last executing test programs: 6m47.785298227s ago: executing program 1 (id=1190): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) getpriority(0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 6m46.097431009s ago: executing program 1 (id=1191): syz_mount_image$fuse(0x0, 0x0, 0x11000a0, 0x0, 0xfe, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xc0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) 6m38.668199149s ago: executing program 1 (id=1202): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80078b, &(0x7f0000000080)={[], [{@pcr={'pcr', 0x3d, 0x9}}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x304) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_init(0x2, 0x80000) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r3, 0x186a0, 0x0) 6m37.448864749s ago: executing program 1 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket(0x18, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 6m35.858974428s ago: executing program 1 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x22) 6m31.65386459s ago: executing program 1 (id=1207): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000004c0)}, 0x0) 6m15.982622052s ago: executing program 32 (id=1207): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000004c0)}, 0x0) 5m56.090119368s ago: executing program 2 (id=1239): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) pipe(&(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m55.411677114s ago: executing program 2 (id=1240): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x60080004) 5m53.500031032s ago: executing program 2 (id=1242): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0f) getpriority(0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 5m52.229424013s ago: executing program 2 (id=1244): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x3, 0x4010, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="39669c4017bd180000000010000010010500010000020200001cc7480c0c8772bd910e297a700a0a000062039cc2fa21d10000483b4745655d3cfc2dd25c96e57b4c65ce70cb8d950a4927609985fb429820e4d8dbd88015e6c68a0d080fa4fdd34b7baebcaea1d56f6febfb854bf86264cb"], 0x18}, 0x0) 5m47.226644795s ago: executing program 2 (id=1251): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff0f) getpriority(0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cf", 0x2}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) 5m44.97285589s ago: executing program 2 (id=1255): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x2, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 5m29.762829693s ago: executing program 33 (id=1255): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x0, 0x2, 0x9, 0x4, 0x901, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x8007f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x102, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x2, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x3, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) 4m42.91121173s ago: executing program 3 (id=1308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xff}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000006, 0x1}, {@dev, 0x2}, {@dev}, {@remote}, {@empty, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff08}]}]}}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000380)='.\x00', 0xc68230e79ea42a21, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@bridge_getlink={0x20, 0x12, 0x0, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x41, 0x26508}}, 0x20}}, 0x0) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x1c, @void}, 0x10) 4m36.290409612s ago: executing program 3 (id=1312): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x60080004) recvmmsg(r4, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x25a5}], 0x1, 0x40002142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4m33.179938808s ago: executing program 3 (id=1314): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 4m31.588081237s ago: executing program 3 (id=1315): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) 4m31.199063427s ago: executing program 3 (id=1316): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002100), 0x103080, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594"], 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000002200)={&(0x7f0000002140)="269787f5cdd1a9c617549cbb963d9347133945a805117b3a225341a5ded48ee21582c13914cf146cd6c5cda9771157b35912b20a337e5d495f2df13ffca5a7dcc9740e682c62d8fa5d1fef20bd73824157963a", 0x53, &(0x7f00000021c0)=""/55, 0x37}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) 4m27.285045663s ago: executing program 3 (id=1322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0xffffd000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0xffffff8000100002) fanotify_init(0x2, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="f3af66b8010000000f01c12e670f01c3660fc77002f20f1c006766c74424006a0000006766c7442402f9ffffff6766c744240600000000670f011424660f38806600640fc7acae00ba4000ec0fa7c0"}], 0x1, 0x82, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4m10.527891893s ago: executing program 34 (id=1322): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0xffffd000) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0xffffff8000100002) fanotify_init(0x2, 0x80000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="f3af66b8010000000f01c12e670f01c3660fc77002f20f1c006766c74424006a0000006766c7442402f9ffffff6766c744240600000000670f011424660f38806600640fc7acae00ba4000ec0fa7c0"}], 0x1, 0x82, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m51.671101125s ago: executing program 4 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 2m45.626075553s ago: executing program 4 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a09040000000000000000020000033c000480380001800e000100696d6d65646961746500000024000280080001400000000108000140000000080a00014000000013080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100"], 0x90}}, 0x4000000) r3 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x1, 0xffffb313, 0x40, "1ae34e6566ff7b2afa55bcd8b1407958339f00", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xd, 0x13, "ccd800000000eeff00001000000000008000"}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2m44.278221456s ago: executing program 4 (id=1414): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 2m44.047501091s ago: executing program 4 (id=1415): socket$inet(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsmount(r5, 0x1, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000340)=@base={0x2, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m42.569374278s ago: executing program 4 (id=1417): openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) 2m38.82579258s ago: executing program 4 (id=1418): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002100), 0x103080, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594"], 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000002200)={&(0x7f0000002140)="269787f5cdd1a9c617549cbb963d9347133945a805117b3a225341a5ded48ee21582c13914cf146cd6c5cda9771157b35912b20a337e5d495f2df13ffca5a7dcc9740e682c62d8fa5d1fef20bd73824157963a", 0x53, &(0x7f00000021c0)=""/55, 0x37}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$hiddev(r4, &(0x7f0000002080)=""/103, 0x67) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f00000022c0)={0x80}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) 2m21.064527816s ago: executing program 35 (id=1418): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002100), 0x103080, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594"], 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f0000002200)={&(0x7f0000002140)="269787f5cdd1a9c617549cbb963d9347133945a805117b3a225341a5ded48ee21582c13914cf146cd6c5cda9771157b35912b20a337e5d495f2df13ffca5a7dcc9740e682c62d8fa5d1fef20bd73824157963a", 0x53, &(0x7f00000021c0)=""/55, 0x37}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x7e) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$hiddev(r4, &(0x7f0000002080)=""/103, 0x67) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f00000022c0)={0x80}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) 13.636943576s ago: executing program 6 (id=1625): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x2, 0x1, 0x3}}, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x6, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 11.491974979s ago: executing program 5 (id=1627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket(0x18, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 11.156284367s ago: executing program 0 (id=1629): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 11.03201774s ago: executing program 6 (id=1630): recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/147, 0x93}, {&(0x7f0000002340)=""/68, 0x44}], 0x2, &(0x7f00000027c0)=""/188, 0xbc}, 0x8}], 0x1, 0x60, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x0, 0xffed, 0xa001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3e) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x39) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 8.60046046s ago: executing program 0 (id=1631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket(0x18, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 8.382658375s ago: executing program 5 (id=1633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000002b00)={@multicast, @multicast, @void, {@generic={0x884c}}}, 0x0) 8.17499623s ago: executing program 0 (id=1634): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 8.106399512s ago: executing program 5 (id=1636): execveat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={[&(0x7f0000000280)='\xbb`\xbc\xa8\x92\xbb']}, 0x0, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x94d6, 0x1, 0x8000000, 0x28c}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r12, r10, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x72bc, 0x40, 0x2, 0x1f5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1887, 0x400, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x468b, 0x4, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af2, 0x400, 0x0, 0x20a, 0x0, r4}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r9, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000000180)) 7.102548977s ago: executing program 0 (id=1637): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x22, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000200)='./tracing\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r4, 0x0, 0x0, 0x10000) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x101080) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="9521fa897de87cb2e8b6be900f677ec28a2d2d844fd5b53bc434e7cb6dfbe5c2a396484fd0730578e1d3e6cc880b354965f9e72ca33545f75fdae7b416f66b95a016b49d94a2d4a8d55b8e472367b40a37a5a56ce5ea67d14f0a5c1621575fa4551cf96baa25c20406cb13126291fdb1", 0x70}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6.815281664s ago: executing program 5 (id=1638): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x2, 0x1, 0x3}}, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x6, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 4.327150805s ago: executing program 0 (id=1640): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 3.70712261s ago: executing program 5 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r3 = socket(0x18, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 3.208489342s ago: executing program 7 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 2.981901727s ago: executing program 6 (id=1644): syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000006, 0x1}, {@dev, 0x2}, {@dev}, {@remote}, {@empty, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff08}]}]}}}}}}}, 0x0) 2.799578142s ago: executing program 6 (id=1645): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 2.719639014s ago: executing program 7 (id=1646): execveat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={[&(0x7f0000000280)='\xbb`\xbc\xa8\x92\xbb']}, 0x0, 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x94d6, 0x1, 0x8000000, 0x28c}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0xc, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) 1.63587958s ago: executing program 6 (id=1647): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) pipe(&(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.476110364s ago: executing program 7 (id=1648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="068a61d9b4b11fd6e42c2ad6b4a648106035494bde9d8df20fec29315fc8a8d5401ff7d0541e39a97fbdb0cd0596a875ca29bd6764e7eabbb6a1139531a48dc397ce4ab229e1c785f1fa605cf7a8fd60eddcd9844ba7cd9ead2d78d64b984cd062b035620bdcb8941227b8f79f55137e2af79816d883df781b559b65af58680d878fd0f5188253a5d3", 0x89}, {&(0x7f0000000700)="b240347982018a58f92ecd89d3d51c29f1bc9f61f330fd3be8e4c25585c109981476ed10a582e56146bd545145d414b55136209c9db9f9a39bedb59b4bf999cac4cbea070ef87f5457e05cd1e7cf968325f1292fe8c64b423433c9c6f8efedd10c8fe40b9af4d4d7272ed1d1ce6d6153cc66b4c377ba8b4f84986884aed73d0e5dce61926fac393fbc81be3232da06fd23e5a474ca4fecb997", 0x99}, {&(0x7f0000000440)="c2b0b42802519bb1ba7cfba9b5020768245ee4f92c810fb17007724e335e3696b2ab190e2c7a5c0f3abe57985449e4b3eed41cbc96959c400b50b9d3acc6", 0x3e}, {&(0x7f0000000900)="8bf7f307acd35bb1679e934e41ee850447bef844a9", 0x15}], 0x4}}], 0x1, 0x4000840) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.405445566s ago: executing program 7 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/47, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 905.300258ms ago: executing program 7 (id=1650): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 843.96894ms ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket(0x18, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 241.374624ms ago: executing program 7 (id=1652): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x2, 0x1, 0x3}}, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x7) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x6, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 62.329049ms ago: executing program 5 (id=1653): syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x1, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr, {[@rr={0x7, 0x3, 0xff}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x4, [{@multicast1=0xe0000006, 0x1}, {@dev, 0x2}, {@dev}, {@remote}, {@empty, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff08}]}]}}}}}}}, 0x0) 0s ago: executing program 6 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 539.871024][ T9022] EXT4-fs (loop2): unsupported descriptor size 0 [ 539.892502][ T9024] syzkaller0: entered allmulticast mode [ 540.249004][ T9026] loop2: detected capacity change from 0 to 1024 [ 540.822690][ T28] audit: type=1800 audit(1788582726.717:439): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.971" name="addr_traddr" dev="configfs" ino=18325 res=0 errno=0 [ 541.699885][ T9029] nvmet: transport type 0 not supported [ 544.329176][ T28] audit: type=1800 audit(1788582729.157:440): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.981" name="addr_traddr" dev="configfs" ino=18361 res=0 errno=0 [ 544.838011][ T5819] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 544.859147][ T9045] nvmet: transport type 0 not supported [ 545.226685][ T5819] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 545.236760][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.307628][ T27] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 545.508320][ T5819] dln2 2-1:1.0: USB write failed: -110 [ 545.514175][ T5819] dln2 2-1:1.0: failed to initialize hardware [ 545.531478][ T27] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 545.541783][ T27] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 545.552451][ T27] usb 4-1: config 4 has no interface number 0 [ 545.559060][ T27] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.573172][ T5819] dln2: probe of 2-1:1.0 failed with error -110 [ 545.593094][ T27] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 545.630775][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.670125][ T27] usb 4-1: Product: syz [ 545.699792][ T27] usb 4-1: Manufacturer: syz [ 545.704423][ T27] usb 4-1: SerialNumber: syz [ 546.017938][ T27] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 546.058711][ T27] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 546.066816][ T27] dib0700: firmware download failed at 7 with -22 [ 546.118384][ T27] usb 4-1: USB disconnect, device number 19 [ 546.152791][ T9059] tipc: Resetting bearer [ 546.165200][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.241548][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.266455][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.295488][ T9062] tipc: Enabling of bearer rejected, already enabled [ 546.295828][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.318900][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 546.390496][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.472094][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.775665][ T9065] loop0: detected capacity change from 0 to 1024 [ 546.805893][ T9065] EXT4-fs: Ignoring removed oldalloc option [ 547.373279][ T9068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 548.244741][ T9065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.372156][ T27] usb 2-1: USB disconnect, device number 35 [ 548.452545][ T9065] EXT4-fs (loop0): unsupported descriptor size 0 [ 549.665731][ T9076] loop0: detected capacity change from 0 to 1024 [ 552.808425][ T9084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 553.349996][ T28] audit: type=1800 audit(1788582739.247:441): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.987" name="addr_traddr" dev="configfs" ino=19484 res=0 errno=0 [ 555.669886][ T9088] nvmet: transport type 0 not supported [ 556.032004][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 556.723875][ T9095] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 557.798585][ T9] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 557.863880][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 557.907825][ T9] usb 1-1: config 4 has no interface number 0 [ 557.914030][ T9] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.069239][ T9] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 558.116403][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.167571][ T9] usb 1-1: Product: syz [ 558.171824][ T9] usb 1-1: Manufacturer: syz [ 558.176468][ T9] usb 1-1: SerialNumber: syz [ 559.259549][ T9] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 559.295416][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 559.375313][ T9] dib0700: firmware download failed at 7 with -22 [ 559.427779][ T9] usb 1-1: USB disconnect, device number 22 [ 563.214355][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.220758][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.557873][ T9117] tipc: Resetting bearer [ 563.672658][ T9118] team0: Port device xfrm0 added [ 563.758026][ T9119] tipc: Enabling of bearer rejected, already enabled [ 564.133722][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 564.747426][ T28] audit: type=1800 audit(1788582750.637:442): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1004" name="addr_traddr" dev="configfs" ino=18999 res=0 errno=0 [ 567.220450][ T9127] nvmet: transport type 0 not supported [ 568.189692][ T9133] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 569.167633][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 569.243825][ T9138] loop0: detected capacity change from 0 to 1024 [ 569.272524][ T9138] EXT4-fs: Ignoring removed oldalloc option [ 569.298090][ T9138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.326122][ T9138] EXT4-fs (loop0): unsupported descriptor size 0 [ 569.360172][ T9] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 569.447848][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 569.518441][ T9] usb 4-1: config 4 has no interface number 0 [ 569.525020][ T9] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.547117][ T9] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 569.557489][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.565554][ T9] usb 4-1: Product: syz [ 569.577500][ T9] usb 4-1: Manufacturer: syz [ 569.587813][ T9] usb 4-1: SerialNumber: syz [ 569.619118][ T9139] loop0: detected capacity change from 0 to 1024 [ 569.861377][ T9] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 569.873930][ T9141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1002'. [ 569.884472][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 569.893134][ T9] dib0700: firmware download failed at 7 with -22 [ 569.911768][ T9] usb 4-1: USB disconnect, device number 20 [ 571.399518][ T9151] loop0: detected capacity change from 0 to 1024 [ 571.407552][ T9151] EXT4-fs: Ignoring removed oldalloc option [ 571.413587][ T9151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.509404][ T9151] EXT4-fs (loop0): unsupported descriptor size 0 [ 571.704276][ T9136] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 572.798912][ T9155] loop0: detected capacity change from 0 to 1024 [ 573.043317][ T9157] tipc: Resetting bearer [ 574.533356][ T9157] team0: Port device xfrm0 added [ 574.654797][ T9166] tipc: Enabling of bearer rejected, already enabled [ 575.058974][ T9170] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 575.119219][ T9170] syzkaller0: entered promiscuous mode [ 575.124816][ T9170] syzkaller0: entered allmulticast mode [ 575.916503][ T9175] loop1: detected capacity change from 0 to 1024 [ 575.972587][ T9175] EXT4-fs: Ignoring removed oldalloc option [ 576.051727][ T9175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.126116][ T9175] EXT4-fs (loop1): unsupported descriptor size 0 [ 576.177550][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 576.307604][ T5820] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 576.415448][ T9] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 576.510360][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 576.522553][ T9] usb 1-1: config 4 has no interface number 0 [ 576.529307][ T9] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.545702][ T9] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 576.555690][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.705253][ T9] usb 1-1: Product: syz [ 576.756199][ T9] usb 1-1: Manufacturer: syz [ 576.766842][ T5820] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 577.507525][ T9] usb 1-1: SerialNumber: syz [ 577.514588][ T5820] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 577.528340][ T5820] usb 4-1: config 4 has no interface number 0 [ 577.536295][ T5820] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.560947][ T9181] loop1: detected capacity change from 0 to 1024 [ 577.580461][ T5820] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 577.764716][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.774501][ T5820] usb 4-1: Product: syz [ 577.781237][ T5820] usb 4-1: Manufacturer: syz [ 577.788201][ T5820] usb 4-1: SerialNumber: syz [ 577.793026][ T9] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 577.818351][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 577.827924][ T9] dib0700: firmware download failed at 7 with -22 [ 577.839951][ T9] usb 1-1: USB disconnect, device number 23 [ 578.070672][ T5820] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 578.095645][ T5820] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 578.121719][ T5820] dib0700: firmware download failed at 7 with -22 [ 578.277677][ T5820] usb 4-1: USB disconnect, device number 21 [ 580.408692][ T9201] overlayfs: missing 'workdir' [ 583.146471][ T9208] loop1: detected capacity change from 0 to 1024 [ 583.218832][ T9208] EXT4-fs: Ignoring removed oldalloc option [ 583.224898][ T9208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.335549][ T9208] EXT4-fs (loop1): unsupported descriptor size 0 [ 585.326113][ T9218] loop3: detected capacity change from 0 to 512 [ 585.368590][ T9218] ext4: Unknown parameter 'pcr' [ 585.513952][ T9220] tipc: Resetting bearer [ 585.682224][ T9221] team0: Port device xfrm0 added [ 585.698452][ T9220] tipc: Enabling of bearer rejected, already enabled [ 585.847826][ T5820] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 586.049614][ T5820] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 587.511101][ T5820] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 587.617456][ T5820] usb 2-1: config 4 has no interface number 0 [ 587.623640][ T5820] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.236826][ T5820] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 589.269092][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.277245][ T5820] usb 2-1: Product: syz [ 589.317616][ T5820] usb 2-1: Manufacturer: syz [ 589.358190][ T5820] usb 2-1: can't set config #4, error -71 [ 589.388521][ T5820] usb 2-1: USB disconnect, device number 36 [ 593.101603][ T9256] loop3: detected capacity change from 0 to 1024 [ 593.138754][ T9256] EXT4-fs: Ignoring removed oldalloc option [ 593.144818][ T9256] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.949319][ T9259] overlayfs: missing 'workdir' [ 593.959963][ T9256] EXT4-fs (loop3): unsupported descriptor size 0 [ 599.036775][ T9285] loop1: detected capacity change from 0 to 1024 [ 599.044379][ T9285] EXT4-fs: Ignoring removed oldalloc option [ 599.052588][ T9285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.084069][ T9285] EXT4-fs (loop1): unsupported descriptor size 0 [ 599.970252][ T9284] loop1: detected capacity change from 0 to 1024 [ 601.504869][ T9293] loop2: detected capacity change from 0 to 1024 [ 601.518770][ T9293] EXT4-fs: Ignoring removed oldalloc option [ 601.524940][ T9293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.532956][ T9293] EXT4-fs (loop2): unsupported descriptor size 0 [ 601.727548][ T9293] loop2: detected capacity change from 0 to 1024 [ 601.768054][ T5765] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 601.998563][ T5765] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 602.022291][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.466477][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.477208][ T5765] dln2 4-1:1.0: USB write failed: -110 [ 602.497755][ T5765] dln2 4-1:1.0: failed to initialize hardware [ 602.517993][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.667965][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.683916][ T5765] dln2: probe of 4-1:1.0 failed with error -110 [ 602.719505][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.454344][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.513634][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.739908][ T7128] usb 4-1: USB disconnect, device number 22 [ 603.883726][ T9316] loop2: detected capacity change from 0 to 1024 [ 603.926984][ T9316] EXT4-fs: Ignoring removed oldalloc option [ 604.001872][ T9316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.933381][ T9316] EXT4-fs (loop2): unsupported descriptor size 0 [ 605.482588][ T9320] overlayfs: missing 'workdir' [ 605.545241][ T9316] loop2: detected capacity change from 0 to 1024 [ 607.184927][ T9331] loop2: detected capacity change from 0 to 1024 [ 607.224392][ T9331] EXT4-fs: Ignoring removed oldalloc option [ 607.274711][ T9331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 607.323299][ T9331] EXT4-fs (loop2): unsupported descriptor size 0 [ 607.490227][ T9331] loop2: detected capacity change from 0 to 1024 [ 612.878948][ T28] audit: type=1800 audit(1788582798.777:443): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1062" name="addr_traddr" dev="configfs" ino=20183 res=0 errno=0 [ 615.068465][ T9355] nvmet: transport type 0 not supported [ 616.498359][ T9361] loop2: detected capacity change from 0 to 1024 [ 616.531476][ T9361] EXT4-fs: Ignoring removed oldalloc option [ 616.539188][ T9360] overlayfs: missing 'lowerdir' [ 616.577536][ T9361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 616.601276][ T9361] EXT4-fs (loop2): unsupported descriptor size 0 [ 620.567456][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 620.613639][ T9379] loop1: detected capacity change from 0 to 1024 [ 620.638739][ T9379] EXT4-fs: Ignoring removed oldalloc option [ 620.644796][ T9379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 620.672502][ T9379] EXT4-fs (loop1): unsupported descriptor size 0 [ 620.782696][ T9] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 620.805900][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.945762][ T9379] loop1: detected capacity change from 0 to 1024 [ 621.799296][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.840546][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.924068][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.941049][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.969722][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.979422][ T9] dln2 4-1:1.0: USB write failed: -110 [ 621.985007][ T9] dln2 4-1:1.0: failed to initialize hardware [ 622.011438][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.024068][ T9] dln2: probe of 4-1:1.0 failed with error -110 [ 622.350681][ T5819] usb 4-1: USB disconnect, device number 23 [ 622.389054][ T9393] overlayfs: missing 'lowerdir' [ 624.878288][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.884632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.957543][ T7128] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 625.077935][ T28] audit: type=1800 audit(1788582810.977:444): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1086" name="addr_traddr" dev="configfs" ino=20312 res=0 errno=0 [ 625.614707][ T7128] usb 3-1: device descriptor read/all, error -71 [ 625.989108][ T9401] nvmet: transport type 0 not supported [ 627.966283][ T7128] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 628.337570][ T7128] usb 3-1: Using ep0 maxpacket: 16 [ 628.373998][ T7128] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 628.409795][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.448805][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.491035][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.525842][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.592090][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.633990][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.662073][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.710890][ T7128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.734805][ T9415] loop1: detected capacity change from 0 to 1024 [ 628.753754][ T7128] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 628.774402][ T9415] EXT4-fs: Ignoring removed oldalloc option [ 628.781029][ T7128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 628.794979][ T9415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 628.801776][ T7128] usb 3-1: SerialNumber: syz [ 628.812687][ T9415] EXT4-fs (loop1): unsupported descriptor size 0 [ 628.830374][ T7128] usb 3-1: config 0 descriptor?? [ 628.866064][ T7128] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 629.288466][ T9419] overlayfs: missing 'lowerdir' [ 629.626055][ T5127] bcm5974 3-1:0.0: could not read from device [ 629.807791][ T5127] bcm5974 3-1:0.0: could not read from device [ 630.427598][ T27] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 630.642532][ T27] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 630.692394][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.157600][ T5819] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 631.184000][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.200240][ T27] dln2 2-1:1.0: USB write failed: -110 [ 631.212317][ T5127] bcm5974 3-1:0.0: could not read from device [ 631.217804][ T7128] usb 3-1: USB disconnect, device number 22 [ 631.243711][ T27] dln2 2-1:1.0: failed to initialize hardware [ 631.245843][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.272278][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.290087][ T5127] bcm5974 3-1:0.0: could not read from device [ 631.296830][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.305661][ T27] dln2: probe of 2-1:1.0 failed with error -110 [ 631.317590][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.381892][ T28] audit: type=1800 audit(1788582817.277:445): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1098" name="addr_traddr" dev="configfs" ino=20438 res=0 errno=0 [ 631.429050][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.496123][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.554204][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.728765][ T5819] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.882140][ T5819] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.067894][ T5765] usb 2-1: USB disconnect, device number 37 [ 632.083801][ T5819] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 632.101009][ T9438] nvmet: transport type 0 not supported [ 632.129665][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.388399][ T9448] loop0: detected capacity change from 0 to 1024 [ 632.396577][ T9448] EXT4-fs: Ignoring removed oldalloc option [ 632.432985][ T9448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.459586][ T9448] EXT4-fs (loop0): unsupported descriptor size 0 [ 633.369705][ T9448] loop0: detected capacity change from 0 to 1024 [ 633.799671][ T9458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 633.954371][ T9458] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 634.205807][ T5784] usb 4-1: USB disconnect, device number 24 [ 634.911528][ T9462] syz.3.1105 uses obsolete (PF_INET,SOCK_PACKET) [ 635.657618][ T7128] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 635.680824][ T28] audit: type=1800 audit(1788582821.577:446): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1108" name="addr_traddr" dev="configfs" ino=20716 res=0 errno=0 [ 638.727525][ T28] audit: type=1800 audit(1788582822.637:447): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1109" name="addr_traddr" dev="configfs" ino=20729 res=0 errno=0 [ 638.915884][ T9469] nvmet: transport type 0 not supported [ 639.296964][ T9474] nvmet: transport type 0 not supported [ 640.747707][ T5839] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 641.874434][ T5839] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 641.934530][ T9507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 642.355597][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.393164][ T9507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 642.829971][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.843512][ T5839] dln2 1-1:1.0: USB write failed: -110 [ 642.854123][ T5839] dln2 1-1:1.0: failed to initialize hardware [ 642.878600][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.902651][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.914572][ T5839] dln2: probe of 1-1:1.0 failed with error -110 [ 642.930086][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.992644][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.014640][ T9513] input: syz1 as /devices/virtual/input/input12 [ 643.038264][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.276682][ T5819] usb 1-1: USB disconnect, device number 24 [ 644.603014][ T9529] loop1: detected capacity change from 0 to 512 [ 644.682007][ T9529] ext4: Unknown parameter 'pcr' [ 644.682075][ T28] audit: type=1800 audit(1788582830.577:448): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1121" name="addr_traddr" dev="configfs" ino=21716 res=0 errno=0 [ 647.055659][ T9530] nvmet: transport type 0 not supported [ 648.394320][ T9538] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 648.482490][ T9538] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 649.653945][ T9543] input: syz1 as /devices/virtual/input/input13 [ 649.779466][ T9545] loop0: detected capacity change from 0 to 1024 [ 649.796483][ T9545] EXT4-fs: Ignoring removed oldalloc option [ 649.826874][ T9545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 649.871330][ T9545] EXT4-fs (loop0): unsupported descriptor size 0 [ 649.966906][ T9545] loop0: detected capacity change from 0 to 1024 [ 650.148930][ T5819] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 650.343214][ T5819] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 650.363531][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.647680][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 650.803884][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.808813][ T5819] dln2 4-1:1.0: USB write failed: -110 [ 650.819128][ T5819] dln2 4-1:1.0: failed to initialize hardware [ 650.825966][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.837177][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.846485][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.857452][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 650.859424][ T5819] dln2: probe of 4-1:1.0 failed with error -110 [ 650.872334][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.881896][ T9] usb 2-1: config 0 has no interface number 0 [ 650.888280][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.889250][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.907079][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.919480][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.931377][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 650.946392][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.959045][ T9] usb 2-1: config 0 descriptor?? [ 651.148753][ T5784] usb 4-1: USB disconnect, device number 25 [ 651.190335][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802f74ec00: rx timeout, send abort [ 651.250273][ T9558] loop0: detected capacity change from 0 to 512 [ 651.258001][ T9558] ext4: Unknown parameter 'pcr' [ 651.585530][ T9] uclogic 0003:28BD:0071.0001: pen parameters not found [ 652.288712][ T9] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 652.306522][ T9] usb 2-1: USB disconnect, device number 38 [ 652.348784][ T28] audit: type=1800 audit(1788582838.227:449): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1133" name="addr_traddr" dev="configfs" ino=20974 res=0 errno=0 [ 653.039532][ T9563] nvmet: transport type 0 not supported [ 655.819277][ T9579] input: syz1 as /devices/virtual/input/input14 [ 656.106379][ T9581] loop0: detected capacity change from 0 to 1024 [ 656.121958][ T9583] FAULT_INJECTION: forcing a failure. [ 656.121958][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 656.167699][ T9581] EXT4-fs: Ignoring removed oldalloc option [ 656.173772][ T9581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 656.174926][ T9583] CPU: 1 PID: 9583 Comm: syz.1.1140 Not tainted syzkaller #0 [ 656.187780][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.197867][ T9583] Call Trace: [ 656.201151][ T9583] [ 656.204085][ T9583] dump_stack_lvl+0x18c/0x250 [ 656.208776][ T9583] ? show_regs_print_info+0x20/0x20 [ 656.213980][ T9583] ? load_image+0x420/0x420 [ 656.218496][ T9583] ? __might_sleep+0xe0/0xe0 [ 656.223093][ T9583] ? __lock_acquire+0x7d80/0x7d80 [ 656.228145][ T9583] should_fail_ex+0x394/0x4c0 [ 656.232881][ T9583] should_failslab+0x9/0x20 [ 656.237434][ T9583] slab_pre_alloc_hook+0x59/0x300 [ 656.242502][ T9583] ? vmci_ctx_create+0xb8/0x630 [ 656.247385][ T9583] __kmem_cache_alloc_node+0x53/0x250 [ 656.252803][ T9583] ? vmci_host_unlocked_ioctl+0xcba/0x27d0 [ 656.258631][ T9583] ? vmci_ctx_create+0xb8/0x630 [ 656.263523][ T9583] kmalloc_trace+0x2a/0xe0 [ 656.267957][ T9583] vmci_ctx_create+0xb8/0x630 [ 656.272648][ T9583] ? __might_fault+0xc6/0x120 [ 656.277360][ T9583] vmci_host_unlocked_ioctl+0x1bc1/0x27d0 [ 656.283116][ T9583] ? mark_lock+0x94/0x320 [ 656.287471][ T9583] ? vmci_host_poll+0x1f0/0x1f0 [ 656.292347][ T9583] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 656.298339][ T9583] ? do_vfs_ioctl+0x156c/0x1cc0 [ 656.303206][ T9583] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 656.308851][ T9583] ? tomoyo_path_number_perm+0x217/0x5e0 [ 656.314514][ T9583] ? __lock_acquire+0x7d80/0x7d80 [ 656.319559][ T9583] ? slab_free_freelist_hook+0x130/0x1a0 [ 656.325201][ T9583] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 656.330851][ T9583] ? __kmem_cache_free+0xba/0x1f0 [ 656.335898][ T9583] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 656.341548][ T9583] ? tomoyo_path_number_perm+0x217/0x5e0 [ 656.347199][ T9583] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 656.352712][ T9583] ? __fget_files+0x28/0x460 [ 656.357349][ T9583] ? bpf_lsm_file_ioctl+0x9/0x10 [ 656.362321][ T9583] ? security_file_ioctl+0x80/0xa0 [ 656.367477][ T9583] ? vmci_host_poll+0x1f0/0x1f0 [ 656.372339][ T9583] __se_sys_ioctl+0xfd/0x170 [ 656.376965][ T9583] do_syscall_64+0x55/0xb0 [ 656.381393][ T9583] ? clear_bhb_loop+0x40/0x90 [ 656.386081][ T9583] ? clear_bhb_loop+0x40/0x90 [ 656.390772][ T9583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.396682][ T9583] RIP: 0033:0x7f2aa539e159 [ 656.401109][ T9583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.420723][ T9583] RSP: 002b:00007f2aa61d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.429158][ T9583] RAX: ffffffffffffffda RBX: 00007f2aa5625fa0 RCX: 00007f2aa539e159 [ 656.437157][ T9583] RDX: 0000200000000100 RSI: 00000000000007a0 RDI: 0000000000000007 [ 656.445145][ T9583] RBP: 00007f2aa5435024 R08: 0000000000000000 R09: 0000000000000000 [ 656.453134][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.461127][ T9583] R13: 00007f2aa5626038 R14: 00007f2aa5625fa0 R15: 00007fff9cab9448 [ 656.469130][ T9583] [ 656.488418][ T9583] Failed to allocate memory for VMCI context [ 656.509393][ T9581] EXT4-fs (loop0): unsupported descriptor size 0 [ 656.567800][ T9581] loop0: detected capacity change from 0 to 1024 [ 657.067419][ T28] audit: type=1800 audit(1788582842.807:450): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1141" name="addr_traddr" dev="configfs" ino=21039 res=0 errno=0 [ 659.099357][ T9594] loop3: detected capacity change from 0 to 512 [ 659.107035][ T9594] ext4: Unknown parameter 'pcr' [ 659.195104][ T9587] nvmet: transport type 0 not supported [ 659.234524][ T9487] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 659.263167][ T28] audit: type=1800 audit(1788582845.147:451): pid=9595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1143" name="addr_traddr" dev="configfs" ino=21890 res=0 errno=0 [ 663.722701][ T28] audit: type=1800 audit(1788582849.617:452): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1146" name="addr_traddr" dev="configfs" ino=21076 res=0 errno=0 [ 664.611194][ T9609] nvmet: transport type 0 not supported [ 664.785378][ T9614] loop2: detected capacity change from 0 to 1024 [ 666.330494][ T9614] EXT4-fs: Ignoring removed oldalloc option [ 666.336552][ T9614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 666.361667][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1150'. [ 666.374302][ T9620] team0: No ports can be present during mode change [ 666.435679][ T9614] EXT4-fs (loop2): unsupported descriptor size 0 [ 666.532896][ T9614] loop2: detected capacity change from 0 to 1024 [ 666.825680][ T28] audit: type=1800 audit(1788582852.717:453): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1153" name="addr_traddr" dev="configfs" ino=21942 res=0 errno=0 [ 667.729701][ T9623] nvmet: transport type 0 not supported [ 670.277432][ T1190] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 670.381513][ T9636] loop1: detected capacity change from 0 to 512 [ 670.411556][ T9636] ext4: Unknown parameter 'pcr' [ 670.498387][ T1190] usb 1-1: Using ep0 maxpacket: 16 [ 670.527873][ T1190] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 670.589858][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.659133][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.724530][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.551655][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.569355][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.588794][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.601043][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.619939][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.639052][ T1190] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 671.657432][ T1190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 671.677628][ T1190] usb 1-1: SerialNumber: syz [ 671.710645][ T1190] usb 1-1: config 0 descriptor?? [ 671.748941][ T1190] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 671.963310][ T9633] input: syz1 as /devices/virtual/input/input16 [ 672.288457][ T5127] bcm5974 1-1:0.0: could not read from device [ 672.301569][ T5784] usb 1-1: USB disconnect, device number 25 [ 672.315107][ T5127] bcm5974 1-1:0.0: could not read from device [ 672.324833][ T9490] bcm5974 1-1:0.0: could not read from device [ 675.071193][ T28] audit: type=1800 audit(1788582860.947:454): pid=9665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1164" name="addr_traddr" dev="configfs" ino=21184 res=0 errno=0 [ 675.517174][ T9664] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 675.659802][ T9668] syzkaller0: entered promiscuous mode [ 675.733686][ T9668] syzkaller0: entered allmulticast mode [ 676.190065][ T9665] nvmet: transport type 0 not supported [ 676.304035][ T9670] loop2: detected capacity change from 0 to 512 [ 676.311746][ T9670] ext4: Unknown parameter 'pcr' [ 676.366791][ T9504] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 677.611222][ T9680] loop1: detected capacity change from 0 to 1024 [ 677.638565][ T9680] EXT4-fs: Ignoring removed oldalloc option [ 677.667698][ T9680] EXT4-fs: Ignoring removed nomblk_io_submit option [ 677.698115][ T9680] EXT4-fs (loop1): unsupported descriptor size 0 [ 677.748596][ T9680] loop1: detected capacity change from 0 to 1024 [ 679.479719][ T5819] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 679.662818][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'. [ 679.676349][ T9689] team0: Unable to change to the same mode the team is in [ 679.703105][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 679.723453][ T5819] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 679.769066][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.798188][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.810955][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.833607][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.865781][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.897890][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.920612][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.938941][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.951979][ T5819] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 679.967424][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 679.997808][ T5819] usb 3-1: SerialNumber: syz [ 680.023727][ T5819] usb 3-1: config 0 descriptor?? [ 680.052905][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 680.319027][ T28] audit: type=1800 audit(1788582866.217:455): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1174" name="addr_traddr" dev="configfs" ino=22178 res=0 errno=0 [ 680.469800][ T9682] input: syz1 as /devices/virtual/input/input18 [ 680.950658][ T5127] bcm5974 3-1:0.0: could not read from device [ 681.062656][ T5127] bcm5974 3-1:0.0: could not read from device [ 681.266032][ T5127] bcm5974 3-1:0.0: could not read from device [ 681.279058][ T9696] nvmet: transport type 0 not supported [ 681.289167][ T5819] usb 3-1: USB disconnect, device number 24 [ 681.365901][ T5127] bcm5974 3-1:0.0: could not read from device [ 681.408802][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801d7cf000: rx timeout, send abort [ 681.438791][ T9700] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 681.448616][ T9700] syzkaller0: entered promiscuous mode [ 681.455072][ T9700] syzkaller0: entered allmulticast mode [ 681.723333][ T9704] loop2: detected capacity change from 0 to 512 [ 681.738758][ T9704] ext4: Unknown parameter 'pcr' [ 682.167927][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 682.179483][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 682.188917][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 682.200002][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 684.925806][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1180'. [ 684.964196][ T9721] team0: Unable to change to the same mode the team is in [ 685.136820][ T28] audit: type=1800 audit(1788582871.027:456): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1181" name="addr_traddr" dev="configfs" ino=22243 res=0 errno=0 [ 685.870409][ T9725] nvmet: transport type 0 not supported [ 686.091157][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.097599][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.210645][ T28] audit: type=1800 audit(1788582871.957:457): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1183" name="addr_traddr" dev="configfs" ino=21356 res=0 errno=0 [ 688.350297][ T9731] nvmet: transport type 0 not supported [ 688.493891][ T9740] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 688.505027][ T9740] syzkaller0: entered promiscuous mode [ 688.511170][ T9740] syzkaller0: entered allmulticast mode [ 688.535456][ T8607] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 688.718348][ T8607] usb 2-1: Using ep0 maxpacket: 16 [ 688.727770][ T8607] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 688.749260][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.764976][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.788807][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.800838][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.819346][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.838948][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.858889][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.871630][ T8607] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.889342][ T8607] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 688.907392][ T8607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 688.915548][ T8607] usb 2-1: SerialNumber: syz [ 688.940503][ T8607] usb 2-1: config 0 descriptor?? [ 688.996000][ T8607] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 689.258669][ T9736] input: syz1 as /devices/virtual/input/input20 [ 689.384838][ T5127] bcm5974 2-1:0.0: could not read from device [ 689.643058][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888030332c00: rx timeout, send abort [ 689.661378][ T5127] bcm5974 2-1:0.0: could not read from device [ 690.136486][ T8607] usb 2-1: USB disconnect, device number 39 [ 690.150412][ T5127] bcm5974 2-1:0.0: could not read from device [ 690.557470][ T9753] loop2: detected capacity change from 0 to 512 [ 690.578716][ T9753] ext4: Unknown parameter 'pcr' [ 693.280038][ T28] audit: type=1800 audit(1788582879.157:458): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1192" name="addr_traddr" dev="configfs" ino=22362 res=0 errno=0 [ 693.670014][ T9766] nvmet: transport type 0 not supported [ 693.936711][ T28] audit: type=1800 audit(1788582879.827:459): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1194" name="addr_traddr" dev="configfs" ino=21438 res=0 errno=0 [ 695.439595][ T9774] nvmet: transport type 0 not supported [ 695.774846][ T9780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 696.825988][ T9783] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 696.859313][ T9783] syzkaller0: entered promiscuous mode [ 696.864858][ T9783] syzkaller0: entered allmulticast mode [ 699.485652][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 699.503545][ T9794] team0: No ports can be present during mode change [ 699.639914][ T9796] loop1: detected capacity change from 0 to 512 [ 699.672129][ T9796] ext4: Unknown parameter 'pcr' [ 700.995693][ T28] audit: type=1800 audit(1788582886.887:460): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1203" name="addr_traddr" dev="configfs" ino=22449 res=0 errno=0 [ 702.030366][ T9808] nvmet: transport type 0 not supported [ 702.179067][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880245b3400: rx timeout, send abort [ 702.190432][ T28] audit: type=1800 audit(1788582888.067:461): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1204" name="addr_traddr" dev="configfs" ino=22564 res=0 errno=0 [ 702.869668][ T9814] nvmet: transport type 0 not supported [ 705.253894][ T9841] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 708.708795][ T9855] loop3: detected capacity change from 0 to 512 [ 708.724819][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'. [ 708.735362][ T9855] ext4: Unknown parameter 'pcr' [ 708.763064][ T9856] team0: Unable to change to the same mode the team is in [ 710.668305][ T28] audit: type=1800 audit(1788582896.567:462): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1213" name="addr_traddr" dev="configfs" ino=22669 res=0 errno=0 [ 713.046912][ T9868] nvmet: transport type 0 not supported [ 713.492097][ T9875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 714.624634][ T28] audit: type=1800 audit(1788582900.517:463): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1216" name="addr_traddr" dev="configfs" ino=23584 res=0 errno=0 [ 716.746176][ T9880] nvmet: transport type 0 not supported [ 718.173372][ T9885] syzkaller0: entered promiscuous mode [ 718.208248][ T9885] syzkaller0: entered allmulticast mode [ 723.212064][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.223973][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.233475][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.244093][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.253000][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 723.263430][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 725.574967][ T5783] Bluetooth: hci4: command tx timeout [ 727.108418][ T28] audit: type=1800 audit(1788582913.007:464): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1224" name="addr_traddr" dev="configfs" ino=23676 res=0 errno=0 [ 727.610204][ T5783] Bluetooth: hci4: command tx timeout [ 727.714165][ T9928] nvmet: transport type 0 not supported [ 727.927028][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 727.936923][ T9911] team0: No ports can be present during mode change [ 729.687924][ T5783] Bluetooth: hci4: command tx timeout [ 729.803688][ T28] audit: type=1800 audit(1788582915.697:465): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1226" name="addr_traddr" dev="configfs" ino=23717 res=0 errno=0 [ 731.209363][ T9942] nvmet: transport type 0 not supported [ 732.759997][ T5783] Bluetooth: hci4: command tx timeout [ 735.024543][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 735.342345][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.389884][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.398265][ T9915] bridge_slave_0: entered allmulticast mode [ 735.405944][ T9915] bridge_slave_0: entered promiscuous mode [ 735.417723][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.425076][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.445874][ T9915] bridge_slave_1: entered allmulticast mode [ 735.460269][ T9915] bridge_slave_1: entered promiscuous mode [ 735.533624][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.566728][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.674693][ T9915] team0: Port device team_slave_0 added [ 735.685128][ T9915] team0: Port device team_slave_1 added [ 735.745266][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.787535][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.820668][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.843531][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.855484][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 735.910266][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.157008][ T9915] hsr_slave_0: entered promiscuous mode [ 736.171345][ T9915] hsr_slave_1: entered promiscuous mode [ 736.196481][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.204431][ T9915] Cannot create hsr debugfs directory [ 736.377750][ T5818] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 736.548395][ T5818] usb 1-1: device descriptor read/64, error -71 [ 737.210065][ T9915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 737.259211][ T9915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 737.301311][ T9915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 737.334660][ T9915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 737.353193][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1233'. [ 737.375680][ T9974] team0: No ports can be present during mode change [ 737.402447][ T5818] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 738.684017][ T5818] usb 1-1: device descriptor read/64, error -71 [ 738.718089][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.786345][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.829677][ T5818] usb usb1-port1: attempt power cycle [ 738.837682][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.844845][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.910716][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.917979][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.107052][ T28] audit: type=1800 audit(1788582925.377:466): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1237" name="addr_traddr" dev="configfs" ino=24019 res=0 errno=0 [ 741.687438][ T9989] nvmet: transport type 0 not supported [ 741.765387][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.861328][ T9915] veth0_vlan: entered promiscuous mode [ 742.893538][ T9915] veth1_vlan: entered promiscuous mode [ 743.041432][ T9915] veth0_macvtap: entered promiscuous mode [ 743.048048][T10012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 743.097211][ T9915] veth1_macvtap: entered promiscuous mode [ 744.593391][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 744.761056][T10020] team0: Unable to change to the same mode the team is in [ 744.811587][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.036179][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.092365][ T9915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.162939][ T9915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.389708][ T9915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.690084][ T9915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.137461][ T7128] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 746.223642][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.278581][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.317589][ T7128] usb 1-1: device descriptor read/64, error -71 [ 746.518593][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.554337][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.597491][ T7128] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 746.952666][ T28] audit: type=1800 audit(1788582932.597:467): pid=10033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1245" name="addr_traddr" dev="configfs" ino=24310 res=0 errno=0 [ 747.310402][ T7128] usb 1-1: device descriptor read/64, error -71 [ 748.084820][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.101985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.987725][ T7128] usb usb1-port1: attempt power cycle [ 749.048111][T10033] nvmet: transport type 0 not supported [ 749.269946][T10038] loop4: detected capacity change from 0 to 512 [ 749.322586][T10038] ext4: Unknown parameter 'pcr' [ 752.985798][T10063] loop0: detected capacity change from 0 to 1024 [ 753.016789][T10063] EXT4-fs: Ignoring removed oldalloc option [ 753.087075][T10063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 753.163994][T10063] EXT4-fs (loop0): unsupported descriptor size 0 [ 753.354812][ T28] audit: type=1800 audit(1788582939.247:468): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1254" name="addr_traddr" dev="configfs" ino=23378 res=0 errno=0 [ 755.448489][T10072] loop0: detected capacity change from 0 to 1024 [ 756.149096][T10068] nvmet: transport type 0 not supported [ 756.455960][T10079] loop0: detected capacity change from 0 to 512 [ 756.503821][T10079] ext4: Unknown parameter 'pcr' [ 760.879223][T10101] loop0: detected capacity change from 0 to 1024 [ 760.923221][T10101] EXT4-fs: Ignoring removed oldalloc option [ 760.965900][T10101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 761.082069][T10101] EXT4-fs (loop0): unsupported descriptor size 0 [ 762.491933][ T28] audit: type=1800 audit(1788582948.387:469): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1266" name="addr_traddr" dev="configfs" ino=23463 res=0 errno=0 [ 765.337491][ T27] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 765.387456][ T5839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 765.567829][ T27] usb 3-1: device descriptor read/64, error -71 [ 765.678438][ T5839] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 765.707414][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.867705][ T27] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 766.097419][ T27] usb 3-1: device descriptor read/64, error -71 [ 766.251504][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.260207][ T5839] dln2 5-1:1.0: USB write failed: -110 [ 766.265739][ T5839] dln2 5-1:1.0: failed to initialize hardware [ 766.306539][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.315546][ T27] usb usb3-port1: attempt power cycle [ 766.727474][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 766.808983][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.817902][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.827964][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.837016][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.846774][ T27] usb 3-1: device descriptor read/8, error -71 [ 766.871456][ T5839] dln2: probe of 5-1:1.0 failed with error -110 [ 767.053514][ T5784] usb 5-1: USB disconnect, device number 2 [ 767.150902][ T27] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 767.200250][T10125] loop0: detected capacity change from 0 to 512 [ 767.210273][ T27] usb 3-1: device descriptor read/8, error -71 [ 767.238267][T10125] ext4: Unknown parameter 'pcr' [ 767.306841][ T9907] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.332394][ T27] usb usb3-port1: unable to enumerate USB device [ 771.840089][T10145] loop0: detected capacity change from 0 to 1024 [ 771.881364][T10145] EXT4-fs: Ignoring removed oldalloc option [ 771.916291][T10145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 772.009913][T10145] EXT4-fs (loop0): unsupported descriptor size 0 [ 774.217877][ T28] audit: type=1800 audit(1788582960.117:470): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1276" name="addr_traddr" dev="configfs" ino=24637 res=0 errno=0 [ 774.573699][T10146] loop0: detected capacity change from 0 to 1024 [ 776.942087][T10156] loop3: detected capacity change from 0 to 512 [ 777.013219][T10156] ext4: Unknown parameter 'pcr' [ 778.070476][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.084046][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.096623][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.134445][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.153982][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 778.163425][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 778.678399][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.010596][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.330622][ T5783] Bluetooth: hci1: command tx timeout [ 780.443641][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.686951][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.962184][T10158] chnl_net:caif_netlink_parms(): no params data found [ 782.179325][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.188619][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.196019][T10158] bridge_slave_0: entered allmulticast mode [ 782.204459][T10158] bridge_slave_0: entered promiscuous mode [ 782.215909][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.233612][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.258086][T10158] bridge_slave_1: entered allmulticast mode [ 782.274802][T10158] bridge_slave_1: entered promiscuous mode [ 782.407473][ T5783] Bluetooth: hci1: command tx timeout [ 782.471569][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.539750][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.635188][ T28] audit: type=1800 audit(1788582968.507:471): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1285" name="addr_traddr" dev="configfs" ino=25853 res=0 errno=0 [ 784.488026][ T5783] Bluetooth: hci1: command tx timeout [ 784.686360][T10158] team0: Port device team_slave_0 added [ 784.742520][T10158] team0: Port device team_slave_1 added [ 784.943493][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.988002][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.033587][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.069218][ T49] tipc: Disabling bearer [ 785.139910][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.146939][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.193034][ T49] tipc: Left network mode [ 785.235467][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.507430][ T27] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 786.631371][ T5783] Bluetooth: hci1: command tx timeout [ 786.734942][T10158] hsr_slave_0: entered promiscuous mode [ 786.753707][T10158] hsr_slave_1: entered promiscuous mode [ 786.760979][T10158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.768801][T10158] Cannot create hsr debugfs directory [ 786.806704][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 786.826227][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 786.856788][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.917850][ T27] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 786.964240][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.018379][ T27] usb 1-1: Product: syz [ 787.022611][ T27] usb 1-1: Manufacturer: syz [ 787.057360][ T27] usb 1-1: SerialNumber: syz [ 787.077556][ T27] usb 1-1: config 0 descriptor?? [ 787.114939][T10210] loop4: detected capacity change from 0 to 1024 [ 787.158913][T10210] EXT4-fs: Ignoring removed oldalloc option [ 787.208655][T10210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.327461][T10210] EXT4-fs (loop4): unsupported descriptor size 0 [ 787.487412][ T5839] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 788.111769][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.233174][ T5839] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 788.286519][ T49] team0: Port device xfrm0 removed [ 788.334489][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.709903][ T5839] as10x_usb: device has been detected [ 789.042282][ T5839] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 789.078076][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 789.087131][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 789.096342][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 789.107108][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1289'. [ 790.047914][T10214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.057648][T10214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.125317][ T5839] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 790.225031][ T5839] as10x_usb: error during firmware upload part1 [ 790.233623][ T5839] Registered device Abilis Systems DVB-Titan [ 790.331932][ T5765] usb 1-1: USB disconnect, device number 32 [ 791.976002][ T5765] usb 4-1: USB disconnect, device number 26 [ 792.127622][ T5765] Unregistered device Abilis Systems DVB-Titan [ 792.149338][ T5765] as10x_usb: device has been disconnected [ 792.334115][ T28] audit: type=1800 audit(1788582978.227:472): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1293" name="addr_traddr" dev="configfs" ino=26090 res=0 errno=0 [ 797.373898][T10242] nvmet: transport type 0 not supported [ 797.816671][T10257] loop3: detected capacity change from 0 to 1024 [ 797.868926][T10257] EXT4-fs: Ignoring removed oldalloc option [ 797.874987][T10257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 797.998997][T10257] EXT4-fs (loop3): unsupported descriptor size 0 [ 798.187654][T10262] loop3: detected capacity change from 0 to 1024 [ 799.417415][T10158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 799.451635][T10158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 799.500045][T10158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 799.538265][ T5839] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 799.619994][T10158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 799.745372][ T49] hsr_slave_0: left promiscuous mode [ 799.753722][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 799.774706][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 799.785936][ T49] hsr_slave_1: left promiscuous mode [ 799.817137][ T5839] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.859207][ T5839] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 799.888335][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.909585][ T5839] usb 4-1: Product: syz [ 799.913853][ T5839] usb 4-1: Manufacturer: syz [ 799.931173][ T5839] usb 4-1: SerialNumber: syz [ 799.947832][ T5839] usb 4-1: config 0 descriptor?? [ 800.183067][ T49] veth1_macvtap: left promiscuous mode [ 800.189334][ T49] veth0_macvtap: left promiscuous mode [ 800.196289][ T49] veth1_vlan: left promiscuous mode [ 800.219229][ T49] veth0_vlan: left promiscuous mode [ 803.532645][ T8607] usb 4-1: USB disconnect, device number 27 [ 804.170219][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 804.179425][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 804.188534][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1298'. [ 804.199431][T10282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1298'. [ 807.350607][T10296] binder: 10295:10296 ioctl 4018620d 0 returned -22 [ 807.374718][T10296] jffs2: notice: (10296) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 808.973274][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.979931][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.300117][ T49] bond0 (unregistering): Released all slaves [ 811.473311][ T28] audit: type=1800 audit(1788582997.367:473): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1303" name="addr_traddr" dev="configfs" ino=26225 res=0 errno=0 [ 813.852868][T10309] nvmet: transport type 0 not supported [ 814.524020][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 814.533200][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 814.542340][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 814.553202][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1306'. [ 815.174933][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.335261][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.373859][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.381114][ T7781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.460281][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.467550][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.647236][T10158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 815.767837][ T5820] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 815.990470][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 816.009255][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 816.058310][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.106004][ T5820] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 816.133455][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.163911][ T5820] usb 1-1: Product: syz [ 816.187505][ T5820] usb 1-1: Manufacturer: syz [ 816.192190][ T5820] usb 1-1: SerialNumber: syz [ 816.219984][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.234229][ T5820] usb 1-1: config 0 descriptor?? [ 816.429893][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.573086][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.125695][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.795695][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.622138][ T8607] usb 1-1: USB disconnect, device number 33 [ 818.760775][T10345] loop4: detected capacity change from 0 to 1024 [ 818.794196][T10345] EXT4-fs: Ignoring removed oldalloc option [ 818.835253][T10345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 818.894736][T10345] EXT4-fs (loop4): unsupported descriptor size 0 [ 819.106864][T10355] loop4: detected capacity change from 0 to 1024 [ 819.117902][ T8607] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 819.225095][ T49] tipc: Disabling bearer [ 819.648239][ T8607] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 819.659275][ T8607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.701187][ T49] tipc: Left network mode [ 820.409949][T10360] lo speed is unknown, defaulting to 1000 [ 820.416099][T10360] lo speed is unknown, defaulting to 1000 [ 820.424708][T10360] lo speed is unknown, defaulting to 1000 [ 820.437614][T10360] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 820.453199][T10360] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 820.515021][T10360] lo speed is unknown, defaulting to 1000 [ 820.523323][T10360] lo speed is unknown, defaulting to 1000 [ 820.530471][T10360] lo speed is unknown, defaulting to 1000 [ 820.638198][T10360] lo speed is unknown, defaulting to 1000 [ 820.645290][T10360] lo speed is unknown, defaulting to 1000 [ 821.661758][ T8607] dln2 1-1:1.0: USB write failed: -110 [ 821.670273][ T8607] dln2 1-1:1.0: failed to initialize hardware [ 821.682416][ T8607] dln2: probe of 1-1:1.0 failed with error -110 [ 821.917047][ T1190] usb 1-1: USB disconnect, device number 34 [ 823.848651][T10158] veth0_vlan: entered promiscuous mode [ 823.931468][T10158] veth1_vlan: entered promiscuous mode [ 824.385124][T10158] veth0_macvtap: entered promiscuous mode [ 825.892677][ T49] team0: Port device xfrm0 removed [ 826.020721][T10158] veth1_macvtap: entered promiscuous mode [ 826.119713][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 826.129033][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 826.138143][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 826.149569][T10395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1314'. [ 826.806344][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.848160][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.046036][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.536574][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.607337][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.649928][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.783707][T10158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.801418][T10158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.813618][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 827.822724][T10158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.832051][T10158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.861172][ T27] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 827.967470][ T8607] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 829.199060][ T27] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 829.238575][ T27] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 829.285880][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.311041][ T8607] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 829.347701][ T8607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.358642][ T27] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 829.434576][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.458561][ T27] usb 4-1: Product: syz [ 829.462837][ T27] usb 4-1: Manufacturer: syz [ 829.478293][ T27] usb 4-1: SerialNumber: syz [ 829.521927][ T27] usb 4-1: config 0 descriptor?? [ 829.693082][ T49] hsr_slave_0: left promiscuous mode [ 829.727878][ T49] hsr_slave_1: left promiscuous mode [ 829.804268][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.813090][ T8607] dln2 5-1:1.0: USB write failed: -110 [ 829.828934][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.990933][T10411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.155702][T10411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.395699][ T49] veth1_macvtap: left promiscuous mode [ 830.465883][ T49] veth0_macvtap: left promiscuous mode [ 830.534015][ T49] veth1_vlan: left promiscuous mode [ 830.648291][ T49] veth0_vlan: left promiscuous mode [ 830.945287][ T8607] dln2 5-1:1.0: failed to initialize hardware [ 831.154486][ T27] usb 4-1: USB disconnect, device number 28 [ 831.190919][ T8607] dln2: probe of 5-1:1.0 failed with error -110 [ 831.202404][ T8607] usb 5-1: USB disconnect, device number 3 [ 831.312996][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 831.323673][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 831.332328][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 831.340759][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 831.349389][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 831.356881][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 831.687449][ T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 832.661897][ T27] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 832.673058][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.700441][ T27] usb 4-1: Product: syz [ 832.707719][ T27] usb 4-1: Manufacturer: syz [ 832.712384][ T27] usb 4-1: SerialNumber: syz [ 832.738593][ T27] usb 4-1: config 0 descriptor?? [ 832.767977][ T27] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 834.264285][ T5783] Bluetooth: hci2: command tx timeout [ 834.271777][ T27] gspca_sunplus: reg_w_riv err -110 [ 834.448853][ T27] sunplus: probe of 4-1:0.0 failed with error -110 [ 836.327398][ T5783] Bluetooth: hci2: command tx timeout [ 839.747439][ T5783] Bluetooth: hci2: command tx timeout [ 839.804561][ T49] bond0 (unregistering): Released all slaves [ 840.182821][T10422] lo speed is unknown, defaulting to 1000 [ 840.433381][T10423] lo speed is unknown, defaulting to 1000 [ 841.792551][ T5783] Bluetooth: hci2: command tx timeout [ 844.405329][ T2961] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.920353][T10423] chnl_net:caif_netlink_parms(): no params data found [ 845.073828][ T2961] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.220488][ T2961] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.252499][T10500] bridge_slave_0: left allmulticast mode [ 845.258753][T10500] bridge_slave_0: left promiscuous mode [ 845.264584][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.286239][T10500] bridge_slave_1: left allmulticast mode [ 845.293345][T10500] bridge_slave_1: left promiscuous mode [ 845.299840][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.316115][T10500] bond0: (slave bond_slave_0): Releasing backup interface [ 845.350599][T10500] bond0: (slave bond_slave_1): Releasing backup interface [ 845.394984][T10500] team0: Port device team_slave_0 removed [ 845.439611][T10500] team0: Port device team_slave_1 removed [ 845.446410][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.458182][T10500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.467668][T10500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.475257][T10500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.575206][ T2961] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.855746][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.887621][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.894913][T10423] bridge_slave_0: entered allmulticast mode [ 845.940120][T10423] bridge_slave_0: entered promiscuous mode [ 845.987209][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.994758][T10423] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.011403][T10423] bridge_slave_1: entered allmulticast mode [ 847.617409][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 847.639601][T10423] bridge_slave_1: entered promiscuous mode [ 847.768739][T10423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.435120][T10423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.634261][T10423] team0: Port device team_slave_0 added [ 849.662270][T10423] team0: Port device team_slave_1 added [ 849.797692][T10423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.908131][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.002169][T10423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.068467][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 850.081599][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 850.089975][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 850.117787][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 850.126613][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 850.137607][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 850.354461][T10423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.377308][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.427396][T10423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.665392][T10531] lo speed is unknown, defaulting to 1000 [ 850.759214][T10352] usb 4-1: USB disconnect, device number 29 [ 850.776080][T10423] hsr_slave_0: entered promiscuous mode [ 850.818289][T10423] hsr_slave_1: entered promiscuous mode [ 850.837338][T10423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.844969][T10423] Cannot create hsr debugfs directory [ 853.063982][ T5783] Bluetooth: hci1: command tx timeout [ 853.085154][ T27] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 853.299377][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 853.327875][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 853.336041][T10531] chnl_net:caif_netlink_parms(): no params data found [ 853.347666][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 853.385111][ T27] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 853.397678][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.405755][ T27] usb 5-1: Product: syz [ 853.427930][ T27] usb 5-1: Manufacturer: syz [ 853.432730][ T27] usb 5-1: SerialNumber: syz [ 853.465670][ T27] usb 5-1: config 0 descriptor?? [ 853.641488][ T2961] hsr_slave_0: left promiscuous mode [ 853.659932][ T2961] hsr_slave_1: left promiscuous mode [ 853.677615][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 853.689959][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.709494][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.716989][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.857478][ T2961] bridge_slave_1: left allmulticast mode [ 853.919079][ T2961] bridge_slave_1: left promiscuous mode [ 853.983248][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.153666][ T2961] bridge_slave_0: left allmulticast mode [ 854.218589][ T2961] bridge_slave_0: left promiscuous mode [ 854.270364][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.787283][ T2961] veth1_macvtap: left promiscuous mode [ 854.841346][ T2961] veth0_macvtap: left promiscuous mode [ 854.903273][ T2961] veth1_vlan: left promiscuous mode [ 854.947743][ T2961] veth0_vlan: left promiscuous mode [ 855.025477][ T5784] usb 5-1: USB disconnect, device number 4 [ 855.136378][ T5783] Bluetooth: hci1: command tx timeout [ 857.207400][ T5783] Bluetooth: hci1: command tx timeout [ 858.573355][ T2961] team0 (unregistering): Port device team_slave_1 removed [ 858.725314][ T2961] team0 (unregistering): Port device team_slave_0 removed [ 858.855037][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.940601][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.782583][ T5783] Bluetooth: hci1: command tx timeout [ 861.549818][ T2961] bond0 (unregistering): Released all slaves [ 863.924952][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.958424][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.965729][T10531] bridge_slave_0: entered allmulticast mode [ 864.011052][T10531] bridge_slave_0: entered promiscuous mode [ 864.033457][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.078661][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.085975][T10531] bridge_slave_1: entered allmulticast mode [ 864.109097][T10531] bridge_slave_1: entered promiscuous mode [ 865.914338][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.988280][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.120953][T10531] team0: Port device team_slave_0 added [ 866.189802][T10531] team0: Port device team_slave_1 added [ 866.321864][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.357606][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.462108][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.517763][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.524774][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.617495][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.853577][T10531] hsr_slave_0: entered promiscuous mode [ 866.910972][T10531] hsr_slave_1: entered promiscuous mode [ 866.975715][T10531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.998378][T10531] Cannot create hsr debugfs directory [ 867.054684][T10423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 867.150638][T10423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 867.221072][T10423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 867.488754][ T2961] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.530396][T10423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 867.743244][ T2961] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.837640][ T5839] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 867.956201][ T2961] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.039837][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 868.083905][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 868.107467][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.168304][ T5839] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 868.170290][ T2961] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.188277][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.207156][ T5839] usb 5-1: Product: syz [ 868.212011][ T5839] usb 5-1: Manufacturer: syz [ 868.227722][ T5839] usb 5-1: SerialNumber: syz [ 868.238583][ T5839] usb 5-1: config 0 descriptor?? [ 870.938977][ T7128] usb 5-1: USB disconnect, device number 5 [ 870.971125][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.984836][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.044154][T10531] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 871.258187][T10531] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 871.308378][T10531] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 871.353330][T10531] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 871.381217][ T2961] tipc: Disabling bearer [ 871.434726][ T2961] tipc: Left network mode [ 872.173781][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.397327][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.530997][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.538220][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.559721][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.566924][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.632055][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.573937][T10641] tipc: Resetting bearer [ 874.844348][T10531] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.479379][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.486621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.709050][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.716272][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.830579][ T2961] team0: Port device xfrm0 removed [ 877.026509][T10531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 877.065402][T10531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 877.419865][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.061543][T10531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.319963][ T2961] hsr_slave_0: left promiscuous mode [ 882.338322][ T2961] hsr_slave_1: left promiscuous mode [ 882.441100][ T2961] veth1_macvtap: left promiscuous mode [ 882.446765][ T2961] veth0_macvtap: left promiscuous mode [ 882.460772][ T2961] veth1_vlan: left promiscuous mode [ 882.466180][ T2961] veth0_vlan: left promiscuous mode [ 887.816842][ T2961] bond0 (unregistering): Released all slaves [ 887.926660][ T7128] lo speed is unknown, defaulting to 1000 [ 887.965298][T10717] tipc: Resetting bearer [ 888.064028][T10423] veth0_vlan: entered promiscuous mode [ 888.143553][T10423] veth1_vlan: entered promiscuous mode [ 888.401656][T10423] veth0_macvtap: entered promiscuous mode [ 888.963225][T10423] veth1_macvtap: entered promiscuous mode [ 889.351380][T10531] veth0_vlan: entered promiscuous mode [ 889.580722][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.594919][T10531] veth1_vlan: entered promiscuous mode [ 889.742112][T10531] veth0_macvtap: entered promiscuous mode [ 889.792011][T10531] veth1_macvtap: entered promiscuous mode [ 889.880561][T10531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.924282][T10531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.969881][T10531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.053924][T10531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.107040][T10531] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.147313][T10531] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.156124][T10531] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.187337][T10531] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.984156][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.149307][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.258443][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 892.273358][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 892.282166][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 892.317740][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 892.335841][ T7781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.338015][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 892.354644][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 892.403625][ T7781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.248372][ T5819] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 894.459293][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 894.500013][ T5783] Bluetooth: hci3: command tx timeout [ 895.080895][T10760] chnl_net:caif_netlink_parms(): no params data found [ 895.391215][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 895.401937][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 895.422357][ T5819] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 895.431749][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.439876][ T5819] usb 7-1: Product: syz [ 895.444160][ T5819] usb 7-1: Manufacturer: syz [ 895.449337][ T5819] usb 7-1: SerialNumber: syz [ 895.468228][ T5819] usb 7-1: config 0 descriptor?? [ 898.087445][ T5783] Bluetooth: hci3: command tx timeout [ 898.158187][ T5819] usb 7-1: USB disconnect, device number 2 [ 900.167509][ T5783] Bluetooth: hci3: command tx timeout [ 900.728890][T10760] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.736180][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.774502][T10760] bridge_slave_0: entered allmulticast mode [ 900.873540][T10760] bridge_slave_0: entered promiscuous mode [ 901.487673][T10823] FAULT_INJECTION: forcing a failure. [ 901.487673][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 901.527515][T10760] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.534947][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.553644][T10823] CPU: 1 PID: 10823 Comm: syz.6.1386 Not tainted syzkaller #0 [ 901.561194][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.571300][T10823] Call Trace: [ 901.574619][T10823] [ 901.577585][T10823] dump_stack_lvl+0x18c/0x250 [ 901.577984][T10760] bridge_slave_1: entered allmulticast mode [ 901.582307][T10823] ? show_regs_print_info+0x20/0x20 [ 901.593472][T10823] ? load_image+0x420/0x420 [ 901.598031][T10823] ? __lock_acquire+0x7d80/0x7d80 [ 901.603125][T10823] should_fail_ex+0x394/0x4c0 [ 901.607860][T10823] should_failslab+0x9/0x20 [ 901.612418][T10823] slab_pre_alloc_hook+0x59/0x300 [ 901.617510][T10823] kmem_cache_alloc_lru+0x4d/0x2b0 [ 901.622671][T10823] ? sock_alloc_inode+0x28/0xc0 [ 901.627576][T10823] sock_alloc_inode+0x28/0xc0 [ 901.632311][T10823] ? sockfs_init_fs_context+0xb0/0xb0 [ 901.637744][T10823] new_inode_pseudo+0x63/0x1d0 [ 901.642566][T10823] __sock_create+0x12d/0x940 [ 901.643920][T10760] bridge_slave_1: entered promiscuous mode [ 901.647180][T10823] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 901.659030][T10823] __sys_socket+0xd7/0x1b0 [ 901.663487][T10823] __x64_sys_socket+0x7a/0x90 [ 901.668194][T10823] do_syscall_64+0x55/0xb0 [ 901.672639][T10823] ? clear_bhb_loop+0x40/0x90 [ 901.677345][T10823] ? clear_bhb_loop+0x40/0x90 [ 901.682060][T10823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.688071][T10823] RIP: 0033:0x7f8525d9e159 [ 901.692514][T10823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.712150][T10823] RSP: 002b:00007f8526d01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 901.720606][T10823] RAX: ffffffffffffffda RBX: 00007f8526025fa0 RCX: 00007f8525d9e159 [ 901.728607][T10823] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 901.736604][T10823] RBP: 00007f8525e35024 R08: 0000000000000000 R09: 0000000000000000 [ 901.744598][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.752602][T10823] R13: 00007f8526026038 R14: 00007f8526025fa0 R15: 00007ffc58ad9898 [ 901.760609][T10823] [ 901.887606][T10823] socket: no more sockets [ 902.011665][T10760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.257385][ T5783] Bluetooth: hci3: command tx timeout [ 902.849902][T10760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.680164][T10760] team0: Port device team_slave_0 added [ 904.860785][T10760] team0: Port device team_slave_1 added [ 906.318080][T10760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.355490][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.414444][T10760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.622466][T10760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.650169][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.729839][T10760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.148681][ T2931] hsr_slave_0: left promiscuous mode [ 907.212041][ T2931] hsr_slave_1: left promiscuous mode [ 907.232297][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.270321][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.307678][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.501308][ T2931] bridge_slave_1: left allmulticast mode [ 907.585997][ T2931] bridge_slave_1: left promiscuous mode [ 908.147501][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.791638][ T2931] bridge_slave_0: left allmulticast mode [ 909.797588][ T2931] bridge_slave_0: left promiscuous mode [ 909.804493][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.973433][ T2931] veth1_macvtap: left promiscuous mode [ 909.997908][ T2931] veth0_macvtap: left promiscuous mode [ 910.011243][ T2931] veth1_vlan: left promiscuous mode [ 910.026919][ T2931] veth0_vlan: left promiscuous mode [ 917.973307][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 918.259334][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 918.430244][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.773039][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.311335][ T2931] bond0 (unregistering): Released all slaves [ 920.557730][T10760] hsr_slave_0: entered promiscuous mode [ 920.592981][T10760] hsr_slave_1: entered promiscuous mode [ 920.618056][T10760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.625695][T10760] Cannot create hsr debugfs directory [ 926.810777][T10760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 926.865680][T10760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 926.897169][T10760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 926.920023][T10760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 927.304331][T10760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.363119][T10760] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.545576][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.552820][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.612143][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.619422][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.803506][T10760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.069457][ T28] audit: type=1800 audit(1788583115.967:474): pid=10964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1407" name="addr_traddr" dev="configfs" ino=30258 res=0 errno=0 [ 931.908265][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.125042][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.428015][ T5784] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 932.507415][T10964] nvmet: transport type 0 not supported [ 932.751763][ T5784] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.813363][ T5784] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 933.218523][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.738559][ T5784] usb 1-1: config 0 descriptor?? [ 933.776949][ T5784] usb 1-1: can't set config #0, error -71 [ 933.822407][ T5784] usb 1-1: USB disconnect, device number 35 [ 933.835763][T10760] veth0_vlan: entered promiscuous mode [ 933.980348][T10760] veth1_vlan: entered promiscuous mode [ 934.102026][T10760] veth0_macvtap: entered promiscuous mode [ 934.143279][T10760] veth1_macvtap: entered promiscuous mode [ 934.244481][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.295168][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.346419][T10760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.583876][T10760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.689581][T10760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.745642][T10760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.032468][T10760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.258568][T10760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.320973][T10760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.357335][T10760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.254533][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.282967][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.550183][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.619432][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.872625][ T28] audit: type=1800 audit(1788583125.767:475): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1419" name="addr_traddr" dev="configfs" ino=29416 res=0 errno=0 [ 942.080372][T11009] nvmet: transport type 0 not supported [ 947.483309][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'. [ 952.097361][ T5784] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 953.898883][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 953.985738][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 954.067399][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 954.188233][ T5784] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 954.207528][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.258826][ T5784] usb 5-1: Product: syz [ 954.293600][ T5784] usb 5-1: Manufacturer: syz [ 954.317046][ T5784] usb 5-1: SerialNumber: syz [ 954.378722][ T5784] usb 5-1: config 0 descriptor?? [ 957.252837][ T9] usb 5-1: USB disconnect, device number 6 [ 959.691862][T11122] bridge0: port 3(syz_tun) entered blocking state [ 959.699234][T11122] bridge0: port 3(syz_tun) entered disabled state [ 959.708623][T11122] syz_tun: entered allmulticast mode [ 959.721979][T11122] syz_tun: entered promiscuous mode [ 959.730454][T11122] bridge0: port 3(syz_tun) entered blocking state [ 959.738304][T11122] bridge0: port 3(syz_tun) entered forwarding state [ 960.788286][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 960.809941][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 960.819121][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 960.842938][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 960.850731][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 960.858131][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 963.002309][ T5783] Bluetooth: hci2: command tx timeout [ 963.633521][T11124] chnl_net:caif_netlink_parms(): no params data found [ 964.063944][ T1323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.193186][ T5783] Bluetooth: hci2: command tx timeout [ 965.231660][ T1323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.683851][ T1323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.479649][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.486854][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.516313][T11124] bridge_slave_0: entered allmulticast mode [ 966.544030][T11124] bridge_slave_0: entered promiscuous mode [ 967.207309][ T5783] Bluetooth: hci2: command tx timeout [ 967.510495][ T1323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.690623][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.734929][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.747675][T11124] bridge_slave_1: entered allmulticast mode [ 967.785948][T11124] bridge_slave_1: entered promiscuous mode [ 967.931960][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.016660][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.763168][T11185] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 969.761619][ T5783] Bluetooth: hci2: command tx timeout [ 970.040252][T11124] team0: Port device team_slave_0 added [ 970.080340][T11124] team0: Port device team_slave_1 added [ 970.178964][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.185982][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.467457][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.027290][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.142247][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.373459][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.870471][T11124] hsr_slave_0: entered promiscuous mode [ 973.002985][T11124] hsr_slave_1: entered promiscuous mode [ 973.018174][T11124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 973.079478][T11124] Cannot create hsr debugfs directory [ 974.366576][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 974.438919][T11221] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 974.492120][T11221] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 974.547723][ T5784] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 974.589963][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 974.673751][T11224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 974.739514][ T5784] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 974.760364][T11224] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 974.777706][ T5784] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 974.806204][ T5784] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 974.830625][ T5784] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 974.845899][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.859915][ T5784] usb 6-1: Product: syz [ 974.864161][ T5784] usb 6-1: Manufacturer: syz [ 974.885324][ T5784] usb 6-1: SerialNumber: syz [ 974.892289][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 974.929520][ T5784] usb 6-1: config 0 descriptor?? [ 977.787021][ T5784] usb 6-1: USB disconnect, device number 2 [ 978.064492][ T28] audit: type=1800 audit(1788583163.947:476): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1463" name="addr_traddr" dev="configfs" ino=30854 res=0 errno=0 [ 978.419849][T11247] nvmet: transport type 0 not supported [ 983.183042][T11124] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 983.245841][T11124] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 983.263688][T11124] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 983.283548][T11124] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 983.387589][ T5819] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 983.596427][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 983.627360][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 983.647798][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.703349][ T5819] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 983.729068][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.753203][ T5819] usb 6-1: Product: syz [ 983.765744][ T5819] usb 6-1: Manufacturer: syz [ 983.778205][ T5819] usb 6-1: SerialNumber: syz [ 983.804127][ T5819] usb 6-1: config 0 descriptor?? [ 983.914379][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.600714][T11124] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.976185][ T1323] hsr_slave_0: left promiscuous mode [ 985.116249][ T1323] hsr_slave_1: left promiscuous mode [ 985.628378][ T1323] veth1_macvtap: left promiscuous mode [ 985.685758][ T1323] veth0_macvtap: left promiscuous mode [ 985.747816][ T1323] veth1_vlan: left promiscuous mode [ 985.805901][ T1323] veth0_vlan: left promiscuous mode [ 986.178796][ T7128] usb 6-1: USB disconnect, device number 3 [ 986.638333][ T28] audit: type=1800 audit(1788583172.527:477): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1474" name="addr_traddr" dev="configfs" ino=32146 res=0 errno=0 [ 987.258710][T11307] nvmet: transport type 0 not supported [ 993.565897][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.572413][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.767737][ T7128] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 993.979693][ T7128] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 994.007616][ T7128] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 994.020762][ T7128] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.040746][ T7128] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 994.054964][ T7128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.063354][ T7128] usb 1-1: Product: syz [ 994.072320][ T7128] usb 1-1: Manufacturer: syz [ 994.078696][ T7128] usb 1-1: SerialNumber: syz [ 994.096636][ T7128] usb 1-1: config 0 descriptor?? [ 995.303353][ T1323] bond0 (unregistering): Released all slaves [ 995.534791][ T7128] usb 1-1: USB disconnect, device number 36 [ 995.788668][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.795876][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.855990][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.863216][ T7781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.754554][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.299560][ T28] audit: type=1800 audit(1788583187.197:478): pid=11393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1493" name="addr_traddr" dev="configfs" ino=31216 res=0 errno=0 [ 1002.179144][T11393] nvmet: transport type 0 not supported [ 1004.180755][T11124] veth0_vlan: entered promiscuous mode [ 1004.224130][T11124] veth1_vlan: entered promiscuous mode [ 1004.337468][T11124] veth0_macvtap: entered promiscuous mode [ 1004.360853][T11124] veth1_macvtap: entered promiscuous mode [ 1006.078952][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.157269][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.197242][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.263251][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.299012][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.333583][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.373248][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.387330][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.402599][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.415554][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.441658][T11124] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.467540][T11124] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.486571][T11124] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.507659][T11124] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.637561][ T7128] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1006.710588][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.747256][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.836921][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.864388][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.874147][ T7128] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1006.908110][ T7128] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1006.947690][ T7128] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1007.001764][ T7128] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1007.027574][ T7128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.035651][ T7128] usb 7-1: Product: syz [ 1007.060326][ T7128] usb 7-1: Manufacturer: syz [ 1007.065016][ T7128] usb 7-1: SerialNumber: syz [ 1007.098735][ T7128] usb 7-1: config 0 descriptor?? [ 1009.465364][ T7128] usb 7-1: USB disconnect, device number 3 [ 1009.798821][ T28] audit: type=1800 audit(1788583195.697:479): pid=11444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1501" name="addr_traddr" dev="configfs" ino=32580 res=0 errno=0 [ 1010.427448][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1010.902041][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1011.132568][ T9] usb 1-1: config 114 has an invalid interface number: 189 but max is 0 [ 1011.325500][ T9] usb 1-1: config 114 has no interface number 0 [ 1011.446878][ T9] usb 1-1: config 114 interface 189 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 1011.692016][ T9] usb 1-1: config 114 interface 189 has no altsetting 0 [ 1011.936583][ T9] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=3d.91 [ 1012.026719][T11444] nvmet: transport type 0 not supported [ 1012.124610][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.248878][ T9] usb 1-1: Product: syz [ 1012.305149][ T9] usb 1-1: Manufacturer: syz [ 1012.372158][ T9] usb 1-1: SerialNumber: syz [ 1013.165860][T11454] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1014.328542][ T9] usb 1-1: can't set config #114, error -71 [ 1014.410112][ T9] usb 1-1: USB disconnect, device number 37 [ 1016.179452][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 1021.259395][T11504] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1022.147488][ T5820] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1022.401547][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1022.445393][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1022.472738][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1022.519369][ T5820] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1022.544754][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.577241][ T5820] usb 1-1: Product: syz [ 1022.581491][ T5820] usb 1-1: Manufacturer: syz [ 1022.617279][ T5820] usb 1-1: SerialNumber: syz [ 1022.638500][ T5820] usb 1-1: config 0 descriptor?? [ 1027.425056][ T5784] usb 1-1: USB disconnect, device number 38 [ 1027.630235][T11540] input: syz1 as /devices/virtual/input/input21 [ 1032.237439][ T5784] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1033.783608][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1033.813411][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1034.226199][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.295873][ T5784] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1034.305294][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.313953][ T5784] usb 8-1: Product: syz [ 1034.318414][ T5784] usb 8-1: Manufacturer: syz [ 1034.377492][ T5784] usb 8-1: SerialNumber: syz [ 1034.398509][ T5784] usb 8-1: config 0 descriptor?? [ 1037.162471][ T5784] usb 8-1: USB disconnect, device number 2 [ 1037.990012][T11605] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1049.987547][ T5784] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1050.199540][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1050.226478][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1050.256914][ T5784] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1050.321569][ T5784] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1050.422773][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.521088][ T5784] usb 8-1: Product: syz [ 1050.566183][ T5784] usb 8-1: Manufacturer: syz [ 1050.630715][ T5784] usb 8-1: SerialNumber: syz [ 1050.756444][ T5784] usb 8-1: config 0 descriptor?? [ 1051.184390][ T5784] usb 8-1: USB disconnect, device number 3 [ 1054.734156][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.743366][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.474878][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1056.737529][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 1056.759544][ T5820] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.775008][ T5820] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.785275][ T5820] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1056.798616][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1056.805301][ T5820] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1056.815337][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.828548][ T5820] usb 6-1: config 0 descriptor?? [ 1057.031671][ T28] audit: type=1800 audit(1788583242.927:480): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1577" name="addr_traddr" dev="configfs" ino=32979 res=0 errno=0 [ 1057.197581][T11734] nvmet: transport type 0 not supported [ 1057.217436][ T5839] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1057.289536][ T5820] hid (null): invalid report_count -796219040 [ 1057.318060][ T5820] hid (null): unknown global tag 0xe [ 1057.411750][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1057.427228][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1057.448328][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1057.499707][ T5839] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1057.517612][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.541755][ T5839] usb 8-1: Product: syz [ 1057.555448][ T27] usb 6-1: USB disconnect, device number 4 [ 1057.557569][ T5839] usb 8-1: Manufacturer: syz [ 1057.587402][ T5839] usb 8-1: SerialNumber: syz [ 1057.613713][ T5839] usb 8-1: config 0 descriptor?? [ 1058.320082][T11750] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1062.347301][T10761] usb 8-1: USB disconnect, device number 4 [ 1063.624537][ T28] audit: type=1800 audit(1788583249.517:481): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1586" name="addr_traddr" dev="configfs" ino=33870 res=0 errno=0 [ 1064.646723][T11771] nvmet: transport type 0 not supported [ 1070.707656][ T28] audit: type=1800 audit(1788583256.577:482): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1598" name="addr_traddr" dev="configfs" ino=33949 res=0 errno=0 [ 1070.944322][T11825] nvmet: transport type 0 not supported [ 1075.807275][T11869] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1077.874217][T11881] input: syz1 as /devices/virtual/input/input22 [ 1078.633581][ T28] audit: type=1800 audit(1788583264.527:483): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1608" name="addr_traddr" dev="configfs" ino=34008 res=0 errno=0 [ 1078.730601][T11891] nvmet: transport type 0 not supported [ 1079.182907][ T28] audit: type=1800 audit(1788583265.077:484): pid=11906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1612" name="addr_traddr" dev="configfs" ino=34027 res=0 errno=0 [ 1081.377548][T11916] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1082.432501][T11906] nvmet: transport type 0 not supported [ 1082.981820][T11924] input: syz1 as /devices/virtual/input/input23 [ 1083.491261][ T28] audit: type=1800 audit(1788583269.387:485): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1621" name="addr_traddr" dev="configfs" ino=33231 res=0 errno=0 [ 1083.670832][T11934] nvmet: transport type 0 not supported [ 1084.295951][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 1084.306393][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 1084.315489][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'. [ 1084.325480][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1617'. [ 1087.038583][ T28] audit: type=1800 audit(1788583272.937:486): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1627" name="addr_traddr" dev="configfs" ino=33342 res=0 errno=0 [ 1087.318811][T11982] Bluetooth: ISO socket layer initialized [ 1089.427474][T11976] nvmet: transport type 0 not supported [ 1089.532984][T11964] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1089.747339][ T28] audit: type=1800 audit(1788583275.627:487): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1631" name="addr_traddr" dev="configfs" ino=33363 res=0 errno=0 [ 1089.889423][T11993] nvmet: transport type 0 not supported [ 1090.500219][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 1090.509251][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 1090.518486][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 1090.528451][T12017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1634'. [ 1094.303316][T12043] input: syz1 as /devices/virtual/input/input24 [ 1094.349344][ T5820] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1094.471597][ T28] audit: type=1800 audit(1788583280.287:488): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1641" name="addr_traddr" dev="configfs" ino=34157 res=0 errno=0 [ 1094.577616][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 1094.710854][ T5820] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1094.723757][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.736618][ T5820] usb 1-1: config 0 descriptor?? [ 1094.747913][ T5820] usb 1-1: probing VID:PID(0424:012C) [ 1094.762501][T12044] nvmet: transport type 0 not supported [ 1094.766257][ T5820] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 1094.774827][ T5820] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1094.781657][ T5820] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 1094.788312][ T5820] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1094.795106][ T5820] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1095.153731][ T5820] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1095.155735][ T28] audit: type=1800 audit(1788583281.047:489): pid=12052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1643" name="addr_traddr" dev="configfs" ino=33517 res=0 errno=0 [ 1095.355524][ T5820] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1095.381811][T12052] nvmet: transport type 0 not supported [ 1095.930149][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1645'. [ 1095.939269][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1645'. [ 1095.948465][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1645'. [ 1095.958730][T12070] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1645'. [ 1097.240548][ T5820] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 1097.318018][ T5820] usb 1-1: USB disconnect, device number 39 [ 1097.353335][T10027] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1097.493676][ T5820] USB vub300 remote SDIO host controller[0] now disconnected [ 1097.596500][ T28] audit: type=1800 audit(1788583283.467:490): pid=12089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1642" name="addr_traddr" dev="configfs" ino=33579 res=0 errno=0 [ 1097.847205][T12089] nvmet: transport type 0 not supported [ 1098.145131][T12097] nvmet: transport type 0 not supported [ 1098.407481][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414 [ 1098.416926][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12106, name: syz.7.1652 [ 1098.426168][ C0] preempt_count: 101, expected: 0 [ 1098.431230][ C0] RCU nest depth: 3, expected: 0 [ 1098.436185][ C0] 7 locks held by syz.7.1652/12106: [ 1098.441428][ C0] #0: ffff88801df26418 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1774/0x24a0 [ 1098.450719][ C0] #1: ffff88807a1c73a0 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xb6/0x200 [ 1098.460114][ C0] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: handle_mm_fault+0xe6/0x4a50 [ 1098.469821][ C0] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x1d7/0x19c0 [ 1098.479622][ C0] #4: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 1098.489179][ C0] #5: ffff888022788978 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 1098.499845][ C0] #6: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1098.510341][ C0] Preemption disabled at: [ 1098.510350][ C0] [<0000000000000000>] 0x0 [ 1098.519161][ C0] CPU: 0 PID: 12106 Comm: syz.7.1652 Not tainted syzkaller #0 [ 1098.526630][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1098.536695][ C0] Call Trace: [ 1098.540007][ C0] [ 1098.542867][ C0] dump_stack_lvl+0x18c/0x250 [ 1098.547559][ C0] ? show_regs_print_info+0x20/0x20 [ 1098.552787][ C0] ? load_image+0x420/0x420 [ 1098.557327][ C0] __might_resched+0x48d/0x5f0 [ 1098.562117][ C0] ? __might_sleep+0xe0/0xe0 [ 1098.566720][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1098.572637][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1098.577497][ C0] ? kasan_set_track+0x5f/0x70 [ 1098.582272][ C0] ? kasan_save_free_info+0x28/0x40 [ 1098.587502][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 1098.592811][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 1098.598544][ C0] __flush_work+0x10f/0xac0 [ 1098.603061][ C0] ? flush_work+0x20/0x20 [ 1098.607407][ C0] ? __timer_delete+0x6b/0x290 [ 1098.612186][ C0] ? mark_lock+0x94/0x320 [ 1098.616526][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1098.622522][ C0] ? mod_delayed_work_on+0x1c0/0x1c0 [ 1098.627820][ C0] ? lock_chain_count+0x20/0x20 [ 1098.632682][ C0] ? __cancel_work_timer+0x36e/0x560 [ 1098.637980][ C0] __cancel_work_timer+0x3f8/0x560 [ 1098.643107][ C0] ? cancel_work_sync+0x20/0x20 [ 1098.647981][ C0] ? kobject_put+0x260/0x450 [ 1098.652623][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 1098.657669][ C0] ? kobject_put+0x421/0x450 [ 1098.662279][ C0] mmc_free_host+0x19/0x30 [ 1098.666711][ C0] call_timer_fn+0x189/0x540 [ 1098.671307][ C0] ? kref_get+0x70/0x70 [ 1098.675472][ C0] ? call_timer_fn+0xd2/0x540 [ 1098.680175][ C0] ? __run_timers+0x810/0x810 [ 1098.684890][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.690097][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1098.695305][ C0] ? kref_get+0x70/0x70 [ 1098.699477][ C0] __run_timers+0x570/0x810 [ 1098.703996][ C0] ? detach_timer+0x2b0/0x2b0 [ 1098.708696][ C0] ? lock_chain_count+0x20/0x20 [ 1098.713560][ C0] run_timer_softirq+0x67/0xf0 [ 1098.718336][ C0] handle_softirqs+0x27d/0x820 [ 1098.723112][ C0] ? read_tsc+0x9/0x20 [ 1098.727214][ C0] ? ktime_get+0x24b/0x280 [ 1098.731663][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1098.736439][ C0] ? do_softirq+0x1a0/0x1a0 [ 1098.740953][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1098.746166][ C0] __irq_exit_rcu+0xd3/0x190 [ 1098.750764][ C0] ? irq_exit_rcu+0x20/0x20 [ 1098.755282][ C0] irq_exit_rcu+0x9/0x20 [ 1098.759548][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1098.765199][ C0] [ 1098.768141][ C0] [ 1098.771085][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1098.777079][ C0] RIP: 0010:mm_trace_rss_stat+0x5/0x1c0 [ 1098.782647][ C0] Code: 16 00 89 d9 80 e1 07 80 c1 03 38 c1 7c c5 48 89 df e8 4f 6c 16 00 eb bb cc cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 <41> 57 41 56 41 54 53 89 f3 49 89 fe e8 ca ea bd ff 0f 1f 44 00 00 [ 1098.802263][ C0] RSP: 0000:ffffc9000bddee40 EFLAGS: 00000246 [ 1098.808344][ C0] RAX: d6c189142b429000 RBX: ffff88807a1c7200 RCX: ffff888025b70000 [ 1098.816330][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a1c7200 [ 1098.824309][ C0] RBP: 0000000000000000 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 1098.832294][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 1098.840274][ C0] R13: 8000000073570025 R14: ffffea0001cd5c00 R15: ffff888064549a00 [ 1098.848267][ C0] set_pte_range+0x36d/0x6a0 [ 1098.852889][ C0] filemap_map_pages+0xefe/0x19c0 [ 1098.857936][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 1098.863153][ C0] ? filemap_read_folio+0x790/0x790 [ 1098.868375][ C0] handle_mm_fault+0x384b/0x4a50 [ 1098.873326][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 1098.878292][ C0] ? numa_migrate_prep+0x350/0x350 [ 1098.883442][ C0] ? follow_page_pte+0x6d0/0x1ae0 [ 1098.888502][ C0] ? pmd_lock+0x60/0x60 [ 1098.892710][ C0] __get_user_pages+0x604/0x1580 [ 1098.897683][ C0] ? file_update_time+0x98/0x1a0 [ 1098.902639][ C0] ? populate_vma_page_range+0x380/0x380 [ 1098.908286][ C0] ? get_dump_page+0xb6/0x200 [ 1098.912995][ C0] ? down_read_killable+0x1d0/0x340 [ 1098.918220][ C0] get_dump_page+0x10c/0x200 [ 1098.923013][ C0] ? fault_in_readable+0x150/0x150 [ 1098.928154][ C0] ? __asan_memset+0x22/0x40 [ 1098.932762][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1098.937461][ C0] dump_user_range+0x127/0x840 [ 1098.942247][ C0] ? dump_skip+0x40/0x40 [ 1098.946510][ C0] ? dump_emit+0x78/0xe0 [ 1098.950786][ C0] ? dump_emit+0xa6/0xe0 [ 1098.955044][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1098.959998][ C0] elf_core_dump+0x320e/0x37c0 [ 1098.964792][ C0] ? load_elf_binary+0x2850/0x2850 [ 1098.969922][ C0] ? verify_lock_unused+0x140/0x140 [ 1098.975127][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1098.980162][ C0] ? mas_next_slot+0x94c/0x980 [ 1098.984961][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1098.990426][ C0] ? 0xffffffffff600000 [ 1098.994597][ C0] do_coredump+0x1791/0x24a0 [ 1098.999230][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1099.004363][ C0] ? lock_chain_count+0x20/0x20 [ 1099.009249][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1099.014457][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.019690][ C0] get_signal+0x10da/0x1390 [ 1099.024216][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1099.029784][ C0] ? get_sigframe_size+0x20/0x20 [ 1099.034740][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1099.040744][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1099.046224][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1099.051528][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1099.057085][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1099.062577][ C0] exc_page_fault+0x8c/0x100 [ 1099.067201][ C0] asm_exc_page_fault+0x26/0x30 [ 1099.072074][ C0] RIP: 0033:0x7f3bbcd9e161 [ 1099.076497][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1099.096114][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1099.102194][ C0] RAX: 0000000000000000 RBX: 00007f3bbd026090 RCX: 00007f3bbcd9e159 [ 1099.110174][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1099.118170][ C0] RBP: 00007f3bbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1099.126147][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1099.134148][ C0] R13: 00007f3bbd026128 R14: 00007f3bbd026090 R15: 00007ffcc34eef98 [ 1099.142150][ C0] [ 1099.145465][ C0] [ 1099.147794][ C0] ================================ [ 1099.152900][ C0] WARNING: inconsistent lock state [ 1099.158009][ C0] syzkaller #0 Tainted: G W [ 1099.163897][ C0] -------------------------------- [ 1099.169003][ C0] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 1099.175844][ C0] syz.7.1652/12106 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1099.182262][ C0] ffffffff8da24b50 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xae/0x3d0 [ 1099.191317][ C0] {SOFTIRQ-ON-R} state was registered at: [ 1099.197027][ C0] lock_acquire+0x19e/0x420 [ 1099.201622][ C0] pm_print_active_wakeup_sources+0x5d/0x310 [ 1099.207698][ C0] pm_get_wakeup_count+0x1cf/0x300 [ 1099.212900][ C0] wakeup_count_show+0x86/0xf0 [ 1099.217760][ C0] sysfs_kf_seq_show+0x34d/0x4c0 [ 1099.222794][ C0] seq_read_iter+0x464/0xc50 [ 1099.227492][ C0] vfs_read+0x486/0x990 [ 1099.231825][ C0] ksys_read+0x151/0x260 [ 1099.236155][ C0] do_syscall_64+0x55/0xb0 [ 1099.240681][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.246705][ C0] irq event stamp: 9052 [ 1099.250854][ C0] hardirqs last enabled at (9052): [] _raw_spin_unlock_irqrestore+0x86/0x120 [ 1099.261276][ C0] hardirqs last disabled at (9051): [] _raw_spin_lock_irqsave+0x8f/0x100 [ 1099.271265][ C0] softirqs last enabled at (920): [] __irq_exit_rcu+0xd3/0x190 [ 1099.280467][ C0] softirqs last disabled at (8583): [] __irq_exit_rcu+0xd3/0x190 [ 1099.289757][ C0] [ 1099.289757][ C0] other info that might help us debug this: [ 1099.297814][ C0] Possible unsafe locking scenario: [ 1099.297814][ C0] [ 1099.305257][ C0] CPU0 [ 1099.308533][ C0] ---- [ 1099.311806][ C0] lock(wakeup_srcu); [ 1099.315876][ C0] [ 1099.319327][ C0] lock(wakeup_srcu); [ 1099.323570][ C0] [ 1099.323570][ C0] *** DEADLOCK *** [ 1099.323570][ C0] [ 1099.331730][ C0] 7 locks held by syz.7.1652/12106: [ 1099.336922][ C0] #0: ffff88801df26418 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1774/0x24a0 [ 1099.346162][ C0] #1: ffff88807a1c73a0 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xb6/0x200 [ 1099.355488][ C0] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: handle_mm_fault+0xe6/0x4a50 [ 1099.365068][ C0] #3: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_map_pages+0x1d7/0x19c0 [ 1099.374956][ C0] #4: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x2c/0x280 [ 1099.384460][ C0] #5: ffff888022788978 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x106/0x1d0 [ 1099.395097][ C0] #6: ffffc90000007be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540 [ 1099.405561][ C0] [ 1099.405561][ C0] stack backtrace: [ 1099.411447][ C0] CPU: 0 PID: 12106 Comm: syz.7.1652 Tainted: G W syzkaller #0 [ 1099.420412][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.430492][ C0] Call Trace: [ 1099.433780][ C0] [ 1099.436627][ C0] dump_stack_lvl+0x18c/0x250 [ 1099.441325][ C0] ? show_regs_print_info+0x20/0x20 [ 1099.446562][ C0] ? __kernel_text_address+0xd/0x30 [ 1099.451790][ C0] ? unwind_get_return_address+0x91/0xc0 [ 1099.457442][ C0] valid_state+0x13b/0x1d0 [ 1099.461875][ C0] mark_lock_irq+0xd3/0x900 [ 1099.466392][ C0] ? stack_trace_save+0xaa/0x100 [ 1099.471364][ C0] ? save_trace+0xcd0/0xcd0 [ 1099.475878][ C0] ? save_trace+0x5d/0xcd0 [ 1099.480315][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 1099.485524][ C0] mark_lock+0x208/0x320 [ 1099.489796][ C0] __lock_acquire+0xcfc/0x7d80 [ 1099.494582][ C0] ? verify_lock_unused+0x140/0x140 [ 1099.499804][ C0] ? verify_lock_unused+0x140/0x140 [ 1099.505028][ C0] lock_sync+0x155/0x290 [ 1099.509277][ C0] ? __synchronize_srcu+0xae/0x3d0 [ 1099.514399][ C0] ? __synchronize_srcu+0xae/0x3d0 [ 1099.519521][ C0] ? lock_release+0x8c0/0x8c0 [ 1099.524246][ C0] ? mark_lock+0x94/0x320 [ 1099.528599][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1099.534595][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1099.539642][ C0] __synchronize_srcu+0xc2/0x3d0 [ 1099.544603][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1099.550524][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1099.556281][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1099.562213][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1099.567092][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1099.573110][ C0] ? read_tsc+0x9/0x20 [ 1099.577211][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1099.582788][ C0] ? synchronize_srcu+0x25a/0x280 [ 1099.587825][ C0] wakeup_source_unregister+0x116/0x190 [ 1099.593379][ C0] mmc_host_classdev_release+0x47/0x100 [ 1099.598941][ C0] ? mmc_free_host+0x30/0x30 [ 1099.603563][ C0] device_release+0xbc/0x1e0 [ 1099.608163][ C0] kobject_put+0x21b/0x450 [ 1099.612592][ C0] call_timer_fn+0x189/0x540 [ 1099.617201][ C0] ? kref_get+0x70/0x70 [ 1099.621382][ C0] ? call_timer_fn+0xd2/0x540 [ 1099.626061][ C0] ? __run_timers+0x810/0x810 [ 1099.630749][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1099.635952][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.641164][ C0] ? kref_get+0x70/0x70 [ 1099.645330][ C0] __run_timers+0x570/0x810 [ 1099.649847][ C0] ? detach_timer+0x2b0/0x2b0 [ 1099.654529][ C0] ? lock_chain_count+0x20/0x20 [ 1099.659393][ C0] run_timer_softirq+0x67/0xf0 [ 1099.664162][ C0] handle_softirqs+0x27d/0x820 [ 1099.668947][ C0] ? read_tsc+0x9/0x20 [ 1099.673030][ C0] ? ktime_get+0x24b/0x280 [ 1099.677469][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1099.682233][ C0] ? do_softirq+0x1a0/0x1a0 [ 1099.686736][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1099.691943][ C0] __irq_exit_rcu+0xd3/0x190 [ 1099.696545][ C0] ? irq_exit_rcu+0x20/0x20 [ 1099.701056][ C0] irq_exit_rcu+0x9/0x20 [ 1099.705296][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1099.710953][ C0] [ 1099.713900][ C0] [ 1099.716830][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1099.722846][ C0] RIP: 0010:mm_trace_rss_stat+0x5/0x1c0 [ 1099.728405][ C0] Code: 16 00 89 d9 80 e1 07 80 c1 03 38 c1 7c c5 48 89 df e8 4f 6c 16 00 eb bb cc cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 <41> 57 41 56 41 54 53 89 f3 49 89 fe e8 ca ea bd ff 0f 1f 44 00 00 [ 1099.748114][ C0] RSP: 0000:ffffc9000bddee40 EFLAGS: 00000246 [ 1099.754358][ C0] RAX: d6c189142b429000 RBX: ffff88807a1c7200 RCX: ffff888025b70000 [ 1099.762336][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a1c7200 [ 1099.770309][ C0] RBP: 0000000000000000 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 1099.778297][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 1099.786287][ C0] R13: 8000000073570025 R14: ffffea0001cd5c00 R15: ffff888064549a00 [ 1099.794271][ C0] set_pte_range+0x36d/0x6a0 [ 1099.798873][ C0] filemap_map_pages+0xefe/0x19c0 [ 1099.803903][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 1099.809123][ C0] ? filemap_read_folio+0x790/0x790 [ 1099.814330][ C0] handle_mm_fault+0x384b/0x4a50 [ 1099.819276][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 1099.824216][ C0] ? numa_migrate_prep+0x350/0x350 [ 1099.829349][ C0] ? follow_page_pte+0x6d0/0x1ae0 [ 1099.834469][ C0] ? pmd_lock+0x60/0x60 [ 1099.838651][ C0] __get_user_pages+0x604/0x1580 [ 1099.843600][ C0] ? file_update_time+0x98/0x1a0 [ 1099.848544][ C0] ? populate_vma_page_range+0x380/0x380 [ 1099.854184][ C0] ? get_dump_page+0xb6/0x200 [ 1099.858870][ C0] ? down_read_killable+0x1d0/0x340 [ 1099.864081][ C0] get_dump_page+0x10c/0x200 [ 1099.868681][ C0] ? fault_in_readable+0x150/0x150 [ 1099.873799][ C0] ? __asan_memset+0x22/0x40 [ 1099.878404][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1099.883086][ C0] dump_user_range+0x127/0x840 [ 1099.887860][ C0] ? dump_skip+0x40/0x40 [ 1099.892100][ C0] ? dump_emit+0x78/0xe0 [ 1099.896366][ C0] ? dump_emit+0xa6/0xe0 [ 1099.900633][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1099.905577][ C0] elf_core_dump+0x320e/0x37c0 [ 1099.910364][ C0] ? load_elf_binary+0x2850/0x2850 [ 1099.915486][ C0] ? verify_lock_unused+0x140/0x140 [ 1099.920689][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1099.925726][ C0] ? mas_next_slot+0x94c/0x980 [ 1099.930508][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1099.935973][ C0] ? 0xffffffffff600000 [ 1099.940132][ C0] do_coredump+0x1791/0x24a0 [ 1099.944732][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1099.949852][ C0] ? lock_chain_count+0x20/0x20 [ 1099.954706][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1099.959930][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.965166][ C0] get_signal+0x10da/0x1390 [ 1099.969680][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1099.975235][ C0] ? get_sigframe_size+0x20/0x20 [ 1099.980185][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1099.986180][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1099.991660][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1099.996958][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1100.002521][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1100.008013][ C0] exc_page_fault+0x8c/0x100 [ 1100.012609][ C0] asm_exc_page_fault+0x26/0x30 [ 1100.017463][ C0] RIP: 0033:0x7f3bbcd9e161 [ 1100.021896][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1100.041503][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1100.047570][ C0] RAX: 0000000000000000 RBX: 00007f3bbd026090 RCX: 00007f3bbcd9e159 [ 1100.055539][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1100.063516][ C0] RBP: 00007f3bbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1100.071489][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1100.079473][ C0] R13: 00007f3bbd026128 R14: 00007f3bbd026090 R15: 00007ffcc34eef98 [ 1100.087468][ C0] [ 1100.090515][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381 [ 1100.099809][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12106, name: syz.7.1652 [ 1100.108928][ C0] preempt_count: 101, expected: 0 [ 1100.113955][ C0] RCU nest depth: 3, expected: 0 [ 1100.118897][ C0] INFO: lockdep is turned off. [ 1100.123684][ C0] Preemption disabled at: [ 1100.123691][ C0] [<0000000000000000>] 0x0 [ 1100.132437][ C0] CPU: 0 PID: 12106 Comm: syz.7.1652 Tainted: G W syzkaller #0 [ 1100.141383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.151457][ C0] Call Trace: [ 1100.154753][ C0] [ 1100.157598][ C0] dump_stack_lvl+0x18c/0x250 [ 1100.162314][ C0] ? show_regs_print_info+0x20/0x20 [ 1100.167548][ C0] ? load_image+0x420/0x420 [ 1100.172054][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1100.178215][ C0] __might_resched+0x48d/0x5f0 [ 1100.183007][ C0] ? __might_sleep+0xe0/0xe0 [ 1100.187621][ C0] ? lock_release+0x8c0/0x8c0 [ 1100.192301][ C0] ? mark_lock+0x94/0x320 [ 1100.196630][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1100.202616][ C0] __synchronize_srcu+0x197/0x3d0 [ 1100.207646][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1100.213538][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1100.219266][ C0] ? read_tsc+0x9/0x20 [ 1100.223336][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1100.228888][ C0] ? synchronize_srcu+0x25a/0x280 [ 1100.233919][ C0] wakeup_source_unregister+0x116/0x190 [ 1100.239474][ C0] mmc_host_classdev_release+0x47/0x100 [ 1100.245025][ C0] ? mmc_free_host+0x30/0x30 [ 1100.249637][ C0] device_release+0xbc/0x1e0 [ 1100.254234][ C0] kobject_put+0x21b/0x450 [ 1100.258663][ C0] call_timer_fn+0x189/0x540 [ 1100.263261][ C0] ? kref_get+0x70/0x70 [ 1100.267456][ C0] ? call_timer_fn+0xd2/0x540 [ 1100.272149][ C0] ? __run_timers+0x810/0x810 [ 1100.276839][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.282048][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1100.287269][ C0] ? kref_get+0x70/0x70 [ 1100.291446][ C0] __run_timers+0x570/0x810 [ 1100.295970][ C0] ? detach_timer+0x2b0/0x2b0 [ 1100.300663][ C0] ? lock_chain_count+0x20/0x20 [ 1100.305531][ C0] run_timer_softirq+0x67/0xf0 [ 1100.310321][ C0] handle_softirqs+0x27d/0x820 [ 1100.315092][ C0] ? read_tsc+0x9/0x20 [ 1100.319169][ C0] ? ktime_get+0x24b/0x280 [ 1100.323607][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1100.328410][ C0] ? do_softirq+0x1a0/0x1a0 [ 1100.333208][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1100.338433][ C0] __irq_exit_rcu+0xd3/0x190 [ 1100.343042][ C0] ? irq_exit_rcu+0x20/0x20 [ 1100.347562][ C0] irq_exit_rcu+0x9/0x20 [ 1100.351810][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1100.357458][ C0] [ 1100.360393][ C0] [ 1100.363328][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1100.369321][ C0] RIP: 0010:mm_trace_rss_stat+0x5/0x1c0 [ 1100.374892][ C0] Code: 16 00 89 d9 80 e1 07 80 c1 03 38 c1 7c c5 48 89 df e8 4f 6c 16 00 eb bb cc cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 <41> 57 41 56 41 54 53 89 f3 49 89 fe e8 ca ea bd ff 0f 1f 44 00 00 [ 1100.394519][ C0] RSP: 0000:ffffc9000bddee40 EFLAGS: 00000246 [ 1100.400592][ C0] RAX: d6c189142b429000 RBX: ffff88807a1c7200 RCX: ffff888025b70000 [ 1100.408570][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a1c7200 [ 1100.416543][ C0] RBP: 0000000000000000 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 1100.424515][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 1100.432489][ C0] R13: 8000000073570025 R14: ffffea0001cd5c00 R15: ffff888064549a00 [ 1100.440517][ C0] set_pte_range+0x36d/0x6a0 [ 1100.445147][ C0] filemap_map_pages+0xefe/0x19c0 [ 1100.450190][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 1100.455398][ C0] ? filemap_read_folio+0x790/0x790 [ 1100.460626][ C0] handle_mm_fault+0x384b/0x4a50 [ 1100.465575][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 1100.470613][ C0] ? numa_migrate_prep+0x350/0x350 [ 1100.475747][ C0] ? follow_page_pte+0x6d0/0x1ae0 [ 1100.480788][ C0] ? pmd_lock+0x60/0x60 [ 1100.484961][ C0] __get_user_pages+0x604/0x1580 [ 1100.489940][ C0] ? file_update_time+0x98/0x1a0 [ 1100.494886][ C0] ? populate_vma_page_range+0x380/0x380 [ 1100.500546][ C0] ? get_dump_page+0xb6/0x200 [ 1100.505231][ C0] ? down_read_killable+0x1d0/0x340 [ 1100.510440][ C0] get_dump_page+0x10c/0x200 [ 1100.515042][ C0] ? fault_in_readable+0x150/0x150 [ 1100.520167][ C0] ? __asan_memset+0x22/0x40 [ 1100.524854][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1100.529536][ C0] dump_user_range+0x127/0x840 [ 1100.534309][ C0] ? dump_skip+0x40/0x40 [ 1100.538554][ C0] ? dump_emit+0x78/0xe0 [ 1100.542806][ C0] ? dump_emit+0xa6/0xe0 [ 1100.547048][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1100.552007][ C0] elf_core_dump+0x320e/0x37c0 [ 1100.556784][ C0] ? load_elf_binary+0x2850/0x2850 [ 1100.561905][ C0] ? verify_lock_unused+0x140/0x140 [ 1100.567113][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1100.572213][ C0] ? mas_next_slot+0x94c/0x980 [ 1100.577042][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1100.582517][ C0] ? 0xffffffffff600000 [ 1100.586693][ C0] do_coredump+0x1791/0x24a0 [ 1100.591299][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1100.596423][ C0] ? lock_chain_count+0x20/0x20 [ 1100.601281][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.606485][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1100.611713][ C0] get_signal+0x10da/0x1390 [ 1100.616243][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1100.621804][ C0] ? get_sigframe_size+0x20/0x20 [ 1100.626767][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1100.632774][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1100.638245][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1100.643627][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1100.649185][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1100.654650][ C0] exc_page_fault+0x8c/0x100 [ 1100.659251][ C0] asm_exc_page_fault+0x26/0x30 [ 1100.664108][ C0] RIP: 0033:0x7f3bbcd9e161 [ 1100.668527][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1100.688144][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1100.694216][ C0] RAX: 0000000000000000 RBX: 00007f3bbd026090 RCX: 00007f3bbcd9e159 [ 1100.702206][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1100.710183][ C0] RBP: 00007f3bbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1100.718177][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1100.726160][ C0] R13: 00007f3bbd026128 R14: 00007f3bbd026090 R15: 00007ffcc34eef98 [ 1100.734160][ C0] [ 1100.737226][ C0] ODEBUG: object ffffc900000079c0 is NOT on stack ffffc9000bdd8000, but annotated. [ 1100.746927][ C0] ------------[ cut here ]------------ [ 1100.752396][ C0] WARNING: CPU: 0 PID: 12106 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450 [ 1100.762051][ C0] Modules linked in: [ 1100.765952][ C0] CPU: 0 PID: 12106 Comm: syz.7.1652 Tainted: G W syzkaller #0 [ 1100.774886][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.784950][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1100.790885][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f f9 25 13 48 c7 c1 80 3e 1d 8b 48 c7 c7 e0 3e 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 53 76 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1100.810520][ C0] RSP: 0000:ffffc90000007928 EFLAGS: 00010046 [ 1100.816589][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: d6c189142b429000 [ 1100.824564][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1100.832539][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 1100.840517][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff888025b70020 [ 1100.848495][ C0] R13: ffff888031aaaaf0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1100.856487][ C0] FS: 00007f3bbafd56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1100.865416][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.872008][ C0] CR2: fffffffffffffe70 CR3: 000000002e54f000 CR4: 00000000003506f0 [ 1100.879992][ C0] Call Trace: [ 1100.883297][ C0] [ 1100.886146][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1100.891188][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1100.897105][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1100.902860][ C0] ? read_tsc+0x9/0x20 [ 1100.906937][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1100.912490][ C0] ? synchronize_srcu+0x25a/0x280 [ 1100.917526][ C0] wakeup_source_unregister+0x116/0x190 [ 1100.923079][ C0] mmc_host_classdev_release+0x47/0x100 [ 1100.928635][ C0] ? mmc_free_host+0x30/0x30 [ 1100.933230][ C0] device_release+0xbc/0x1e0 [ 1100.937831][ C0] kobject_put+0x21b/0x450 [ 1100.942262][ C0] call_timer_fn+0x189/0x540 [ 1100.946856][ C0] ? kref_get+0x70/0x70 [ 1100.951024][ C0] ? call_timer_fn+0xd2/0x540 [ 1100.955794][ C0] ? __run_timers+0x810/0x810 [ 1100.960500][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.965700][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1100.970914][ C0] ? kref_get+0x70/0x70 [ 1100.975083][ C0] __run_timers+0x570/0x810 [ 1100.979596][ C0] ? detach_timer+0x2b0/0x2b0 [ 1100.984283][ C0] ? lock_chain_count+0x20/0x20 [ 1100.989145][ C0] run_timer_softirq+0x67/0xf0 [ 1100.993915][ C0] handle_softirqs+0x27d/0x820 [ 1100.998688][ C0] ? read_tsc+0x9/0x20 [ 1101.002763][ C0] ? ktime_get+0x24b/0x280 [ 1101.007200][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1101.011999][ C0] ? do_softirq+0x1a0/0x1a0 [ 1101.016510][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1101.021718][ C0] __irq_exit_rcu+0xd3/0x190 [ 1101.026309][ C0] ? irq_exit_rcu+0x20/0x20 [ 1101.030816][ C0] irq_exit_rcu+0x9/0x20 [ 1101.035057][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1101.040697][ C0] [ 1101.043626][ C0] [ 1101.046556][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.052541][ C0] RIP: 0010:mm_trace_rss_stat+0x5/0x1c0 [ 1101.058098][ C0] Code: 16 00 89 d9 80 e1 07 80 c1 03 38 c1 7c c5 48 89 df e8 4f 6c 16 00 eb bb cc cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 <41> 57 41 56 41 54 53 89 f3 49 89 fe e8 ca ea bd ff 0f 1f 44 00 00 [ 1101.077705][ C0] RSP: 0000:ffffc9000bddee40 EFLAGS: 00000246 [ 1101.083790][ C0] RAX: d6c189142b429000 RBX: ffff88807a1c7200 RCX: ffff888025b70000 [ 1101.091822][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a1c7200 [ 1101.099797][ C0] RBP: 0000000000000000 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 1101.107777][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 1101.115751][ C0] R13: 8000000073570025 R14: ffffea0001cd5c00 R15: ffff888064549a00 [ 1101.123739][ C0] set_pte_range+0x36d/0x6a0 [ 1101.128339][ C0] filemap_map_pages+0xefe/0x19c0 [ 1101.133370][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 1101.138584][ C0] ? filemap_read_folio+0x790/0x790 [ 1101.143810][ C0] handle_mm_fault+0x384b/0x4a50 [ 1101.148755][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 1101.154051][ C0] ? numa_migrate_prep+0x350/0x350 [ 1101.159164][ C0] ? follow_page_pte+0x6d0/0x1ae0 [ 1101.164202][ C0] ? pmd_lock+0x60/0x60 [ 1101.168393][ C0] __get_user_pages+0x604/0x1580 [ 1101.173345][ C0] ? file_update_time+0x98/0x1a0 [ 1101.178290][ C0] ? populate_vma_page_range+0x380/0x380 [ 1101.183931][ C0] ? get_dump_page+0xb6/0x200 [ 1101.188618][ C0] ? down_read_killable+0x1d0/0x340 [ 1101.193828][ C0] get_dump_page+0x10c/0x200 [ 1101.198425][ C0] ? fault_in_readable+0x150/0x150 [ 1101.203542][ C0] ? __asan_memset+0x22/0x40 [ 1101.208141][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1101.212826][ C0] dump_user_range+0x127/0x840 [ 1101.217597][ C0] ? dump_skip+0x40/0x40 [ 1101.221842][ C0] ? dump_emit+0x78/0xe0 [ 1101.226117][ C0] ? dump_emit+0xa6/0xe0 [ 1101.230364][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1101.236972][ C0] elf_core_dump+0x320e/0x37c0 [ 1101.241775][ C0] ? load_elf_binary+0x2850/0x2850 [ 1101.246930][ C0] ? verify_lock_unused+0x140/0x140 [ 1101.252169][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1101.257213][ C0] ? mas_next_slot+0x94c/0x980 [ 1101.262011][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1101.267475][ C0] ? 0xffffffffff600000 [ 1101.271635][ C0] do_coredump+0x1791/0x24a0 [ 1101.276236][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1101.281360][ C0] ? lock_chain_count+0x20/0x20 [ 1101.286214][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.291416][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1101.296624][ C0] get_signal+0x10da/0x1390 [ 1101.301156][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1101.306714][ C0] ? get_sigframe_size+0x20/0x20 [ 1101.311681][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1101.317672][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1101.323138][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1101.328519][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1101.334114][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1101.339602][ C0] exc_page_fault+0x8c/0x100 [ 1101.344210][ C0] asm_exc_page_fault+0x26/0x30 [ 1101.349091][ C0] RIP: 0033:0x7f3bbcd9e161 [ 1101.353509][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1101.373128][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1101.379205][ C0] RAX: 0000000000000000 RBX: 00007f3bbd026090 RCX: 00007f3bbcd9e159 [ 1101.387223][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1101.395344][ C0] RBP: 00007f3bbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1101.403328][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1101.411309][ C0] R13: 00007f3bbd026128 R14: 00007f3bbd026090 R15: 00007ffcc34eef98 [ 1101.419294][ C0] [ 1101.422317][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1101.429603][ C0] CPU: 0 PID: 12106 Comm: syz.7.1652 Tainted: G W syzkaller #0 [ 1101.438537][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.448606][ C0] Call Trace: [ 1101.451905][ C0] [ 1101.454764][ C0] dump_stack_lvl+0x18c/0x250 [ 1101.459464][ C0] ? show_regs_print_info+0x20/0x20 [ 1101.464690][ C0] ? load_image+0x420/0x420 [ 1101.469232][ C0] panic+0x2ca/0x720 [ 1101.473145][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1101.477673][ C0] __warn+0x2e0/0x470 [ 1101.481717][ C0] ? __debug_object_init+0x18d/0x450 [ 1101.487041][ C0] ? __debug_object_init+0x18d/0x450 [ 1101.492371][ C0] report_bug+0x2be/0x4f0 [ 1101.496713][ C0] ? __debug_object_init+0x18d/0x450 [ 1101.502012][ C0] ? __debug_object_init+0x18d/0x450 [ 1101.507311][ C0] ? __debug_object_init+0x18f/0x450 [ 1101.512609][ C0] handle_bug+0xcf/0x120 [ 1101.516854][ C0] exc_invalid_op+0x1a/0x50 [ 1101.521360][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1101.526215][ C0] RIP: 0010:__debug_object_init+0x18d/0x450 [ 1101.532138][ C0] Code: 24 08 74 2f 41 ff c6 44 89 35 2f f9 25 13 48 c7 c1 80 3e 1d 8b 48 c7 c7 e0 3e 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 53 76 49 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 1101.551751][ C0] RSP: 0000:ffffc90000007928 EFLAGS: 00010046 [ 1101.557839][ C0] RAX: 0000000000000050 RBX: ffffc900000079c0 RCX: d6c189142b429000 [ 1101.565810][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 1101.573777][ C0] RBP: dffffc0000000000 R08: ffffc90000007527 R09: 1ffff92000000ea4 [ 1101.581769][ C0] R10: dffffc0000000000 R11: fffff52000000ea5 R12: ffff888025b70020 [ 1101.589743][ C0] R13: ffff888031aaaaf0 R14: 0000000000000001 R15: ffffffff8acbe000 [ 1101.597735][ C0] ? __debug_object_init+0x18d/0x450 [ 1101.603031][ C0] __synchronize_srcu+0x2ae/0x3d0 [ 1101.608065][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1101.613962][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 1101.619698][ C0] ? read_tsc+0x9/0x20 [ 1101.623773][ C0] ? ktime_get_mono_fast_ns+0x19d/0x1c0 [ 1101.629324][ C0] ? synchronize_srcu+0x25a/0x280 [ 1101.634391][ C0] wakeup_source_unregister+0x116/0x190 [ 1101.639941][ C0] mmc_host_classdev_release+0x47/0x100 [ 1101.645517][ C0] ? mmc_free_host+0x30/0x30 [ 1101.650114][ C0] device_release+0xbc/0x1e0 [ 1101.654711][ C0] kobject_put+0x21b/0x450 [ 1101.659142][ C0] call_timer_fn+0x189/0x540 [ 1101.663735][ C0] ? kref_get+0x70/0x70 [ 1101.667899][ C0] ? call_timer_fn+0xd2/0x540 [ 1101.672588][ C0] ? __run_timers+0x810/0x810 [ 1101.677272][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.682470][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1101.687687][ C0] ? kref_get+0x70/0x70 [ 1101.691866][ C0] __run_timers+0x570/0x810 [ 1101.696378][ C0] ? detach_timer+0x2b0/0x2b0 [ 1101.701059][ C0] ? lock_chain_count+0x20/0x20 [ 1101.705928][ C0] run_timer_softirq+0x67/0xf0 [ 1101.710694][ C0] handle_softirqs+0x27d/0x820 [ 1101.715462][ C0] ? read_tsc+0x9/0x20 [ 1101.719534][ C0] ? ktime_get+0x24b/0x280 [ 1101.723957][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1101.728727][ C0] ? do_softirq+0x1a0/0x1a0 [ 1101.733232][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1101.738435][ C0] __irq_exit_rcu+0xd3/0x190 [ 1101.743023][ C0] ? irq_exit_rcu+0x20/0x20 [ 1101.747526][ C0] irq_exit_rcu+0x9/0x20 [ 1101.751767][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1101.757441][ C0] [ 1101.760370][ C0] [ 1101.763299][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1101.769599][ C0] RIP: 0010:mm_trace_rss_stat+0x5/0x1c0 [ 1101.775184][ C0] Code: 16 00 89 d9 80 e1 07 80 c1 03 38 c1 7c c5 48 89 df e8 4f 6c 16 00 eb bb cc cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 <41> 57 41 56 41 54 53 89 f3 49 89 fe e8 ca ea bd ff 0f 1f 44 00 00 [ 1101.794807][ C0] RSP: 0000:ffffc9000bddee40 EFLAGS: 00000246 [ 1101.800894][ C0] RAX: d6c189142b429000 RBX: ffff88807a1c7200 RCX: ffff888025b70000 [ 1101.808920][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a1c7200 [ 1101.816905][ C0] RBP: 0000000000000000 R08: ffffffff911ef507 R09: 1ffffffff223dea0 [ 1101.824889][ C0] R10: dffffc0000000000 R11: fffffbfff223dea1 R12: dffffc0000000000 [ 1101.832867][ C0] R13: 8000000073570025 R14: ffffea0001cd5c00 R15: ffff888064549a00 [ 1101.840861][ C0] set_pte_range+0x36d/0x6a0 [ 1101.845470][ C0] filemap_map_pages+0xefe/0x19c0 [ 1101.850512][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 1101.855740][ C0] ? filemap_read_folio+0x790/0x790 [ 1101.860953][ C0] handle_mm_fault+0x384b/0x4a50 [ 1101.865905][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 1101.870854][ C0] ? numa_migrate_prep+0x350/0x350 [ 1101.875973][ C0] ? follow_page_pte+0x6d0/0x1ae0 [ 1101.881046][ C0] ? pmd_lock+0x60/0x60 [ 1101.885217][ C0] __get_user_pages+0x604/0x1580 [ 1101.890180][ C0] ? file_update_time+0x98/0x1a0 [ 1101.895134][ C0] ? populate_vma_page_range+0x380/0x380 [ 1101.900957][ C0] ? get_dump_page+0xb6/0x200 [ 1101.905657][ C0] ? down_read_killable+0x1d0/0x340 [ 1101.910876][ C0] get_dump_page+0x10c/0x200 [ 1101.915490][ C0] ? fault_in_readable+0x150/0x150 [ 1101.920614][ C0] ? __asan_memset+0x22/0x40 [ 1101.925221][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1101.929926][ C0] dump_user_range+0x127/0x840 [ 1101.934708][ C0] ? dump_skip+0x40/0x40 [ 1101.938959][ C0] ? dump_emit+0x78/0xe0 [ 1101.943217][ C0] ? dump_emit+0xa6/0xe0 [ 1101.947467][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1101.952424][ C0] elf_core_dump+0x320e/0x37c0 [ 1101.957234][ C0] ? load_elf_binary+0x2850/0x2850 [ 1101.962392][ C0] ? verify_lock_unused+0x140/0x140 [ 1101.967626][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1101.972662][ C0] ? mas_next_slot+0x94c/0x980 [ 1101.977472][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1101.982941][ C0] ? 0xffffffffff600000 [ 1101.987111][ C0] do_coredump+0x1791/0x24a0 [ 1101.991757][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1101.996884][ C0] ? lock_chain_count+0x20/0x20 [ 1102.001748][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1102.006979][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1102.012228][ C0] get_signal+0x10da/0x1390 [ 1102.016750][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1102.022316][ C0] ? get_sigframe_size+0x20/0x20 [ 1102.027280][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1102.033290][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1102.038764][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1102.044104][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1102.049667][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1102.055145][ C0] exc_page_fault+0x8c/0x100 [ 1102.059750][ C0] asm_exc_page_fault+0x26/0x30 [ 1102.064612][ C0] RIP: 0033:0x7f3bbcd9e161 [ 1102.069126][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1102.088742][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1102.094815][ C0] RAX: 0000000000000000 RBX: 00007f3bbd026090 RCX: 00007f3bbcd9e159 [ 1102.102797][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1102.110780][ C0] RBP: 00007f3bbce35024 R08: 0000000000000000 R09: 0000000000000000 [ 1102.118764][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1102.126759][ C0] R13: 00007f3bbd026128 R14: 00007f3bbd026090 R15: 00007ffcc34eef98 [ 1102.134745][ C0] [ 1102.137941][ C0] Kernel Offset: disabled [ 1102.142285][ C0] Rebooting in 86400 seconds..