837.665983][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.665994][T15248] Call Trace: [ 837.666001][T15248] [ 837.666008][T15248] dump_stack_lvl+0x16c/0x1f0 [ 837.666038][T15248] should_fail_ex+0x512/0x640 [ 837.666064][T15248] ? kmem_cache_alloc_noprof+0x62/0x770 [ 837.666085][T15248] should_failslab+0xc2/0x120 [ 837.666105][T15248] kmem_cache_alloc_noprof+0x83/0x770 [ 837.666115][T15248] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.666130][T15248] ? __kernfs_new_node+0xd2/0x9b0 [ 837.666147][T15248] ? __kernfs_new_node+0xd2/0x9b0 [ 837.666159][T15248] __kernfs_new_node+0xd2/0x9b0 [ 837.666174][T15248] ? __pfx___kernfs_new_node+0x10/0x10 [ 837.666191][T15248] ? find_held_lock+0x2b/0x80 [ 837.666209][T15248] ? kernfs_root+0xee/0x2a0 [ 837.666225][T15248] kernfs_new_node+0x13c/0x1e0 [ 837.666241][T15248] ? __pfx_blkdev_issue_flush+0x10/0x10 [ 837.666257][T15248] kernfs_create_dir_ns+0x4c/0x1a0 [ 837.666274][T15248] internal_create_group+0x36c/0xf70 [ 837.666290][T15248] ? file_check_and_advance_wb_err+0xc2/0x310 [ 837.666306][T15248] ? __pfx_internal_create_group+0x10/0x10 [ 837.666320][T15248] ? file_write_and_wait_range+0xa2/0x140 [ 837.666338][T15248] ? blkdev_fsync+0xa1/0xd0 [ 837.666352][T15248] loop_configure+0xc42/0x15f0 [ 837.666378][T15248] ? __pfx_loop_configure+0x10/0x10 [ 837.666405][T15248] lo_ioctl+0x266/0x1cb0 [ 837.666426][T15248] ? __pfx_lo_ioctl+0x10/0x10 [ 837.666440][T15248] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 837.666459][T15248] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.666473][T15248] ? blk_get_meta_cap+0xbc/0x700 [ 837.666492][T15248] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 837.666513][T15248] ? blkdev_common_ioctl+0x190/0x2b80 [ 837.666549][T15248] ? __pfx_lo_ioctl+0x10/0x10 [ 837.666564][T15248] blkdev_ioctl+0x5b0/0x6e0 [ 837.666574][T15248] ? __pfx_blkdev_ioctl+0x10/0x10 [ 837.666591][T15248] ? selinux_file_ioctl+0x180/0x270 [ 837.666605][T15248] ? selinux_file_ioctl+0xb4/0x270 [ 837.666620][T15248] ? __pfx_blkdev_ioctl+0x10/0x10 [ 837.666638][T15248] __x64_sys_ioctl+0x18e/0x210 [ 837.666653][T15248] do_syscall_64+0xcd/0xf80 [ 837.666668][T15248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.666680][T15248] RIP: 0033:0x7f5a0778f749 [ 837.666691][T15248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.666702][T15248] RSP: 002b:00007f5a085d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.666713][T15248] RAX: ffffffffffffffda RBX: 00007f5a079e6090 RCX: 00007f5a0778f749 [ 837.666720][T15248] RDX: 0000200000001ac0 RSI: 0000000000004c0a RDI: 0000000000000006 [ 837.666727][T15248] RBP: 00007f5a085d1090 R08: 0000000000000000 R09: 0000000000000000 [ 837.666733][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.666739][T15248] R13: 00007f5a079e6128 R14: 00007f5a079e6090 R15: 00007fff60050018 [ 837.666754][T15248] [ 837.666780][T15248] loop6: detected capacity change from 0 to 2640 [ 837.977093][T15248] buffer_io_error: 6 callbacks suppressed [ 837.977109][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.990747][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.998607][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.006475][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.014325][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.022213][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.030061][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.037933][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.046524][T15248] ldm_validate_partition_table(): Disk read failed. [ 838.053168][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.060977][T15248] Buffer I/O error on dev loop6, logical block 0, async page read [ 838.069026][T15248] Dev loop6: unable to read RDB block 0 [ 838.074951][T15248] loop6: unable to read partition table [ 838.080645][T15248] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 838.091975][ T30] audit: type=1326 audit(837.178:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 838.115477][ T30] audit: type=1326 audit(837.308:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 838.148417][ T30] audit: type=1326 audit(837.308:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.3.2476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef838f749 code=0x7ffc0000 [ 838.187293][T14345] usb 3-1: USB disconnect, device number 93 [ 839.253102][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2487'. [ 839.374346][T15260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2487'. [ 839.537281][ T5825] IPVS: starting estimator thread 0... [ 839.851386][T15269] IPVS: using max 55 ests per chain, 132000 per kthread [ 840.006228][T15274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 840.370786][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 840.515578][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 840.515577][ T1153] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.544028][ T1153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.583988][ T1153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.718682][ T30] audit: type=1326 audit(840.678:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.5.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 841.456349][ T1153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.465155][ T30] audit: type=1326 audit(840.688:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15283 comm="syz.5.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 841.868740][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 842.891273][T14345] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 843.021672][ T974] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 843.041302][T14345] usb 6-1: Using ep0 maxpacket: 8 [ 843.048320][T14345] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 843.057408][T14345] usb 6-1: config 179 has no interface number 0 [ 843.070828][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 843.126212][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 843.167049][T14345] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 843.192853][ T974] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 843.204109][ T974] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 843.222727][T14345] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 843.278068][ T974] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.295985][T14345] usb 6-1: config 179 interface 65 has no altsetting 0 [ 843.348345][ T974] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 843.360786][T14345] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 843.454669][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.475708][T14345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.523713][ T974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 843.544802][T15312] FAULT_INJECTION: forcing a failure. [ 843.544802][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.636862][ T974] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 844.576469][ T974] usb 3-1: USB disconnect, device number 94 [ 844.653496][T15312] CPU: 0 UID: 0 PID: 15312 Comm: syz.0.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.653526][T15312] Tainted: [L]=SOFTLOCKUP [ 844.653533][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.653543][T15312] Call Trace: [ 844.653548][T15312] [ 844.653555][T15312] dump_stack_lvl+0x16c/0x1f0 [ 844.653583][T15312] should_fail_ex+0x512/0x640 [ 844.653613][T15312] _copy_to_user+0x32/0xd0 [ 844.653641][T15312] simple_read_from_buffer+0xcb/0x170 [ 844.653669][T15312] proc_fail_nth_read+0x197/0x240 [ 844.653688][T15312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.653708][T15312] ? rw_verify_area+0xcf/0x6c0 [ 844.653737][T15312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 844.653757][T15312] vfs_read+0x1e4/0xcf0 [ 844.653781][T15312] ? __pfx___mutex_lock+0x10/0x10 [ 844.653809][T15312] ? __pfx_vfs_read+0x10/0x10 [ 844.653839][T15312] ? __fget_files+0x20e/0x3c0 [ 844.653873][T15312] ksys_read+0x12a/0x250 [ 844.653895][T15312] ? __pfx_ksys_read+0x10/0x10 [ 844.653925][T15312] do_syscall_64+0xcd/0xf80 [ 844.653952][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.653971][T15312] RIP: 0033:0x7f5a0778e15c [ 844.653986][T15312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 844.654003][T15312] RSP: 002b:00007f5a085f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 844.654021][T15312] RAX: ffffffffffffffda RBX: 00007f5a079e5fa0 RCX: 00007f5a0778e15c [ 844.654033][T15312] RDX: 000000000000000f RSI: 00007f5a085f20a0 RDI: 000000000000000f [ 844.654045][T15312] RBP: 00007f5a085f2090 R08: 0000000000000000 R09: 0000000000000000 [ 844.654056][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.654067][T15312] R13: 00007f5a079e6038 R14: 00007f5a079e5fa0 R15: 00007fff60050018 [ 844.654095][T15312] [ 846.792425][T14968] usb 6-1: USB disconnect, device number 5 [ 847.306217][ T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.344323][ T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.395121][ T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.435831][ T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.483803][T14968] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 848.112959][T14968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.129769][T14968] usb 4-1: config 0 has no interfaces? [ 848.161259][T14968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 848.200927][T14968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.247886][T14968] usb 4-1: config 0 descriptor?? [ 849.255011][T15361] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2504'. [ 850.231572][T14968] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 850.429421][T14968] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 850.450320][T14968] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 850.482004][T14968] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.535918][T14968] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 850.559693][T14968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.585061][T14968] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.621746][T14968] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 851.244149][ T974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 852.136870][ T5930] usb 3-1: USB disconnect, device number 95 [ 852.242287][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 852.329578][ T974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.360686][ T974] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 852.383191][ T5930] usb 4-1: USB disconnect, device number 101 [ 852.398229][ T974] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 852.425845][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.443867][ T974] usb 6-1: config 0 descriptor?? [ 852.711519][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 852.711544][ T30] audit: type=1400 audit(852.688:1432): avc: denied { map } for pid=15381 comm="syz.3.2517" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 853.653501][T15382] batman_adv: batadv0: Adding interface: dummy0 [ 853.659897][T15382] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.710250][T15382] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 853.740945][ T30] audit: type=1400 audit(853.708:1433): avc: denied { ioctl } for pid=15381 comm="syz.3.2517" path="socket:[57349]" dev="sockfs" ino=57349 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 853.769813][T15388] macvtap1: mtu less than device minimum [ 853.849587][T15387] lo speed is unknown, defaulting to 1000 [ 853.923969][T15393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2518'. [ 853.992116][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 854.001116][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 854.010921][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 854.022031][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2519'. [ 854.153060][T15396] binder: 15394:15396 ioctl c0306201 200000000640 returned -22 [ 854.428904][T14968] usb 6-1: USB disconnect, device number 6 [ 854.901683][T14968] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 855.064745][T14968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.072981][T15387] lo speed is unknown, defaulting to 1000 [ 855.082869][T14968] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 855.165474][T14968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.371170][T14968] usb 6-1: config 0 descriptor?? [ 855.566384][T14968] pwc: Askey VC010 type 2 USB webcam detected. [ 855.895765][T14968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 855.916084][T14968] pwc: recv_control_msg error -32 req 02 val 2700 [ 855.923855][T14968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 855.934153][T14968] pwc: recv_control_msg error -32 req 04 val 1000 [ 855.960221][T14968] pwc: recv_control_msg error -32 req 04 val 1300 [ 855.967111][ T30] audit: type=1800 audit(855.928:1434): pid=15400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2522" name="file1" dev="overlay" ino=164 res=0 errno=0 [ 855.989597][T14968] pwc: recv_control_msg error -32 req 04 val 1400 [ 855.997735][T14968] pwc: recv_control_msg error -32 req 02 val 2000 [ 856.008169][T14968] pwc: recv_control_msg error -32 req 02 val 2100 [ 856.017702][T14968] pwc: recv_control_msg error -32 req 04 val 1500 [ 856.111085][T14968] pwc: recv_control_msg error -32 req 02 val 2500 [ 856.179766][ T30] audit: type=1326 audit(855.978:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 856.270441][ T30] audit: type=1326 audit(855.978:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 856.337810][T14968] pwc: recv_control_msg error -71 req 02 val 2600 [ 856.347928][T14968] pwc: recv_control_msg error -71 req 02 val 2900 [ 856.355151][T14968] pwc: recv_control_msg error -71 req 02 val 2800 [ 856.374016][ T30] audit: type=1326 audit(855.978:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 856.401079][T14968] pwc: recv_control_msg error -71 req 04 val 1100 [ 856.520224][T14968] pwc: recv_control_msg error -71 req 04 val 1200 [ 856.551259][ T30] audit: type=1326 audit(855.978:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fd8b8f34b code=0x7ffc0000 [ 856.567672][T14968] pwc: Registered as video103. [ 856.634630][ T30] audit: type=1326 audit(855.978:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fd8b8f34b code=0x7ffc0000 [ 856.642482][T14968] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 856.722066][ T30] audit: type=1326 audit(855.978:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fd8b8f749 code=0x7ffc0000 [ 856.761909][T14968] usb 6-1: USB disconnect, device number 7 [ 856.789349][ T30] audit: type=1326 audit(855.988:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4fd8b8f34b code=0x7ffc0000 [ 857.044352][T15422] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2526'. [ 857.903365][T15436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2530'. [ 857.929676][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2530'. [ 857.961347][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 857.961365][ T30] audit: type=1400 audit(857.928:1452): avc: denied { getopt } for pid=15431 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 859.346193][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2537'. [ 861.148630][T15494] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 861.587988][T15496] overlayfs: workdir and upperdir must reside under the same mount [ 861.684103][T15453] netlink: 'syz.2.2534': attribute type 17 has an invalid length. [ 861.691994][T15453] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2534'. [ 861.700884][T15453] macvtap0: entered allmulticast mode [ 861.706761][T15453] veth0_macvtap: entered allmulticast mode [ 861.714365][T15453] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 861.769210][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'. [ 862.107188][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 862.188514][T15512] fuse: Bad value for 'fd' [ 862.706526][ T30] audit: type=1400 audit(862.658:1453): avc: denied { setattr } for pid=15506 comm="syz.4.2552" path="socket:[56948]" dev="sockfs" ino=56948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 863.099383][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.124452][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.312755][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 863.331878][ T5873] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 863.543232][ T5873] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 863.554441][ T5873] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 863.656453][ T5873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 863.667589][ T5873] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 863.678514][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 863.690081][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 863.707995][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 863.714454][ T5873] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 863.742279][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.771080][ T5873] usb 4-1: config 0 descriptor?? [ 863.792265][T15521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 863.810194][ T5873] hub 4-1:0.0: bad descriptor, ignoring hub [ 863.830821][T15533] FAULT_INJECTION: forcing a failure. [ 863.830821][T15533] name failslab, interval 1, probability 0, space 0, times 0 [ 863.847351][ T5873] hub 4-1:0.0: probe with driver hub failed with error -5 [ 863.864240][T15533] CPU: 0 UID: 0 PID: 15533 Comm: syz.0.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.864271][T15533] Tainted: [L]=SOFTLOCKUP [ 863.864277][T15533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.864288][T15533] Call Trace: [ 863.864294][T15533] [ 863.864302][T15533] dump_stack_lvl+0x16c/0x1f0 [ 863.864330][T15533] should_fail_ex+0x512/0x640 [ 863.864360][T15533] ? __kvmalloc_node_noprof+0x129/0xa40 [ 863.864384][T15533] should_failslab+0xc2/0x120 [ 863.864408][T15533] __kvmalloc_node_noprof+0x14a/0xa40 [ 863.864431][T15533] ? video_usercopy+0xa6b/0x16c0 [ 863.864457][T15533] ? video_usercopy+0xa6b/0x16c0 [ 863.864476][T15533] video_usercopy+0xa6b/0x16c0 [ 863.864498][T15533] ? __pfx___video_do_ioctl+0x10/0x10 [ 863.864518][T15533] ? selinux_kernel_read_file+0xf1/0x120 [ 863.864542][T15533] ? __pfx_video_usercopy+0x10/0x10 [ 863.864579][T15533] v4l2_ioctl+0x1bd/0x250 [ 863.864597][T15533] ? __pfx_v4l2_ioctl+0x10/0x10 [ 863.864616][T15533] __x64_sys_ioctl+0x18e/0x210 [ 863.864640][T15533] do_syscall_64+0xcd/0xf80 [ 863.864664][T15533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.864682][T15533] RIP: 0033:0x7f5a0778f749 [ 863.864697][T15533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.864714][T15533] RSP: 002b:00007f5a085f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.864731][T15533] RAX: ffffffffffffffda RBX: 00007f5a079e5fa0 RCX: 00007f5a0778f749 [ 863.864743][T15533] RDX: 0000200000000080 RSI: 00000000c0205648 RDI: 0000000000000003 [ 863.864753][T15533] RBP: 00007f5a085f2090 R08: 0000000000000000 R09: 0000000000000000 [ 863.864764][T15533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.864774][T15533] R13: 00007f5a079e6038 R14: 00007f5a079e5fa0 R15: 00007fff60050018 [ 863.864799][T15533] [ 864.055833][ T5873] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 864.413769][ T5825] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 864.574463][ T5825] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice=ff.f8 [ 864.583925][ T5825] usb 3-1: New USB device strings: Mfr=177, Product=142, SerialNumber=0 [ 864.601595][ T5825] usb 3-1: Product: syz [ 864.605768][ T5825] usb 3-1: Manufacturer: syz [ 864.711377][ T5936] usb 4-1: USB disconnect, device number 102 [ 864.744383][ T5825] usb 3-1: config 0 descriptor?? [ 865.082988][T15555] binder: BINDER_SET_CONTEXT_MGR already set [ 865.171874][T15555] binder: 15530:15555 ioctl 4018620d 2000000000c0 returned -16 [ 865.179717][T15555] binder: BINDER_SET_CONTEXT_MGR already set [ 865.199283][T15555] binder: 15530:15555 ioctl 4018620d 2000000000c0 returned -16 [ 865.231751][T15555] binder: BINDER_SET_CONTEXT_MGR already set [ 865.246167][T15555] binder: 15530:15555 ioctl 4018620d 2000000000c0 returned -16 [ 865.341136][ T5825] usbhid 3-1:0.0: can't add hid device: -71 [ 865.358914][ T5825] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 865.417219][ T5825] usb 3-1: USB disconnect, device number 96 [ 865.510968][ T30] audit: type=1400 audit(865.478:1454): avc: denied { lock } for pid=15563 comm="syz.4.2570" path="socket:[57076]" dev="sockfs" ino=57076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 865.677470][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 865.725342][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2571'. [ 866.576650][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 866.598173][T15569] sp0: Synchronizing with TNC [ 868.687974][ T30] audit: type=1400 audit(868.658:1455): avc: denied { mounton } for pid=15618 comm="syz.2.2585" path="/520/file1" dev="autofs" ino=57220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 868.744142][T15620] netlink: 'syz.2.2585': attribute type 3 has an invalid length. [ 868.853271][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'. [ 869.001469][ T5873] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 869.201250][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 869.262241][ T5873] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 869.331384][ T5873] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.342022][ T5873] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.353609][ T5873] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 869.362018][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 869.370976][ T5873] usb 3-1: config 0 has no interface number 0 [ 869.381109][ T5873] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 869.401330][ T5873] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 869.420982][ T5873] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 869.466242][ T5873] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.529409][ T5873] usb 3-1: config 0 interface 125 has no altsetting 0 [ 869.545610][ T5873] usb 3-1: config 0 interface 125 has no altsetting 2 [ 869.577269][ T5873] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 869.596237][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.614592][ T5873] usb 3-1: Product: syz [ 869.733685][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.361790][ T5873] usb 3-1: Manufacturer: syz [ 870.381547][ T5873] usb 3-1: SerialNumber: syz [ 870.481921][ T5873] usb 3-1: config 0 descriptor?? [ 870.502202][ T5873] usb 3-1: selecting invalid altsetting 2 [ 870.598475][T15651] netlink: 'syz.3.2592': attribute type 10 has an invalid length. [ 870.981391][T14968] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 871.221586][T14968] usb 4-1: Using ep0 maxpacket: 8 [ 871.307333][T14968] usb 4-1: config 252 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.320468][T14968] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 871.329950][T14968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.462269][T14968] pvrusb2: Hardware description: Terratec Grabster AV400 [ 871.477053][T14968] pvrusb2: ********** [ 871.489845][T14968] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 871.518671][T14968] pvrusb2: Important functionality might not be entirely working. [ 871.539739][T14968] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 871.573856][T14968] pvrusb2: ********** [ 871.581902][ T5873] get_1284_register timeout [ 871.593565][ C1] usb 3-1: async_complete: urb error -104 [ 871.599442][ C1] usb 3-1: async_complete: urb error -104 [ 871.605228][ C1] usb 3-1: async_complete: urb error -104 [ 871.611007][ C1] usb 3-1: async_complete: urb error -104 [ 871.676895][ T2337] pvrusb2: Invalid write control endpoint [ 871.685674][ T5873] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 871.800873][ T2337] pvrusb2: Invalid write control endpoint [ 871.894239][T15619] orangefs_mount: mount request failed with -4 [ 872.051992][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 872.226128][T14968] usb 3-1: USB disconnect, device number 97 [ 872.266014][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 872.487653][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 872.503042][ T2337] pvrusb2: Device being rendered inoperable [ 872.509444][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 872.734161][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 872.743699][ T2337] pvrusb2: Attached sub-driver cx25840 [ 872.749460][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 872.760108][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 874.031960][ T5936] usb 4-1: USB disconnect, device number 103 [ 874.473168][T15698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2605'. [ 875.920655][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 876.544398][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 877.071485][ T5880] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 877.261394][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 877.371785][ T5880] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 877.380188][ T5880] usb 3-1: config 179 has no interface number 0 [ 877.398855][T15719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'. [ 877.498050][ T5880] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 877.535316][ T5880] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 877.571604][ T5936] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 877.603210][ T5880] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 877.668276][ T5880] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 877.711412][ T5936] usb 4-1: device descriptor read/64, error -71 [ 877.744938][ T5880] usb 3-1: config 179 interface 65 has no altsetting 0 [ 877.793557][ T5880] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 877.851927][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.951359][ T5936] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 878.087799][ T5936] usb 4-1: device descriptor read/64, error -71 [ 878.211593][ T5936] usb usb4-port1: attempt power cycle [ 878.490888][T15722] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2611'. [ 880.714017][ T5880] usb 3-1: USB disconnect, device number 98 [ 881.500905][T15764] loop6: detected capacity change from 0 to 2640 [ 881.511369][T15764] buffer_io_error: 6 callbacks suppressed [ 881.511399][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.525254][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.533790][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.541895][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.549967][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.558399][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.566655][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.574796][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.582871][T15764] ldm_validate_partition_table(): Disk read failed. [ 881.590195][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.598735][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 881.607424][T15764] Dev loop6: unable to read RDB block 0 [ 881.614110][T15764] loop6: unable to read partition table [ 881.620786][T15764] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 883.407448][T15788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2629'. [ 883.803887][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2632'. [ 884.194200][ T5880] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 884.713729][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 884.727303][ T5880] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 884.737147][ T5880] usb 6-1: config 179 has no interface number 0 [ 884.753074][ T5880] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 884.775093][ T5880] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 884.800945][ T5880] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 884.842111][ T5880] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 884.883952][ T5880] usb 6-1: config 179 interface 65 has no altsetting 0 [ 884.908147][ T5880] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 884.927468][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.878718][ T5930] usb 6-1: USB disconnect, device number 8 [ 887.228218][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2641'. [ 887.431980][ T5880] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 887.603165][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.634757][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.653196][ T5880] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 887.664449][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.691459][ T5880] usb 4-1: config 0 descriptor?? [ 888.145441][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2649'. [ 888.155418][T15848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2649'. [ 888.168206][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2649'. [ 888.642532][T15855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 888.663211][ T5880] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 888.679342][ T5880] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 888.877808][ T5880] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 889.852259][ T5880] usb 4-1: reset high-speed USB device number 107 using dummy_hcd [ 890.561616][T14968] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 890.756819][ T5873] usb 4-1: USB disconnect, device number 107 [ 890.780530][T15872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.793657][T14968] usb 6-1: Using ep0 maxpacket: 8 [ 890.915064][T14968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 890.948251][T14968] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 890.971313][T14968] usb 6-1: config 8 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 891.009433][T14968] usb 6-1: config 8 interface 0 has no altsetting 0 [ 891.035779][T14968] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 891.048137][T14968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.067295][T14968] usb 6-1: Product: syz [ 891.078397][T14968] usb 6-1: Manufacturer: syz [ 891.090110][T14968] usb 6-1: SerialNumber: syz [ 891.456274][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.486645][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.793643][ T30] audit: type=1326 audit(891.768:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15877 comm="syz.0.2656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a0778f749 code=0x0 [ 892.164837][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2658'. [ 892.218622][T15892] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2659'. [ 892.536977][T15900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2660'. [ 894.850113][T14968] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 894.876426][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2666'. [ 894.957889][T14968] usb 6-1: selecting invalid altsetting 0 [ 895.067252][T14968] snd-usb-audio 6-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 895.105924][T14968] usb 6-1: USB disconnect, device number 9 [ 895.535424][ T30] audit: type=1400 audit(895.418:1457): avc: denied { create } for pid=15925 comm="syz.3.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 895.661262][T14968] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 896.266414][ T30] audit: type=1400 audit(896.138:1458): avc: denied { mount } for pid=15930 comm="syz.2.2670" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 896.761255][T14968] usb 6-1: Using ep0 maxpacket: 8 [ 896.924046][ T30] audit: type=1400 audit(896.898:1459): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 897.094031][T14968] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 897.126303][T14968] usb 6-1: config 179 has no interface number 0 [ 897.161564][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 897.194111][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 897.544772][ T5880] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 898.169149][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 898.195559][T14968] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 898.219112][T14968] usb 6-1: config 179 interface 65 has no altsetting 0 [ 898.241590][T14968] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 898.271816][T14968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.312777][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 898.423889][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 898.435278][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 898.445155][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 898.470076][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.480668][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.063284][ T5880] usb 3-1: config 0 descriptor?? [ 899.418214][T14968] usb 6-1: can't set config #179, error -71 [ 899.442425][T14968] usb 6-1: USB disconnect, device number 10 [ 899.600049][ T5880] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 901.724653][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 901.736165][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 901.745040][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 901.753656][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 901.762029][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 901.830915][T15972] lo speed is unknown, defaulting to 1000 [ 901.963012][T15976] autofs: Unknown parameter 'ÐŽ°i±ìSNRÝÔÎ-ŸëñAÏæÜœ:ʇº_ 1 [ 924.772426][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 924.781392][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 924.798762][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 924.806711][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 924.905134][T16265] lo speed is unknown, defaulting to 1000 [ 925.444517][T16270] pim6reg: entered allmulticast mode [ 925.693467][ T4804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.741326][ T5894] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 925.764105][ T4804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.884869][T16265] lo speed is unknown, defaulting to 1000 [ 926.210761][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 926.241566][ T5894] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 926.393360][ T5894] usb 6-1: config 0 has no interface number 0 [ 926.399492][ T5894] usb 6-1: config 0 interface 55 has no altsetting 0 [ 926.708919][ T5894] usb 6-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=6e.31 [ 926.718263][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.726399][ T5894] usb 6-1: Product: syz [ 926.730636][ T5894] usb 6-1: Manufacturer: syz [ 926.757929][ T5894] usb 6-1: SerialNumber: syz [ 926.779558][ T4804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.798359][ T4804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.807268][ T5894] usb 6-1: config 0 descriptor?? [ 926.861302][ T5823] Bluetooth: hci7: command tx timeout [ 927.489897][ T5894] usb 6-1: Could not find all expected endpoints [ 927.537885][ T4804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.559420][ T5894] usb 6-1: USB disconnect, device number 16 [ 927.574419][ T4804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.847317][T16296] netlink: 'syz.2.2757': attribute type 15 has an invalid length. [ 927.859370][ T4804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.898778][T16296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2757'. [ 927.925842][ T4804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.417553][T16265] chnl_net:caif_netlink_parms(): no params data found [ 928.455999][ T5894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 928.511960][ T5894] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.758019][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.931528][ T5823] Bluetooth: hci7: command tx timeout [ 928.969533][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.139591][T16265] bridge_slave_0: entered allmulticast mode [ 929.161367][T16265] bridge_slave_0: entered promiscuous mode [ 929.172735][ T4804] bridge_slave_1: left allmulticast mode [ 929.178865][ T4804] bridge_slave_1: left promiscuous mode [ 929.201401][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.235629][ T4804] bridge_slave_0: left allmulticast mode [ 929.255244][ T4804] bridge_slave_0: left promiscuous mode [ 929.263877][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.011935][ T5823] Bluetooth: hci7: command tx timeout [ 931.174367][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.391502][ T30] audit: type=1400 audit(1194.362:1465): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 931.474902][ T4804] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 932.265328][ T4804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.518638][ T4804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.687025][ T4804] bond0 (unregistering): Released all slaves [ 932.986648][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 933.091460][ T5823] Bluetooth: hci7: command tx timeout [ 933.688604][ T4804] bond1 (unregistering): Released all slaves [ 933.749721][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.862369][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.931078][T16265] bridge_slave_1: entered allmulticast mode [ 933.965944][T16265] bridge_slave_1: entered promiscuous mode [ 933.991509][T14968] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 934.211493][T14968] usb 3-1: Using ep0 maxpacket: 8 [ 934.439769][T14968] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 934.480445][T14968] usb 3-1: config 179 has no interface number 0 [ 934.491587][T14968] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 934.528594][T14968] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 934.533480][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.608888][T14968] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 934.649489][T14968] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 934.680631][T14968] usb 3-1: config 179 interface 65 has no altsetting 0 [ 934.687750][T14968] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 934.701592][T14968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.905294][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.974117][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2770'. [ 935.401487][T16265] team0: Port device team_slave_0 added [ 935.443635][T16265] team0: Port device team_slave_1 added [ 935.607072][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.629962][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.718699][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.792529][T16366] siw: device registration error -23 [ 935.816711][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.828258][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.884142][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.048684][T16265] hsr_slave_0: entered promiscuous mode [ 936.057654][T16265] hsr_slave_1: entered promiscuous mode [ 936.076065][T16265] debugfs: 'hsr0' already exists in 'hsr' [ 936.093970][T16265] Cannot create hsr debugfs directory [ 936.378941][T14968] usb 3-1: USB disconnect, device number 101 [ 936.726464][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.742979][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.809224][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.847149][ T4804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.888865][ T4804] batman_adv: batadv0: Interface deactivated: macvlan2 [ 936.898944][ T4804] batman_adv: batadv0: Removing interface: macvlan2 [ 936.916329][ T4804] batman_adv: batadv0: Removing interface: dummy0 [ 936.987568][ T4804] batadv_slave_1: left promiscuous mode [ 937.009304][ T4804] veth1_macvtap: left promiscuous mode [ 937.025751][ T4804] veth0_macvtap: left promiscuous mode [ 937.051508][ T4804] veth1_vlan: left promiscuous mode [ 937.072018][ T4804] veth0_vlan: left promiscuous mode [ 940.764739][ T4804] team0 (unregistering): Port device team_slave_1 removed [ 940.945594][ T4804] team0 (unregistering): Port device team_slave_0 removed [ 942.810649][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2782'. [ 943.231208][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.239335][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.261319][T14968] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 943.411491][T14968] usb 6-1: Using ep0 maxpacket: 8 [ 943.418661][T14968] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 943.427749][T14968] usb 6-1: config 179 has no interface number 0 [ 943.438393][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 943.457063][T16403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.467397][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 943.506842][T16403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.524636][T14968] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26232, setting to 64 [ 943.567430][T14968] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 943.615516][T14968] usb 6-1: config 179 interface 65 has no altsetting 0 [ 943.654491][T14968] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 943.683509][T14968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.202961][ T80] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.256639][ T80] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.335375][ T80] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.365263][ T80] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.865771][T16265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.309940][T16265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.324564][T16265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.337281][T16265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 945.777804][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.183810][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.235357][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.242462][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.286661][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.293783][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.360425][ T5930] usb 6-1: USB disconnect, device number 17 [ 946.519139][T16265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 947.222775][T16265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.259892][ T31] INFO: task syz.1.2313:14647 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 947.349051][ T30] audit: type=1400 audit(1210.282:1466): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[5181]" dev="pipefs" ino=5181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 947.486300][ T31] Tainted: G L syzkaller #0 [ 947.613217][ T31] Blocked by coredump. [ 947.617962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.752016][ T31] task:syz.1.2313 state:D stack:26792 pid:14647 tgid:14645 ppid:5813 task_flags:0x400548 flags:0x00080006 [ 947.872337][ T31] Call Trace: [ 947.875647][ T31] [ 947.879346][ T31] ? __schedule+0x10b9/0x6150 [ 947.921442][ T31] __schedule+0x1139/0x6150 [ 947.926270][ T31] ? __lock_acquire+0x436/0x2890 [ 947.950802][ T31] ? __pfx___schedule+0x10/0x10 [ 947.958151][ T31] ? find_held_lock+0x2b/0x80 [ 947.982372][ T31] ? schedule+0x2d7/0x3a0 [ 947.987026][ T31] schedule+0xe7/0x3a0 [ 948.011537][ T31] schedule_timeout+0x257/0x290 [ 948.016512][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 948.022138][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.026979][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 948.037034][ T31] __wait_for_common+0x2fc/0x4e0 [ 948.042678][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 948.048223][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 948.054256][ T31] io_wq_put_and_exit+0x271/0x8a0 [ 948.059370][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 948.066347][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 948.072380][ T31] ? __pfx___might_resched+0x10/0x10 [ 948.077745][ T31] ? io_uring_del_tctx_node+0x27f/0x360 [ 948.083682][ T31] io_uring_clean_tctx+0x10d/0x190 [ 948.088939][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 948.094985][ T31] ? percpu_counter_add_batch+0x180/0x200 [ 948.100833][ T31] io_uring_cancel_generic+0x69c/0x9a0 [ 948.112318][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 948.118444][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 948.124957][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.129795][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 948.136225][ T31] do_exit+0x2ce/0x2bd0 [ 948.140465][ T31] ? __pfx___might_resched+0x10/0x10 [ 948.161329][ T31] ? __pfx_do_exit+0x10/0x10 [ 948.165925][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 948.170926][ T31] ? find_held_lock+0x2b/0x80 [ 948.191613][ T31] do_group_exit+0xd3/0x2a0 [ 948.196135][ T31] get_signal+0x2671/0x26d0 [ 948.200616][ T31] ? io_submit_sqes+0xca3/0x28e0 [ 948.231419][ T31] ? __pfx_get_signal+0x10/0x10 [ 948.236283][ T31] ? __lock_acquire+0x436/0x2890 [ 948.251555][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 948.257158][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 948.273059][ T31] ? find_held_lock+0x2b/0x80 [ 948.277748][ T31] ? __might_fault+0xe3/0x190 [ 948.284832][ T31] ? __might_fault+0xe3/0x190 [ 948.289502][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 948.311536][ T31] do_syscall_64+0x4ee/0xf80 [ 948.316172][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.322241][ T31] RIP: 0033:0x7f55f0b8f749 [ 948.326636][ T31] RSP: 002b:00007f55f1982038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 948.341685][ T31] RAX: 0000000000001000 RBX: 00007f55f0de5fa0 RCX: 00007f55f0b8f749 [ 948.351050][ T31] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000007 [ 948.362048][ T31] RBP: 00007f55f0c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 948.370020][ T31] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 948.392292][ T31] R13: 00007f55f0de6038 R14: 00007f55f0de5fa0 R15: 00007ffc6090cd48 [ 948.400290][ T31] [ 948.403587][ T31] [ 948.403587][ T31] Showing all locks held in the system: [ 948.421435][ T31] 1 lock held by khungtaskd/31: [ 948.426308][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 948.455147][ T31] 2 locks held by getty/5577: [ 948.459824][ T31] #0: ffff88803640e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 948.472045][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 948.491476][ T31] 1 lock held by iou-wrk-14647/14659: [ 948.496844][ T31] 1 lock held by iou-wrk-14647/14667: [ 948.502663][ T31] 1 lock held by iou-wrk-14647/14668: [ 948.508014][ T31] 1 lock held by syz-executor/16265: [ 948.522236][ T31] #0: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 948.532512][ T31] 1 lock held by syz.6.2786/16426: [ 948.537602][ T31] #0: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 948.590568][ T31] [ 948.593071][ T31] ============================================= [ 948.593071][ T31] [ 948.611409][ T31] NMI backtrace for cpu 0 [ 948.611430][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 948.611456][ T31] Tainted: [L]=SOFTLOCKUP [ 948.611463][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.611474][ T31] Call Trace: [ 948.611481][ T31] [ 948.611488][ T31] dump_stack_lvl+0x116/0x1f0 [ 948.611517][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 948.611548][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 948.611569][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 948.611612][ T31] sys_info+0x133/0x180 [ 948.611637][ T31] watchdog+0xe66/0x1180 [ 948.611661][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.611678][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.611695][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 948.611719][ T31] ? __kthread_parkme+0x19e/0x250 [ 948.611737][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.611756][ T31] kthread+0x3c5/0x780 [ 948.611776][ T31] ? __pfx_kthread+0x10/0x10 [ 948.611803][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.611819][ T31] ? __pfx_kthread+0x10/0x10 [ 948.611841][ T31] ret_from_fork+0x983/0xb10 [ 948.611861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 948.611882][ T31] ? __switch_to+0x7af/0x10d0 [ 948.611906][ T31] ? __pfx_kthread+0x10/0x10 [ 948.611927][ T31] ret_from_fork_asm+0x1a/0x30 [ 948.611965][ T31] [ 948.611974][ T31] Sending NMI from CPU 0 to CPUs 1: [ 948.751871][ C1] NMI backtrace for cpu 1 [ 948.751889][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.751908][ C1] Tainted: [L]=SOFTLOCKUP [ 948.751913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.751922][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 948.751944][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 948.751958][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 948.751976][ C1] RAX: 00000000045cec4f RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 948.751986][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 948.751995][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 948.752004][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 948.752013][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 948.752022][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 948.752036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.752046][ C1] CR2: 0000200000025000 CR3: 000000000e184000 CR4: 00000000003526f0 [ 948.752056][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000002 [ 948.752064][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 948.752073][ C1] Call Trace: [ 948.752078][ C1] [ 948.752083][ C1] default_idle+0x13/0x20 [ 948.752102][ C1] default_idle_call+0x6c/0xb0 [ 948.752120][ C1] do_idle+0x38d/0x510 [ 948.752143][ C1] ? __pfx_do_idle+0x10/0x10 [ 948.752164][ C1] cpu_startup_entry+0x4f/0x60 [ 948.752183][ C1] start_secondary+0x21d/0x2d0 [ 948.752197][ C1] ? __pfx_start_secondary+0x10/0x10 [ 948.752212][ C1] common_startup_64+0x13e/0x148 [ 948.752234][ C1] [ 949.368981][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 949.375865][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 949.386548][ T31] Tainted: [L]=SOFTLOCKUP [ 949.390869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.400927][ T31] Call Trace: [ 949.404206][ T31] [ 949.407130][ T31] dump_stack_lvl+0x3d/0x1f0 [ 949.411733][ T31] vpanic+0x640/0x6f0 [ 949.415713][ T31] panic+0xca/0xd0 [ 949.419433][ T31] ? __pfx_panic+0x10/0x10 [ 949.423831][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 949.429799][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 949.435943][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 949.442086][ T31] ? watchdog+0xe83/0x1180 [ 949.446486][ T31] ? watchdog+0xe76/0x1180 [ 949.450885][ T31] watchdog+0xe94/0x1180 [ 949.455115][ T31] ? rcu_is_watching+0x12/0xc0 [ 949.459862][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.464519][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 949.469702][ T31] ? __kthread_parkme+0x19e/0x250 [ 949.474712][ T31] ? __pfx_watchdog+0x10/0x10 [ 949.479375][ T31] kthread+0x3c5/0x780 [ 949.483430][ T31] ? __pfx_kthread+0x10/0x10 [ 949.488006][ T31] ? rcu_is_watching+0x12/0xc0 [ 949.492751][ T31] ? __pfx_kthread+0x10/0x10 [ 949.497324][ T31] ret_from_fork+0x983/0xb10 [ 949.501896][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 949.506993][ T31] ? __switch_to+0x7af/0x10d0 [ 949.511657][ T31] ? __pfx_kthread+0x10/0x10 [ 949.516248][ T31] ret_from_fork_asm+0x1a/0x30 [ 949.521012][ T31] [ 949.524285][ T31] Kernel Offset: disabled [ 949.528621][ T31] Rebooting in 86400 seconds..