last executing test programs: 2m55.376722217s ago: executing program 0 (id=1715): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r3, 0x0, 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) lseek(r4, 0xaea, 0x3) eventfd(0x5) close_range(r2, 0xffffffffffffffff, 0x0) 2m54.14282525s ago: executing program 0 (id=1720): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e90000", @ANYRES16=0x0, @ANYBLOB="0100feffffff000000001300000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x39, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) 2m48.783475671s ago: executing program 0 (id=1733): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380)=0x4, 0x4) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xfff2, 0xb}, {0xfff1, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x20040840) syz_usb_disconnect(r0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 2m43.587793418s ago: executing program 0 (id=1748): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r3, 0x0, 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) lseek(r4, 0xaea, 0x3) eventfd(0x5) close_range(r2, 0xffffffffffffffff, 0x0) 2m42.356079835s ago: executing program 0 (id=1754): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380)=0x4, 0x4) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB='\v'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xfff2, 0xb}, {0xfff1, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x20040840) syz_usb_disconnect(r0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 2m37.705885041s ago: executing program 0 (id=1766): r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582) (fail_nth: 1) 2m21.23562039s ago: executing program 32 (id=1766): r0 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x582) (fail_nth: 1) 1m49.738023375s ago: executing program 5 (id=1860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000010c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8007}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50cd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00', r2}, 0x18) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000002240)={0x2, 0x0, {0x0, 0xe0749d04fc370ad3, 0x0, 0x2, 0x2}}, 0x48) r4 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000008ef0ec4720000000000010902240001000090000904000001030000f3082103000001220500090581ab3eba5fd00867ca69030000070000a359a672dbedc2bec517720d2681f4dab59fe3278f7c036c6fe46070883578c029478209ea0990ab5c5468cb58496f38ce8230fe063a3c3a7284607bfc31fae122f634ecfcb1f961bb7b14fcfcf93d8cad"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x814) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB="0200000001000000000000000000000000c847505050"], 0x50) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x61) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 1m47.730771991s ago: executing program 5 (id=1867): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a", 0x36}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fba", 0xe9}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf0014", 0x2b}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f", 0x5a}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600", 0x5a}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m46.781074201s ago: executing program 5 (id=1871): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) brk(0x55555ede5ffe) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@loopback}, &(0x7f00000001c0)=0x14) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x2800, 0x4f, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd63c7ed3fa0f835bcc00bab83ec0ba50c32ab216d8fe44aa662fb97e72db483d1e5e62d03cb5ec22a28b6d388c5d70e05a8c58c38ab960e0"}, {0xfff3, 0x24f972aeb8675bb2, 0x0, 0x0}], 0x2}) 1m43.269452398s ago: executing program 5 (id=1880): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000800, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000008000)=[{{&(0x7f0000000380)=@can, 0x80, 0x0}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, 0x0}}], 0x2, 0x20000040) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, 0x0, 0x9) 1m42.236191297s ago: executing program 5 (id=1885): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) lseek(r3, 0xaea, 0x3) eventfd(0x5) close_range(r2, 0xffffffffffffffff, 0x0) 1m40.92366198s ago: executing program 5 (id=1889): r0 = syz_open_dev$mouse(0x0, 0x6, 0x28242) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x7, 0x2, 0x4, 0x8e, @time={0x6}, {0x4, 0x8}, {0xc, 0x7}, @result={0x8}}], 0x1c) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='5\x00', 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000300)=""/24, 0x18, 0x0, &(0x7f00000005c0)=""/154, 0x9a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002080)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x6}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c9, &(0x7f0000000100)) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000020c0)={'batadv0\x00', 0x0}) sendmmsg(r10, &(0x7f0000007ac0)=[{{&(0x7f0000000d40)=@ll={0x11, 0x15, r11, 0x1, 0xf4, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0xcc885) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x0, 0x6, 0x3, @remote, @loopback, 0x40, 0x80, 0x9, 0xfffffc40}}) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100ac141417140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100001446d54021047b0044ed0102030609021d00010000000009047d00010202ff000905060040"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m24.501813961s ago: executing program 33 (id=1889): r0 = syz_open_dev$mouse(0x0, 0x6, 0x28242) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x7, 0x2, 0x4, 0x8e, @time={0x6}, {0x4, 0x8}, {0xc, 0x7}, @result={0x8}}], 0x1c) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='5\x00', 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000300)=""/24, 0x18, 0x0, &(0x7f00000005c0)=""/154, 0x9a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000002080)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x6}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c9, &(0x7f0000000100)) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000020c0)={'batadv0\x00', 0x0}) sendmmsg(r10, &(0x7f0000007ac0)=[{{&(0x7f0000000d40)=@ll={0x11, 0x15, r11, 0x1, 0xf4, 0x6, @link_local}, 0x80, 0x0}}], 0x1, 0xcc885) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sync() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x0, 0x6, 0x3, @remote, @loopback, 0x40, 0x80, 0x9, 0xfffffc40}}) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100ac141417140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_usb_connect(0x0, 0x2f, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100001446d54021047b0044ed0102030609021d00010000000009047d00010202ff000905060040"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.299782384s ago: executing program 6 (id=2125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002800)={0x84, &(0x7f0000002380)={0x0, 0x7}, 0x0, 0x0, 0x0, &(0x7f0000002500)={0x20, 0x0, 0x4, {0x140, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000002700)={0x40, 0x1a, 0x2, 0x9}, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) close_range(r2, r3, 0x0) 10.73905465s ago: executing program 1 (id=2128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="13000000190001002dbd7000fcdbdf251d"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) read$dsp(r6, &(0x7f00000011c0)=""/4117, 0x200021d5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x4, 0x1}) 9.676450566s ago: executing program 2 (id=2129): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getrlimit(0x2, &(0x7f0000000100)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvtap0\x00', 0x20000002}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x8) 8.647334534s ago: executing program 1 (id=2131): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) 8.511760268s ago: executing program 2 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)={@multicast, @random="58a4ab044a92", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0xb0, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "4e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd82418", "80bdd625bd905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e1441af5775976715bf29ed4dcc166e", "7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738d", {"fdeca3693c5b2785e92ce602a669b6dd", "af8ff0acae6f2a350d0de9d22c2e3cf8"}}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000008000)=[{{&(0x7f0000000380)=@can, 0x80, 0x0}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x3, @private=0xa010100}}, 0x80, 0x0}}], 0x2, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200, 0x49400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}]}}}]}, 0x50}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, 0x0, 0x9) 7.104895088s ago: executing program 1 (id=2135): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000200)={{0x80, 0x5}, 'port1\x00', 0xbf04, 0x1040, 0x7, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0xd, 0x2}) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x0) 5.981008119s ago: executing program 2 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 4) recvmmsg(r1, &(0x7f00000000c0), 0x5d5, 0x0, 0x0) 5.976282913s ago: executing program 6 (id=2138): open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='host1x_channel_submit_complete\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xf2e3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8100) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000580)="d8dd14d94573a36e56e9b5950d902bc8292b703e693a7cda947f3d53b07f157733bc524ac96b9a0880aa19cfdc8a1a349acd44fae900577fe9f05aef122e2e12c69745d1decc620a0ec90effade4e14acbe04507fb597df27ab6f74148cb82e0857492a8224f612055cf898695b069bb024d9f5ce2d0af49c0ebbc46f31a5a1fb7325220b8bb69dfe3f6ce4a592f738d9f8de92b64f5b7dc2d366414d463a169fe9e211a537fb744552b703557f707fda55e375b59285a1ff4376d1e8b371e79224adbd6573ea4f1df6f6eb9478549d52a0c869ec8", 0xd5}, {&(0x7f0000000300)="6d8b547cc1d21f4d129ab88aa1975468c40413343611aeaf161cce17ddec83e8541d1508a1e72d7bb6980fa0a4f7b6c136f783098022", 0x36}], 0x2) accept4$unix(r4, 0x0, 0x0, 0x0) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r6) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r6, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x202aa2e8322f0c5b}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000280)="b7bb28010677f20293eae24fa9cbc2a8e476c0d318075cc7c7cf494e4bd8734ef2ba7edd73c599aee7ded91db16a6e870841f1e7f4f151816eb9533b65f9610b24581d22f3ecb416", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 4.949871792s ago: executing program 3 (id=2139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000e0ff0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='timer_expire_entry\x00', r0, 0x0, 0x800000}, 0x29) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) msgget$private(0x0, 0x248) fchmod(0xffffffffffffffff, 0x20049549e2a2d659) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000140)="673084cebd699b1b19a697821ac07a8e7e491dabdb837857272efdd492dd9c1b09373fb53518b811cb86c3cb", &(0x7f0000000180)=""/239, &(0x7f0000000280)="53c52690f07a287e5db7fc2c0c144a28fc917d7c25e95326769b8b4f1872fa65b3a9c4c5872997382a", &(0x7f00000002c0)="43fcf63ab14a1cb2fcc21a8516478d0ded8a556136a31e5028e739e27b398a6f90c9d95f16ee26121b45e982c15e35f44a7e56063a8ca5e0bfcf6ad11f29a90b7d703327c94e9a5aa094f16a087b01c01d997af038b4078dc2ae2ce043538d832f2a854f89fba97a93ae1c6b75eda32766b9a21d8823c7109120d1b6f12577b5b5c296d00fe08f605765007449fd316c9223ab07886cabc97c2f9c40bfd41b76c86a8f21de", 0x6, r4}, 0x38) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 4.892018423s ago: executing program 6 (id=2140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x50, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 4.644895075s ago: executing program 2 (id=2141): r0 = fanotify_init(0xf00, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r2, &(0x7f0000000100)) fanotify_mark(r0, 0x105, 0x4800002c, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 4.635290096s ago: executing program 3 (id=2142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x3000000) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x2) 4.236935029s ago: executing program 2 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000103c0)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="cb4412dbe77a653556d65c28c8aa54d5db69b3005ca141c58789469f266f83c69a8d5bae62fd7aba950e5c0c0332d53bf84c43501a451c699c32cb7cbc447185ae59c58efe83e315ef8c92ef9e2dc15d2d6c32a490ebc0c8e837d790879a33ad31273a63fcb7b75bcf3725e6aa00c2b4eea02a874373e5862baf46d6f179eaf7c1a9518d5ad2f789e082", 0x8a}, {&(0x7f0000000500)="660e4c868cc6b10e433c4c2cf36a7d6abaaa86eaf3e980d43a7e65f25cb9bc37e4b5d0b60e9b4dbb25df0bab4b52e055258e50833609852a01743c8545fd8a88db0fd8ed97c9d0d781ef8d5e6a2f1ced05f40791", 0x54}, {&(0x7f0000000240)="3d1f91", 0x3}, {&(0x7f00000005c0)="0f0b16642823d68c650f92cef8d94b6dbfb89ed63f8d13cf7a8fa3fc5effcc06a5bab8de866f", 0x26}, {&(0x7f0000000600)="8d749f7f255ab4c1344505301aa6ef5471684875d21dfd2960d76356135758ad6390b56e5af5d23ac0744b8079eaa327ba5311915fe6869a19358441320f6f146bee3b144f698966dc55922239985f5be13bcddaaa7ff0d41272934226d58cb2f6ca8c8fedc891c5d9cf938a8b97d18de04a5741f68e885ce65a6227efb19ce960167e954d2a73f499af096d0802e607dc0fbf5e3c883d0c962ca1d10d94bc4393ab8ef8bbbc2cc2b661b5e361cb68", 0xaf}, {&(0x7f00000006c0)="ef2c6305f65a048f71fc8bd312ef7b375f91c3f48605dd0fb0640ba5f0d1b161436e2ad9a3b7", 0x26}, {&(0x7f0000000740)="fbdaf6ef7fbff2ed6f5c611aab895fc7772a3a49a7c2415d2292747b1842c3029897a6c496f74fc04c5d8b577831254e4f1d20251cac6f7c21581bea6738f95ff4e133412cafc6611a711bdaba8723dbc0f942fc7334ac74ddd471a9cfe534f1169c863df0bd1ceb8165b4441819bf680e0c76224afce653716a25c5b22f86a968fea24b60b8837d926233c68ffa81f559dcb4303b14f3444624fc249dc90ba5cf82d7db21a72566c0dd28", 0xab}, {&(0x7f0000000800)="2bcce7d649762ae8e4fa9485d9bd6393c771669b74348b97c7", 0x19}], 0x8, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="203f4b63eac7f2e1126cb7236ad102f6ef884c0b7658124bcc4b7d7a68be3525a0494e2fe97246c0265a441dfceb986ca2dff59d8f9b1d4421223d8232e5cddf7053fa715361b91ad7e36e15982d38d69763e82169cddec75c6e6851521bceb049c1f8c4fdd2a388e2000d35263db5e9f5f42d5f0a80c24b07543dee6786f1354569cf589578972be6d1ec4bff9786a70b0602a54d284131616dbc737f2a6c00cd94b97beb4d6c59ffd0f745d81c1926b0be9b6578cb1fe7faf735b7c40feef7bcc801f84faf5f5d26665dd808b134", 0xcf}, {&(0x7f00000009c0)="ca629e3cf736e511158c1eba25fe9574b8b6c6a664c3733a9e6cfef7455ee21923f849fd0e4099b926eaaafefad015c664a17a08364872412772862490e7c5eacbda51b358b8bbe20041af02a38fd639df8d0204e16f3227ada56a195a1f86b6c7e47c13e63a59d664b225fed19f48b29f54d917d829da4dc30e90c7a211731be2f22c0f8e7bd13899517663967daebd5315846ec338cbecdf65dd262ebd2b81208987f158a966f1b07140cc2d869b56379c89e32379cddf0039c85d7670f538573eb5f69243b545996376", 0xcb}, {&(0x7f0000000ac0)="6a4d642438c2a45a73256f540b25ee02f71c5406d877a5e48b241f4763f84136d21f3abdbe94b6861ff3572a98f7", 0x2e}, {&(0x7f0000000b00)="83291b696a8a1ae44a421ed24bada796413fa73610e5c61b19032c28a5f716bbb160391c7aeb7ddd32a3ac79751a8f5ac86c94636fc2c16f1f638ee84d4a5a889843f603aecec642f436814e3a55cbfcb92e12ff4dd7f581c787d0c486ddc437fca09f6b2b5ee5895df3957bb39085076ab05c6956d04ace2147ca4d9a335c360f82279a4d77a7bd0aad1212c596c250be7fcdba1ff1a1e8885c0323795a8506fac9c96d97ba", 0xa6}, {&(0x7f0000000bc0)="664823124cce0779b009fccdb17e04aa0ead5cd939d06691f4c637a727459b0a62321f963de6c4f0a9aaa06e116926235b3190af107891536fcdf1178900c8dc76c26fd9d638c4f0e1", 0x49}, {&(0x7f0000000c40)="0087e49859468419e2372b007f443d80dfbdda5de2beb0892d968475dcbf93019670ebd09642b658f3b9ae98e78dcf77414733d78c825694a5c4aa752c4c8788d4ea4dd5787bc9939cca4ef62ee55f8256bcb9a5d7279ed64407238a9192a6630bf52da0cc3f32829cea97c61bcd4ff784bc079753a68aea857239ef", 0x7c}], 0x6, &(0x7f0000000d40)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r1, 0xffffffffffffffff]}}], 0x50, 0x800}}, {{&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="2b627289ddba754479250757f949dc382eb647151274412ffc484a40cdcecdce01e8276a49ec1936f286e20333a53b5651d750c23e5406382418679f9b5d052326e0debdb1405aecfbe779078854db181f329c264e4d463fb2684fa979db83091807de24e3f2c226232fc8fe783d507eeada7621bb3771c3f34adc4d625a265b7e02db84cfd0d518526682777de34be5216a7e06f9676c217f6e5404446a42824a142c775327fe8eabc3a8f31328f5d5a67be49d58be883f52817c4eb11058a3c94bb89e90bfc199ea5a42a6d970cc25005a", 0xd2}, {&(0x7f0000001f40)="abb97835", 0x4}, {&(0x7f0000001f80)="a3537e072f26ac86ae3a890e6e472a18bb5907b0", 0x14}, {&(0x7f0000004200)="483ac5eaffee3a4a84f853830b535f32f76fc8679c87ff563909880e188a9d36a09a5b1f37f74f4ed26306176ea027b4bbecfb66fa26fbea3ad066035a809bd6bb48f40ca08d0c32663a81599dc92bb58555d20d85725d7f703b8b8b373188641bc52a1ef13f5d65f43541a21b4a09f4ade1c7e49118fb060072786a5e07ec63f380b517fa99882539cf5c69f7c53f6aa97c1f1d5fbae4c79dcdf19ad088f68edd4e86a39c499ddd697a57cbdb502a24361b86c8c83b8e1086b1f79b7b231cacc7c6ef9948cf3076dd70fb964922d6fb9071f9", 0xd3}, {&(0x7f0000001fc0)="698a379ffe759dfcc4b39589bc22ea0e48639634ac7f882fe2db6342884e7ad9136546b7d8af8e0f16be1a27a314ad829cf4033b5ecd2b5efeda4760603f7382f0a48a", 0x43}, {&(0x7f0000002040)="147544afc585", 0x6}, {&(0x7f0000004300)="b4d629a6ecbcd2da5d440f9a3f663d771aaa3714ad4b71f689b70cd6a072cca69360fb94af0c3a9774a1bcd349273969b6f388bded7095db5f9aa5ffea952d0ae9cd001451465db69aa31142d63a6e971647b55f3d1279d1d1921f062222f6e1da623cd3ce40476c472f57addf9aeb09817b8b58df0ab2bacf1602a9fd82574277218362fad214c0b066b43f1ea9739e84c2a466be5570ea0dec50738461c57a308a388a623500b4820141", 0xab}], 0x8, &(0x7f0000004640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xf0, 0x20008010}}, {{&(0x7f0000006200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000c580)=[{&(0x7f000000c280)="89a1911bea0e3971b97fef59db816d0a0272610d336008239d556490d54aa8485c436e15bc271ee1ba261262ad5aa447010945eea41d2f011fbcaf77cfacbb0cf8cb34f1d42958ef1ff3f2f386dab530867605ed243e30aee681c369762caf598e0602be50b2adc16c2682f53b0a10e1b45823037c88", 0x76}, {&(0x7f000000c300)="f33918ef6340677c92deb8dad581a18802569a01852648b495f71c8e30e0ea62c78b5970a7f6060d3f6fe62ee8de6004570ab45a2a38fd0f3064d02ee12414aa9dffa74f624df8ce0d72f20ec032a2f34c884db93fcc303445529880c4b9f05964aba64a50393ead1ca5af9a116d6d34d9c8f4b427090cca3b7c1294e41999265ded2f3dd5457c51607ea5e9948d31cfa8c9", 0x92}, {&(0x7f000000c3c0)="1f62b75a1e29c755ffc304c3e460d42ff73485f3dedb9c18155d7e4b16e78fb4cdfb2852c7fad77b25eed1c4fb298fc06d1301caae0fb66e3f947ab629e9f4f323659a5105bacccc04015016ddc47b52587170529804f9dbef6c7656e71e", 0x5e}, {&(0x7f000000c440)="77ad41622f6157a0236a36f30e096a0ce4ac2e8e91043ea2e76b681a8e0d0e201b", 0x21}, {&(0x7f000000c480)="4cc9e9d06d7e845d67dbf3236b6b301517627670154af465c46e14330d92b8b90c34165f46cf73ff0a8dc7cac1f356b06823", 0x32}, {&(0x7f000000c4c0)="f2157b858e0e1bfe4bf85703b056438cbd2510b8c8ffd97c19ca839424b0629a6da96ce501f972453d2c1331326129c8a1eed896bb11a1194a4569298742090a365db9f0d7907dcf4edb0396d1d5625601e3b5fc933141dd2d052bca8bf0047c2bfaee809b57b0d7e95a309a3b60d120272b9ccea1090c9f51796e7d5918826f30", 0x81}], 0x6, &(0x7f000000c600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x50000}}, {{&(0x7f000000c6c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f000000c8c0)=[{&(0x7f000000c740)="8067489adf45f268ef6db498492b6fcb3120e13e1a5823d776706f8752ec716ffedb31a1c8b25a69358b46dd95ad1ebab323c559a4a1fed3d51388aac942f8bab898f044ed11d93e9b2e72120d299c75c50e2518caab8572b93d4f59252c1ad54200f4360e3cfb78680388478ef2c4aca16dd493b57ac97537d4ca72f68cd018d36ca9f49236b9659b1585bc7745e697a05f4c6453fa5f6f4f47be5314afde5db88d922008", 0xa5}, {&(0x7f000000c800)="01fa6937220ae04778320871b55cf1f58dad91487bf299970a5524696860cbc47aeb65b7b2dd799386e3781b44d51da0742c5f6d8d5529cf0f507720ba89170d3b2eeeb950366a3e174d681b7091155633e0b794a3a3d58f41d4f5a39a4d1c083a486bb4f9e826c27eeeba7f1171a49302399d85582b55156f67ecc71b7ca667f8163c9527553fe252797ee2c0a7bd9c44760e44103c7894df31185e4964494378707f3ba2cdd4abb233b4649a83e1956bd06c0f42", 0xb5}], 0x2, &(0x7f000000c900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x40001}}, {{&(0x7f000000c940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ca80)=[{&(0x7f000000c9c0)="dc06ea3b576fce61b5a29cc115d19f388371374b808c2be825229fadb1c02845f49e7f9bc7709aae683d73e45b53fe14184c815f00fb778e421bab6b56e6cc235edf1127f12244af8ae748d59e35507c0d4870c945b9d30f90605ef8b11caadaf3dd91eb7733dcd7104f0bbc4e00d040b76386eccbff7269d31ab55c8e0a1a7aba178a3a6e4178d7979f4d40ef63e17f12ce85655e90d971613ad0f9f308157254", 0xa1}], 0x1, &(0x7f000000cec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0xf8, 0x45}}, {{&(0x7f000000cfc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e280)=[{&(0x7f000000d040)="3be549da75aa7582e44c0e7aa3034e5a15ec5b7dbb3a0306faba0622977d86b2449826a119e5b9a726e6b4a8f6893decbead1695269d275389751b44ef18430240d6123330319cd99f35917c6cee1fb2", 0x50}, {&(0x7f000000d0c0)="893da1a93c7c495e0c4a6b9de854012a5fa57c1fe319d99fe650f64a7de1b113c64977ac165891d919b26ab567c251b7e4c0e659b965d90718111b603c02a6d8e3ec5942bb66807e0e253db7bcfa8b6ed24f", 0x52}, {&(0x7f000000d140)="4aa94156bb2eceb7497871f2a10bc115ce9bb4071d8e16cc8b3a49cc3fe9ccfbb660d44265a47d3f29c98c48396a050fa78edbcad4715ee7dec5290f0e3cdc206d7198be343de027063e7878950d3dd0383fd6ace92e02a4987839298c60ee4b7c841b710c84c429c728ef5d55b0496191e6da5c0fed169d49ce6a01ed1c3be073b402730a20116782ac0a8b29b982bcd7e83b89825465b4eb5ed20ed7f8dc", 0x9f}, {&(0x7f000000d200)="8035dbca3d216e126215d7c31cbf94edd4df3e16667e01808ab5524e04acc39215ca34fd4b57574fc3a50553e1778532f95439d7fad86b18e3e920cee7ea5960e34e294eda50", 0x46}, {&(0x7f000000d280)="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", 0x1000}], 0x5, &(0x7f000000e300)=[@cred={{0x1c}}], 0x20, 0x800}}], 0x7, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_NOTIFY_INVAL_ENTRY(r5, 0x0, 0x0) 4.234308439s ago: executing program 4 (id=2145): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) 3.928136249s ago: executing program 1 (id=2146): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="f41c0cedfafd", 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x80047453, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth1_to_team\x00'}}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0xc400, 0x14) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80002, 0x16) renameat2(r6, &(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000200)='./file0\x00', 0x6) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10007d80", @ANYRESDEC=r9], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r9, 0x8001}, &(0x7f0000000340)=0x8) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x701, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x44}}, 0x20000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de947988b7d876e0641cce3d48723b6429a95d60532fc9fcfb33e60444129c10d39754a551ecd534eda25f81c893d25975948dfcc14e7e8ee07838c2656cee26924b914044a705c3058764cebe19b9d7f8f87b17b09f0c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) 2.822733623s ago: executing program 3 (id=2147): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @private0, 0x10}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.821987058s ago: executing program 4 (id=2148): userfaultfd(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x6000, 0x800, &(0x7f0000000600)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x17, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "1a8554fe581b59de72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d200", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) fchdir(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bind$inet6(r4, 0x0, 0xffffff22) pipe2$9p(0x0, 0x0) 2.766224099s ago: executing program 1 (id=2149): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d050000f0ffdefe00c3000092f000002000"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f00000005c0)=@buf="8e5e53640d0102935511b97754", 0x1}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) 1.98004042s ago: executing program 2 (id=2150): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e90000", @ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="061200000000000a000600080211000001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x39, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) 1.963753641s ago: executing program 1 (id=2151): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) brk(0x55555ede5ffe) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@loopback}, &(0x7f00000001c0)=0x14) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x2800, 0x4f, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd63c7ed3fa0f835bcc00bab83ec0ba50c32ab216d8fe44aa662fb97e72db483d1e5e62d03cb5ec22a28b6d388c5d70e05a8c58c38ab960e0"}, {0xfff3, 0x24f972aeb8675bb2, 0x0, 0x0}], 0x2}) 1.954304687s ago: executing program 4 (id=2152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000e0ff0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='timer_expire_entry\x00', r0, 0x0, 0x800000}, 0x29) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x88031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) msgget$private(0x0, 0x248) fchmod(0xffffffffffffffff, 0x20049549e2a2d659) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000140)="673084cebd699b1b19a697821ac07a8e7e491dabdb837857272efdd492dd9c1b09373fb53518b811cb86c3cb", &(0x7f0000000180)=""/239, &(0x7f0000000280)="53c52690f07a287e5db7fc2c0c144a28fc917d7c25e95326769b8b4f1872fa65b3a9c4c5872997382a", &(0x7f00000002c0)="43fcf63ab14a1cb2fcc21a8516478d0ded8a556136a31e5028e739e27b398a6f90c9d95f16ee26121b45e982c15e35f44a7e56063a8ca5e0bfcf6ad11f29a90b7d703327c94e9a5aa094f16a087b01c01d997af038b4078dc2ae2ce043538d832f2a854f89fba97a93ae1c6b75eda32766b9a21d8823c7109120d1b6f12577b5b5c296d00fe08f605765007449fd316c9223ab07886cabc97c2f9c40bfd41b76c86a8f21de", 0x6, r4}, 0x38) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1.814177184s ago: executing program 3 (id=2153): ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, &(0x7f00000016c0), 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad"], 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000000f2000002000004000000000000000003"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) r5 = io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7897, 0x400, 0x1, 0x232}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x4540, 0x4) 1.559764427s ago: executing program 4 (id=2154): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x2a8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES8=r0], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r4, 0x0, 0x0}, 0x20) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) lseek(r6, 0xaea, 0x3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = eventfd(0x5) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x4, 0x1, r8}) mount(&(0x7f0000000080)=@nullb, 0x0, 0x0, 0x208000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.359759302s ago: executing program 4 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0xa4) recvmmsg(r1, &(0x7f00000000c0), 0x5d5, 0x0, 0x0) 764.712716ms ago: executing program 3 (id=2156): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x0, 0x0, 0x34324258, 0x0, 0x0, [{}, {0x1}, {}, {0xfffffffe}, {}, {}, {}, {0x2}]}}) (fail_nth: 8) 752.934884ms ago: executing program 6 (id=2157): userfaultfd(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) getpgid(0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x6000, 0x800, &(0x7f0000000600)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x17, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "1a8554fe581b59de72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d200", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) fchdir(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bind$inet6(r4, 0x0, 0xffffff22) pipe2$9p(0x0, 0x0) 464.157652ms ago: executing program 3 (id=2158): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0xfffffffe, {{0x2, 0x0, @loopback}}}, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0xfffffe53, 0x0, 0x0}, 0x50) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) 97.298469ms ago: executing program 6 (id=2159): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) getrlimit(0x2, &(0x7f0000000100)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvtap0\x00', 0x20000002}, 0x18) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x8) 0s ago: executing program 4 (id=2160): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000380)=0x4, 0x4) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) bind$packet(r5, &(0x7f0000000000)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e", @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0xfff2, 0xb}, {0xfff1, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x20040840) syz_usb_disconnect(r0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) kernel console output (not intermixed with test programs): s: Mfr=0, Product=0, SerialNumber=0 [ 640.399386][T12175] syz_tun: entered promiscuous mode [ 640.410782][ T5903] usb 3-1: config 0 descriptor?? [ 640.636162][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.647152][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.851894][ T5926] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 640.855313][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 641.075711][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 641.396634][ T5903] usb 3-1: USB disconnect, device number 33 [ 641.413557][ T5926] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 641.429478][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.442881][ T5926] usb 5-1: Product: syz [ 641.451231][ T5926] usb 5-1: Manufacturer: syz [ 641.460134][ T5926] usb 5-1: SerialNumber: syz [ 641.474842][ T5926] usb 5-1: config 0 descriptor?? [ 641.513233][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 641.624846][ T5926] usb 5-1: setting power ON [ 641.636590][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 641.644762][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 641.726128][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 641.848220][ T5926] usb 5-1: media controller created [ 642.155386][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 642.575014][T12195] xt_hashlimit: max too large, truncated to 1048576 [ 642.582001][T12195] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 642.593743][T12195] dvb-usb: bulk message failed: -22 (3/0) [ 642.599489][T12195] cxusb: i2c wr: len=79 is too big! [ 642.599489][T12195] [ 642.649812][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 643.105527][ T5926] usb 5-1: selecting invalid altsetting 6 [ 643.186148][ T5926] usb 5-1: digital interface selection failed (-22) [ 643.326246][T12208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.551124][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 643.917849][ T5926] usb 5-1: setting power OFF [ 643.962906][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 643.968661][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 644.223818][ T5926] (NULL device *): no alternate interface [ 644.295875][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 644.769623][T12213] serio: Serial port ptm0 [ 645.227603][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 645.688513][ T5926] usb 5-1: USB disconnect, device number 24 [ 645.900747][T12229] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 647.029910][T12233] serio: Serial port ptm0 [ 647.359782][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 647.359800][ T30] audit: type=1326 audit(2000000194.194:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.426727][ T30] audit: type=1326 audit(2000000194.194:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.453289][ T30] audit: type=1326 audit(2000000194.194:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.482559][ T30] audit: type=1326 audit(2000000194.194:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.521331][ T30] audit: type=1326 audit(2000000194.194:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.544849][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.618722][T12259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 647.624117][ T30] audit: type=1326 audit(2000000194.194:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.651137][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.762069][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 647.817043][ T30] audit: type=1326 audit(2000000194.194:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.877187][ T30] audit: type=1326 audit(2000000194.203:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.900660][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.908934][ T30] audit: type=1326 audit(2000000194.203:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 647.934778][ T30] audit: type=1326 audit(2000000194.203:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.4.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 648.011775][T12268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.428349][T12280] xt_connbytes: Forcing CT accounting to be enabled [ 649.435221][T12280] Cannot find set identified by id 0 to match [ 650.988966][T12300] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 652.321488][T12309] loop6: detected capacity change from 0 to 524287999 [ 652.453006][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 653.540637][ T5874] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 653.735972][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 653.805161][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.172083][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 654.181900][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.197653][ T5874] usb 3-1: config 0 descriptor?? [ 654.207237][ T5874] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 655.340341][ T5926] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 655.510171][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 655.533170][ T5926] usb 1-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 655.554051][ T5926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.584349][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 655.606026][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.631155][ T5926] usb 1-1: Product: syz [ 655.652432][ T5926] usb 1-1: Manufacturer: syz [ 655.686383][T12343] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 655.698873][ T5926] usb 1-1: SerialNumber: syz [ 655.751968][T12342] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1665'. [ 655.765093][ T5926] usb 1-1: config 0 descriptor?? [ 656.189126][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 656.189149][ T30] audit: type=1400 audit(2000000202.668:2242): avc: denied { load_policy } for pid=12341 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 656.271045][T12344] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 656.406083][T12344] SELinux: failed to load policy [ 656.582381][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.598431][ T5874] gspca_vc032x: reg_w err -110 [ 656.604533][ T5874] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 656.609955][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.623288][ T5874] usb 3-1: USB disconnect, device number 34 [ 656.654156][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.711978][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.768580][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.829894][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 656.922632][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.544326][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.559911][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.574059][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.595420][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.602927][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.614745][ T30] audit: type=1326 audit(2000000203.997:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 657.617327][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.642013][ T30] audit: type=1326 audit(2000000203.997:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 657.691808][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.699732][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.707243][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.732738][ T30] audit: type=1326 audit(2000000203.997:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 657.775102][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.797628][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.822172][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.829909][ T30] audit: type=1326 audit(2000000203.997:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 657.860637][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.869569][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.885677][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.893525][ T30] audit: type=1326 audit(2000000203.997:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 657.924403][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.933321][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.955416][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 657.964718][ T30] audit: type=1326 audit(2000000203.997:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 658.022211][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.038208][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.042673][ T30] audit: type=1326 audit(2000000203.997:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 658.074328][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.110483][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.246681][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 658.256541][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 658.408288][ T30] audit: type=1326 audit(2000000203.997:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 658.435215][ T30] audit: type=1326 audit(2000000203.997:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12336 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 658.561796][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.583905][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.604316][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.623043][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.640414][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.654000][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.670185][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.685982][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.701432][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.715840][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.745077][ T5958] libceph: connect (1)[c::]:6789 error -101 [ 658.751844][T12364] ceph: No mds server is up or the cluster is laggy [ 658.752004][ T5958] libceph: mon0 (1)[c::]:6789 connect error [ 658.780231][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.787788][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.795201][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.811904][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.819313][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.844037][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.851428][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.858862][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.875446][ T5874] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 658.889497][ T5903] usb 1-1: USB disconnect, device number 19 [ 658.977983][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 658.985440][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.073337][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.073705][ T5874] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 659.082867][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.097764][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.105341][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.118073][ T5874] usb 2-1: config 0 has no interface number 0 [ 659.135616][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.156386][ T5874] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.161434][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.179777][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.210782][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.286310][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.756553][ T5874] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 659.863047][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 659.887939][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 659.968984][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'. [ 659.989969][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.083572][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.147616][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.181540][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.435688][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.469436][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.478360][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.534296][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.542446][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.588324][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.592190][ T5874] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 660.595870][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.607569][ T5874] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 660.625856][ T5874] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 660.636699][ T5874] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.673427][ T5874] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 660.689152][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.707467][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.712236][ T5874] usb 2-1: config 0 descriptor?? [ 660.722510][T12369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 660.733422][T12369] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 660.764811][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.783601][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.804627][ T5874] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 660.820463][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.914386][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.959788][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 660.967709][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.079352][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.086847][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.220652][T12389] netlink: 'syz.4.1674': attribute type 11 has an invalid length. [ 661.242351][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.250148][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.257561][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.330970][ T5926] hid-generic 0000:0000:0004.0005: unknown main item tag 0x0 [ 661.775275][ T5903] usb 2-1: USB disconnect, device number 37 [ 661.787050][ T5926] hid-generic 0000:0000:0004.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 661.857030][ T5903] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 662.002913][T12395] fido_id[12395]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 662.969883][ T5874] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 663.012714][ T5926] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 663.142330][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.160067][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 663.179793][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 663.182421][T12414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.190708][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 663.202212][ T5926] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.211388][ T5874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 663.231185][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.239884][ T5926] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 663.241869][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 663.241880][ T30] audit: type=1400 audit(2000000209.253:2267): avc: denied { accept } for pid=12413 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 663.258545][ T5926] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.280375][ T5874] usb 4-1: config 0 descriptor?? [ 663.289693][ T30] audit: type=1400 audit(2000000209.272:2268): avc: denied { setopt } for pid=12413 comm="syz.4.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 663.292107][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.328650][T12409] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 663.339934][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.777905][ T5874] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 663.799963][ T5874] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 663.912350][ T5874] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 664.007925][ T5852] usb 2-1: USB disconnect, device number 38 [ 664.014577][ T5874] usb 4-1: USB disconnect, device number 27 [ 664.058209][T12409] hsr0: entered promiscuous mode [ 664.110526][T12420] fido_id[12420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 664.301239][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 664.337566][T12408] hsr0: left promiscuous mode [ 664.997483][T12432] set match dimension is over the limit! [ 665.757166][ T5852] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 665.941989][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 665.947307][ T30] audit: type=1326 audit(2000000211.798:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.047653][T12439] orangefs_mount: mount request failed with -4 [ 666.203970][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.217155][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.228737][ T30] audit: type=1326 audit(2000000211.798:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.272350][ T5852] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 666.433953][T12445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.724703][T12444] Set syz1 is full, maxelem 65536 reached [ 666.730754][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.738818][ T30] audit: type=1326 audit(2000000211.798:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.772684][ T5852] usb 4-1: config 0 descriptor?? [ 666.779218][ T30] audit: type=1326 audit(2000000211.798:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.806543][ T30] audit: type=1326 audit(2000000211.798:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.830111][ T30] audit: type=1326 audit(2000000211.798:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.853788][ T30] audit: type=1326 audit(2000000211.798:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 666.880057][ T30] audit: type=1326 audit(2000000211.798:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 667.511883][ T5852] ft260 0003:0403:6030.0007: item fetching failed at offset 0/2 [ 667.522309][T12435] macvlan2: entered promiscuous mode [ 667.535210][T12435] macvlan2: entered allmulticast mode [ 667.544238][ T5852] ft260 0003:0403:6030.0007: failed to parse HID [ 667.557474][T12452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1692'. [ 667.566635][ T5852] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -22 [ 667.583976][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 667.624964][ T5926] usb 4-1: USB disconnect, device number 28 [ 668.939088][T12470] loop6: detected capacity change from 0 to 524287999 [ 669.860757][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 669.873031][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 671.010483][T12483] ceph: No mds server is up or the cluster is laggy [ 671.425384][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 671.994280][T12494] loop6: detected capacity change from 0 to 524287999 [ 672.097545][ T5903] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 672.105088][ T5869] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 672.118149][ T5815] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 672.283657][ T5869] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.294658][ T5903] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 672.307469][ T5903] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 672.325363][ T5869] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 672.336079][ T5903] usb 5-1: config 0 has no interface number 0 [ 672.353100][ T5869] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.371366][ T5903] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 672.408713][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.413438][T12500] loop2: detected capacity change from 0 to 7 [ 672.432559][ T5903] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.448946][ T5903] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 672.458658][ T5815] Dev loop2: unable to read RDB block 7 [ 672.461219][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.472784][T12491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 672.485554][ T5869] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.499513][ T5815] loop2: AHDI p1 p2 p3 [ 672.507561][ T5815] loop2: partition table partially beyond EOD, truncated [ 672.533910][ T5903] usb 5-1: config 0 descriptor?? [ 672.566894][ T5815] loop2: p1 start 1601398130 is beyond EOD, truncated [ 672.582409][ T5815] loop2: p2 start 1702059890 is beyond EOD, truncated [ 672.667609][T12500] Dev loop2: unable to read RDB block 7 [ 672.673345][T12500] loop2: AHDI p1 p2 p3 [ 672.680484][T12500] loop2: partition table partially beyond EOD, truncated [ 672.702735][T12500] loop2: p1 start 1601398130 is beyond EOD, truncated [ 672.735824][T12500] loop2: p2 start 1702059890 is beyond EOD, truncated [ 672.776838][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.794881][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.805296][ T5869] usb 3-1: USB disconnect, device number 35 [ 673.485844][T12506] orangefs_mount: mount request failed with -4 [ 673.922777][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 673.922793][ T30] audit: type=1400 audit(2000000219.244:2300): avc: denied { write } for pid=12514 comm="syz.3.1708" path="socket:[35329]" dev="sockfs" ino=35329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 674.413631][ T5852] libceph: connect (1)[c::]:6789 error -101 [ 674.424428][ T5852] libceph: mon0 (1)[c::]:6789 connect error [ 674.882481][T12522] ceph: No mds server is up or the cluster is laggy [ 674.886704][ T5903] usb 5-1: USB disconnect, device number 25 [ 675.187336][ T30] audit: type=1400 audit(2000000220.431:2301): avc: denied { listen } for pid=12534 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 675.271459][ T30] audit: type=1400 audit(2000000220.431:2302): avc: denied { connect } for pid=12534 comm="syz.1.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 675.371383][ T5903] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 675.552697][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 675.580085][ T5903] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 675.606427][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.667297][ T5903] usb 5-1: Product: syz [ 675.702374][ T5903] usb 5-1: Manufacturer: syz [ 675.732258][ T5903] usb 5-1: SerialNumber: syz [ 677.396017][ T5903] usb 5-1: config 0 descriptor?? [ 677.420739][ T5903] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 677.461143][ T5903] usb 5-1: setting power ON [ 677.533845][T12543] loop6: detected capacity change from 0 to 524287999 [ 677.635707][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 677.659243][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.854352][T12549] xt_hashlimit: max too large, truncated to 1048576 [ 677.862534][T12549] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 678.317453][ T5903] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 678.332201][ T5903] usb 5-1: media controller created [ 678.335164][ T6737] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 678.348917][ T30] audit: type=1326 audit(2000000223.387:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 678.525279][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.539231][ T30] audit: type=1326 audit(2000000223.387:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 678.562942][ T5869] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 678.611169][ T5903] usb 5-1: selecting invalid altsetting 6 [ 678.630397][ T5903] usb 5-1: digital interface selection failed (-22) [ 678.646823][ T5903] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 678.660382][ T30] audit: type=1326 audit(2000000223.387:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 678.695026][ T5903] usb 5-1: setting power OFF [ 678.700208][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 678.711461][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 678.813365][ T30] audit: type=1326 audit(2000000223.387:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 678.837348][ T5903] (NULL device *): no alternate interface [ 678.842999][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 678.879032][ T30] audit: type=1326 audit(2000000223.387:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.497231][ T30] audit: type=1326 audit(2000000223.387:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.528122][ T5869] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 679.548749][ T5869] usb 4-1: config 0 has no interface number 0 [ 679.568060][ T5869] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 679.595716][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 679.630800][ T5869] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 679.642668][ T30] audit: type=1326 audit(2000000223.387:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.645566][ T5903] usb 5-1: USB disconnect, device number 26 [ 679.682146][ T5869] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 679.692682][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.702409][ T5869] usb 4-1: Product: syz [ 679.712212][ T5869] usb 4-1: Manufacturer: syz [ 679.716825][ T5869] usb 4-1: SerialNumber: syz [ 679.764369][ T30] audit: type=1326 audit(2000000223.387:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.795570][ T30] audit: type=1326 audit(2000000223.387:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.821111][ T5869] usb 4-1: config 0 descriptor?? [ 679.826781][T12546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 679.967941][ T30] audit: type=1326 audit(2000000223.387:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 679.981886][T12546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 680.054011][ T30] audit: type=1326 audit(2000000223.387:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 680.207202][ T5815] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 680.387379][T12546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 680.808776][ T5821] Bluetooth: hci1: Malformed LE Event: 0x1b [ 681.077021][T12546] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 681.493376][ T30] audit: type=1326 audit(2000000223.387:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 681.539553][ T30] audit: type=1326 audit(2000000223.387:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 681.564671][ T30] audit: type=1326 audit(2000000223.387:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 681.588443][ T30] audit: type=1326 audit(2000000223.387:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.0.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 681.680138][ T5869] asix 4-1:0.251: probe with driver asix failed with error -71 [ 681.697108][T12583] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1724'. [ 681.731679][ T5869] usb 4-1: USB disconnect, device number 29 [ 681.748364][T12583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.475127][T12600] Set syz1 is full, maxelem 65536 reached [ 682.580943][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.282284][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.567234][T12605] Set syz1 is full, maxelem 65536 reached [ 684.458162][ T5852] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 684.667710][ T5852] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.785046][T12621] serio: Serial port ptm0 [ 684.871431][ T5852] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 685.054685][ T5852] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 685.175136][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.280609][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 685.280623][ T30] audit: type=1400 audit(2000000229.870:2362): avc: denied { listen } for pid=12629 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 685.336582][T12615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 685.344267][ T30] audit: type=1400 audit(2000000229.870:2363): avc: denied { accept } for pid=12629 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 685.347603][ T5852] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 686.298285][ T5852] usb 1-1: USB disconnect, device number 20 [ 686.420800][T12615] hsr0: entered promiscuous mode [ 686.557232][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.578329][ T30] audit: type=1400 audit(2000000230.973:2364): avc: denied { mount } for pid=12644 comm="syz.4.1741" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 687.082358][T12614] hsr0: left promiscuous mode [ 687.171329][ T30] audit: type=1400 audit(2000000231.647:2365): avc: denied { search } for pid=12644 comm="syz.4.1741" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 687.196845][ T30] audit: type=1400 audit(2000000231.647:2366): avc: denied { search } for pid=12644 comm="syz.4.1741" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 687.222359][ T30] audit: type=1400 audit(2000000231.647:2367): avc: denied { read open } for pid=12644 comm="syz.4.1741" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 687.434333][T12658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.086022][T12655] Set syz1 is full, maxelem 65536 reached [ 689.450463][ T30] audit: type=1400 audit(2000000233.770:2368): avc: denied { mount } for pid=12669 comm="syz.4.1749" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 689.578156][ T30] audit: type=1400 audit(2000000233.770:2369): avc: denied { mounton } for pid=12669 comm="syz.4.1749" path="/352/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 689.854735][ T30] audit: type=1326 audit(2000000233.957:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 689.961408][T12676] FAULT_INJECTION: forcing a failure. [ 689.961408][T12676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.974758][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.4.1750 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 689.974772][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.974778][T12676] Call Trace: [ 689.974781][T12676] [ 689.974785][T12676] dump_stack_lvl+0x16c/0x1f0 [ 689.974801][T12676] should_fail_ex+0x512/0x640 [ 689.974818][T12676] strncpy_from_user+0x3b/0x2e0 [ 689.974829][T12676] ? lock_acquire+0x179/0x350 [ 689.974844][T12676] strncpy_from_user_nofault+0x7f/0x180 [ 689.974858][T12676] bpf_probe_read_user_str+0x26/0x70 [ 689.974871][T12676] bpf_prog_860dce4575eb4f0a+0x3e/0x44 [ 689.974881][T12676] bpf_trace_run2+0x233/0x590 [ 689.974895][T12676] ? __pfx_bpf_trace_run2+0x10/0x10 [ 689.974910][T12676] ? __might_fault+0xe3/0x190 [ 689.974919][T12676] ? __might_fault+0x13b/0x190 [ 689.974932][T12676] __bpf_trace_sys_enter+0x37/0x60 [ 689.974947][T12676] syscall_trace_enter+0x1b5/0x260 [ 689.974962][T12676] do_syscall_64+0x347/0x4c0 [ 689.974976][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.974986][T12676] RIP: 0033:0x7f1ce118e969 [ 689.974995][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.975005][T12676] RSP: 002b:00007f1ce1fdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 689.975015][T12676] RAX: ffffffffffffffda RBX: 00007f1ce13b5fa0 RCX: 00007f1ce118e969 [ 689.975021][T12676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 689.975027][T12676] RBP: 00007f1ce1fdd090 R08: 0000000000000000 R09: 0000000000000000 [ 689.975033][T12676] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 689.975038][T12676] R13: 0000000000000000 R14: 00007f1ce13b5fa0 R15: 00007fff6418b5f8 [ 689.975056][T12676] [ 690.165458][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 690.174521][ T30] audit: type=1326 audit(2000000233.957:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77378e969 code=0x7ffc0000 [ 690.530518][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'. [ 691.075842][ T5903] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 691.559361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.572477][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.739422][ T5903] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 691.768590][ T5903] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 691.809295][ T5903] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 691.840265][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.877743][T12685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 692.317126][ T5903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.590907][T12704] Set syz1 is full, maxelem 65536 reached [ 692.661548][ T5926] usb 1-1: USB disconnect, device number 21 [ 692.698821][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.641666][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 693.647826][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 693.712676][T12711] ceph: No mds server is up or the cluster is laggy [ 695.020809][ T5869] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 695.253401][ T5869] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.541547][ T5869] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 695.565938][ T5869] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.586432][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.849789][T12738] nbd0: detected capacity change from 0 to 4294967296 [ 695.905550][T12724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.917900][T12737] loop6: detected capacity change from 0 to 524287999 [ 695.928059][T12741] FAULT_INJECTION: forcing a failure. [ 695.928059][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 695.940438][ T5869] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.942848][T12741] CPU: 1 UID: 0 PID: 12741 Comm: syz.0.1766 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 695.942868][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.942877][T12741] Call Trace: [ 695.942882][T12741] [ 695.942888][T12741] dump_stack_lvl+0x16c/0x1f0 [ 695.942909][T12741] should_fail_ex+0x512/0x640 [ 695.942927][T12741] ? fs_reclaim_acquire+0xae/0x150 [ 695.942948][T12741] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 695.942967][T12741] should_failslab+0xc2/0x120 [ 695.942984][T12741] __kmalloc_noprof+0xd2/0x510 [ 695.943003][T12741] tomoyo_realpath_from_path+0xc2/0x6e0 [ 695.943024][T12741] ? tomoyo_profile+0x47/0x60 [ 695.943047][T12741] tomoyo_path_number_perm+0x245/0x580 [ 695.943062][T12741] ? tomoyo_path_number_perm+0x237/0x580 [ 695.943081][T12741] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 695.943098][T12741] ? find_held_lock+0x2b/0x80 [ 695.943141][T12741] ? find_held_lock+0x2b/0x80 [ 695.943162][T12741] ? hook_file_ioctl_common+0x145/0x410 [ 695.943188][T12741] ? __fget_files+0x20e/0x3c0 [ 695.943207][T12741] security_file_ioctl+0x9b/0x240 [ 695.943226][T12741] __x64_sys_ioctl+0xb7/0x210 [ 695.943249][T12741] do_syscall_64+0xcd/0x4c0 [ 695.943267][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.943281][T12741] RIP: 0033:0x7fa77378e969 [ 695.943293][T12741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.943307][T12741] RSP: 002b:00007fa7715d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.943322][T12741] RAX: ffffffffffffffda RBX: 00007fa7739b6080 RCX: 00007fa77378e969 [ 695.943332][T12741] RDX: 0000000000000582 RSI: 000000000000ab07 RDI: 0000000000000003 [ 695.943340][T12741] RBP: 00007fa7715d5090 R08: 0000000000000000 R09: 0000000000000000 [ 695.943349][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.943357][T12741] R13: 0000000000000001 R14: 00007fa7739b6080 R15: 00007fff3fa151f8 [ 695.943377][T12741] [ 695.943383][T12741] ERROR: Out of memory at tomoyo_realpath_from_path. [ 697.195520][ T5821] block nbd0: Receive control failed (result -104) [ 697.198415][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 697.459616][ T5869] usb 3-1: USB disconnect, device number 36 [ 697.863501][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 698.427021][T12767] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 699.842576][T12775] orangefs_mount: mount request failed with -4 [ 700.556736][T12778] syz_tun: entered promiscuous mode [ 703.538716][T12792] Set syz1 is full, maxelem 65536 reached [ 703.597989][T12792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.721442][T12808] cgroup: Need name or subsystem set [ 705.005382][ T5869] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 705.203908][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 705.248060][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 705.368854][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 705.654584][T12826] No control pipe specified [ 705.884284][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 705.884299][ T30] audit: type=1400 audit(2000000248.999:2406): avc: denied { create } for pid=12822 comm="syz.3.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 705.897215][ T5869] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 705.912975][ T30] audit: type=1400 audit(2000000248.999:2407): avc: denied { getopt } for pid=12822 comm="syz.3.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 705.940193][T12827] ceph: No mds server is up or the cluster is laggy [ 706.047638][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.058479][ T5869] usb 3-1: Product: syz [ 706.071824][ T5869] usb 3-1: Manufacturer: syz [ 706.084181][ T5869] usb 3-1: SerialNumber: syz [ 706.464607][ T5869] usb 3-1: config 0 descriptor?? [ 706.472275][ T5869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 706.480316][ T5869] usb 3-1: setting power ON [ 706.496429][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 706.523712][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 706.533488][ T5869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 706.621288][ T5869] usb 3-1: media controller created [ 708.055507][T12851] netlink: 'syz.4.1793': attribute type 15 has an invalid length. [ 708.079052][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1793'. [ 708.250613][T12854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1793'. [ 708.285724][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.744346][ T5869] usb 3-1: selecting invalid altsetting 6 [ 708.750409][ T5869] usb 3-1: digital interface selection failed (-22) [ 708.757045][ T5869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 708.789713][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 708.828811][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 708.880808][ T5869] usb 3-1: setting power OFF [ 708.888841][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 708.894649][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 708.986820][T12856] ceph: No mds server is up or the cluster is laggy [ 709.017528][ T5869] (NULL device *): no alternate interface [ 709.659211][T12862] syz_tun: entered promiscuous mode [ 709.753130][ T30] audit: type=1400 audit(2000000252.768:2408): avc: denied { connect } for pid=12849 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.758187][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 709.889362][ T5869] usb 3-1: USB disconnect, device number 37 [ 710.104531][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 711.479523][T12885] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 714.497526][T12892] ubi31: attaching mtd0 [ 714.533637][T12892] ubi31: scanning is finished [ 714.538474][T12892] ubi31: empty MTD device detected [ 716.414427][ T5869] libceph: connect (1)[c::]:6789 error -13 [ 716.458718][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 716.530363][T12892] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 716.542418][T12892] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 716.554603][T12892] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 716.562141][T12892] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 716.587554][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 716.600885][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 716.617270][T12912] ceph: No mds server is up or the cluster is laggy [ 716.625491][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 716.635291][T12892] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 716.642138][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 716.658027][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 716.666111][T12892] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 716.776373][ T30] audit: type=1400 audit(2000000259.325:2409): avc: denied { mounton } for pid=12918 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 716.812672][T12892] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1677011544 [ 716.845053][T12892] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 717.039210][T12916] ubi31: background thread "ubi_bgt31d" started, PID 12916 [ 718.594611][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 718.969753][ T5832] Bluetooth: hci5: command tx timeout [ 719.122538][T12918] chnl_net:caif_netlink_parms(): no params data found [ 719.792600][T12944] orangefs_mount: mount request failed with -4 [ 719.894059][T12950] syz_tun: entered promiscuous mode [ 719.924622][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.937883][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.955048][T12918] bridge_slave_0: entered allmulticast mode [ 719.999123][T12918] bridge_slave_0: entered promiscuous mode [ 720.037843][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.048524][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.068527][T12918] bridge_slave_1: entered allmulticast mode [ 720.075980][T12918] bridge_slave_1: entered promiscuous mode [ 720.286802][T12918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.889932][T12918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.614660][ T5832] Bluetooth: hci5: command tx timeout [ 721.719112][T12918] team0: Port device team_slave_0 added [ 721.741536][ T5832] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 722.829056][T12918] team0: Port device team_slave_1 added [ 723.200016][T12918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.214033][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.255460][T12918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.268633][T12918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.278772][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.392668][T12918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.424821][T12918] hsr_slave_0: entered promiscuous mode [ 723.431369][T12918] hsr_slave_1: entered promiscuous mode [ 723.437369][T12918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.445795][T12918] Cannot create hsr debugfs directory [ 723.521473][ T5874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 723.842320][ T5832] Bluetooth: hci5: command tx timeout [ 723.970542][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 723.978824][ T5874] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 723.988412][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.998653][ T5874] usb 3-1: Product: syz [ 724.004855][T12918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 724.005644][ T5874] usb 3-1: Manufacturer: syz [ 724.016220][ T5874] usb 3-1: SerialNumber: syz [ 724.018445][T12918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 724.024741][ T5874] usb 3-1: config 0 descriptor?? [ 724.036096][T12918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 724.042253][ T5874] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 724.051646][ T5874] usb 3-1: setting power ON [ 724.054417][T12918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 724.062992][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 724.072369][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.082613][ T5874] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 724.092764][ T5874] usb 3-1: media controller created [ 724.129847][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 724.156528][ T5874] usb 3-1: selecting invalid altsetting 6 [ 724.162287][ T5874] usb 3-1: digital interface selection failed (-22) [ 724.169239][ T5874] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 724.178786][ T5874] usb 3-1: setting power OFF [ 724.183392][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 724.193258][ T5874] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 724.202808][ T5874] (NULL device *): no alternate interface [ 724.247351][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.285898][ T5874] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 724.500818][T12918] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.515205][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.522377][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.573170][T12997] xt_hashlimit: max too large, truncated to 1048576 [ 724.580346][T12997] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 724.904825][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.912020][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.116941][T12918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 725.127764][T12918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.359728][T12918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.668264][T12918] veth0_vlan: entered promiscuous mode [ 725.679288][T12918] veth1_vlan: entered promiscuous mode [ 725.702716][ T5852] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 725.721080][T12918] veth0_macvtap: entered promiscuous mode [ 725.730740][T12918] veth1_macvtap: entered promiscuous mode [ 725.753416][T12918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.774635][T12918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.803248][T12918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.820133][T12918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.828819][T12918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.850241][T12918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.876615][ T5852] usb 5-1: not running at top speed; connect to a high speed hub [ 725.894139][ T5852] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 725.913792][ T5852] usb 5-1: config 95 has no interface number 0 [ 725.929897][ T5852] usb 5-1: config 95 interface 1 has no altsetting 0 [ 725.945662][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.950641][ T5852] usb 5-1: string descriptor 0 read error: -22 [ 725.956624][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.967298][ T5852] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 726.038367][ T5994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.050195][ T5994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.090748][ T5832] Bluetooth: hci5: command tx timeout [ 726.117062][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.166667][ T30] audit: type=1400 audit(2000000268.128:2410): avc: denied { mounton } for pid=12918 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 726.646460][ T5903] usb 3-1: USB disconnect, device number 38 [ 728.223889][ T5874] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 728.337594][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1801'. [ 728.639884][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 728.700079][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 728.712511][ T5935] block nbd0: Possible stuck request ffff8880269b0000: control (read@0,4096B). Runtime 30 seconds [ 728.761118][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 728.778651][ T5874] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 728.792889][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.801194][ T5874] usb 4-1: Product: syz [ 728.807396][ T5874] usb 4-1: Manufacturer: syz [ 728.888129][ T5874] usb 4-1: SerialNumber: syz [ 728.915000][ T5874] usb 4-1: config 0 descriptor?? [ 729.080363][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1831'. [ 729.097974][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 729.957357][T13046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 730.417550][ T5852] usb 5-1: USB disconnect, device number 27 [ 731.689071][ T5903] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 731.886055][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 731.896420][ T5903] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 731.920202][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.943676][ T5903] usb 6-1: config 0 descriptor?? [ 731.960905][ T5903] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 732.191983][ T5852] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 732.276062][T13072] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 733.176867][ T5903] gspca_nw80x: reg_r err -110 [ 733.203236][ T5903] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 733.386260][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 733.531703][ T5852] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 733.560991][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.627462][ T5852] usb 5-1: Product: syz [ 733.631912][ T5852] usb 5-1: Manufacturer: syz [ 733.852671][ T5852] usb 5-1: SerialNumber: syz [ 734.559958][ T5852] usb 5-1: config 0 descriptor?? [ 734.568924][ T5852] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 734.577037][ T5852] usb 5-1: setting power ON [ 734.581822][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 734.590570][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 734.601541][ T5852] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 734.610262][ T5852] usb 5-1: media controller created [ 734.895018][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 735.063891][ T5870] usb 6-1: USB disconnect, device number 2 [ 735.076822][ T5852] usb 5-1: selecting invalid altsetting 6 [ 735.088350][ T5852] usb 5-1: digital interface selection failed (-22) [ 735.186322][T13088] xt_hashlimit: max too large, truncated to 1048576 [ 735.195385][T13088] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 735.242613][ T5852] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 735.253955][ T5852] usb 5-1: setting power OFF [ 735.258769][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 735.264767][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 735.274484][ T5852] (NULL device *): no alternate interface [ 735.510432][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 735.552499][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 736.325362][T13100] loop6: detected capacity change from 0 to 524287999 [ 736.696630][ T5852] usb 5-1: USB disconnect, device number 28 [ 736.930952][ T6737] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 738.085804][T13116] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 739.621932][T13123] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1852'. [ 739.631284][T13123] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1852'. [ 739.922444][T13120] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1852'. [ 739.946203][T13120] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.1852'. [ 742.386433][T13138] serio: Serial port ptm0 [ 743.373972][ T5903] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 743.991013][T13146] Set syz1 is full, maxelem 65536 reached [ 744.201604][ T5903] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 744.422000][ T5903] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 744.477360][ T5903] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 744.514943][ T30] audit: type=1326 audit(2000000285.273:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 744.538719][ T5903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 744.594014][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 744.609058][T13146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.621525][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 744.631474][ T30] audit: type=1326 audit(2000000285.273:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 744.655208][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 744.674307][ T30] audit: type=1326 audit(2000000285.273:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 744.689162][ T5903] usb 3-1: string descriptor 0 read error: -22 [ 744.701785][ T30] audit: type=1326 audit(2000000285.273:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 744.739332][ T30] audit: type=1326 audit(2000000285.273:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 744.843714][ T5903] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 744.853319][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.005673][ T30] audit: type=1326 audit(2000000285.273:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 745.029166][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.035855][ T30] audit: type=1326 audit(2000000285.273:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 745.059343][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.071343][ T5903] usb 3-1: config 0 descriptor?? [ 745.755312][ T30] audit: type=1326 audit(2000000285.273:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 745.761843][ T5903] hub 3-1:0.0: bad descriptor, ignoring hub [ 745.779799][ T30] audit: type=1326 audit(2000000285.273:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 745.808279][ C1] vkms_vblank_simulate: vblank timer overrun [ 745.845322][ T30] audit: type=1326 audit(2000000285.273:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 745.908249][T13170] 9pnet_virtio: no channels available for device syz [ 745.947895][ T5903] hub 3-1:0.0: probe with driver hub failed with error -5 [ 745.966567][ T5903] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 746.060551][ T5903] usb 3-1: USB disconnect, device number 39 [ 746.362663][T13180] xt_hashlimit: max too large, truncated to 1048576 [ 746.371176][T13180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 747.007928][ T5926] libceph: connect (1)[c::]:6789 error -13 [ 747.027990][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 747.330829][ T5926] libceph: connect (1)[c::]:6789 error -13 [ 747.375542][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 747.670546][T13186] ceph: No mds server is up or the cluster is laggy [ 748.880756][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'. [ 749.137974][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 750.173288][T13220] 9pnet_virtio: no channels available for device syz [ 751.212847][ T5874] iguanair 4-1:0.0: failed to get version [ 751.256227][ T5874] iguanair 4-1:0.0: probe with driver iguanair failed with error -110 [ 751.391154][ T5874] usb 4-1: USB disconnect, device number 30 [ 751.572096][T13240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.631863][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 751.631882][ T30] audit: type=1400 audit(2000000291.905:2476): avc: denied { bind } for pid=13235 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 752.437936][T13246] SELinux: Context Ü is not valid (left unmapped). [ 752.568217][ T30] audit: type=1400 audit(2000000292.691:2477): avc: denied { write } for pid=13245 comm="syz.5.1889" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 752.810837][T13254] xt_hashlimit: max too large, truncated to 1048576 [ 752.819315][T13254] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 753.273540][T10101] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 753.546244][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 753.631160][ T30] audit: type=1326 audit(2000000293.814:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz.2.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x0 [ 753.713297][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.721483][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.752955][T10101] usb 6-1: config 0 has no interface number 0 [ 753.760315][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.768700][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.779102][T10101] usb 6-1: config 0 has no interface number 0 [ 753.785917][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.794220][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.804298][T10101] usb 6-1: config 0 has no interface number 0 [ 753.811720][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.821360][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.832543][T10101] usb 6-1: config 0 has no interface number 0 [ 753.839772][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.848365][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.859607][T10101] usb 6-1: config 0 has no interface number 0 [ 753.867164][T10101] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 753.875540][T10101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.885655][T10101] usb 6-1: config 0 has no interface number 0 [ 753.898188][T10101] usb 6-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 753.907394][T10101] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.915599][T10101] usb 6-1: Product: syz [ 753.919876][T10101] usb 6-1: Manufacturer: syz [ 753.924471][T10101] usb 6-1: SerialNumber: syz [ 753.932063][T10101] usb 6-1: config 0 descriptor?? [ 753.944462][T10101] usb 6-1: bad CDC descriptors [ 753.950261][T10101] cdc_acm 6-1:0.125: Zero length descriptor references [ 753.957226][T10101] cdc_acm 6-1:0.125: probe with driver cdc_acm failed with error -22 [ 754.858828][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 756.741005][T13278] 9pnet_virtio: no channels available for device syz [ 757.798613][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.804951][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.018333][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 758.579919][ T30] audit: type=1326 audit(2000000298.444:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 758.661464][ T30] audit: type=1326 audit(2000000298.444:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 758.704230][ T30] audit: type=1326 audit(2000000298.444:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 758.747980][T13306] FAULT_INJECTION: forcing a failure. [ 758.747980][T13306] name failslab, interval 1, probability 0, space 0, times 0 [ 758.769269][T13306] CPU: 1 UID: 0 PID: 13306 Comm: syz.2.1905 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 758.769292][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 758.769302][T13306] Call Trace: [ 758.769307][T13306] [ 758.769314][T13306] dump_stack_lvl+0x16c/0x1f0 [ 758.769338][T13306] should_fail_ex+0x512/0x640 [ 758.769365][T13306] should_failslab+0xc2/0x120 [ 758.769384][T13306] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 758.769402][T13306] ? skb_clone+0x190/0x3f0 [ 758.769426][T13306] skb_clone+0x190/0x3f0 [ 758.769446][T13306] netlink_deliver_tap+0xabd/0xd30 [ 758.769474][T13306] netlink_unicast+0x6b2/0x7f0 [ 758.769500][T13306] ? __pfx_netlink_unicast+0x10/0x10 [ 758.769531][T13306] netlink_ack+0x696/0xb80 [ 758.769562][T13306] netlink_rcv_skb+0x332/0x420 [ 758.769584][T13306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 758.769612][T13306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.769647][T13306] ? ns_capable+0xd7/0x110 [ 758.769675][T13306] nfnetlink_rcv+0x1b3/0x430 [ 758.769700][T13306] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 758.769732][T13306] ? netlink_deliver_tap+0x1ae/0xd30 [ 758.769758][T13306] netlink_unicast+0x53d/0x7f0 [ 758.769783][T13306] ? __pfx_netlink_unicast+0x10/0x10 [ 758.769813][T13306] netlink_sendmsg+0x8d1/0xdd0 [ 758.769839][T13306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.769872][T13306] ____sys_sendmsg+0xa98/0xc70 [ 758.769897][T13306] ? copy_msghdr_from_user+0x10a/0x160 [ 758.769915][T13306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.769949][T13306] ___sys_sendmsg+0x134/0x1d0 [ 758.769969][T13306] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.769985][T13306] ? __lock_acquire+0x622/0x1c90 [ 758.770037][T13306] __sys_sendmsg+0x16d/0x220 [ 758.770055][T13306] ? __pfx___sys_sendmsg+0x10/0x10 [ 758.770090][T13306] do_syscall_64+0xcd/0x4c0 [ 758.770112][T13306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.770129][T13306] RIP: 0033:0x7f616418e969 [ 758.770143][T13306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.770160][T13306] RSP: 002b:00007f6164fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.770176][T13306] RAX: ffffffffffffffda RBX: 00007f61643b5fa0 RCX: 00007f616418e969 [ 758.770187][T13306] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 758.770197][T13306] RBP: 00007f6164fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 758.770206][T13306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.770215][T13306] R13: 0000000000000000 R14: 00007f61643b5fa0 R15: 00007ffdd3e815a8 [ 758.770239][T13306] [ 758.770389][ T30] audit: type=1326 audit(2000000298.444:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.058667][ T30] audit: type=1326 audit(2000000298.444:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.083245][ T30] audit: type=1326 audit(2000000298.444:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.107627][ T30] audit: type=1326 audit(2000000298.444:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.135279][ T30] audit: type=1326 audit(2000000298.444:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.162994][ T30] audit: type=1326 audit(2000000298.444:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.198950][ T30] audit: type=1326 audit(2000000298.444:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b918e969 code=0x7ffc0000 [ 759.388426][T10101] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 759.564063][T10101] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 759.572743][T10101] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 759.622230][T10101] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 759.657616][T13318] serio: Serial port ptm0 [ 759.679805][T10101] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 759.693689][T10101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 759.706068][T10101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 759.769774][T10101] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 759.804534][T10101] usb 3-1: string descriptor 0 read error: -22 [ 759.811026][T10101] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 759.844339][T10101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.876583][T10101] usb 3-1: config 0 descriptor?? [ 759.898574][T10101] hub 3-1:0.0: bad descriptor, ignoring hub [ 760.051374][ T5926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 760.276183][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 760.330817][ T5926] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 760.388860][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.442052][ T5926] usb 5-1: Product: syz [ 760.475939][ T5926] usb 5-1: Manufacturer: syz [ 760.503608][ T5926] usb 5-1: SerialNumber: syz [ 760.618680][ T5926] usb 5-1: config 0 descriptor?? [ 760.733957][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 760.803369][ T5926] usb 5-1: setting power ON [ 760.822468][T10101] hub 3-1:0.0: probe with driver hub failed with error -5 [ 760.833457][T10101] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 760.837160][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 760.874449][T10101] usb 3-1: USB disconnect, device number 40 [ 760.908141][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 760.933353][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 760.998636][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 761.143792][T13335] xt_hashlimit: max too large, truncated to 1048576 [ 761.542355][ T5926] usb 5-1: media controller created [ 761.549021][T13335] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 761.626329][ T5935] block nbd0: Possible stuck request ffff8880269b0000: control (read@0,4096B). Runtime 60 seconds [ 761.838570][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 761.878454][ T5926] usb 5-1: selecting invalid altsetting 6 [ 761.884313][ T5926] usb 5-1: digital interface selection failed (-22) [ 761.896472][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 761.910600][ T5926] usb 5-1: setting power OFF [ 761.916663][ T5869] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 761.927556][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 761.933637][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 761.972611][ T5926] (NULL device *): no alternate interface [ 762.007243][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 762.093288][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 762.108155][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 762.129358][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 762.143161][ T5869] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 762.154367][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.163249][ T5869] usb 2-1: Product: syz [ 762.167445][ T5869] usb 2-1: Manufacturer: syz [ 762.173833][ T5869] usb 2-1: SerialNumber: syz [ 762.196437][T13345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'. [ 762.539695][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 762.574524][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 762.639473][ T5869] usb 2-1: config 0 descriptor?? [ 762.658262][ T5869] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 762.669417][ T5869] em28xx 2-1:0.0: DVB interface 0 found: isoc [ 762.928312][ T5869] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 763.029444][ T5869] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 763.049252][ T5869] em28xx 2-1:0.0: board has no eeprom [ 763.130984][ T5869] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 763.173013][ T5869] em28xx 2-1:0.0: dvb set to isoc mode. [ 763.178043][ T5870] usb 5-1: USB disconnect, device number 29 [ 763.188649][ T5903] em28xx 2-1:0.0: Binding DVB extension [ 763.305792][T13356] xt_hashlimit: max too large, truncated to 1048576 [ 763.313987][T13356] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 763.657892][ T5869] usb 2-1: USB disconnect, device number 39 [ 763.736271][T13357] loop6: detected capacity change from 0 to 524287999 [ 763.956250][ T5869] em28xx 2-1:0.0: Disconnecting em28xx [ 764.008041][T10079] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 764.055404][ T5903] em28xx 2-1:0.0: Registering input extension [ 764.062952][ T5869] em28xx 2-1:0.0: Closing input extension [ 764.107378][ T5869] em28xx 2-1:0.0: Freeing device [ 764.299575][T13362] serio: Serial port ptm0 [ 767.662300][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'. [ 767.679965][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'. [ 767.855487][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 768.206455][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 768.466762][T13402] ceph: No mds server is up or the cluster is laggy [ 768.578537][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 768.591445][ T5821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 768.710854][ T5821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 768.734712][ T5821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 768.746700][ T5821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 770.152110][T13407] chnl_net:caif_netlink_parms(): no params data found [ 770.209815][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 770.214614][ T30] audit: type=1326 audit(2000000309.313:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.257772][ T30] audit: type=1326 audit(2000000309.313:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.583055][ T30] audit: type=1326 audit(2000000309.341:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.619670][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1942'. [ 770.634290][ T30] audit: type=1326 audit(2000000309.341:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.662129][ T30] audit: type=1326 audit(2000000309.341:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.692058][ T30] audit: type=1326 audit(2000000309.360:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.752427][ T30] audit: type=1326 audit(2000000309.360:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 770.843532][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 770.867253][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 771.365235][ T30] audit: type=1326 audit(2000000309.360:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 771.390569][ T30] audit: type=1326 audit(2000000309.360:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 771.390586][ T5832] Bluetooth: hci6: command tx timeout [ 771.414112][ T30] audit: type=1326 audit(2000000309.360:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13436 comm="syz.2.1940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616418e969 code=0x7ffc0000 [ 771.503208][T13407] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.510305][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.517987][T13407] bridge_slave_0: entered allmulticast mode [ 771.525395][T13407] bridge_slave_0: entered promiscuous mode [ 771.533659][T13407] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.540823][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.549018][T13407] bridge_slave_1: entered allmulticast mode [ 771.555998][T13407] bridge_slave_1: entered promiscuous mode [ 771.910196][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.925184][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.066363][ T5926] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 772.264785][ T5926] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 772.411524][T13460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 772.467824][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 772.473992][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 772.480027][ T5926] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 772.481581][T13460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.492727][ T5926] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 772.510982][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.525245][T13460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 772.541031][T13407] team0: Port device team_slave_0 added [ 772.548174][T13463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 772.557481][T13407] team0: Port device team_slave_1 added [ 772.568826][T13460] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 772.580146][ T5926] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 772.612549][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.619805][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.649227][T13460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.653546][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.688167][T13468] ceph: No mds server is up or the cluster is laggy [ 772.689907][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.702595][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.729582][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.833004][T13460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 772.955977][T13460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 772.961900][T13460] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 772.973892][ T5870] usb 2-1: USB disconnect, device number 40 [ 773.000824][T13460] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 773.013135][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.044137][T13460] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 773.050358][T13460] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 773.063122][T13474] hsr0: entered promiscuous mode [ 773.098943][T13407] hsr_slave_0: entered promiscuous mode [ 773.107891][T13460] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 773.116617][T13407] hsr_slave_1: entered promiscuous mode [ 773.123037][T13407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 773.136346][T13407] Cannot create hsr debugfs directory [ 773.305480][T13462] hsr0: left promiscuous mode [ 773.376736][T13407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 773.386559][T13407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 773.398551][T13407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 773.409873][T13407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 773.549165][T13407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.069877][T13407] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.093970][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.101094][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.118663][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.125783][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.892645][ T5832] Bluetooth: hci1: command 0x0401 tx timeout [ 774.893223][ T5926] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 774.898719][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.917987][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 774.930731][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 774.975512][T13495] Bluetooth: hci4: command 0x0c1a tx timeout [ 775.015105][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.146590][T13495] Bluetooth: hci5: command 0x0c1a tx timeout [ 775.232130][T13495] Bluetooth: hci6: command 0x040f tx timeout [ 776.527324][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 776.570650][ T5926] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 776.891212][ T5926] usb 3-1: config 95 has no interface number 0 [ 776.897423][ T5926] usb 3-1: config 95 interface 1 has no altsetting 0 [ 777.142588][T13495] Bluetooth: hci2: command 0x0c1a tx timeout [ 777.179037][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 777.185299][ T5926] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 777.316634][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.394060][T13495] Bluetooth: hci5: command 0x0c1a tx timeout [ 777.455838][T13495] Bluetooth: hci6: command 0x040f tx timeout [ 777.463311][ T5903] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 777.521334][ T5926] usb 3-1: USB disconnect, device number 41 [ 777.638178][ T5903] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 777.647174][ T5903] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 777.663885][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 777.665474][ T5903] usb 2-1: config 0 has no interface number 0 [ 777.722196][ T5903] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 777.754178][ T5903] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 777.921941][ T5903] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 778.449760][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.488878][ T5903] usb 2-1: config 0 descriptor?? [ 778.569000][T13407] veth0_vlan: entered promiscuous mode [ 778.596821][T13407] veth1_vlan: entered promiscuous mode [ 778.660393][T13407] veth0_macvtap: entered promiscuous mode [ 778.700700][T13407] veth1_macvtap: entered promiscuous mode [ 778.719283][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.594868][T13495] Bluetooth: hci5: command 0x0c1a tx timeout [ 779.679424][ T5821] Bluetooth: hci6: command 0x040f tx timeout [ 780.235918][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.311292][ T5903] usb 2-1: USB disconnect, device number 41 [ 780.321414][T13407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.333273][T13407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.342237][T13407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.350995][T13407] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.514507][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.527338][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.578977][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.605717][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.620588][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 780.620603][ T30] audit: type=1326 audit(2000000319.060:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.659842][ T30] audit: type=1326 audit(2000000319.060:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.683879][ T30] audit: type=1326 audit(2000000319.097:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.710537][ T30] audit: type=1326 audit(2000000319.097:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.735205][ T30] audit: type=1326 audit(2000000319.097:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.772131][ T30] audit: type=1326 audit(2000000319.097:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.796870][ T30] audit: type=1326 audit(2000000319.097:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.829655][ T30] audit: type=1326 audit(2000000319.097:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.855779][ T30] audit: type=1326 audit(2000000319.097:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 780.880717][ T30] audit: type=1326 audit(2000000319.097:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef58e969 code=0x7ffc0000 [ 781.902880][T13495] Bluetooth: hci6: command 0x040f tx timeout [ 782.701271][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 784.139638][T13495] Bluetooth: hci6: command 0x040f tx timeout [ 784.244397][ T5903] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 784.270781][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1970'. [ 784.960445][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 784.975060][ T5903] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 785.036603][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.054538][ T5903] usb 4-1: Product: syz [ 785.071763][ T5903] usb 4-1: Manufacturer: syz [ 785.082944][ T5903] usb 4-1: SerialNumber: syz [ 785.100673][ T5903] usb 4-1: config 0 descriptor?? [ 785.128688][ T5903] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 785.538115][T13576] Set syz1 is full, maxelem 65536 reached [ 785.631843][T13576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.053894][T13574] orangefs_mount: mount request failed with -4 [ 786.710961][T13586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'. [ 787.270657][ T5903] pwc: Warning: more than 1 configuration available. [ 787.279299][ T5903] pwc: Failed to set LED on/off time (-71) [ 787.286477][ T5903] pwc: send_video_command error -71 [ 787.302864][ T5903] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 787.319482][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 787.332834][ T5903] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 787.350241][ T5903] usb 4-1: USB disconnect, device number 31 [ 787.992286][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 790.981218][T13627] orangefs_mount: mount request failed with -4 [ 792.662023][T13641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1993'. [ 792.724383][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1993'. [ 792.914240][ T5903] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 793.028361][T13643] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 794.275735][T13651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.461390][T13648] Set syz1 is full, maxelem 65536 reached [ 794.471011][ T5935] block nbd0: Possible stuck request ffff8880269b0000: control (read@0,4096B). Runtime 90 seconds [ 794.498920][ T5903] usb 5-1: not running at top speed; connect to a high speed hub [ 794.507890][ T5903] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 794.516039][ T5903] usb 5-1: config 95 has no interface number 0 [ 794.560678][ T5903] usb 5-1: config 95 interface 1 has no altsetting 0 [ 794.723150][ T5903] usb 5-1: string descriptor 0 read error: -22 [ 794.745566][ T5903] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 795.213835][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.388466][ T5903] usb 5-1: USB disconnect, device number 30 [ 796.068082][T13513] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 796.288662][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 796.288720][ T30] audit: type=1326 audit(2000000333.718:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 796.504946][T13513] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 796.548104][T13513] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 796.555257][ T30] audit: type=1326 audit(2000000333.718:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 796.674224][ T30] audit: type=1326 audit(2000000333.877:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 796.700619][ T30] audit: type=1326 audit(2000000333.877:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 797.697668][T13513] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 797.719932][ T30] audit: type=1326 audit(2000000333.877:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce118e969 code=0x7ffc0000 [ 797.765879][T13513] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 798.881289][T13513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 798.905866][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 798.906694][T13513] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 798.925937][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 799.069365][T13691] ceph: No mds server is up or the cluster is laggy [ 799.145562][T13513] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 799.177192][T13513] usb 3-1: string descriptor 0 read error: -71 [ 799.353476][T13513] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 799.482427][T13513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.677417][T13513] usb 3-1: config 0 descriptor?? [ 800.280106][T13513] usb 3-1: can't set config #0, error -71 [ 800.478291][T13513] usb 3-1: USB disconnect, device number 42 [ 802.387434][T13733] loop6: detected capacity change from 0 to 524287999 [ 802.745575][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 803.743822][ T5869] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 804.139337][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 804.147462][ T5869] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 804.161566][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.175550][ T5869] usb 5-1: Product: syz [ 804.179731][ T5869] usb 5-1: Manufacturer: syz [ 804.184579][ T5869] usb 5-1: SerialNumber: syz [ 804.191295][ T5869] usb 5-1: config 0 descriptor?? [ 804.199003][ T5869] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 804.207529][ T5869] usb 5-1: setting power ON [ 804.229693][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 804.247848][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 804.278394][ T5869] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 804.372397][ T5869] usb 5-1: media controller created [ 804.821732][T13756] xt_hashlimit: max too large, truncated to 1048576 [ 804.830423][T13756] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 804.845993][T13756] dvb-usb: bulk message failed: -22 (3/0) [ 804.851758][T13756] cxusb: i2c wr: len=79 is too big! [ 804.851758][T13756] [ 805.154241][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 805.187271][ T5869] usb 5-1: selecting invalid altsetting 6 [ 805.217025][ T5869] usb 5-1: digital interface selection failed (-22) [ 805.265718][ T5869] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 805.290492][ T5869] usb 5-1: setting power OFF [ 805.296309][ T5869] dvb-usb: bulk message failed: -22 (2/0) [ 805.302103][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 805.315595][ T5869] (NULL device *): no alternate interface [ 807.052431][ T5869] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 807.116153][ T5869] usb 5-1: USB disconnect, device number 31 [ 809.569922][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2040'. [ 809.928003][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 810.772800][T12502] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 812.602502][T12502] usb 7-1: not running at top speed; connect to a high speed hub [ 812.629034][T12502] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 812.637289][T12502] usb 7-1: config 95 has no interface number 0 [ 812.643870][T12502] usb 7-1: config 95 interface 1 has no altsetting 0 [ 812.658954][T12502] usb 7-1: string descriptor 0 read error: -22 [ 812.668232][T12502] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 812.684011][T12502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.207143][T13870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.292209][T13513] usb 7-1: USB disconnect, device number 2 [ 816.321155][T13864] Set syz1 is full, maxelem 65536 reached [ 817.895562][T13903] loop6: detected capacity change from 0 to 524287999 [ 818.118247][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.073176][T13946] FAULT_INJECTION: forcing a failure. [ 820.073176][T13946] name failslab, interval 1, probability 0, space 0, times 0 [ 820.178986][T13946] CPU: 0 UID: 0 PID: 13946 Comm: syz.6.2068 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 820.179014][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 820.179026][T13946] Call Trace: [ 820.179033][T13946] [ 820.179040][T13946] dump_stack_lvl+0x16c/0x1f0 [ 820.179065][T13946] should_fail_ex+0x512/0x640 [ 820.179088][T13946] ? fs_reclaim_acquire+0xae/0x150 [ 820.179115][T13946] ? tomoyo_encode2+0x100/0x3e0 [ 820.179138][T13946] should_failslab+0xc2/0x120 [ 820.179159][T13946] __kmalloc_noprof+0xd2/0x510 [ 820.179183][T13946] tomoyo_encode2+0x100/0x3e0 [ 820.179210][T13946] tomoyo_encode+0x29/0x50 [ 820.179233][T13946] tomoyo_realpath_from_path+0x18f/0x6e0 [ 820.179259][T13946] ? tomoyo_profile+0x47/0x60 [ 820.179288][T13946] tomoyo_path_number_perm+0x245/0x580 [ 820.179307][T13946] ? tomoyo_path_number_perm+0x237/0x580 [ 820.179329][T13946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.179351][T13946] ? find_held_lock+0x2b/0x80 [ 820.179406][T13946] ? find_held_lock+0x2b/0x80 [ 820.179433][T13946] ? hook_file_ioctl_common+0x145/0x410 [ 820.179468][T13946] ? __fget_files+0x20e/0x3c0 [ 820.179492][T13946] security_file_ioctl+0x9b/0x240 [ 820.179518][T13946] __x64_sys_ioctl+0xb7/0x210 [ 820.179547][T13946] do_syscall_64+0xcd/0x4c0 [ 820.179570][T13946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.179588][T13946] RIP: 0033:0x7fd3d078e969 [ 820.179604][T13946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.179620][T13946] RSP: 002b:00007fd3d1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.179637][T13946] RAX: ffffffffffffffda RBX: 00007fd3d09b5fa0 RCX: 00007fd3d078e969 [ 820.179649][T13946] RDX: 0000200000001440 RSI: 00000000000089f6 RDI: 0000000000000005 [ 820.179660][T13946] RBP: 00007fd3d1511090 R08: 0000000000000000 R09: 0000000000000000 [ 820.179670][T13946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.179686][T13946] R13: 0000000000000000 R14: 00007fd3d09b5fa0 R15: 00007ffc917e1378 [ 820.179711][T13946] [ 820.179771][T13946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.771540][T13959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.851691][ T30] audit: type=1326 audit(2000000357.421:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 821.976456][ T30] audit: type=1326 audit(2000000357.421:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.000219][ T30] audit: type=1326 audit(2000000357.449:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.024406][ T30] audit: type=1326 audit(2000000357.449:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.048077][ T30] audit: type=1326 audit(2000000357.449:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.107592][ T30] audit: type=1326 audit(2000000357.449:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.143505][ T30] audit: type=1326 audit(2000000357.449:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.238603][ T30] audit: type=1326 audit(2000000357.449:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.355209][ T30] audit: type=1326 audit(2000000357.449:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.383554][ T30] audit: type=1326 audit(2000000357.449:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.6.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d078e969 code=0x7ffc0000 [ 822.698450][ T5870] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 822.859660][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.880008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.594206][ T5870] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.617619][ T5870] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 823.683054][ T5870] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.007626][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.057700][T13973] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 824.143827][ T5870] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.403674][T13914] Set syz1 is full, maxelem 65536 reached [ 824.441384][T13993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2079'. [ 825.507190][ T5870] usb 3-1: USB disconnect, device number 43 [ 825.558483][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 825.911164][T14008] loop6: detected capacity change from 0 to 524287999 [ 826.098098][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 826.901318][T14016] blktrace: Concurrent blktraces are not allowed on sg0 [ 826.902482][ T5935] block nbd0: Possible stuck request ffff8880269b0000: control (read@0,4096B). Runtime 120 seconds [ 826.922583][T13955] Set syz1 is full, maxelem 65536 reached [ 830.711799][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2094'. [ 830.760991][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'. [ 830.860467][T14062] serio: Serial port ptm0 [ 831.878428][T14074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 833.386232][T14097] Device name not specified. [ 833.386232][T14097] [ 833.837932][T12502] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 834.009819][T12502] usb 3-1: not running at top speed; connect to a high speed hub [ 834.039801][T12502] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 834.047992][T12502] usb 3-1: config 95 has no interface number 0 [ 834.097048][T12502] usb 3-1: config 95 interface 1 has no altsetting 0 [ 834.111903][T12502] usb 3-1: string descriptor 0 read error: -22 [ 834.118259][T12502] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 834.132723][T12502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.295625][T14106] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2106'. [ 835.329379][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2106'. [ 837.123958][T14126] blktrace: Concurrent blktraces are not allowed on sg0 [ 837.181198][T14129] blktrace: Concurrent blktraces are not allowed on sg0 [ 837.379937][T14132] loop6: detected capacity change from 0 to 524287999 [ 838.284730][T14140] loop6: detected capacity change from 0 to 524287999 [ 838.671674][ T5870] usb 3-1: USB disconnect, device number 44 [ 838.688114][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 839.066323][T13495] Bluetooth: hci6: connection err: -111 [ 839.570923][T14151] Device name not specified. [ 839.570923][T14151] [ 840.507069][T14156] 9pnet_virtio: no channels available for device syz [ 841.478027][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 841.560377][T14165] serio: Serial port ptm0 [ 841.574933][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 841.655998][T14174] 9pnet_virtio: no channels available for device syz [ 842.199533][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 842.436270][T12502] libceph: connect (1)[c::]:6789 error -101 [ 842.713969][T12502] libceph: mon0 (1)[c::]:6789 connect error [ 842.740248][ T5870] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 842.980149][T14184] ceph: No mds server is up or the cluster is laggy [ 844.129552][ T5870] usb 7-1: not running at top speed; connect to a high speed hub [ 844.263236][ T5870] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 844.346182][ T5870] usb 7-1: config 95 has no interface number 0 [ 844.458917][ T5870] usb 7-1: config 95 interface 1 has no altsetting 0 [ 844.948446][ T5870] usb 7-1: string descriptor 0 read error: -71 [ 844.972676][ T5870] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 845.652687][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.883135][ T5870] usb 7-1: can't set config #95, error -71 [ 845.890325][ T5870] usb 7-1: USB disconnect, device number 3 [ 847.016591][T14222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.513723][T14220] blktrace: Concurrent blktraces are not allowed on sg0 [ 848.196601][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 848.196616][ T30] audit: type=1400 audit(2000000382.256:2662): avc: denied { write } for pid=14231 comm="syz.2.2141" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 848.241152][ T30] audit: type=1400 audit(2000000382.256:2663): avc: denied { watch } for pid=14231 comm="syz.2.2141" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 848.291652][ T30] audit: type=1400 audit(2000000382.256:2664): avc: denied { watch_sb } for pid=14231 comm="syz.2.2141" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 848.713497][ T30] audit: type=1400 audit(2000000382.471:2665): avc: denied { wake_alarm } for pid=14235 comm="syz.3.2142" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 850.010165][T14256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2147'. [ 850.063278][T14257] loop6: detected capacity change from 0 to 524287999 [ 850.367423][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 850.742149][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 851.385670][T14278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 851.435101][T13513] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 851.634889][T13495] Bluetooth: hci4: connection err: -111 [ 851.672920][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 851.841434][T13513] usb 2-1: Using ep0 maxpacket: 8 [ 851.865543][T13513] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 851.911296][T13513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.963332][T13513] usb 2-1: Product: syz [ 851.981521][T13513] usb 2-1: Manufacturer: syz [ 851.996929][T13513] usb 2-1: SerialNumber: syz [ 852.059121][T14284] FAULT_INJECTION: forcing a failure. [ 852.059121][T14284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 852.060203][T13513] usb 2-1: config 0 descriptor?? [ 852.082895][T14284] CPU: 0 UID: 0 PID: 14284 Comm: syz.3.2156 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 852.082917][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 852.082924][T14284] Call Trace: [ 852.082927][T14284] [ 852.082931][T14284] dump_stack_lvl+0x16c/0x1f0 [ 852.082947][T14284] should_fail_ex+0x512/0x640 [ 852.082964][T14284] _copy_from_user+0x2e/0xd0 [ 852.082979][T14284] kstrtouint_from_user+0xd6/0x1d0 [ 852.082991][T14284] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 852.083002][T14284] ? __lock_acquire+0xb8a/0x1c90 [ 852.083020][T14284] proc_fail_nth_write+0x83/0x250 [ 852.083032][T14284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 852.083045][T14284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 852.083055][T14284] vfs_write+0x2a0/0x1150 [ 852.083067][T14284] ? __pfx___mutex_lock+0x10/0x10 [ 852.083079][T14284] ? __pfx_vfs_write+0x10/0x10 [ 852.083093][T14284] ? __fget_files+0x20e/0x3c0 [ 852.083107][T14284] ksys_write+0x12a/0x250 [ 852.083116][T14284] ? __pfx_ksys_write+0x10/0x10 [ 852.083130][T14284] do_syscall_64+0xcd/0x4c0 [ 852.083143][T14284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.083154][T14284] RIP: 0033:0x7f14ef58d41f [ 852.083162][T14284] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 852.083173][T14284] RSP: 002b:00007f14f04a8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 852.083183][T14284] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14ef58d41f [ 852.083190][T14284] RDX: 0000000000000001 RSI: 00007f14f04a80a0 RDI: 0000000000000004 [ 852.083196][T14284] RBP: 00007f14f04a8090 R08: 0000000000000000 R09: 0000000000000000 [ 852.083202][T14284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 852.083208][T14284] R13: 0000000000000000 R14: 00007f14ef7b5fa0 R15: 00007fff2a455378 [ 852.083221][T14284] [ 852.385068][T14289] loop6: detected capacity change from 0 to 524287999 [ 852.537287][T13513] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 852.554765][T13513] usb 2-1: setting power ON [ 852.560433][T13513] dvb-usb: bulk message failed: -22 (2/0) [ 852.619827][ T6732] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 852.638826][T13513] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 852.657890][T13513] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 852.677693][T13513] usb 2-1: media controller created [ 852.987870][T14294] xt_hashlimit: max too large, truncated to 1048576 [ 852.999878][T14294] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 853.107147][T14294] dvb-usb: bulk message failed: -22 (3/0) [ 853.113025][T14294] cxusb: i2c wr: len=79 is too big! [ 853.113025][T14294] [ 853.303065][T14292] 9pnet_virtio: no channels available for device syz [ 853.337863][T13513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.450078][ T31] INFO: task syz.0.1766:12738 blocked for more than 143 seconds. [ 853.608307][ T31] Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 [ 853.771421][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 853.788074][ T31] task:syz.0.1766 state:D stack:27464 pid:12738 tgid:12736 ppid:5812 task_flags:0x400140 flags:0x00004006 [ 853.800588][T13513] usb 2-1: selecting invalid altsetting 6 [ 853.806392][T13513] usb 2-1: digital interface selection failed (-22) [ 853.813065][ T31] Call Trace: [ 853.816436][T13513] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 853.825008][ T31] [ 853.827999][ T31] __schedule+0x116a/0x5de0 [ 853.832824][ T31] ? __pfx___schedule+0x10/0x10 [ 853.837988][ T31] ? find_held_lock+0x2b/0x80 [ 853.842847][T13513] usb 2-1: setting power OFF [ 853.847684][T13513] dvb-usb: bulk message failed: -22 (2/0) [ 853.853533][ T31] ? schedule+0x2d7/0x3a0 [ 853.858264][T13513] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 853.861412][ T31] schedule+0xe7/0x3a0 [ 853.868537][T13513] (NULL device *): no alternate interface [ 853.901594][ T31] schedule_preempt_disabled+0x13/0x30 [ 853.912967][ T31] __mutex_lock+0x6c7/0xb90 [ 853.918398][ T31] ? nbd_ioctl+0x30a/0xda0 [ 853.922831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 853.928469][ T31] ? rcu_is_watching+0x12/0xc0 [ 853.933378][ T31] ? nbd_ioctl+0x30a/0xda0 [ 853.937966][ T31] nbd_ioctl+0x30a/0xda0 [ 853.943315][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 853.955412][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 853.961617][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 853.966470][ T31] blkdev_ioctl+0x277/0x6d0 [ 853.971151][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 853.976698][ T31] ? selinux_file_ioctl+0x180/0x270 [ 853.990433][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 853.996534][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 854.002613][ T31] __x64_sys_ioctl+0x18b/0x210 [ 854.007691][ T31] do_syscall_64+0xcd/0x4c0 [ 854.013117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.019061][ T31] RIP: 0033:0x7fa77378e969 [ 854.023613][ T31] RSP: 002b:00007fa7715f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.032115][ T31] RAX: ffffffffffffffda RBX: 00007fa7739b5fa0 RCX: 00007fa77378e969 [ 854.040358][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 854.049155][ T31] RBP: 00007fa773810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 854.057809][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.065967][ T31] R13: 0000000000000000 R14: 00007fa7739b5fa0 R15: 00007fff3fa151f8 [ 854.073997][ T31] [ 854.087214][ T31] INFO: task syz.0.1766:12741 blocked for more than 144 seconds. [ 854.095982][ T31] Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 [ 854.105550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 854.116808][ T31] task:syz.0.1766 state:D stack:27784 pid:12741 tgid:12736 ppid:5812 task_flags:0x480140 flags:0x00004006 [ 854.131127][ T31] Call Trace: [ 854.134412][ T31] [ 854.137348][ T31] __schedule+0x116a/0x5de0 [ 854.142706][ T31] ? __lock_acquire+0x622/0x1c90 [ 854.147663][ T31] ? __pfx___schedule+0x10/0x10 [ 854.152856][ T31] ? find_held_lock+0x2b/0x80 [ 854.157601][ T31] ? schedule+0x2d7/0x3a0 [ 854.162027][T12502] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 854.175868][ T31] schedule+0xe7/0x3a0 [ 854.179954][ T31] blk_mq_freeze_queue_wait+0x143/0x1b0 [ 854.185566][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 854.191662][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 854.198173][ T31] ? blk_freeze_queue_start+0xec/0x140 [ 854.203685][ T31] queue_limits_commit_update_frozen+0x93/0x110 [ 854.209930][ T31] nbd_set_size+0x4e7/0x730 [ 854.214495][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 854.219513][ T31] ? __mutex_lock+0x1ca/0xb90 [ 854.224193][ T31] ? cap_capable+0xb3/0x250 [ 854.228746][ T31] ? bpf_lsm_capable+0x9/0x10 [ 854.233425][ T31] nbd_ioctl+0xd34/0xda0 [ 854.237700][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 854.244198][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 854.251098][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 854.255852][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 854.262893][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 854.267935][ T31] blkdev_ioctl+0x277/0x6d0 [ 854.272439][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 854.277439][ T31] ? selinux_file_ioctl+0x180/0x270 [ 854.282687][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 854.287793][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 854.292821][ T31] __x64_sys_ioctl+0x18b/0x210 [ 854.297591][ T31] do_syscall_64+0xcd/0x4c0 [ 854.302147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.308411][ T31] RIP: 0033:0x7fa77378e969 [ 854.313003][ T31] RSP: 002b:00007fa7715d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.321592][ T31] RAX: ffffffffffffffda RBX: 00007fa7739b6080 RCX: 00007fa77378e969 [ 854.329567][ T31] RDX: 0000000000000582 RSI: 000000000000ab07 RDI: 0000000000000003 [ 854.337553][ T31] RBP: 00007fa7715d5090 R08: 0000000000000000 R09: 0000000000000000 [ 854.345643][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.353726][ T31] R13: 0000000000000001 R14: 00007fa7739b6080 R15: 00007fff3fa151f8 [ 854.361901][ T31] [ 854.365053][ T31] [ 854.365053][ T31] Showing all locks held in the system: [ 854.372910][ T31] 1 lock held by khungtaskd/31: [ 854.377841][ T31] #0: ffffffff8e5c4780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 854.387933][T12502] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 854.399660][T12502] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 854.409567][ T31] 2 locks held by getty/5575: [ 854.465579][T13513] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 854.475356][ T31] #0: ffff88814ca0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 854.485159][T12502] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 854.494241][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 854.497213][T13513] usb 2-1: USB disconnect, device number 42 [ 854.510294][T12502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.510674][ T31] 1 lock held by udevd/5815: [ 854.525300][ T31] #0: ffff888143338358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 854.537088][ T31] 2 locks held by kworker/u8:14/5992: [ 854.544374][T14297] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 854.546690][ T31] 3 locks held by udevd/6732: [ 854.567029][T12502] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 854.576263][ T31] #0: ffff8880b843bd18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 854.586876][ T31] #1: ffff8880b8524048 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 854.599462][ T31] #2: ffff888079c9c958 (&ep->lock){....}-{3:3}, at: ep_poll_callback+0xcf/0xc70 [ 854.609121][ T31] 8 locks held by kworker/0:0/12502: [ 854.615513][ T31] #0: ffff888022aa6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 854.630938][ T31] #1: ffffc9001bba7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 854.643553][ T31] #2: ffff888144b06198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 854.656917][ T31] #3: ffff8880554cd198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 854.670409][ T31] #4: ffff888144b10098 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x5e/0x670 [ 854.680924][ T31] #5: ffffffff8e5c4780 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 854.690926][ T31] #6: ffffffff9aff11b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x135/0x3a0 [ 854.701701][ T31] #7: ffff8880b843b498 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x26b/0x10f0 [ 854.711464][ T31] 1 lock held by syz.0.1766/12738: [ 854.716636][ T31] #0: ffff888026937a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x30a/0xda0 [ 854.725958][ T31] 4 locks held by syz.0.1766/12741: [ 854.733035][ T31] #0: ffff888026937a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x150/0xda0 [ 854.743396][ T31] #1: ffff888142fc41b0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2c3/0x730 [ 854.753095][ T31] #2: ffff888142fc3b58 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 854.764816][ T31] #3: ffff888142fc3b90 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 854.776628][ T31] 1 lock held by syz.5.1889/13246: [ 854.784911][ T31] #0: ffff888143338358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 854.794319][ T31] [ 854.796645][ T31] ============================================= [ 854.796645][ T31] [ 854.806986][ T5852] usb 5-1: USB disconnect, device number 32 [ 854.816182][ T31] NMI backtrace for cpu 0 [ 854.816195][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 854.816215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.816224][ T31] Call Trace: [ 854.816230][ T31] [ 854.816237][ T31] dump_stack_lvl+0x116/0x1f0 [ 854.816259][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 854.816286][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 854.816306][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 854.816332][ T31] watchdog+0xf70/0x12c0 [ 854.816359][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.816381][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 854.816402][ T31] ? __kthread_parkme+0x19e/0x250 [ 854.816422][ T31] ? __pfx_watchdog+0x10/0x10 [ 854.816446][ T31] kthread+0x3c2/0x780 [ 854.816468][ T31] ? __pfx_kthread+0x10/0x10 [ 854.816491][ T31] ? rcu_is_watching+0x12/0xc0 [ 854.816508][ T31] ? __pfx_kthread+0x10/0x10 [ 854.816531][ T31] ret_from_fork+0x5d4/0x6f0 [ 854.816550][ T31] ? __pfx_kthread+0x10/0x10 [ 854.816573][ T31] ret_from_fork_asm+0x1a/0x30 [ 854.816601][ T31] [ 854.816609][ T31] Sending NMI from CPU 0 to CPUs 1: [ 854.937134][ C1] NMI backtrace for cpu 1 [ 854.937147][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 854.937164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 854.937172][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 854.937191][ C1] Code: e3 74 02 e9 53 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 90 2d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 854.937204][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 854.937216][ C1] RAX: 0000000004a3380b RBX: 0000000000000001 RCX: ffffffff8b7c7449 [ 854.937225][ C1] RDX: 0000000000000000 RSI: ffffffff8de06e85 RDI: ffffffff8c1532c0 [ 854.937233][ C1] RBP: ffffed1003cde488 R08: 0000000000000001 R09: ffffed10170a663d [ 854.937242][ C1] R10: ffff8880b85331eb R11: 0000000000000001 R12: 0000000000000001 [ 854.937250][ C1] R13: ffff88801e6f2440 R14: ffffffff90a78850 R15: 0000000000000000 [ 854.937259][ C1] FS: 0000000000000000(0000) GS:ffff88812486e000(0000) knlGS:0000000000000000 [ 854.937273][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.937282][ C1] CR2: 00007f1ce1fbcd58 CR3: 000000007c147000 CR4: 00000000003526f0 [ 854.937291][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 854.937298][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 854.937307][ C1] Call Trace: [ 854.937311][ C1] [ 854.937316][ C1] default_idle+0x13/0x20 [ 854.937332][ C1] default_idle_call+0x6d/0xb0 [ 854.937347][ C1] do_idle+0x391/0x510 [ 854.937362][ C1] ? __pfx_do_idle+0x10/0x10 [ 854.937374][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 854.937391][ C1] cpu_startup_entry+0x4f/0x60 [ 854.937403][ C1] start_secondary+0x21d/0x2b0 [ 854.937418][ C1] ? __pfx_start_secondary+0x10/0x10 [ 854.937432][ C1] common_startup_64+0x13e/0x148 [ 854.937454][ C1] [ 854.940207][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 855.134336][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-10401-gdee264c16a63 #0 PREEMPT(full) [ 855.145773][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 855.155806][ T31] Call Trace: [ 855.159069][ T31] [ 855.161983][ T31] dump_stack_lvl+0x3d/0x1f0 [ 855.166564][ T31] panic+0x71c/0x800 [ 855.170447][ T31] ? __pfx_panic+0x10/0x10 [ 855.174847][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 855.180211][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 855.186172][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 855.191530][ T31] ? watchdog+0xdda/0x12c0 [ 855.195936][ T31] ? watchdog+0xdcd/0x12c0 [ 855.200343][ T31] watchdog+0xdeb/0x12c0 [ 855.204575][ T31] ? __pfx_watchdog+0x10/0x10 [ 855.209251][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 855.214434][ T31] ? __kthread_parkme+0x19e/0x250 [ 855.219442][ T31] ? __pfx_watchdog+0x10/0x10 [ 855.224107][ T31] kthread+0x3c2/0x780 [ 855.228161][ T31] ? __pfx_kthread+0x10/0x10 [ 855.232738][ T31] ? rcu_is_watching+0x12/0xc0 [ 855.237483][ T31] ? __pfx_kthread+0x10/0x10 [ 855.242059][ T31] ret_from_fork+0x5d4/0x6f0 [ 855.246631][ T31] ? __pfx_kthread+0x10/0x10 [ 855.251206][ T31] ret_from_fork_asm+0x1a/0x30 [ 855.255960][ T31] [ 855.259158][ T31] Kernel Offset: disabled [ 855.263459][ T31] Rebooting in 86400 seconds..