last executing test programs: 24m52.075556205s ago: executing program 3 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 24m51.254183427s ago: executing program 3 (id=395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000000000000a) utimensat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x100) socket$netlink(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x20040040) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6d53) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) 24m38.97408251s ago: executing program 3 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) read$msr(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xee}, [@ringbuf_query, @ldst={0x2, 0x0, 0x1, 0x8, 0x8, 0xffffffffffffff18, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xd}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0xe6, &(0x7f0000000480)=""/230, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_destroy(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 24m31.562346226s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_delete(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) 24m29.693613052s ago: executing program 3 (id=436): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xeea390, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000066c0)="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", 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000140)='./control\x00', 0x5) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 24m24.585021336s ago: executing program 3 (id=446): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x0, 0x8bc, 0x10001, r2, 0x0, &(0x7f0000000180)={0x9b0907, 0x2, '\x00', @value64=0x4}}) 24m9.091897957s ago: executing program 32 (id=446): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x0, 0x8bc, 0x10001, r2, 0x0, &(0x7f0000000180)={0x9b0907, 0x2, '\x00', @value64=0x4}}) 19m48.398118546s ago: executing program 6 (id=1003): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1fd, 0x1}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 19m46.49174226s ago: executing program 6 (id=1007): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x310) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r6, 0x103, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], 0x0, 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200)=[0xfffffffc], &(0x7f0000000300)=[r7], 0x0}) socket(0x15, 0x5, 0x0) 19m43.289543697s ago: executing program 6 (id=1011): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x7}, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x79e5a327e49487d3, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2, 0x4c817065, 0x0, 0x101}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x10000000, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x2, 0xb7, 0xffffffff, 0x4d, 0x4}}, 0xe8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) unshare(0x22020600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x138, 0x1a, 0x1, 0x3, 0x25dfdbfd, {{@in=@local, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x4000000, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000000}, {0x7b, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc75c2b196d661e27}, 0x0) 19m39.495300257s ago: executing program 6 (id=1017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x7, 0xf4b, 0x1, 0x2, 0x1, 0x412f, 0xe154, 0x1000, 0x7f, 0xff, 0xffffffff, "de1d000034130a0000000020b42717e498e700"}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 19m36.411799228s ago: executing program 6 (id=1026): setpriority(0x2, 0xff, 0x0) 19m35.835273551s ago: executing program 6 (id=1031): r0 = socket(0x10, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xb, 0x20006aef}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r7, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x2, 0x1, 0x3}, 0x9) 19m20.006709185s ago: executing program 33 (id=1031): r0 = socket(0x10, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xb, 0x20006aef}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x17) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1c, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r7, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5, 0x2, 0x1, 0x3}, 0x9) 13m55.00693501s ago: executing program 0 (id=1796): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(0x0, 0xecf86c37d53049e1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(0xffffffffffffffff) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 13m53.960241725s ago: executing program 0 (id=1800): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) connect$can_j1939(r5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000000000000a) utimensat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), 0x100) socket$netlink(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20040040) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6d53) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) 13m52.784130062s ago: executing program 0 (id=1804): clock_nanosleep(0x9, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) mknodat(0xffffffffffffffff, 0x0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010b8e) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 13m44.840156511s ago: executing program 0 (id=1825): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x200, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}], 0x1, 0x8800000, 0x7, 0x4) 13m43.067175842s ago: executing program 0 (id=1830): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000000}, {0x0, 0x2}}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 13m42.503415754s ago: executing program 0 (id=1832): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) 13m26.993492502s ago: executing program 34 (id=1832): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) 6m27.069902049s ago: executing program 8 (id=2712): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3a, 0x20000000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0x178) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"]) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000000)=0xc) io_uring_setup(0x2e34, &(0x7f0000000180)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 6m24.497592965s ago: executing program 8 (id=2716): syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) syz_open_dev$vbi(0x0, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 6m17.557444312s ago: executing program 8 (id=2725): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xfff}], 0x3) 6m14.436482278s ago: executing program 8 (id=2730): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 6m10.887312434s ago: executing program 8 (id=2736): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) rt_sigaction(0x9, &(0x7f0000000700)={0x0, 0x0, 0x0, {[0xa2]}}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer], 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0xc11d15b68094f7d1, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0xb000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff80) 6m9.677131204s ago: executing program 8 (id=2739): socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 5m50.334674234s ago: executing program 35 (id=2739): socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1m8.579016258s ago: executing program 1 (id=3316): r0 = io_uring_setup(0x3c8e, &(0x7f0000000500)) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsmount(0xffffffffffffffff, 0x1, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r6, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8400}, 0x20000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 1m5.973905619s ago: executing program 1 (id=3322): accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(0x0, 0xecf86c37d53049e1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(0xffffffffffffffff) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m2.834316396s ago: executing program 1 (id=3326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x178) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) io_uring_setup(0x2e34, &(0x7f0000000180)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 57.454413128s ago: executing program 1 (id=3341): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) syz_usb_disconnect(r0) socket$inet6(0xa, 0x3, 0x8000000003c) 54.397120642s ago: executing program 1 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xd8fa35cb99073b91, 0x2f, 0x1, 0x4, 0xc, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffffe, 0x1, 0x1, {0x4, 0xdcf0, 0x4, 0xae3, 0x3, 0x4, 0x8000044, 0x4, 0x5, 0x4000, 0xdd, r3, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 52.824036656s ago: executing program 1 (id=3352): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x178) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) io_uring_setup(0x2e34, &(0x7f0000000180)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 30.766180145s ago: executing program 4 (id=3394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x178) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) io_uring_setup(0x2e34, &(0x7f0000000180)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7fff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 20.659196721s ago: executing program 4 (id=3414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x0, 0x0}) 18.469009029s ago: executing program 4 (id=3416): accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(0x0, 0xecf86c37d53049e1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(0xffffffffffffffff) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17.436026059s ago: executing program 4 (id=3419): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x80, 0x8000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c0002800500010000000900240002"], 0xa8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.260019838s ago: executing program 2 (id=3420): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x200000dc, 0x105182) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.156274803s ago: executing program 2 (id=3422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{}]}) 14.947155116s ago: executing program 2 (id=3423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x22a00a1, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) 13.577593039s ago: executing program 5 (id=3424): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000000)={0x7, @raw_data="5499691b9331ff660dcfbb4a4030d50162cec25135f460c6161836e6518ff2908cb455fe96a102cf242d1f2e85dfec97edc39a9e5bca0237c72f37dbae62ac536d93baa88740ae6ae52186ab3061b5c60b4563d6d937e1fbd7690ebb5d85aaa7e08eff2443a8e756d865d4b5f2d75653f9c721651d846cf0d3421e61c586a41932b5b1b1b0d4645a0300158a08a46a4d5d52d3645b6fa2050ad4a24811080830fc961f45ecdfc75afd64646810d2877936142bbceb185f9ada1bb4a58e52ec49ab01c7da28c8868e"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000ccc9c2b29072e1c609305aa08d342832ed92857b7e48cc4eb0bce848a2cb063c1775306d5a3cee330afcb97501f26d986098210d90320e4398e7da179184cded50867bd80ff7a0bc49676752e2ac6e07c1a8345b990a77071c532fd50ecc479499d8dfddbeff5ea0b08ea6a7b7c7dd2f87cd6698f8540375a7e655d17a50e94050216a77ad0a33bbc6cbf0c3c1392c30c4f25a0f46965f603042c091e642d403894104dd52", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x24) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x0, &(0x7f0000001140)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000600000000000000000000000181100", @ANYRES32=r2, @ANYRESHEX=r3, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) 13.536269999s ago: executing program 2 (id=3425): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000180)='1', 0x1) 12.568105016s ago: executing program 7 (id=3426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000bc0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r7) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) accept$alg(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) 10.325053089s ago: executing program 5 (id=3427): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 10.154588586s ago: executing program 5 (id=3428): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x800, 0x7, {{0x17, 0x4, 0x2, 0x6, 0x5c, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@generic={0x82, 0x2}, @ra={0x94, 0x4, 0x8}, @rr={0x7, 0xb, 0x52, [@empty, @rand_addr=0x64010101]}, @noop, @end, @rr={0x7, 0xf, 0x48, [@rand_addr=0x64010101, @private=0xa010101, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff1b}, {@loopback, 0xfffffff7}, {@private=0xa010102, 0x6}, {@local, 0x4}]}, @noop, @noop]}}}}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) 8.983040317s ago: executing program 5 (id=3429): syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.953696571s ago: executing program 2 (id=3430): accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(0x0, 0xecf86c37d53049e1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(0xffffffffffffffff) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 7.939572064s ago: executing program 9 (id=3431): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfff, @empty}, 0x1c) shutdown(r5, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) 7.852269078s ago: executing program 4 (id=3432): mlockall(0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) 6.485261048s ago: executing program 7 (id=3433): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x200000dc, 0x105182) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.464745803s ago: executing program 9 (id=3434): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)="9003796ce35f", 0x6}], 0x1) 6.384259041s ago: executing program 2 (id=3435): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000380)=""/72, 0x48, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x400, 0x22725}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20042800}, 0x24040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.497868505s ago: executing program 7 (id=3436): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x800, 0x7, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@generic={0x82, 0x2}, @ra={0x94, 0x4, 0x8}, @rr={0x7, 0xb, 0x52, [@empty, @rand_addr=0x64010101]}, @noop, @end, @rr={0x7, 0xf, 0x48, [@rand_addr=0x64010101, @private=0xa010101, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff1b}, {@private=0xa010102, 0x6}, {@local, 0x4}]}, @noop, @noop]}}}}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) 5.497448156s ago: executing program 5 (id=3437): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000d80), 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) socket(0x848000000015, 0x805, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 5.181449813s ago: executing program 9 (id=3438): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000000)={0x7, @raw_data="5499691b9331ff660dcfbb4a4030d50162cec25135f460c6161836e6518ff2908cb455fe96a102cf242d1f2e85dfec97edc39a9e5bca0237c72f37dbae62ac536d93baa88740ae6ae52186ab3061b5c60b4563d6d937e1fbd7690ebb5d85aaa7e08eff2443a8e756d865d4b5f2d75653f9c721651d846cf0d3421e61c586a41932b5b1b1b0d4645a0300158a08a46a4d5d52d3645b6fa2050ad4a24811080830fc961f45ecdfc75afd64646810d2877936142bbceb185f9ada1bb4a58e52ec49ab01c7da28c8868e"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000ccc9c2b29072e1c609305aa08d342832ed92857b7e48cc4eb0bce848a2cb063c1775306d5a3cee330afcb97501f26d986098210d90320e4398e7da179184cded50867bd80ff7a0bc49676752e2ac6e07c1a8345b990a77071c532fd50ecc479499d8dfddbeff5ea0b08ea6a7b7c7dd2f87cd6698f8540375a7e655d17a50e94050216a77ad0a33bbc6cbf0c3c1392c30c4f25a0f46965f603042c091e642d403894104dd52", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x24) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x50) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x0, &(0x7f0000001140)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000600000000000000000000000181100", @ANYRES32=r2, @ANYRESHEX=r3, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) 4.286714821s ago: executing program 7 (id=3439): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 2.891002471s ago: executing program 5 (id=3440): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') recvfrom(r0, &(0x7f0000000e00)=""/72, 0x48, 0x40002140, &(0x7f0000000e80)=@phonet={0x23, 0x80, 0x11, 0x9}, 0x80) r1 = syz_usb_connect$cdc_ecm(0x4, 0xdc, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x1, 0x1, 0x2, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x97, 0x3, 0x2, 0x6, 0x0, 0xda, {{0xa, 0x24, 0x6, 0x0, 0x0, "bd17d99fef"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x318c, 0x0, 0xfffb}, [@ncm={0x6, 0x24, 0x1a, 0x2}, @mdlm_detail={0x68, 0x24, 0x13, 0x1, "5351fc65cbc845efbf0e4a7f30ec7f97260cf7c59a92a229b1baa0c59add9fbe920f89b79b07c0355a5456f017e55b0f94e8d1d4b9775dda22c6575c3c7f53b88cc65871eb75a2253e05bb223b31c71102bb46ad7519da88738603df585a48d64d7ea095"}, @dmm={0x7, 0x24, 0x14, 0xb0, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x57, 0x7ff, 0x9c, 0x56, 0x9, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0xf, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x13, &(0x7f0000000240)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x4, 0xa34}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0x3, 0x9}]}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0xe5, &(0x7f0000000340)=@string={0xe5, 0x3, "ca21f6f69b57871b1f6d530cfdb76b0f8d8beb44ef62d1ca624fe7e2fdbb215f7fac0b1d260ddd2951f32d8c6ea34faafc192aae392ab76c31b754cd0389544e47a7a08f67ca4db22cb415ddbb92fdfc8c7e46679e5dcdc93e396f749d14fd32233ab84d06a1c56048014b6939c141a640230b27ec0ea93df0db58197b961711a83d053e5d6f1bdcfa1db3c20d1f5e099ee5a85c4a0c66657b0276da6c9d42997d628bc06a211347151825a9690e4e111c5ea71fb0f55a7f375098dc2c838a34422bb569c3c8e9dd77cab1585373d82d39826d571d1d0b05f6ef157ef1392f052abd0c"}}, {0xb8, &(0x7f0000000440)=@string={0xb8, 0x3, "1aee018acd8abd760e60af292fd7199ea5a45b572341ae5bb40a6ab59cbc2d6b2bf10c27c6905c9d1d402fedbf3c8b1695669f9e3f8b94de780653267ee619148b6b28e9c582bc4e30e9374712dd5c673280420a13e87d37387bd1d2a20b144c7dc48df4d420bb151ba7b89316328d08526d4ff047a5cd94b94339f35f4227d054cc1e91c9bc74617bd3b9d033a94db74b13c8297ba0189e0650fee18ce875dbcc7afcf38ad89993cdd260bb37ae2fb49dfdf67527de"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x411}}, {0x8f, &(0x7f0000000580)=@string={0x8f, 0x3, "fd04dc85ec15e4b02cc79a04cd1181c7861e067435a7a480adcf7653b6cbc0bb9e4605ae85c6e6d89b91f6edbbc1be68c3b2e7a711c946d0c8bca4c4636cb7e72067db9facb054a285dc022eacfb81c26b9172cf4e090513bf60f4008583734dc5572f53f9795c35b3943d589730755d1b092ac16917b3b3c50a273537cfd9d4c095f1cf27c056758262a11051"}}, {0x0, 0x0}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008600)={0x14, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000940)={0x2c, &(0x7f00000007c0)={0x0, 0x22, 0x5e, {0x5e, 0x2, "58fbeb840ad1e2162c2c27e458c5f9c5f6fae4cc56434a42bbfe53f3306d8b6bbad6fd94ad34621055a0ced256ec8d685b4fe1077aa98e07ba24d4e7d869a2bb0a3f0f295eecba854e0ec85e01e782dd89e3756cad65fcd79f5d5b8d"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f0000000880)={0x0, 0xf, 0x15, {0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x41, 0x1, 0x7, 0xf, 0x3, [0xf]}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x5, 0x2, 'E\rs}', "01db0385"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0x0, 0xff, 0x3, 0x7fff, 0x466}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x0, 0x17}, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2}}, 0x0, &(0x7f0000000ac0)={0x40, 0x7, 0x2}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "e69e"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "d851"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0xd}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xac}, &(0x7f0000000d40)={0x40, 0x21, 0x1}}) 2.290867079s ago: executing program 9 (id=3441): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000180)='1', 0x1) 527.74857ms ago: executing program 9 (id=3442): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 479.64051ms ago: executing program 7 (id=3443): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000f7ffffff00e0000002"], 0xb8}}, 0x4004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, 0x0}}], 0x2, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x80, 0x8000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c0002800500010000000900240002"], 0xa8}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 372.402585ms ago: executing program 4 (id=3444): syz_usb_connect$cdc_ncm(0x4, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x2, 0x1, 0x6, 0x0, 0xf5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4e, 0x663, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x81, 0x3, 0x1, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0xd, 0x5, 0x7f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xdc, 0x1, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x2, 0x10}}}}}}}]}}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 62.220248ms ago: executing program 9 (id=3445): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x28, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=3446): accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) creat(0x0, 0xecf86c37d53049e1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3c, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x11}, 0x1, 0x0, 0x0, 0xc000}, 0x400c801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(0xffffffffffffffff) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): olve the problem. [ 1425.103683][T16666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.326768][T16906] program syz.7.2816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1426.191699][ T61] hsr_slave_0: left promiscuous mode [ 1426.217588][ T61] hsr_slave_1: left promiscuous mode [ 1426.242191][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1426.249677][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.166417][T16919] program syz.2.2819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1427.362662][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1427.370295][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.714465][ T61] veth1_macvtap: left promiscuous mode [ 1427.720069][ T61] veth0_macvtap: left promiscuous mode [ 1427.732063][ T61] veth1_vlan: left promiscuous mode [ 1427.737485][ T61] veth0_vlan: left promiscuous mode [ 1430.689053][T16940] loop4: detected capacity change from 0 to 512 [ 1430.830894][T16940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1430.868482][T16925] loop2: detected capacity change from 0 to 32768 [ 1430.955423][T16940] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1430.982712][T16940] EXT4-fs (loop4): 1 truncate cleaned up [ 1430.990671][T16940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.031030][T16925] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1431.165410][T16925] syz.2.2822 (16925) used greatest stack depth: 17928 bytes left [ 1431.306917][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.365622][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 1432.515296][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1432.599794][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1434.675986][T16916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1434.748645][T16666] hsr_slave_0: entered promiscuous mode [ 1434.773218][T16666] hsr_slave_1: entered promiscuous mode [ 1435.153973][T16972] fuse: Bad value for 'rootmode' [ 1435.292693][T16975] 9pnet_fd: Insufficient options for proto=fd [ 1439.036273][T16666] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1439.135592][T16666] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1439.232493][T16666] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1439.296928][T16666] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1439.471536][ T7077] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1439.799015][T17020] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1439.831112][ T7077] usb 2-1: Using ep0 maxpacket: 32 [ 1440.034718][ T7077] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1440.104046][ T61] IPVS: stop unused estimator thread 0... [ 1440.145377][ T7077] usb 2-1: config 0 has no interface number 0 [ 1440.228638][ T7077] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1440.291615][ T7077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.338546][ T7077] usb 2-1: Product: syz [ 1440.358966][ T7077] usb 2-1: Manufacturer: syz [ 1440.384510][ T7077] usb 2-1: SerialNumber: syz [ 1440.654949][ T7077] usb 2-1: config 0 descriptor?? [ 1440.668178][ T7077] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1440.686893][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.694583][ T7077] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1441.488841][ T7077] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1441.511533][ T7077] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 1441.703934][T13567] usb 2-1: USB disconnect, device number 19 [ 1441.829854][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.305038][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1442.312290][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.067666][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.074875][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.045072][T16666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1445.383359][T17080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1446.905119][ T30] audit: type=1804 audit(2000000114.589:9): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2860" name="/newroot/536/bus/bus" dev="overlay" ino=2926 res=1 errno=0 [ 1447.066353][T17103] program syz.5.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1448.384864][ T30] audit: type=1804 audit(2000000116.779:10): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2860" name="/newroot/536/bus/bus" dev="overlay" ino=2926 res=1 errno=0 [ 1448.877654][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.801528][ T5892] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1450.204673][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 1450.241203][ T5892] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1450.279419][ T5892] usb 3-1: config 0 has no interface number 0 [ 1450.466714][ T5892] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1450.518812][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.570314][ T5892] usb 3-1: Product: syz [ 1450.838815][ T5892] usb 3-1: Manufacturer: syz [ 1450.877149][ T5892] usb 3-1: SerialNumber: syz [ 1450.927799][ T5892] usb 3-1: config 0 descriptor?? [ 1450.938147][ T5892] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1450.946367][ T5892] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1451.155697][ T5892] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1451.221026][ T5892] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1451.580569][ T5892] usb 3-1: USB disconnect, device number 18 [ 1452.357761][T17165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1453.340208][T16666] veth0_vlan: entered promiscuous mode [ 1455.313533][T16666] veth1_vlan: entered promiscuous mode [ 1455.430360][T17184] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1455.436948][T17184] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1455.459005][T17184] vhci_hcd vhci_hcd.0: Device attached [ 1455.520206][T16666] veth0_macvtap: entered promiscuous mode [ 1455.537267][T17189] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 1455.543928][T17189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1455.601823][T17192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1455.631548][T13567] vhci_hcd: vhci_device speed not set [ 1456.315111][T16666] veth1_macvtap: entered promiscuous mode [ 1456.328622][T17189] vhci_hcd vhci_hcd.0: Device attached [ 1456.344510][T17184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1456.402408][T13567] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1456.452266][T16666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.464785][T17184] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 1456.471425][T17184] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1456.517203][T17207] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 1456.523855][T17207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1456.591548][T16666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.594391][T17189] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 1456.605386][T17189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1456.679027][T16666] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.705296][T17184] vhci_hcd vhci_hcd.0: Device attached [ 1456.735655][T17214] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1456.759873][T16666] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.794728][T17215] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1456.801307][T17215] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1456.821623][T16666] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.830390][T16666] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.840627][T17207] vhci_hcd vhci_hcd.0: Device attached [ 1456.861514][T17215] vhci_hcd vhci_hcd.0: Device attached [ 1456.883365][T17189] vhci_hcd vhci_hcd.0: Device attached [ 1456.911036][T17215] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 1456.917692][T17215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1456.930137][T17217] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1456.952682][T17223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1456.977578][T17215] vhci_hcd vhci_hcd.0: Device attached [ 1457.013196][T17184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1457.049013][T17223] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 1457.055676][T17223] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1457.063796][T15058] vhci_hcd: vhci_device speed not set [ 1457.073679][T17223] vhci_hcd vhci_hcd.0: Device attached [ 1457.091701][T17184] vhci_hcd vhci_hcd.0: port 0 already used [ 1457.126292][T15058] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1457.318085][T17196] vhci_hcd: connection closed [ 1457.318230][T14997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.331137][ T61] vhci_hcd: stop threads [ 1457.331764][T17206] vhci_hcd: connection closed [ 1457.335750][T17208] vhci_hcd: connection closed [ 1457.350715][T17185] vhci_hcd: connection reset by peer [ 1457.351410][T14997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.355590][T17190] vhci_hcd: connection closed [ 1457.380346][T17246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1457.403329][ T61] vhci_hcd: release socket [ 1457.411524][ T61] vhci_hcd: disconnect device [ 1457.426541][T17223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 1457.433199][T17223] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1457.439324][ T61] vhci_hcd: stop threads [ 1457.471478][ T61] vhci_hcd: release socket [ 1457.476086][ T61] vhci_hcd: disconnect device [ 1457.515206][ T61] vhci_hcd: stop threads [ 1457.519502][ T61] vhci_hcd: release socket [ 1457.526259][T17215] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 1457.532885][T17215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1457.592964][ T61] vhci_hcd: disconnect device [ 1457.618388][ T61] vhci_hcd: stop threads [ 1457.629367][T17223] vhci_hcd vhci_hcd.0: Device attached [ 1457.629966][T17246] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1457.635053][ T61] vhci_hcd: release socket [ 1457.658500][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1457.671627][T17215] vhci_hcd vhci_hcd.0: Device attached [ 1457.678883][ T61] vhci_hcd: disconnect device [ 1457.700745][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.711554][ T61] vhci_hcd: stop threads [ 1457.715811][ T61] vhci_hcd: release socket [ 1457.951540][ T61] vhci_hcd: disconnect device [ 1458.352335][T17259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1458.377436][T17215] vhci_hcd vhci_hcd.0: port 0 already used [ 1458.636251][T17242] vhci_hcd: connection closed [ 1458.636552][T15000] vhci_hcd: stop threads [ 1458.646115][T17241] vhci_hcd: connection closed [ 1458.651471][T17220] vhci_hcd: connection closed [ 1458.652876][T17225] vhci_hcd: connection closed [ 1458.671543][T17216] vhci_hcd: connection reset by peer [ 1458.692028][T15000] vhci_hcd: release socket [ 1458.748287][T15000] vhci_hcd: disconnect device [ 1458.793554][T15000] vhci_hcd: stop threads [ 1458.840717][T15000] vhci_hcd: release socket [ 1458.905652][T15000] vhci_hcd: disconnect device [ 1459.027255][T15000] vhci_hcd: stop threads [ 1459.275576][T15000] vhci_hcd: release socket [ 1459.310592][T15000] vhci_hcd: disconnect device [ 1459.451265][T15000] vhci_hcd: stop threads [ 1459.468101][T15000] vhci_hcd: release socket [ 1459.530844][T15000] vhci_hcd: disconnect device [ 1459.541560][ T30] audit: type=1326 audit(2000000128.169:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.631801][T15000] vhci_hcd: stop threads [ 1459.637206][T15000] vhci_hcd: release socket [ 1459.646543][T15000] vhci_hcd: disconnect device [ 1459.652280][ T30] audit: type=1326 audit(2000000128.189:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.678377][ T30] audit: type=1326 audit(2000000128.289:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.703480][ T30] audit: type=1326 audit(2000000128.289:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.726059][ T30] audit: type=1326 audit(2000000128.289:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.749000][ T5892] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1459.833907][ T30] audit: type=1326 audit(2000000128.289:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1459.958474][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 1459.980262][ T5892] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1459.989565][ T30] audit: type=1326 audit(2000000128.289:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1460.052901][ T5892] usb 6-1: config 0 has no interface number 0 [ 1460.111445][ T30] audit: type=1326 audit(2000000128.289:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1460.405004][T17295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1461.226473][ T5892] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1461.407684][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.509225][ T5892] usb 6-1: Product: syz [ 1461.551848][ T5892] usb 6-1: Manufacturer: syz [ 1461.561510][T13567] vhci_hcd: vhci_device speed not set [ 1461.568153][ T30] audit: type=1804 audit(2000000130.159:19): pid=17299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2883" name="/newroot/539/bus/bus" dev="tmpfs" ino=2952 res=1 errno=0 [ 1461.633338][ T5892] usb 6-1: SerialNumber: syz [ 1461.770426][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1461.779995][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1461.788553][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1461.797959][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1461.806582][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1461.816044][ T5892] usb 6-1: config 0 descriptor?? [ 1461.867599][ T5892] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1461.964105][ T5892] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1462.764193][T15058] vhci_hcd: vhci_device speed not set [ 1462.769773][ T5892] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1462.829769][T17302] lo speed is unknown, defaulting to 1000 [ 1463.053428][ T5892] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1463.107207][ T5892] usb 6-1: USB disconnect, device number 20 [ 1463.139942][T17342] 9pnet_fd: Insufficient options for proto=fd [ 1463.642849][ T5977] usb usb36-port1: attempt power cycle [ 1463.901546][ T5842] Bluetooth: hci6: command tx timeout [ 1464.965072][ T5977] usb usb36-port1: unable to enumerate USB device [ 1465.402433][T13567] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1465.664274][ T5890] usb usb38-port1: attempt power cycle [ 1465.733830][T17387] program syz.4.2891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1465.844556][T13567] usb 8-1: Using ep0 maxpacket: 32 [ 1465.852019][T13567] usb 8-1: config 0 has an invalid interface number: 153 but max is 0 [ 1465.867640][T13567] usb 8-1: config 0 has no interface number 0 [ 1465.883221][T13567] usb 8-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1465.896683][T13567] usb 8-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1466.021777][ T5842] Bluetooth: hci6: command tx timeout [ 1466.137419][T13567] usb 8-1: Product: syz [ 1466.141761][T13567] usb 8-1: Manufacturer: syz [ 1466.146386][T13567] usb 8-1: SerialNumber: syz [ 1466.154466][T13567] usb 8-1: config 0 descriptor?? [ 1466.387448][ T5890] usb usb38-port1: unable to enumerate USB device [ 1466.711796][T13567] sierra 8-1:0.153: Sierra USB modem converter detected [ 1466.886680][T13567] usb 8-1: USB disconnect, device number 11 [ 1466.902362][T13567] sierra 8-1:0.153: device disconnected [ 1467.025834][ T30] audit: type=1326 audit(2000000135.659:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1467.107694][ T30] audit: type=1326 audit(2000000135.679:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1467.266846][ T30] audit: type=1326 audit(2000000135.679:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1467.297104][ T30] audit: type=1326 audit(2000000135.679:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.051816][ T5842] Bluetooth: hci6: command tx timeout [ 1468.135231][ T30] audit: type=1326 audit(2000000135.679:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.211317][ T30] audit: type=1326 audit(2000000135.679:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.251543][ T30] audit: type=1326 audit(2000000135.679:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.278280][ T3513] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.332774][ T30] audit: type=1326 audit(2000000135.679:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.396740][T17464] loop2: detected capacity change from 0 to 1024 [ 1468.425724][T17464] EXT4-fs: Ignoring removed nobh option [ 1468.441044][ T30] audit: type=1326 audit(2000000135.679:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1468.477740][T17464] EXT4-fs: Ignoring removed bh option [ 1468.530103][T17459] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1468.697650][ T30] audit: type=1326 audit(2000000135.679:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa47898e969 code=0x7ffc0000 [ 1469.565391][T17464] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.2897: bad orphan inode 32767 [ 1469.658012][ T3513] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.793844][T17464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.131872][ T5842] Bluetooth: hci6: command tx timeout [ 1470.616249][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.683834][ T3513] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.557728][T17302] chnl_net:caif_netlink_parms(): no params data found [ 1472.063287][ T3513] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.118855][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1473.118873][ T30] audit: type=1804 audit(2000000141.749:33): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2909" name="/newroot/544/bus/bus" dev="overlay" ino=2998 res=1 errno=0 [ 1473.349780][ T30] audit: type=1804 audit(2000000141.789:34): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2909" name="/newroot/544/bus/bus" dev="overlay" ino=2998 res=1 errno=0 [ 1474.984074][T17612] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1475.615534][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.661679][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.699728][T17302] bridge_slave_0: entered allmulticast mode [ 1475.762875][T17302] bridge_slave_0: entered promiscuous mode [ 1475.804073][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.822665][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.858582][T17302] bridge_slave_1: entered allmulticast mode [ 1476.073745][T17302] bridge_slave_1: entered promiscuous mode [ 1476.241694][T17672] program syz.2.2916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1476.944915][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.030732][ T3513] bridge_slave_1: left allmulticast mode [ 1477.045242][ T3513] bridge_slave_1: left promiscuous mode [ 1477.052755][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.173867][ T3513] bridge_slave_0: left allmulticast mode [ 1477.179574][ T3513] bridge_slave_0: left promiscuous mode [ 1477.441649][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.518906][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.678059][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.776565][ T3513] bond0 (unregistering): Released all slaves [ 1483.224786][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.435192][T17736] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1483.980989][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.991589][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.016848][T17777] 9pnet_fd: Insufficient options for proto=fd [ 1484.544971][T17788] loop4: detected capacity change from 0 to 4096 [ 1485.806778][T17302] team0: Port device team_slave_0 added [ 1486.058237][T17824] loop1: detected capacity change from 0 to 1024 [ 1486.096287][T17824] EXT4-fs: Ignoring removed nobh option [ 1486.121181][T17824] EXT4-fs: Ignoring removed bh option [ 1486.239602][T17824] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2935: bad orphan inode 32767 [ 1486.318138][T17824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1488.712467][T17302] team0: Port device team_slave_1 added [ 1488.795320][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.107027][ T3513] hsr_slave_0: left promiscuous mode [ 1489.151580][ T3513] hsr_slave_1: left promiscuous mode [ 1489.179040][ T30] audit: type=1800 audit(2000000157.809:35): pid=17872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2938" name="bus" dev="overlay" ino=1679 res=0 errno=0 [ 1489.384562][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.440471][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.485018][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.579514][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.618609][T17878] program syz.1.2937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1489.750690][ T3513] veth1_macvtap: left promiscuous mode [ 1490.008146][ T3513] veth0_macvtap: left promiscuous mode [ 1490.766538][ T3513] veth1_vlan: left promiscuous mode [ 1490.796763][ T3513] veth0_vlan: left promiscuous mode [ 1491.028080][T17896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.020093][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 1494.242460][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 1494.748150][T17922] loop2: detected capacity change from 0 to 1024 [ 1494.867897][T17922] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1495.513362][T17919] loop1: detected capacity change from 0 to 32768 [ 1495.549889][T17919] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2943 (17919) [ 1495.751852][T17919] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1495.769256][T17919] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 1495.779820][T17919] BTRFS info (device loop1): using free-space-tree [ 1496.388175][ T5832] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1496.562112][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.579402][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.655066][T17956] loop5: detected capacity change from 0 to 4096 [ 1496.664169][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.717013][T17886] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1496.833102][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.840108][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.005036][T17956] ntfs3(loop5): ino=1a, mi_enum_attr [ 1497.019368][T17956] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1497.035994][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.656487][T17302] hsr_slave_0: entered promiscuous mode [ 1497.677295][T18007] loop2: detected capacity change from 0 to 128 [ 1497.695679][T17302] hsr_slave_1: entered promiscuous mode [ 1497.729143][T18007] EXT4-fs: Ignoring removed nobh option [ 1497.843255][T18007] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1497.935231][T18007] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1499.127648][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1499.896894][T17972] loop4: detected capacity change from 0 to 32768 [ 1500.127720][T17972] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 1500.409890][T18113] program syz.1.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.554623][T17972] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1500.554623][T17972] allowing incompatible features above 0.0: (unknown version) [ 1500.554623][T17972] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1500.662093][T17972] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1500.723891][T17972] bcachefs (loop4): Version upgrade required: [ 1500.723891][T17972] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1500.723891][T17972] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 1500.723891][T17972] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 1500.964722][T17972] bcachefs (loop4): dropping and reconstructing all alloc info [ 1500.994500][T17972] syz.4.2950: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1501.011749][T17972] CPU: 0 UID: 0 PID: 17972 Comm: syz.4.2950 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1501.011782][T17972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1501.011798][T17972] Call Trace: [ 1501.011807][T17972] [ 1501.011814][T17972] dump_stack_lvl+0x189/0x250 [ 1501.011851][T17972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1501.011879][T17972] ? __pfx__printk+0x10/0x10 [ 1501.011900][T17972] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1501.011930][T17972] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1501.011960][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.011981][T17972] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1501.012013][T17972] warn_alloc+0x214/0x310 [ 1501.012037][T17972] ? __pfx_warn_alloc+0x10/0x10 [ 1501.012061][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012082][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012102][T17972] ? __get_vm_area_node+0x28f/0x300 [ 1501.012130][T17972] ? bch2_fs_journal_start+0x480/0x1500 [ 1501.012162][T17972] __vmalloc_node_range_noprof+0x67e/0x1340 [ 1501.012218][T17972] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1501.012246][T17972] ? __kasan_kmalloc_large+0x1c/0xa0 [ 1501.012275][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012295][T17972] ? rcu_is_watching+0x15/0xb0 [ 1501.012322][T17972] ? bch2_fs_journal_start+0x480/0x1500 [ 1501.012349][T17972] ? bch2_fs_journal_start+0x480/0x1500 [ 1501.012374][T17972] __kvmalloc_node_noprof+0x3bf/0x600 [ 1501.012402][T17972] ? bch2_fs_journal_start+0x480/0x1500 [ 1501.012436][T17972] bch2_fs_journal_start+0x480/0x1500 [ 1501.012478][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012505][T17972] ? bch2_journal_log_msg+0xd9/0x120 [ 1501.012528][T17972] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 1501.012557][T17972] ? __pfx_bch2_journal_log_msg+0x10/0x10 [ 1501.012579][T17972] ? bch2_reconstruct_alloc+0x32b/0x360 [ 1501.012607][T17972] bch2_fs_recovery+0x20ca/0x3970 [ 1501.012624][T17972] ? check_noncircular+0xe0/0x160 [ 1501.012666][T17972] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 1501.012700][T17972] ? __lock_acquire+0xab9/0xd20 [ 1501.012734][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012755][T17972] ? __lock_acquire+0xab9/0xd20 [ 1501.012786][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012806][T17972] ? __lock_acquire+0xab9/0xd20 [ 1501.012849][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.012873][T17972] ? bch2_fs_start+0x9a3/0xd30 [ 1501.012895][T17972] ? up_write+0x1c4/0x420 [ 1501.012916][T17972] bch2_fs_start+0xa43/0xd30 [ 1501.012938][T17972] ? bch2_fs_start+0x575/0xd30 [ 1501.012959][T17972] ? __pfx_bch2_fs_start+0x10/0x10 [ 1501.012997][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013018][T17972] ? sget+0x28a/0x650 [ 1501.013045][T17972] bch2_fs_get_tree+0xbfc/0x15f0 [ 1501.013089][T17972] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 1501.013128][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013148][T17972] ? aa_get_newest_label+0xf7/0x5d0 [ 1501.013171][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013192][T17972] ? vfs_parse_monolithic_sep+0x2df/0x310 [ 1501.013232][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013253][T17972] ? apparmor_capable+0x137/0x1b0 [ 1501.013283][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013307][T17972] vfs_get_tree+0x92/0x2b0 [ 1501.013336][T17972] do_new_mount+0x24a/0xa40 [ 1501.013372][T17972] __se_sys_mount+0x317/0x410 [ 1501.013406][T17972] ? __pfx___se_sys_mount+0x10/0x10 [ 1501.013432][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013459][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013480][T17972] ? __x64_sys_mount+0x20/0xc0 [ 1501.013516][T17972] do_syscall_64+0xfa/0x3b0 [ 1501.013539][T17972] ? lockdep_hardirqs_on+0x9c/0x150 [ 1501.013561][T17972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.013578][T17972] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1501.013599][T17972] ? exc_page_fault+0x9f/0xf0 [ 1501.013623][T17972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.013640][T17972] RIP: 0033:0x7fa47899010a [ 1501.013657][T17972] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.013673][T17972] RSP: 002b:00007fa4798c7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1501.013692][T17972] RAX: ffffffffffffffda RBX: 00007fa4798c7ef0 RCX: 00007fa47899010a [ 1501.013706][T17972] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 00007fa4798c7eb0 [ 1501.013720][T17972] RBP: 00002000000000c0 R08: 00007fa4798c7ef0 R09: 0000000000800000 [ 1501.013732][T17972] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000180 [ 1501.013745][T17972] R13: 00007fa4798c7eb0 R14: 0000000000005921 R15: 0000200000000480 [ 1501.013773][T17972] [ 1501.013780][T17972] Mem-Info: [ 1501.511033][T17972] active_anon:19690 inactive_anon:0 isolated_anon:0 [ 1501.511033][T17972] active_file:1447 inactive_file:23019 isolated_file:0 [ 1501.511033][T17972] unevictable:768 dirty:140 writeback:0 [ 1501.511033][T17972] slab_reclaimable:10644 slab_unreclaimable:107441 [ 1501.511033][T17972] mapped:37976 shmem:12262 pagetables:1371 [ 1501.511033][T17972] sec_pagetables:0 bounce:0 [ 1501.511033][T17972] kernel_misc_reclaimable:0 [ 1501.511033][T17972] free:1316186 free_pcp:724 free_cma:0 [ 1501.557251][T17972] Node 0 active_anon:78960kB inactive_anon:0kB active_file:5788kB inactive_file:91936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151904kB dirty:560kB writeback:0kB shmem:47812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12456kB pagetables:5484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1501.620168][T17972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1501.684846][T18137] loop1: detected capacity change from 0 to 128 [ 1501.692687][T18137] EXT4-fs: Ignoring removed nobh option [ 1501.716028][T18137] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1501.732417][T18126] block nbd7: shutting down sockets [ 1501.737780][T17972] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.783202][T17972] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1501.830895][T18079] loop2: detected capacity change from 0 to 32768 [ 1501.903507][T18137] ext4 filesystem being mounted at /553/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.004464][T17972] Node 0 DMA32 free:1326028kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:77480kB inactive_anon:0kB active_file:5756kB inactive_file:90216kB unevictable:1536kB writepending:560kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:3888kB local_pcp:3076kB free_cma:0kB [ 1502.021085][T18079] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1502.104289][T17972] lowmem_reserve[]: 0 0 1 1 1 [ 1502.109101][T17972] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:80kB inactive_anon:0kB active_file:32kB inactive_file:1720kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1502.161090][T17972] lowmem_reserve[]: 0 0 0 0 0 [ 1502.272074][T17972] Node 1 Normal free:3922840kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1502.386055][T17972] lowmem_reserve[]: 0 0 0 0 0 [ 1502.391638][T17972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1502.405863][T17972] Node 0 DMA32: 477*4kB (UME) 678*8kB (UME) 265*16kB (UME) 72*32kB (UME) 85*64kB (UM) 6*128kB (UME) 3*256kB (UME) 2*512kB (UM) 0*1024kB 5*2048kB (UME) 312*4096kB (M) = 1310068kB [ 1502.423963][T17972] Node 0 Normal: 3*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1502.436717][T17972] Node 1 Normal: 184*4kB (UME) 59*8kB (UME) 36*16kB (UME) 205*32kB (UME) 92*64kB (UME) 28*128kB (UME) 14*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 950*4096kB (ME) = 3922840kB [ 1502.733594][T17972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1502.943993][T18169] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1503.026059][T17972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1503.035513][T17972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1503.045225][T17972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1503.054918][T17972] 39913 total pagecache pages [ 1503.059642][T17972] 0 pages in swap cache [ 1503.063910][T17972] Free swap = 124996kB [ 1503.068071][T17972] Total swap = 124996kB [ 1503.072284][T17972] 2097051 pages RAM [ 1503.076187][T17972] 0 pages HighMem/MovableOnly [ 1503.080864][T17972] 424631 pages reserved [ 1503.085065][T17972] 0 pages cma reserved [ 1503.116681][T17972] bcachefs (loop4): error reallocating journal fifo (32768 open entries) [ 1503.193417][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1503.205404][T18079] XFS (loop2): Ending clean mount [ 1503.235293][T17972] bcachefs (loop4): error in recovery: ENOMEM_journal_pin_fifoemergency read only at seq 0 [ 1503.240329][T17302] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1503.306119][T17972] bcachefs (loop4): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 1503.310107][T18079] XFS (loop2): Quotacheck needed: Please wait. [ 1503.335708][T17302] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1503.351581][T17972] bcachefs (loop4): shutting down [ 1503.416726][T17972] bcachefs (loop4): shutdown complete [ 1503.463133][T17302] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1503.511639][T18079] XFS (loop2): Quotacheck: Done. [ 1503.550079][T17302] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1503.622156][ T5828] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1504.393102][T18194] input: syz0 as /devices/virtual/input/input25 [ 1504.772825][T17302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.800445][T17302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.910628][T15000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.917860][T15000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.102667][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.109930][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.291816][T18215] fuse: Unknown parameter 'group_id00000000000000000000' [ 1506.316759][T18233] loop1: detected capacity change from 0 to 4096 [ 1506.592789][T18244] fuse: Unknown parameter 'use00000000000000000000' [ 1506.809220][T17302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.819092][T18249] bio_check_eod: 14 callbacks suppressed [ 1506.819113][T18249] syz.2.2971: attempt to access beyond end of device [ 1506.819113][T18249] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1506.852335][T18249] syz.2.2971: attempt to access beyond end of device [ 1506.852335][T18249] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1506.931209][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1506.975589][T17972] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 1507.158877][T18259] loop1: detected capacity change from 0 to 2048 [ 1507.972062][T18264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1508.022206][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.022206][T18249] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1508.082627][T18259] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1508.156450][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1508.371569][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.371569][T18249] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1508.392567][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.392567][T18249] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1508.411383][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1508.431547][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.431547][T18249] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1508.447668][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1508.490740][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.490740][T18249] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1508.508987][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.508987][T18249] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1508.530899][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1508.532953][T15676] udevd[15676]: incorrect nilfs2 checksum on /dev/loop1 [ 1508.554539][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.554539][T18249] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1508.570306][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1508.598043][T18249] syz.2.2971: attempt to access beyond end of device [ 1508.598043][T18249] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1508.617204][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1508.631530][T18249] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1508.641289][T18249] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1509.129913][T18282] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1509.174447][T15676] udevd[15676]: incorrect nilfs2 checksum on /dev/loop1 [ 1509.400085][ T30] audit: type=1800 audit(2000000177.979:36): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2972" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1510.356881][T18299] loop4: detected capacity change from 0 to 8 [ 1510.488667][T18299] overlayfs: failed to resolve './file1': -2 [ 1511.409062][T17302] veth0_vlan: entered promiscuous mode [ 1511.567005][ T5842] Bluetooth: hci6: link tx timeout [ 1511.572580][ T5842] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.600668][T17302] veth1_vlan: entered promiscuous mode [ 1511.603663][T18307] loop1: detected capacity change from 0 to 4096 [ 1511.619441][ T8962] Bluetooth: hci6: link tx timeout [ 1511.625246][ T8962] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.641561][ T8962] Bluetooth: hci6: link tx timeout [ 1511.646694][ T8962] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.659785][ T8962] Bluetooth: hci6: link tx timeout [ 1511.664963][ T8962] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.675787][ T8962] Bluetooth: hci6: link tx timeout [ 1511.680922][ T8962] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.688831][ T8962] Bluetooth: hci6: link tx timeout [ 1511.694274][ T8962] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.857957][T18307] ntfs3(loop1): ino=1a, mi_enum_attr [ 1511.879887][T18307] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1511.956242][T17302] veth0_macvtap: entered promiscuous mode [ 1512.018718][T17302] veth1_macvtap: entered promiscuous mode [ 1512.136198][T17302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.197004][T17302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.348842][T17302] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.405985][T17302] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.458738][T17302] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.482945][T18339] fuse: Unknown parameter 'use00000000000000000000' [ 1512.511467][T17302] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.916961][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.950404][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.080062][T18357] loop2: detected capacity change from 0 to 2048 [ 1513.130018][T18349] loop1: detected capacity change from 0 to 4096 [ 1513.178731][T18357] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 1513.536567][T18357] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1513.757786][ T8962] Bluetooth: hci6: command 0x0406 tx timeout [ 1513.838752][T18368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1514.006942][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.027367][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.043646][T18357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.112140][T18377] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1514.148513][ T30] audit: type=1800 audit(2000000182.779:37): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2985" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1517.462668][T18396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1517.799430][ T5891] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1518.105499][T18397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1518.112067][T18397] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1518.520337][T18399] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 1518.526992][T18399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1518.658463][T18397] vhci_hcd vhci_hcd.0: Device attached [ 1519.172130][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 1519.202311][ T5891] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1519.220339][T18399] vhci_hcd vhci_hcd.0: Device attached [ 1519.226118][ T5827] vhci_hcd: vhci_device speed not set [ 1519.241693][T18410] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 1519.248351][T18410] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1519.304840][ T5827] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 1519.326871][ T5891] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1519.368390][T18410] vhci_hcd vhci_hcd.0: Device attached [ 1519.417983][T18396] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 1519.424634][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1519.428446][ T30] audit: type=1804 audit(2000000188.039:38): pid=18425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2992" name="/newroot/574/bus/bus" dev="overlay" ino=3206 res=1 errno=0 [ 1519.679208][T11106] IPVS: starting estimator thread 0... [ 1520.431682][T18430] IPVS: using max 33 ests per chain, 79200 per kthread [ 1520.505764][T18396] vhci_hcd vhci_hcd.0: Device attached [ 1520.527105][ T5891] usb 8-1: string descriptor 0 read error: -71 [ 1520.534605][ T5891] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1520.545264][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.559928][ T5891] usb 8-1: config 0 descriptor?? [ 1520.560174][ T30] audit: type=1804 audit(2000000189.149:39): pid=18432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2992" name="/newroot/574/bus/bus" dev="overlay" ino=3206 res=1 errno=0 [ 1520.572010][ T5891] usb 8-1: can't set config #0, error -71 [ 1520.598369][T18399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1521.132964][T18396] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1521.164947][T18399] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1521.520381][ T5891] usb 8-1: USB disconnect, device number 12 [ 1521.749528][T18465] fuse: Unknown parameter 'use00000000000000000000' [ 1521.826790][T18420] vhci_hcd: connection closed [ 1521.827061][ T1318] vhci_hcd: stop threads [ 1521.837108][T18402] vhci_hcd: connection closed [ 1521.837324][T18401] vhci_hcd: connection reset by peer [ 1521.838505][T18417] vhci_hcd: connection closed [ 1521.859340][ T1318] vhci_hcd: release socket [ 1521.960277][ T1318] vhci_hcd: disconnect device [ 1522.008757][ T1318] vhci_hcd: stop threads [ 1522.097992][ T1318] vhci_hcd: release socket [ 1522.175974][ T1318] vhci_hcd: disconnect device [ 1522.221664][ T1318] vhci_hcd: stop threads [ 1522.225935][ T1318] vhci_hcd: release socket [ 1522.233310][ T1318] vhci_hcd: disconnect device [ 1522.273351][ T1318] vhci_hcd: stop threads [ 1522.482710][ T1318] vhci_hcd: release socket [ 1522.493902][ T1318] vhci_hcd: disconnect device [ 1522.605626][T18481] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1523.514098][T18475] loop5: detected capacity change from 0 to 4096 [ 1523.673583][T18475] EXT4-fs: Ignoring removed mblk_io_submit option [ 1524.941471][ T5827] vhci_hcd: vhci_device speed not set [ 1525.163466][T18475] fscrypt: Error allocating hmac(sha512): -2 [ 1526.560427][ T30] audit: type=1804 audit(2000000195.189:40): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3004" name="/newroot/534/bus/bus" dev="overlay" ino=2914 res=1 errno=0 [ 1526.697539][ T30] audit: type=1804 audit(2000000195.279:41): pid=18510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3004" name="/newroot/534/bus/bus" dev="overlay" ino=2914 res=1 errno=0 [ 1526.720422][T18519] fuse: Bad value for 'user_id' [ 1526.757173][T18519] fuse: Bad value for 'user_id' [ 1528.270251][T18535] 9pnet_fd: Insufficient options for proto=fd [ 1528.464999][T18541] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1531.248337][T18573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1534.168001][T18603] fuse: Bad value for 'fd' [ 1536.882269][T18623] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1537.396666][T18623] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1537.405728][T18623] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1537.415026][T18623] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1537.430657][T18623] geneve2: entered promiscuous mode [ 1537.437458][T18623] geneve2: entered allmulticast mode [ 1537.722429][T18631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.582276][T18655] loop4: detected capacity change from 0 to 4096 [ 1540.571612][T18655] EXT4-fs: Ignoring removed mblk_io_submit option [ 1541.032245][ T30] audit: type=1804 audit(2000000209.649:42): pid=18672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3032" name="/newroot/580/bus/bus" dev="overlay" ino=3249 res=1 errno=0 [ 1541.198154][ T30] audit: type=1804 audit(2000000209.699:43): pid=18672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3032" name="/newroot/580/bus/bus" dev="overlay" ino=3249 res=1 errno=0 [ 1541.490389][T18655] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1542.068217][T18655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1542.255792][T18655] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1542.388868][T18655] overlayfs: missing 'lowerdir' [ 1542.636939][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.830755][T18707] fuse: Bad value for 'fd' [ 1545.200381][T18736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.433984][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.452088][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.477851][T18730] loop7: detected capacity change from 0 to 2048 [ 1545.619541][T18730] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 96: 0x25 != 0x13 [ 1545.771788][T18730] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1546.012796][T18730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1551.943733][T18801] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1552.587965][ T5892] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1553.012975][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 1553.021680][ T5892] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1553.030184][ T5892] usb 8-1: config 0 has no interface number 0 [ 1553.041589][ T5892] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1553.055480][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.073280][ T5892] usb 8-1: Product: syz [ 1553.107302][ T5892] usb 8-1: Manufacturer: syz [ 1553.290321][ T5892] usb 8-1: SerialNumber: syz [ 1553.560542][ T5892] usb 8-1: config 0 descriptor?? [ 1553.813613][ T5892] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 1554.562981][ T5892] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 1554.917057][ T5892] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1555.039735][ T5892] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 1555.094423][T18848] loop9: detected capacity change from 0 to 128 [ 1555.101271][ T5892] usb 8-1: USB disconnect, device number 13 [ 1555.138774][T18848] EXT4-fs: Ignoring removed nobh option [ 1555.845182][T18848] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1556.174372][T18848] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.310760][T18873] program syz.4.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1557.459777][T18885] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1560.061832][T17302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1561.557131][T18921] nvme_fabrics: missing parameter 'transport=%s' [ 1561.613827][T18908] loop1: detected capacity change from 0 to 4096 [ 1561.800726][T18921] nvme_fabrics: missing parameter 'nqn=%s' [ 1562.014501][T18908] ntfs3(loop1): ino=1a, mi_enum_attr [ 1562.036783][T18908] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1562.362690][T11106] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1563.227596][T18948] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1563.236999][T18948] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1563.246272][T18948] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1563.255581][T18948] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1563.266818][T18948] geneve2: entered promiscuous mode [ 1563.272295][T18948] geneve2: entered allmulticast mode [ 1563.295818][T11106] usb 8-1: Using ep0 maxpacket: 8 [ 1563.412605][T11106] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1563.424151][T11106] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1563.509337][T18953] input: syz0 as /devices/virtual/input/input26 [ 1563.680126][T11106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.723887][T11106] usb 8-1: config 0 descriptor?? [ 1563.956161][T11106] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1565.701609][T18984] program syz.5.3086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1566.926684][T13567] usb 8-1: USB disconnect, device number 14 [ 1568.483764][T19005] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.3089'. [ 1570.460370][T19031] nvme_fabrics: missing parameter 'transport=%s' [ 1570.466932][T19031] nvme_fabrics: missing parameter 'nqn=%s' [ 1574.021712][T19091] loop4: detected capacity change from 0 to 256 [ 1575.061659][ T30] audit: type=1800 audit(2000000243.689:44): pid=19091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3105" name="file1" dev="loop4" ino=1048627 res=0 errno=0 [ 1575.082585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.525967][T19091] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1575.911791][T19091] FAT-fs (loop4): Filesystem has been set read-only [ 1576.363046][T19121] program syz.2.3111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1576.969273][T19109] nvme_fabrics: missing parameter 'transport=%s' [ 1576.975696][T19109] nvme_fabrics: missing parameter 'nqn=%s' [ 1577.252832][T19135] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1577.774754][T19149] program syz.5.3116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1579.362669][T19158] program syz.5.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1579.973493][T19135] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3115'. [ 1583.549962][ T30] audit: type=1804 audit(2000000252.169:45): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3126" name="/newroot/338/bus/bus" dev="overlay" ino=1890 res=1 errno=0 [ 1583.664861][T19209] loop1: detected capacity change from 0 to 256 [ 1583.810992][ T30] audit: type=1804 audit(2000000252.169:46): pid=19196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3126" name="/newroot/338/bus/bus" dev="overlay" ino=1890 res=1 errno=0 [ 1583.970503][T19211] program syz.4.3128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.731963][ T5842] Bluetooth: hci6: link tx timeout [ 1584.737867][ T5842] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1584.761658][ T8962] Bluetooth: hci6: link tx timeout [ 1584.766782][ T8962] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1584.784848][ T8962] Bluetooth: hci6: link tx timeout [ 1584.790125][ T8962] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1584.835138][ T8962] Bluetooth: hci6: link tx timeout [ 1584.840267][ T8962] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1584.881879][ T30] audit: type=1800 audit(2000000253.499:47): pid=19209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3129" name="file1" dev="loop1" ino=1048628 res=0 errno=0 [ 1584.984573][T19209] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1585.010919][T19209] FAT-fs (loop1): Filesystem has been set read-only [ 1586.261470][ T5927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1586.511373][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 1586.564841][ T5927] usb 3-1: no configurations [ 1586.661472][ T5927] usb 3-1: can't read configurations, error -22 [ 1586.887130][ T8962] Bluetooth: hci6: command 0x0406 tx timeout [ 1587.671496][ T5927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1587.972018][T19273] 9pnet_fd: Insufficient options for proto=fd [ 1588.034548][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 1588.103735][ T5927] usb 3-1: no configurations [ 1588.151652][ T5927] usb 3-1: can't read configurations, error -22 [ 1588.192881][ T5927] usb usb3-port1: attempt power cycle [ 1588.272715][T19286] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1588.522241][T19296] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1588.940973][T19301] fuse: Invalid rootmode [ 1589.101685][ T5977] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1589.538165][T19305] 9pnet_fd: Insufficient options for proto=fd [ 1589.622851][ T5977] usb 5-1: config 0 has no interfaces? [ 1589.629944][ T5977] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1589.669588][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1589.711516][ T5977] usb 5-1: Product: syz [ 1589.721966][ T5977] usb 5-1: Manufacturer: syz [ 1589.765367][ T5977] usb 5-1: config 0 descriptor?? [ 1589.834069][ T30] audit: type=1804 audit(2000000258.469:48): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3144" name="/newroot/29/bus/bus" dev="overlay" ino=182 res=1 errno=0 [ 1589.920407][ T30] audit: type=1804 audit(2000000258.499:49): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3144" name="/newroot/29/bus/bus" dev="overlay" ino=182 res=1 errno=0 [ 1590.252679][T19322] program syz.2.3145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1592.059371][ T5827] usb 5-1: USB disconnect, device number 31 [ 1592.102021][T19343] loop9: detected capacity change from 0 to 256 [ 1592.138680][T19343] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1592.325093][T19343] FAT-fs (loop9): Filesystem has been set read-only [ 1592.332441][ T30] audit: type=1800 audit(2000000260.769:50): pid=19343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3148" name="file1" dev="loop9" ino=1048629 res=0 errno=0 [ 1593.330078][T19337] nvme_fabrics: missing parameter 'transport=%s' [ 1593.336704][T19337] nvme_fabrics: missing parameter 'nqn=%s' [ 1594.625272][T19373] 9pnet_fd: Insufficient options for proto=fd [ 1594.919739][T19384] fuse: Bad value for 'rootmode' [ 1596.384058][T19399] loop9: detected capacity change from 0 to 128 [ 1596.420644][T19399] EXT4-fs: Ignoring removed nobh option [ 1596.441195][T19401] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1596.507869][T19399] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1596.541056][T19399] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1597.925311][T17302] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1600.542241][T19449] nvme_fabrics: missing parameter 'transport=%s' [ 1600.548605][T19449] nvme_fabrics: missing parameter 'nqn=%s' [ 1600.756707][T19464] 9pnet_fd: Insufficient options for proto=fd [ 1601.742376][T19470] netlink: 'syz.1.3172': attribute type 4 has an invalid length. [ 1602.267334][T19483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.285548][ T8962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1602.302654][T19489] 9pnet_fd: Insufficient options for proto=fd [ 1602.306107][ T8962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1602.319199][ T8962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1602.335650][ T8962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1602.345249][ T8962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1604.371499][ T5842] Bluetooth: hci1: command tx timeout [ 1605.532111][T19482] lo speed is unknown, defaulting to 1000 [ 1605.934286][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.951521][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.962297][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1606.139817][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1606.176622][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.227196][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1606.467534][ T5842] Bluetooth: hci1: command tx timeout [ 1606.856034][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.862645][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.551441][ T5842] Bluetooth: hci1: command tx timeout [ 1608.636652][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1608.693208][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1608.751510][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1610.083345][T19579] 9pnet_fd: Insufficient options for proto=fd [ 1610.212432][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.311502][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.322514][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1610.706629][ T5842] Bluetooth: hci1: command tx timeout [ 1612.122345][T19597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1612.178408][T19583] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1612.268766][T19583] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1612.294311][T19583] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1612.303480][T19583] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1612.313052][T19583] geneve2: entered promiscuous mode [ 1612.318398][T19583] geneve2: entered allmulticast mode [ 1612.514202][T18365] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1612.679566][ T5977] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1612.694192][T18365] usb 2-1: Using ep0 maxpacket: 8 [ 1612.708344][T18365] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.774944][T18365] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1612.817529][T18365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.907363][ T5977] usb 10-1: config 0 has no interfaces? [ 1612.939570][T18365] usb 2-1: config 0 descriptor?? [ 1612.971153][T18365] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1613.225699][ T5977] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1613.992434][T18365] gspca_vc032x: reg_r err -110 [ 1614.200874][T19482] chnl_net:caif_netlink_parms(): no params data found [ 1614.296160][T18365] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1614.366860][ T5977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.497825][ T5977] usb 10-1: Product: syz [ 1614.522013][ T5977] usb 10-1: Manufacturer: syz [ 1614.621485][ T5977] usb 10-1: SerialNumber: syz [ 1614.707293][ T5977] usb 10-1: config 0 descriptor?? [ 1615.921676][ T10] usb 2-1: USB disconnect, device number 20 [ 1616.352175][T19792] 9pnet_fd: Insufficient options for proto=fd [ 1618.458429][T19816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1618.887721][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.661232][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.682134][ T5948] bond0 (unregistering): Released all slaves [ 1619.706671][ T5948] bond1 (unregistering): Released all slaves [ 1619.738074][ T5948] bond2 (unregistering): Released all slaves [ 1620.176335][ T5827] usb 10-1: USB disconnect, device number 2 [ 1621.753639][T19482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.760948][T19482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.805151][T19482] bridge_slave_0: entered allmulticast mode [ 1621.820806][T19482] bridge_slave_0: entered promiscuous mode [ 1621.822617][T19898] loop1: detected capacity change from 0 to 256 [ 1622.013586][T19903] netlink: 'syz.9.3212': attribute type 4 has an invalid length. [ 1622.048429][T19482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.073019][T19482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.384836][T19482] bridge_slave_1: entered allmulticast mode [ 1622.398948][T19482] bridge_slave_1: entered promiscuous mode [ 1624.952095][T19482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.183970][ T5948] hsr_slave_0: left promiscuous mode [ 1625.197527][ T5948] hsr_slave_1: left promiscuous mode [ 1625.203590][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1625.212456][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1625.350068][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1625.389167][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1625.492729][ T5948] veth1_macvtap: left promiscuous mode [ 1625.510106][ T5948] veth0_macvtap: left promiscuous mode [ 1625.523183][ T5948] veth1_vlan: left promiscuous mode [ 1625.529031][ T5948] veth0_vlan: left promiscuous mode [ 1630.477811][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 1630.664640][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 1634.099241][T11106] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1634.273926][T11106] usb 5-1: Using ep0 maxpacket: 8 [ 1634.280891][T11106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.290910][T11106] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1634.300557][T11106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.330694][T11106] usb 5-1: config 0 descriptor?? [ 1634.573127][T19482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.652312][T13567] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1634.922129][T13567] usb 10-1: Using ep0 maxpacket: 8 [ 1636.968879][T11106] usbhid 5-1:0.0: can't add hid device: -71 [ 1637.755892][T11106] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1637.767768][T11106] usb 5-1: USB disconnect, device number 32 [ 1637.807681][T19482] team0: Port device team_slave_0 added [ 1637.828485][T19482] team0: Port device team_slave_1 added [ 1637.896661][ T5827] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1640.853147][T13567] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1640.860975][T13567] usb 10-1: no configurations [ 1640.866061][T13567] usb 10-1: can't read configurations, error -22 [ 1640.880833][T19482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.915212][T19482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.941887][T20146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1641.031750][T13567] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1641.116867][T19482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.542401][T13567] usb 10-1: device descriptor read/64, error -32 [ 1641.630494][T19482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.678901][T19482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1641.711598][T13567] usb usb10-port1: attempt power cycle [ 1641.729736][T15058] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1641.749595][T19482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.221570][T13567] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1642.292372][T15058] usb 8-1: Using ep0 maxpacket: 8 [ 1642.311933][T13567] usb 10-1: device descriptor read/8, error -32 [ 1642.374606][T15058] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.401392][T15058] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1642.410444][T15058] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.512435][T15058] usb 8-1: config 0 descriptor?? [ 1642.580770][T15058] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1642.651675][T13567] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1642.722196][T13567] usb 10-1: device descriptor read/8, error -32 [ 1642.779627][T19482] hsr_slave_0: entered promiscuous mode [ 1642.855278][T13567] usb usb10-port1: unable to enumerate USB device [ 1642.864572][T19482] hsr_slave_1: entered promiscuous mode [ 1642.885733][T19482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1642.916535][T19482] Cannot create hsr debugfs directory [ 1643.006030][T20215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3247'. [ 1643.134768][T20208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3247'. [ 1643.677451][T20249] 9pnet_fd: Insufficient options for proto=fd [ 1643.746637][ T5948] IPVS: stop unused estimator thread 0... [ 1643.858884][T15058] gspca_vc032x: reg_r err -32 [ 1643.878740][T15058] vc032x 8-1:0.0: probe with driver vc032x failed with error -32 [ 1643.955026][T15058] usb 8-1: USB disconnect, device number 15 [ 1644.370439][T20300] program syz.1.3249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1647.587689][T18365] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1647.942858][T18365] usb 5-1: Using ep0 maxpacket: 16 [ 1648.082985][T18365] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1648.309898][T18365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1648.640722][T18365] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1648.855374][T18365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.118418][T18365] usb 5-1: Product: syz [ 1649.183622][T18365] usb 5-1: Manufacturer: syz [ 1649.340015][T18365] usb 5-1: SerialNumber: syz [ 1649.663999][T20317] sd 0:0:1:0: device reset [ 1649.715724][T18365] usb 5-1: config 0 descriptor?? [ 1650.191892][T18365] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 1650.202835][T18365] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 1651.044837][T18365] usb 5-1: USB disconnect, device number 33 [ 1651.168915][T19217] Bluetooth: hci1: link tx timeout [ 1651.174780][T19217] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1651.191344][T19217] Bluetooth: hci1: link tx timeout [ 1651.201381][T19217] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1651.219683][T19217] Bluetooth: hci1: link tx timeout [ 1651.231345][T19217] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1651.248745][T19217] Bluetooth: hci1: link tx timeout [ 1651.261153][T19217] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1652.319317][T20430] program syz.7.3266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1653.472842][T19217] Bluetooth: hci1: command 0x0406 tx timeout [ 1653.873042][T20443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1655.091226][T19482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1655.242032][T19482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1656.534811][T19217] Bluetooth: hci1: command 0x0406 tx timeout [ 1656.543518][T19482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1656.560326][T19482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1656.715115][T20486] loop7: detected capacity change from 0 to 2048 [ 1656.770165][T20486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1657.256424][ T30] audit: type=1800 audit(2000000060.699:51): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3272" name="file0" dev="loop7" ino=1313 res=0 errno=0 [ 1659.781407][ T5827] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1659.797793][T19482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.156942][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 1660.212229][T20516] netlink: 'syz.5.3277': attribute type 10 has an invalid length. [ 1660.233190][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1660.251595][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1660.267585][ T5827] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1660.362206][T20516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.424288][T20516] bond0: (slave team0): Enslaving as an active interface with an up link [ 1660.455231][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.471680][ T5827] usb 5-1: Product: syz [ 1660.475861][ T5827] usb 5-1: Manufacturer: syz [ 1660.498192][ T5827] usb 5-1: SerialNumber: syz [ 1660.524906][ T5827] usb 5-1: config 0 descriptor?? [ 1660.749358][T20496] sd 0:0:1:0: device reset [ 1660.756506][ T5827] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 1660.817221][ T5827] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 1660.908700][ T5827] usb 5-1: USB disconnect, device number 34 [ 1661.089195][T19217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1661.104802][T19217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1661.129748][T19217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1661.138383][T19217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1661.154652][T19217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1661.226017][T20548] lo speed is unknown, defaulting to 1000 [ 1661.262304][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3278'. [ 1661.381242][T20546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1661.418232][T20546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.180767][ T5927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1662.401593][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 1662.428570][ T5927] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1662.443701][ T5927] usb 2-1: config 0 has no interface number 0 [ 1662.536795][ T5927] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1662.566890][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.589856][ T5927] usb 2-1: Product: syz [ 1662.596084][ T5927] usb 2-1: Manufacturer: syz [ 1662.600694][ T5927] usb 2-1: SerialNumber: syz [ 1662.784520][ T5927] usb 2-1: config 0 descriptor?? [ 1662.814778][ T5927] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1663.537847][ T5927] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1663.542782][T19217] Bluetooth: hci2: command tx timeout [ 1663.656294][ T5927] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1663.701118][ T5927] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 1664.325001][ T5927] usb 2-1: USB disconnect, device number 22 [ 1664.780848][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3287'. [ 1664.833021][T20645] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3287'. [ 1664.983644][T13567] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1665.181446][T13567] usb 10-1: Using ep0 maxpacket: 32 [ 1665.210963][T13567] usb 10-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1665.230462][T13567] usb 10-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1665.240154][T13567] usb 10-1: Product: syz [ 1665.252036][T13567] usb 10-1: Manufacturer: syz [ 1665.256852][T13567] usb 10-1: SerialNumber: syz [ 1665.306840][T13567] usb 10-1: config 0 descriptor?? [ 1665.571479][T19217] Bluetooth: hci2: command tx timeout [ 1665.670943][T20548] chnl_net:caif_netlink_parms(): no params data found [ 1665.760025][T13567] sierra 10-1:0.0: Sierra USB modem converter detected [ 1665.789991][T13567] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 1665.808217][T13567] usb 10-1: USB disconnect, device number 7 [ 1665.845011][T13567] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1665.892994][T13567] sierra 10-1:0.0: device disconnected [ 1666.195014][T20548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.237330][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.260358][T20548] bridge_slave_0: entered allmulticast mode [ 1666.293714][T20548] bridge_slave_0: entered promiscuous mode [ 1666.409049][T20548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.442967][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.460609][T20548] bridge_slave_1: entered allmulticast mode [ 1666.480636][T20548] bridge_slave_1: entered promiscuous mode [ 1667.197892][T20850] netlink: 'syz.9.3294': attribute type 10 has an invalid length. [ 1667.654864][T19217] Bluetooth: hci2: command tx timeout [ 1667.663770][T20844] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1667.814906][T20850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.858085][T20850] bond0: (slave team0): Enslaving as an active interface with an up link [ 1667.982452][T20548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.203944][T20548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.162389][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.184088][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.215792][ T30] audit: type=1326 audit(2000000072.629:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1669.252985][ T3513] bridge_slave_1: left allmulticast mode [ 1669.369370][ T3513] bridge_slave_1: left promiscuous mode [ 1669.481603][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.708172][ T30] audit: type=1326 audit(2000000072.629:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1669.754189][T19217] Bluetooth: hci2: command tx timeout [ 1670.503735][ T3513] bridge_slave_0: left allmulticast mode [ 1670.518421][ T30] audit: type=1326 audit(2000000072.629:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1670.648305][ T3513] bridge_slave_0: left promiscuous mode [ 1670.763866][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.019308][ T30] audit: type=1326 audit(2000000072.639:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1672.167726][T15058] kernel write not supported for file /1270/attr/prev (pid: 15058 comm: kworker/0:3) [ 1672.183975][ T30] audit: type=1326 audit(2000000072.639:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1672.428901][ T30] audit: type=1326 audit(2000000072.639:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1672.474599][ T30] audit: type=1326 audit(2000000072.639:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1672.845298][ T30] audit: type=1326 audit(2000000072.639:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1673.129638][ T30] audit: type=1326 audit(2000000072.639:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1673.268138][ T30] audit: type=1326 audit(2000000072.639:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20863 comm="syz.5.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1674.840510][T20931] program syz.4.3302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1675.687642][ T3513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.745821][ T3513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.772973][ T3513] bond0 (unregistering): Released all slaves [ 1676.247682][T20548] team0: Port device team_slave_0 added [ 1676.354575][T20548] team0: Port device team_slave_1 added [ 1677.513310][ T3513] hsr_slave_0: left promiscuous mode [ 1677.658213][ T3513] hsr_slave_1: left promiscuous mode [ 1677.923936][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1678.517252][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.112774][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 1680.244545][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 1682.166386][T15058] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1682.314889][T20548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.361610][T15058] usb 10-1: Using ep0 maxpacket: 32 [ 1682.385620][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1682.385658][ T30] audit: type=1326 audit(2000000085.969:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1682.469124][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.690442][T15058] usb 10-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1682.832825][T15058] usb 10-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1682.950090][ T30] audit: type=1326 audit(2000000085.969:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1682.988330][T15058] usb 10-1: Product: syz [ 1682.996731][T20548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.080182][T15058] usb 10-1: Manufacturer: syz [ 1683.128710][T15058] usb 10-1: SerialNumber: syz [ 1683.225380][ T30] audit: type=1326 audit(2000000085.979:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.227052][T20548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.248082][ T30] audit: type=1326 audit(2000000085.979:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.248142][ T30] audit: type=1326 audit(2000000085.979:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.248196][ T30] audit: type=1326 audit(2000000085.989:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.248255][ T30] audit: type=1326 audit(2000000085.989:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.248311][ T30] audit: type=1326 audit(2000000085.989:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.278607][T15058] usb 10-1: config 0 descriptor?? [ 1683.300157][ T30] audit: type=1326 audit(2000000085.989:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.322276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.669649][ T30] audit: type=1326 audit(2000000085.989:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21070 comm="syz.7.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1683.692361][T20548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.718300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1684.683627][T20548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1685.522407][T15058] sierra 10-1:0.0: Sierra USB modem converter detected [ 1685.700160][T15058] usb 10-1: Sierra USB modem converter now attached to ttyUSB0 [ 1685.936978][T15058] usb 10-1: USB disconnect, device number 8 [ 1686.100134][T15058] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1686.115539][T20548] hsr_slave_0: entered promiscuous mode [ 1686.155268][T20548] hsr_slave_1: entered promiscuous mode [ 1686.185840][T15058] sierra 10-1:0.0: device disconnected [ 1686.202888][T20548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1686.243948][T20548] Cannot create hsr debugfs directory [ 1686.735156][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1687.168244][T21230] program syz.1.3326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1689.611373][T18365] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1689.799540][T18365] usb 5-1: Using ep0 maxpacket: 32 [ 1689.856473][T18365] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1689.901876][T18365] usb 5-1: config 0 has no interface number 0 [ 1689.963355][T18365] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1689.981530][T18365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.024834][T18365] usb 5-1: Product: syz [ 1690.029053][T18365] usb 5-1: Manufacturer: syz [ 1690.053379][T20548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1690.079125][T18365] usb 5-1: SerialNumber: syz [ 1690.117402][T20548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1690.124963][T18365] usb 5-1: config 0 descriptor?? [ 1690.174047][T18365] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1690.221428][T18365] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 1690.246662][T20548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.320633][T20548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1690.394230][T18365] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 1690.421784][T18365] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 1690.745266][T13567] usb 5-1: USB disconnect, device number 35 [ 1690.936459][T20548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.138648][T20548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.245795][T21331] fuse: Bad value for 'fd' [ 1691.251615][T18365] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1691.304601][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.311815][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.461413][T18365] usb 2-1: Using ep0 maxpacket: 32 [ 1691.764689][T18365] usb 2-1: config 0 has an invalid interface number: 153 but max is 0 [ 1691.773098][T18365] usb 2-1: config 0 has no interface number 0 [ 1691.880920][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.888143][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.955940][T18365] usb 2-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 1692.041493][T18365] usb 2-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 1692.181790][T18365] usb 2-1: Product: syz [ 1692.186001][T18365] usb 2-1: Manufacturer: syz [ 1692.242549][T18365] usb 2-1: SerialNumber: syz [ 1692.282414][T18365] usb 2-1: config 0 descriptor?? [ 1692.346540][T21348] bio_check_eod: 2 callbacks suppressed [ 1692.346561][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.346561][T21348] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1692.441639][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.441639][T21348] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1692.471876][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1692.527035][T18365] sierra 2-1:0.153: Sierra USB modem converter detected [ 1692.542313][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.542313][T21348] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1692.693781][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1692.806935][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.806935][T21348] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1692.823799][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.823799][T21348] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1692.840032][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1692.854161][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.854161][T21348] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1692.869383][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1692.883348][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.883348][T21348] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1692.900246][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.900246][T21348] nbd7: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 1692.915396][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1692.928996][T21348] syz.7.3345: attempt to access beyond end of device [ 1692.928996][T21348] nbd7: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 1692.945085][T21348] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1692.954956][T21348] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1693.392541][T18365] usb 2-1: USB disconnect, device number 23 [ 1693.399231][T18365] sierra 2-1:0.153: device disconnected [ 1693.475510][T21356] syz.7.3345: attempt to access beyond end of device [ 1693.475510][T21356] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1693.631667][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1693.706590][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1693.782359][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1693.805196][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1693.818567][T20548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.872121][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1693.934532][T21356] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1694.044658][T20548] veth0_vlan: entered promiscuous mode [ 1694.220908][T21356] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1695.184912][T20548] veth1_vlan: entered promiscuous mode [ 1695.326268][T20548] veth0_macvtap: entered promiscuous mode [ 1695.375026][T20548] veth1_macvtap: entered promiscuous mode [ 1695.528412][T20548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1695.751776][T20548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.543714][T20548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.611385][T20548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.641406][T20548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.650114][T20548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.141414][ T5827] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1697.357784][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.395724][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.401370][ T5827] usb 10-1: Using ep0 maxpacket: 8 [ 1697.721396][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1697.721426][ T30] audit: type=1326 audit(2000000101.049:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1698.105503][ T30] audit: type=1326 audit(2000000101.049:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1698.394411][ T30] audit: type=1326 audit(2000000101.059:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1698.698655][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.711527][ T30] audit: type=1326 audit(2000000101.059:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1698.795352][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.989871][ T30] audit: type=1326 audit(2000000101.059:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1699.256923][T21446] program syz.1.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1699.555608][ T30] audit: type=1326 audit(2000000101.059:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1699.636841][ T30] audit: type=1326 audit(2000000101.059:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1699.935795][ T30] audit: type=1326 audit(2000000101.059:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1700.153216][ T30] audit: type=1326 audit(2000000101.059:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1700.211615][ T5890] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1700.337269][ T30] audit: type=1326 audit(2000000101.059:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21425 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1243f8e969 code=0x7ffc0000 [ 1700.432186][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 1701.313323][ T5827] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1701.321157][ T5827] usb 10-1: no configurations [ 1701.389331][ T5827] usb 10-1: can't read configurations, error -22 [ 1703.867079][T21499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1704.942298][T13567] IPVS: starting estimator thread 0... [ 1705.112142][T21519] IPVS: using max 22 ests per chain, 52800 per kthread [ 1705.727416][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1705.774680][ T5890] usb 5-1: no configurations [ 1705.779321][ T5890] usb 5-1: can't read configurations, error -22 [ 1705.921681][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1705.932658][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1705.941148][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1705.943227][ T5890] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1705.966952][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1705.978695][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1706.119535][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1706.119590][ T30] audit: type=1326 audit(2000000109.729:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1706.147906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1708.163180][T19217] Bluetooth: hci1: command tx timeout [ 1708.221440][ T5890] usb 5-1: device descriptor read/64, error -32 [ 1708.228773][ T7090] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.241598][ T30] audit: type=1326 audit(2000000109.769:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.276524][ T30] audit: type=1326 audit(2000000109.769:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.321333][ T30] audit: type=1326 audit(2000000109.769:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.361631][ T5890] usb usb5-port1: attempt power cycle [ 1708.403346][ T30] audit: type=1326 audit(2000000109.779:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.487953][T21527] lo speed is unknown, defaulting to 1000 [ 1708.508222][ T30] audit: type=1326 audit(2000000109.779:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.689474][ T30] audit: type=1326 audit(2000000109.779:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.738496][ T7090] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.771528][ T5890] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1708.812111][ T30] audit: type=1326 audit(2000000109.779:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1708.861397][ T5890] usb 5-1: device descriptor read/8, error -32 [ 1709.241404][ T5891] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1709.737709][ T30] audit: type=1326 audit(2000000109.779:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1709.768591][ T30] audit: type=1326 audit(2000000109.779:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21528 comm="syz.7.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59dd58e969 code=0x7ffc0000 [ 1709.909821][ T5890] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1710.129358][ T5891] usb 10-1: config 0 has no interfaces? [ 1710.318191][T19217] Bluetooth: hci1: command tx timeout [ 1710.318480][ T5890] usb 5-1: device not accepting address 39, error -71 [ 1710.345265][ T5890] usb usb5-port1: unable to enumerate USB device [ 1710.346149][ T7090] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.362712][T13567] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1710.373942][ T5891] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1710.389282][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.486513][ T5891] usb 10-1: Product: syz [ 1710.498135][ T5891] usb 10-1: Manufacturer: syz [ 1710.525090][ T5891] usb 10-1: SerialNumber: syz [ 1710.532613][T13567] usb 3-1: Using ep0 maxpacket: 16 [ 1710.542227][T13567] usb 3-1: config 7 has an invalid interface number: 247 but max is 0 [ 1710.553778][T13567] usb 3-1: config 7 has no interface number 0 [ 1710.560590][T13567] usb 3-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1710.577636][T13567] usb 3-1: config 7 interface 247 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1710.589260][ T5891] usb 10-1: config 0 descriptor?? [ 1710.618279][T13567] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 1710.623451][ T7090] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.697847][T13567] usb 3-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 1710.756866][T21612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1710.816371][T13567] usb 3-1: Product: syz [ 1710.820580][T13567] usb 3-1: Manufacturer: syz [ 1710.928937][T13567] usb 3-1: SerialNumber: syz [ 1711.049544][T13567] comedi comedi0: Wrong number of endpoints [ 1711.066412][T13567] ni6501 3-1:7.247: driver 'ni6501' failed to auto-configure device. [ 1711.677444][ T5891] usb 3-1: USB disconnect, device number 22 [ 1712.372471][T19217] Bluetooth: hci1: command tx timeout [ 1714.175214][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1714.175244][ T30] audit: type=1326 audit(2000000117.189:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1714.593125][T19217] Bluetooth: hci1: command tx timeout [ 1714.951225][ T30] audit: type=1326 audit(2000000117.189:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1715.559017][ T30] audit: type=1326 audit(2000000117.189:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.068467][ T30] audit: type=1326 audit(2000000117.189:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.251441][ T30] audit: type=1326 audit(2000000117.189:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.274198][ T30] audit: type=1326 audit(2000000117.199:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.297488][ T30] audit: type=1326 audit(2000000117.199:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.325546][ T30] audit: type=1326 audit(2000000117.199:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.351414][ T30] audit: type=1326 audit(2000000117.199:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1716.374549][ T30] audit: type=1326 audit(2000000117.199:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21747 comm="syz.2.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1717.554702][T21760] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1717.561234][T21760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1717.641411][T21760] vhci_hcd vhci_hcd.0: Device attached [ 1717.706739][T21767] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11) [ 1717.713341][T21767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1717.735989][T21760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1717.806001][T21767] vhci_hcd vhci_hcd.0: Device attached [ 1717.831714][ T5890] vhci_hcd: vhci_device speed not set [ 1717.872053][T15058] usb 10-1: USB disconnect, device number 11 [ 1717.917307][T21770] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(16) [ 1717.923932][T21770] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1717.951450][T21770] vhci_hcd vhci_hcd.0: Device attached [ 1717.971463][ T5890] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 1718.063393][T21760] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(13) [ 1718.070036][T21760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1718.091783][T21760] vhci_hcd vhci_hcd.0: Device attached [ 1718.116514][T21767] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(20) [ 1718.123127][T21767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1718.163774][T21767] vhci_hcd vhci_hcd.0: Device attached [ 1718.169996][T21760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1718.190943][T21760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1718.203498][T21760] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1718.217325][T21760] vhci_hcd vhci_hcd.0: port 0 already used [ 1718.280542][T21786] vhci_hcd: connection closed [ 1718.282048][T21783] vhci_hcd: connection closed [ 1718.287025][T21775] vhci_hcd: connection closed [ 1718.293111][T21768] vhci_hcd: connection closed [ 1718.308003][T21762] vhci_hcd: connection reset by peer [ 1718.318457][ T49] vhci_hcd: stop threads [ 1718.322838][ T49] vhci_hcd: release socket [ 1718.358220][ T49] vhci_hcd: disconnect device [ 1718.387784][ T49] vhci_hcd: stop threads [ 1718.399896][ T49] vhci_hcd: release socket [ 1718.429529][ T49] vhci_hcd: disconnect device [ 1718.459599][ T49] vhci_hcd: stop threads [ 1718.475432][ T49] vhci_hcd: release socket [ 1718.488953][ T49] vhci_hcd: disconnect device [ 1718.510644][ T49] vhci_hcd: stop threads [ 1718.530672][ T49] vhci_hcd: release socket [ 1718.558766][ T49] vhci_hcd: disconnect device [ 1718.583173][ T49] vhci_hcd: stop threads [ 1718.587435][ T49] vhci_hcd: release socket [ 1718.629162][ T49] vhci_hcd: disconnect device [ 1718.704781][ T7090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.749532][ T7090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.773653][ T7090] bond0 (unregistering): Released all slaves [ 1718.832569][T21801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1718.965884][T21527] chnl_net:caif_netlink_parms(): no params data found [ 1719.085231][T21815] program syz.4.3394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1719.801470][ T7090] tipc: Disabling bearer [ 1719.818111][ T7090] tipc: Left network mode [ 1721.473471][T21527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.482019][T21527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.489264][T21527] bridge_slave_0: entered allmulticast mode [ 1721.577739][T21527] bridge_slave_0: entered promiscuous mode [ 1721.644201][T21527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.696399][T21527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.745161][T21527] bridge_slave_1: entered allmulticast mode [ 1721.983147][T21527] bridge_slave_1: entered promiscuous mode [ 1723.171652][ T5890] vhci_hcd: vhci_device speed not set [ 1723.474210][T21942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1724.664523][T21527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.699601][T21527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.174369][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1726.174402][ T30] audit: type=1326 audit(2000000128.589:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1726.436833][T15058] usb usb48-port1: attempt power cycle [ 1726.865760][ T30] audit: type=1326 audit(2000000128.589:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1727.347368][T15058] usb usb48-port1: unable to enumerate USB device [ 1727.390533][ T30] audit: type=1326 audit(2000000128.589:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1727.791404][ T30] audit: type=1326 audit(2000000128.589:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1728.510061][ T30] audit: type=1326 audit(2000000128.589:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1728.584636][ T30] audit: type=1326 audit(2000000128.599:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1728.774346][ T30] audit: type=1326 audit(2000000128.599:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1728.799514][ T30] audit: type=1326 audit(2000000128.599:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1729.601902][ T30] audit: type=1326 audit(2000000128.599:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1729.680517][ T30] audit: type=1326 audit(2000000128.599:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21985 comm="syz.9.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1729.736655][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.743053][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.046558][T21527] team0: Port device team_slave_0 added [ 1730.233561][T21527] team0: Port device team_slave_1 added [ 1730.968293][ T7090] hsr_slave_0: left promiscuous mode [ 1731.001421][ T7090] hsr_slave_1: left promiscuous mode [ 1731.026353][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.056438][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.081770][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.095621][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.150842][ T7090] veth1_macvtap: left promiscuous mode [ 1731.168820][ T7090] veth0_macvtap: left promiscuous mode [ 1731.188125][ T7090] veth1_vlan: left promiscuous mode [ 1731.252657][T22105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.947240][T22135] input: syz0 as /devices/virtual/input/input27 [ 1736.345883][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1736.345916][ T30] audit: type=1326 audit(2000000139.419:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.399956][ T30] audit: type=1326 audit(2000000139.419:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.424106][ T30] audit: type=1326 audit(2000000139.419:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.458831][ T30] audit: type=1326 audit(2000000139.429:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.486932][ T30] audit: type=1326 audit(2000000139.429:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.520021][ T30] audit: type=1326 audit(2000000139.429:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.546352][ T30] audit: type=1326 audit(2000000139.429:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.574052][ T30] audit: type=1326 audit(2000000139.429:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.600209][ T30] audit: type=1326 audit(2000000139.429:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1736.630031][ T30] audit: type=1326 audit(2000000139.429:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22132 comm="syz.2.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc6f8e969 code=0x7ffc0000 [ 1737.921625][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 1739.622660][ T7090] team0 (unregistering): Port device team_slave_1 removed [ 1739.679865][ T7090] team0 (unregistering): Port device team_slave_0 removed [ 1740.038118][T21527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.047175][T21527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.073151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.080849][T21527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.095785][T21527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.103101][T21527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.129012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1740.141576][T21527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.234334][T22154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1740.264919][T22154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1741.904403][T22212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1742.764456][T21527] hsr_slave_0: entered promiscuous mode [ 1742.771097][T21527] hsr_slave_1: entered promiscuous mode [ 1742.927152][T21527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1743.072829][T21527] Cannot create hsr debugfs directory [ 1744.815948][T22252] input: syz0 as /devices/virtual/input/input28 [ 1746.082337][ T7090] IPVS: stop unused estimator thread 0... [ 1746.226094][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1746.226114][ T30] audit: type=1326 audit(2000000149.839:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1746.571832][ T30] audit: type=1326 audit(2000000149.869:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.095773][ T30] audit: type=1326 audit(2000000149.869:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.118164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1747.528906][ T30] audit: type=1326 audit(2000000149.869:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.551258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1747.774476][ T30] audit: type=1326 audit(2000000149.869:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.797182][ T30] audit: type=1326 audit(2000000149.869:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.820368][ T30] audit: type=1326 audit(2000000149.869:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1747.861664][ T30] audit: type=1326 audit(2000000149.879:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1748.000254][ T30] audit: type=1326 audit(2000000149.879:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1748.144911][ T30] audit: type=1326 audit(2000000149.879:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.9.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31f238e969 code=0x7ffc0000 [ 1748.167252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.732109][T22358] ------------[ cut here ]------------ [ 1748.737743][T22358] WARNING: CPU: 1 PID: 22358 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 1748.749266][T22358] Modules linked in: [ 1748.753517][T22358] CPU: 1 UID: 0 PID: 22358 Comm: syz.9.3445 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1748.765274][T22358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1748.775800][T22358] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1748.782322][T22358] Code: 42 80 3c 28 00 74 08 48 89 df e8 b4 72 35 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2b 9a 22 fb cc e8 0a 54 d2 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1748.802066][T22358] RSP: 0018:ffffc900054376c8 EFLAGS: 00010287 [ 1748.808146][T22358] RAX: ffffffff85eda6e6 RBX: ffffc90005437840 RCX: 0000000000080000 [ 1748.816184][T22358] RDX: ffffc9000f4d1000 RSI: 00000000000043d6 RDI: 00000000000043d7 [ 1748.824206][T22358] RBP: 1ffff92000a86f08 R08: ffff88801cb6e117 R09: 1ffff1100396dc22 [ 1748.832227][T22358] R10: dffffc0000000000 R11: ffffffff85eda5b0 R12: 000001972734f6dd [ 1748.840197][T22358] R13: dffffc0000000000 R14: ffff888024720028 R15: 000001972734f6dd [ 1748.848210][T22358] FS: 00007f31f31266c0(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 1748.857445][T22358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1748.864237][T22358] CR2: 0000561b2120f008 CR3: 000000004ed0d000 CR4: 0000000000350ef0 [ 1748.872300][T22358] Call Trace: [ 1748.875577][T22358] [ 1748.878831][T22358] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1748.885045][T22358] drm_crtc_next_vblank_start+0x226/0x470 [ 1748.890771][T22358] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1748.897051][T22358] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1748.902052][T22358] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1748.908387][T22358] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1748.915272][T22358] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 1748.921742][T22358] drm_atomic_helper_commit+0x5c7/0xb10 [ 1748.927296][T22358] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1748.934201][T22358] drm_atomic_commit+0x262/0x2c0 [ 1748.939141][T22358] ? irqentry_exit+0x74/0x90 [ 1748.944212][T22358] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1748.949692][T22358] ? __pfx___drm_printfn_info+0x10/0x10 [ 1748.955519][T22358] ? drm_client_rotation+0x47c/0x5b0 [ 1748.960817][T22358] drm_client_modeset_commit_atomic+0x620/0x760 [ 1748.967249][T22358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.972939][T22358] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1748.980043][T22358] ? trace_contention_end+0x39/0x120 [ 1748.985421][T22358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.991061][T22358] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1748.997281][T22358] drm_client_modeset_commit+0x4a/0x70 [ 1749.002802][T22358] drm_fb_helper_lastclose+0xa4/0x1c0 [ 1749.008189][T22358] drm_fbdev_client_restore+0x34/0x40 [ 1749.014054][T22358] drm_client_dev_restore+0x13c/0x270 [ 1749.019443][T22358] drm_release+0x318/0x3f0 [ 1749.024085][T22358] ? __pfx_drm_release+0x10/0x10 [ 1749.029069][T22358] __fput+0x44c/0xa70 [ 1749.033101][T22358] task_work_run+0x1d4/0x260 [ 1749.037695][T22358] ? __pfx_task_work_run+0x10/0x10 [ 1749.042848][T22358] ? exit_to_user_mode_loop+0x40/0x110 [ 1749.048315][T22358] exit_to_user_mode_loop+0xec/0x110 [ 1749.053703][T22358] do_syscall_64+0x2bd/0x3b0 [ 1749.058468][T22358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.064728][T22358] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1749.070364][T22358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.076294][T22358] RIP: 0033:0x7f31f238e969 [ 1749.080706][T22358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1749.100695][T22358] RSP: 002b:00007f31f3126038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1749.109170][T22358] RAX: 0000000000000000 RBX: 00007f31f25b5fa0 RCX: 00007f31f238e969 [ 1749.117191][T22358] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1749.126364][T22358] RBP: 00007f31f2410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1749.134370][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1749.142369][T22358] R13: 0000000000000000 R14: 00007f31f25b5fa0 R15: 00007ffea8259bb8 [ 1749.150356][T22358] [ 1749.153425][T22358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1749.160698][T22358] CPU: 1 UID: 0 PID: 22358 Comm: syz.9.3445 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1749.172400][T22358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1749.182446][T22358] Call Trace: [ 1749.185716][T22358] [ 1749.188639][T22358] dump_stack_lvl+0x99/0x250 [ 1749.193247][T22358] ? __asan_memcpy+0x40/0x70 [ 1749.197835][T22358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1749.203040][T22358] ? __pfx__printk+0x10/0x10 [ 1749.207754][T22358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.213398][T22358] panic+0x2db/0x790 [ 1749.217303][T22358] ? __pfx_panic+0x10/0x10 [ 1749.221735][T22358] ? show_trace_log_lvl+0x4fb/0x550 [ 1749.226971][T22358] __warn+0x31b/0x4b0 [ 1749.230959][T22358] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1749.236772][T22358] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1749.242585][T22358] report_bug+0x2be/0x4f0 [ 1749.246909][T22358] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1749.252725][T22358] ? vkms_get_vblank_timestamp+0x137/0x160 [ 1749.258519][T22358] ? vkms_get_vblank_timestamp+0x139/0x160 [ 1749.264314][T22358] handle_bug+0x84/0x160 [ 1749.268559][T22358] exc_invalid_op+0x1a/0x50 [ 1749.273060][T22358] asm_exc_invalid_op+0x1a/0x20 [ 1749.277901][T22358] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 1749.284308][T22358] Code: 42 80 3c 28 00 74 08 48 89 df e8 b4 72 35 fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2b 9a 22 fb cc e8 0a 54 d2 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 1749.303902][T22358] RSP: 0018:ffffc900054376c8 EFLAGS: 00010287 [ 1749.309960][T22358] RAX: ffffffff85eda6e6 RBX: ffffc90005437840 RCX: 0000000000080000 [ 1749.317940][T22358] RDX: ffffc9000f4d1000 RSI: 00000000000043d6 RDI: 00000000000043d7 [ 1749.325901][T22358] RBP: 1ffff92000a86f08 R08: ffff88801cb6e117 R09: 1ffff1100396dc22 [ 1749.333867][T22358] R10: dffffc0000000000 R11: ffffffff85eda5b0 R12: 000001972734f6dd [ 1749.341831][T22358] R13: dffffc0000000000 R14: ffff888024720028 R15: 000001972734f6dd [ 1749.349802][T22358] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1749.355949][T22358] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1749.361754][T22358] ? vkms_get_vblank_timestamp+0x136/0x160 [ 1749.367549][T22358] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 1749.373720][T22358] drm_crtc_next_vblank_start+0x226/0x470 [ 1749.379454][T22358] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 1749.385721][T22358] ? drm_gem_fb_vmap+0x230/0x8d0 [ 1749.390675][T22358] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 1749.397012][T22358] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 1749.403861][T22358] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 1749.410289][T22358] drm_atomic_helper_commit+0x5c7/0xb10 [ 1749.415840][T22358] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1749.421903][T22358] drm_atomic_commit+0x262/0x2c0 [ 1749.426832][T22358] ? irqentry_exit+0x74/0x90 [ 1749.431420][T22358] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1749.436876][T22358] ? __pfx___drm_printfn_info+0x10/0x10 [ 1749.442452][T22358] ? drm_client_rotation+0x47c/0x5b0 [ 1749.447749][T22358] drm_client_modeset_commit_atomic+0x620/0x760 [ 1749.453994][T22358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.459631][T22358] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1749.466398][T22358] ? trace_contention_end+0x39/0x120 [ 1749.471721][T22358] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.477376][T22358] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1749.483537][T22358] drm_client_modeset_commit+0x4a/0x70 [ 1749.488998][T22358] drm_fb_helper_lastclose+0xa4/0x1c0 [ 1749.494370][T22358] drm_fbdev_client_restore+0x34/0x40 [ 1749.499738][T22358] drm_client_dev_restore+0x13c/0x270 [ 1749.505119][T22358] drm_release+0x318/0x3f0 [ 1749.509541][T22358] ? __pfx_drm_release+0x10/0x10 [ 1749.514490][T22358] __fput+0x44c/0xa70 [ 1749.518474][T22358] task_work_run+0x1d4/0x260 [ 1749.523071][T22358] ? __pfx_task_work_run+0x10/0x10 [ 1749.528181][T22358] ? exit_to_user_mode_loop+0x40/0x110 [ 1749.533639][T22358] exit_to_user_mode_loop+0xec/0x110 [ 1749.538922][T22358] do_syscall_64+0x2bd/0x3b0 [ 1749.543596][T22358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.549654][T22358] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1749.555284][T22358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.561168][T22358] RIP: 0033:0x7f31f238e969 [ 1749.565573][T22358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1749.585167][T22358] RSP: 002b:00007f31f3126038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1749.593574][T22358] RAX: 0000000000000000 RBX: 00007f31f25b5fa0 RCX: 00007f31f238e969 [ 1749.601533][T22358] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 1749.609490][T22358] RBP: 00007f31f2410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1749.617450][T22358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1749.625409][T22358] R13: 0000000000000000 R14: 00007f31f25b5fa0 R15: 00007ffea8259bb8 [ 1749.633382][T22358] [ 1749.636613][T22358] Kernel Offset: disabled [ 1749.640965][T22358] Rebooting in 86400 seconds..