last executing test programs: 8m0.497780076s ago: executing program 4 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) 7m57.446284222s ago: executing program 4 (id=167): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 7m56.333711906s ago: executing program 4 (id=173): r0 = socket$kcm(0x11, 0x4, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x1, {0xa, 0x4e23, 0x3, @loopback, 0xe}}}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0002000}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x74) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x881) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000040)=0x12) r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='irq_handler_exit\x00', r5}, 0x18) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f0000b21000/0x4000)=nil}) 7m53.731939719s ago: executing program 4 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) 7m52.080726096s ago: executing program 4 (id=182): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x4, 0x0, 0x50, 0x3, 0xfffffffffbffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x34ff, 0x3, 0x1, 0x7, 0x13, 0x9}}, 0xe8) 7m51.221181888s ago: executing program 4 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 7m49.863440531s ago: executing program 32 (id=186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 7m2.593143321s ago: executing program 1 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'erspan0\x00', @broadcast}) prctl$PR_SCHED_CORE(0x26, 0x5, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x7, 0xfffc, 0x1, 0x0, 0x5, 0x5}) 7m0.318609361s ago: executing program 1 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs_stats\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$iommufd(0xffffffffffffff9c, 0x0, 0xb0040, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) 6m58.812691941s ago: executing program 1 (id=346): socket$alg(0x26, 0x5, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64, @ANYRES8], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000000)={0x2, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 6m56.928946874s ago: executing program 1 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m56.563102643s ago: executing program 0 (id=351): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0xb, 0x8, 0x401, 0x8, r1}) syz_open_procfs$userns(r4, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000a31000)={0x20080522}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$TIOCL_BLANKSCREEN(r6, 0x5608, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) 6m56.525482069s ago: executing program 1 (id=352): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 6m55.204627632s ago: executing program 0 (id=354): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0) recvmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3, &(0x7f0000000500)=""/77, 0x4d}}, {{&(0x7f00000025c0)=@phonet, 0x80, &(0x7f0000002900)=[{&(0x7f0000002640)=""/115, 0x73}, {0x0}, {&(0x7f0000002700)=""/198, 0xc6}, {0x0}], 0x4}, 0x7}], 0x2, 0x40010100, 0x0) 6m54.916392816s ago: executing program 1 (id=357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="4bde03157888a32dd0e0eb1c779829f1e07e01ce1ca01b37", 0x18}, {&(0x7f0000000300)="c3617155c990328996fdc71ae7b15a38749a2b561489dc1b93d14e57e96ac17258bae8ad6399143d7545ce19f748b1bbdf9cb4ba62e4049d6df644217bdfd5df207b64a3061b67621c5672f46bb43b0b5888fd9a01054815316e4d23ba0bbe471733ddf5a2d3f0861e5b2cb77dcd6114bb55d0b2ea60514f16a66f8afb203faf0377a8a89cd919ef67b815af19e5a6828fe289dea6b328493ac1743687708bf349ac59fa47bbdac40601d3c9ef", 0xad}], 0x2) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a", 0x2}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m54.380873328s ago: executing program 33 (id=357): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="4bde03157888a32dd0e0eb1c779829f1e07e01ce1ca01b37", 0x18}, {&(0x7f0000000300)="c3617155c990328996fdc71ae7b15a38749a2b561489dc1b93d14e57e96ac17258bae8ad6399143d7545ce19f748b1bbdf9cb4ba62e4049d6df644217bdfd5df207b64a3061b67621c5672f46bb43b0b5888fd9a01054815316e4d23ba0bbe471733ddf5a2d3f0861e5b2cb77dcd6114bb55d0b2ea60514f16a66f8afb203faf0377a8a89cd919ef67b815af19e5a6828fe289dea6b328493ac1743687708bf349ac59fa47bbdac40601d3c9ef", 0xad}], 0x2) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a", 0x2}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m54.128631553s ago: executing program 0 (id=361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000182e000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) 6m53.344721003s ago: executing program 0 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m52.1036776s ago: executing program 0 (id=366): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 6m48.721312989s ago: executing program 0 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000030100c0"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4800) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 6m47.41848703s ago: executing program 34 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000030100c0"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4800) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 3m15.981202708s ago: executing program 5 (id=942): r0 = socket$kcm(0x11, 0x4, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x1, {0xa, 0x4e23, 0x3, @loopback, 0xe}}}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x881) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x12) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='irq_handler_exit\x00'}, 0x18) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f0000b21000/0x4000)=nil}) 3m14.90366025s ago: executing program 5 (id=944): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 3m10.72383274s ago: executing program 5 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x40002, 0x0) unshare(0x8000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x2) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 3m10.524711404s ago: executing program 5 (id=955): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 3m10.092736864s ago: executing program 5 (id=956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0x10, 0x1, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x803, 0x0) userfaultfd(0x801) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000035000701feffffff00000000017c00000c00018006000600800a01"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150000100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) 3m9.541195195s ago: executing program 5 (id=960): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$userns(0x0, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESHEX], 0x8) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$TIOCL_BLANKSCREEN(r3, 0x5608, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) 3m8.954219063s ago: executing program 35 (id=960): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$userns(0x0, &(0x7f0000000100)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESHEX], 0x8) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$TIOCL_BLANKSCREEN(r3, 0x5608, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) 2m52.664020071s ago: executing program 6 (id=1004): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) 2m51.627455368s ago: executing program 6 (id=1007): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 2m51.09339067s ago: executing program 6 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x83d00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x23, @loopback, 0x23}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) r5 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='+pids'], 0x6) 2m50.149152979s ago: executing program 6 (id=1012): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 2m49.924067852s ago: executing program 6 (id=1014): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) times(0x0) socket$kcm(0x29, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000040)=0x1) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xc04}}, 0x120) readv(r5, &(0x7f0000000140), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000040), 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xff01}, 0x10) 2m49.577388392s ago: executing program 6 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 2m48.45724215s ago: executing program 36 (id=1016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r0, 0x0, &(0x7f0000000b40)=""/31}, 0x20) 17.170133696s ago: executing program 7 (id=1440): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800", @ANYRES32, @ANYBLOB="0000000000ef", @ANYRES32=0x0, @ANYBLOB], 0x50) syz_io_uring_setup(0x726a, 0x0, 0x0, &(0x7f0000000480)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0]}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0xffffff44) 13.828649708s ago: executing program 7 (id=1452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 12.242659947s ago: executing program 2 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 12.060008731s ago: executing program 2 (id=1459): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002a80)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000006ffc)=0x4000000000000200, 0x4) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 11.979026498s ago: executing program 7 (id=1460): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x50}, 0x1, 0x7}, 0x0) 11.62798357s ago: executing program 8 (id=1462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e21, @empty}, {0x306, @multicast}, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 'lo\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800", @ANYRES32, @ANYBLOB="0000000000ef", @ANYRES32=0x0, @ANYBLOB], 0x50) syz_io_uring_setup(0x726a, 0x0, 0x0, &(0x7f0000000480)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0]}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0xffffff44) 7.945049182s ago: executing program 3 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x41fa, 0x4c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2cc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x4814) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) 7.856549615s ago: executing program 8 (id=1469): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 7.609153907s ago: executing program 9 (id=1470): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.016523648s ago: executing program 9 (id=1471): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x4008840) capset(0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x604000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x1}) 6.636734994s ago: executing program 3 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x9, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4c, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000040) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x38}}, 0x0) 6.28983047s ago: executing program 8 (id=1473): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, {0xa, 0x4e23, 0x3, @loopback, 0xe}}}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0002000}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x74) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x881) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000040)=0x12) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='irq_handler_exit\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000180)={0x10002, 0x0, &(0x7f0000b21000/0x4000)=nil}) 6.206061819s ago: executing program 7 (id=1474): shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0xffffffffffffff5f, 0x40010102, 0x0, 0xfffffffffffffdd5) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x10000, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 6.152948887s ago: executing program 2 (id=1475): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x18, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf32(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c460fc6040d002000000002000002"], 0x38) close(r3) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) landlock_restrict_self(r2, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x0, 0x1) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) write$binfmt_misc(r6, &(0x7f00000002c0)="cdd4d6e4896157de13652dfd163d7f2094a4512b6547920711b20d6a81814c8e819eb14a0804496002a4f78fd5e6949a68a979138a9fbab0244f44fac8802952698df68d66b34444965462", 0x4b) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000000)={0x1, 0x2, 0x1}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0xffffffffffffffa0) 5.976757372s ago: executing program 9 (id=1476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x28}}, 0x4004) 4.339019353s ago: executing program 8 (id=1477): open(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x157) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad4, 0x10, 0x3, 0x3cb}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) 4.045104231s ago: executing program 9 (id=1478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x8001, 0x10001, 0x3, {0xa, @raw_data="aa723bcfb45a9cb19bb050827af1e0d52d4e40feec43fa87a604f3c848eea0008f42577551147a9dd6128ed9861417c43ae937da8e242627d7fdfb5eae03021bb25e648b73db0c09e61498a1cfc6e68ca142759eb8823bf2e62e2318cc30d0d74002bcda6040f2683433f4c01dd9d7bc9e13489b6f0817f0a566c4c9a0daa62531bf2de84edf6a9be0bc04a9f53a84d1486619f2f6466337b85a0affef1f7eef7402cff6da401472cb4f0395c01e59b7490a0562ec5d7b087a7c8a462dc19a861aa332992c391e3d"}, 0xfffffffc}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x10, 0x0, &(0x7f0000000300)=""/81, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) 4.044245103s ago: executing program 2 (id=1479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c0b00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bcfbac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.800722799s ago: executing program 7 (id=1480): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 3.748156685s ago: executing program 8 (id=1481): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 3.746553945s ago: executing program 3 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x41fa, 0x4c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2cc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x4814) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) 3.725558293s ago: executing program 2 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(0x0, 0x0, &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500)="b9b9c8", &(0x7f00000000c0)=""/48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "eeff3720", ["fdfff7eb84a437dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) 3.619552213s ago: executing program 7 (id=1484): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}, @sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x20000001}]}, 0x50}, 0x1, 0x7}, 0x0) 2.63833782s ago: executing program 8 (id=1485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002a80)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x12, &(0x7f0000006ffc)=0x4000000000000200, 0x4) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x480e0) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 2.138457519s ago: executing program 3 (id=1486): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x4008840) capset(0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x81, 0xffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x604000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x1}) 1.206039585s ago: executing program 3 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xc) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/crypto\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffca5, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$inet(r0, &(0x7f0000000000)="f461a9bbc95c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) eventfd2(0x7, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x4, 0xa7a1}, {0x2, 0x10}, {0x800, 0x800}]}) 1.199478455s ago: executing program 9 (id=1488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r0, 0x406, r0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x4810}, 0x400c890) ioctl$sock_proto_private(r0, 0x89ef, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r2) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x464, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) close(0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 311.099405ms ago: executing program 2 (id=1489): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x29, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x10004005) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4004000) r7 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r7, &(0x7f0000000040)=""/4109, 0x100d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) 286.566514ms ago: executing program 3 (id=1490): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r4, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r4, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) 0s ago: executing program 9 (id=1491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) kernel console output (not intermixed with test programs): 20823][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.931454][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.884925][ T6637] veth0_vlan: entered promiscuous mode [ 195.914531][ T6637] veth1_vlan: entered promiscuous mode [ 196.904128][ T6637] veth0_macvtap: entered promiscuous mode [ 196.928509][ T7156] ntfs3(nullb0): Primary boot signature is not NTFS. [ 196.945024][ T7156] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 197.064137][ T6637] veth1_macvtap: entered promiscuous mode [ 197.242246][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.470388][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.518558][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.552116][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.606011][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.616192][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.716039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.732916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.798267][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.815849][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.483039][ T30] audit: type=1804 audit(1762920510.187:26): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.321" name="/newroot/79/file0" dev="tmpfs" ino=428 res=1 errno=0 [ 201.353755][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 201.360240][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 201.360352][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 201.372609][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 202.962154][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.5.334'. [ 203.577312][ T30] audit: type=1804 audit(1762920514.287:27): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.335" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 206.517454][ T7276] warning: `syz.1.346' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.191274][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.345'. [ 209.604693][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.637837][ T1093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.777257][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.795775][ T1093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.813526][ T43] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.843062][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.863174][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.886187][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.912517][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.946821][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.965561][ T43] usb 3-1: Product: syz [ 209.976519][ T1093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.993332][ T43] usb 3-1: Manufacturer: syz [ 210.023645][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 210.039630][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 210.061874][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 210.075405][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 210.156096][ T1093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.473953][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.526609][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.022972][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.031955][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.043958][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.103096][ T1093] bridge_slave_1: left allmulticast mode [ 212.223565][ T1093] bridge_slave_1: left promiscuous mode [ 212.229336][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.310196][ T5832] usb 3-1: USB disconnect, device number 3 [ 212.395192][ T1093] bridge_slave_0: left allmulticast mode [ 212.400865][ T1093] bridge_slave_0: left promiscuous mode [ 212.428978][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.521623][ T7371] futex_wake_op: syz.2.367 tries to shift op by 32; fix this program [ 213.530420][ T30] audit: type=1326 audit(1762920524.227:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 213.893382][ T30] audit: type=1326 audit(1762920524.227:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 214.023336][ T30] audit: type=1326 audit(1762920524.247:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 214.114291][ T30] audit: type=1326 audit(1762920524.247:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 214.225186][ T5826] Bluetooth: hci1: command tx timeout [ 214.480062][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.491056][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.506628][ T1093] bond0 (unregistering): Released all slaves [ 214.819673][ T1093] tipc: Left network mode [ 215.991819][ T7397] sd 0:0:1:0: device reset [ 216.397142][ T5826] Bluetooth: hci1: command tx timeout [ 216.682506][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 216.723579][ T7396] netlink: 'syz.2.372': attribute type 7 has an invalid length. [ 216.731259][ T7396] netlink: 'syz.2.372': attribute type 8 has an invalid length. [ 216.793658][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 217.318489][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.328903][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.337499][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.379546][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.390661][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.402223][ T1093] hsr_slave_0: left promiscuous mode [ 217.421216][ T30] audit: type=1326 audit(1762920528.127:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 217.452844][ T7411] futex_wake_op: syz.3.377 tries to shift op by 32; fix this program [ 217.871171][ T1093] hsr_slave_1: left promiscuous mode [ 217.890503][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.926480][ T30] audit: type=1326 audit(1762920528.127:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 217.954483][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.967733][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.987133][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.994469][ T30] audit: type=1326 audit(1762920528.157:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 218.128263][ T30] audit: type=1326 audit(1762920528.177:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 218.153109][ T30] audit: type=1326 audit(1762920528.177:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 218.301947][ T1093] veth1_macvtap: left promiscuous mode [ 218.533515][ T5144] Bluetooth: hci1: command tx timeout [ 218.539094][ T1093] veth0_macvtap: left promiscuous mode [ 218.554325][ T1093] veth1_vlan: left promiscuous mode [ 218.611672][ T1093] veth0_vlan: left promiscuous mode [ 219.423567][ T5144] Bluetooth: hci3: command tx timeout [ 220.388188][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 220.539210][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 220.553389][ T5144] Bluetooth: hci1: command tx timeout [ 221.517088][ T5144] Bluetooth: hci3: command tx timeout [ 221.648724][ T7451] sd 0:0:1:0: device reset [ 222.891556][ T7345] chnl_net:caif_netlink_parms(): no params data found [ 223.040118][ T43] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 223.232097][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 223.243352][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 223.456631][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.467209][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 223.468899][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 223.974312][ T5144] Bluetooth: hci3: command tx timeout [ 224.085586][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.099274][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 224.113780][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.133384][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.159340][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.196659][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.244352][ T43] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 224.255419][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 224.282316][ T43] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.294600][ T7345] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.301845][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.328889][ T7345] bridge_slave_0: entered allmulticast mode [ 224.333334][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.349850][ T7345] bridge_slave_0: entered promiscuous mode [ 224.360070][ T43] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 224.391727][ T43] usb 6-1: string descriptor 0 read error: -22 [ 224.401938][ T43] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.421760][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.469638][ T43] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 224.557496][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.626125][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.643558][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.653848][ T7345] bridge_slave_1: entered allmulticast mode [ 224.672124][ T7345] bridge_slave_1: entered promiscuous mode [ 224.749582][ T5944] usb 6-1: USB disconnect, device number 2 [ 224.807718][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.668383][ T7427] Set syz1 is full, maxelem 65536 reached [ 225.681302][ T7345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.691572][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.700348][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.707968][ T7417] bridge_slave_0: entered allmulticast mode [ 225.716507][ T7417] bridge_slave_0: entered promiscuous mode [ 225.739121][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.797235][ T7345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.103778][ T5144] Bluetooth: hci3: command tx timeout [ 226.586927][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.600566][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.612914][ T7417] bridge_slave_1: entered allmulticast mode [ 226.621578][ T7417] bridge_slave_1: entered promiscuous mode [ 226.993720][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.114472][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.128090][ T7345] team0: Port device team_slave_0 added [ 227.164354][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.285106][ T7345] team0: Port device team_slave_1 added [ 227.341478][ T7417] team0: Port device team_slave_0 added [ 228.323955][ T7417] team0: Port device team_slave_1 added [ 228.391221][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.456682][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.613535][ T7542] futex_wake_op: syz.2.398 tries to shift op by 32; fix this program [ 228.957543][ T30] audit: type=1326 audit(1762920539.317:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 228.980240][ T7345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.001063][ T30] audit: type=1326 audit(1762920539.317:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 229.046763][ T7345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.066472][ T7345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.233507][ T30] audit: type=1326 audit(1762920539.317:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 230.023673][ T30] audit: type=1326 audit(1762920539.327:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 230.052306][ T7345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.143679][ T30] audit: type=1326 audit(1762920539.347:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 230.592654][ T7555] lo speed is unknown, defaulting to 1000 [ 230.599435][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.607352][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.729334][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.132643][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.136073][ T7555] lo speed is unknown, defaulting to 1000 [ 231.168203][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.336616][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.404097][ T1093] bridge_slave_1: left allmulticast mode [ 231.427527][ T1093] bridge_slave_1: left promiscuous mode [ 231.472926][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.554823][ T1093] bridge_slave_0: left allmulticast mode [ 231.718293][ T1093] bridge_slave_0: left promiscuous mode [ 231.761026][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.741508][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 232.760299][ T7578] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 232.791139][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 232.848809][ T1093] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 233.018031][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.032600][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.051887][ T1093] bond0 (unregistering): Released all slaves [ 233.079664][ T7345] hsr_slave_0: entered promiscuous mode [ 233.087914][ T7345] hsr_slave_1: entered promiscuous mode [ 233.094967][ T7345] debugfs: 'hsr0' already exists in 'hsr' [ 233.100773][ T7345] Cannot create hsr debugfs directory [ 233.140130][ T7555] lo speed is unknown, defaulting to 1000 [ 233.160988][ T1093] tipc: Left network mode [ 233.178821][ T7555] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.427767][ T7417] hsr_slave_0: entered promiscuous mode [ 233.441300][ T7417] hsr_slave_1: entered promiscuous mode [ 233.455256][ T7417] debugfs: 'hsr0' already exists in 'hsr' [ 233.461126][ T7417] Cannot create hsr debugfs directory [ 233.480185][ T7555] lo speed is unknown, defaulting to 1000 [ 233.492132][ T7555] lo speed is unknown, defaulting to 1000 [ 233.508828][ T7555] lo speed is unknown, defaulting to 1000 [ 233.560823][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.408'. [ 233.604433][ T7555] lo speed is unknown, defaulting to 1000 [ 233.637705][ T7555] lo speed is unknown, defaulting to 1000 [ 233.699431][ T7555] lo speed is unknown, defaulting to 1000 [ 233.851322][ T1093] hsr_slave_0: left promiscuous mode [ 233.866685][ T1093] hsr_slave_1: left promiscuous mode [ 233.880121][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.897932][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.914816][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.941372][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.014880][ T1093] veth1_macvtap: left promiscuous mode [ 234.026101][ T1093] veth0_macvtap: left promiscuous mode [ 234.032477][ T1093] veth1_vlan: left promiscuous mode [ 234.037979][ T1093] veth0_vlan: left promiscuous mode [ 234.783428][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 234.783575][ T5144] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.032742][ T7610] netlink: 'syz.2.411': attribute type 12 has an invalid length. [ 237.210313][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 237.243077][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 238.225138][ T7417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 238.888472][ T7417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.320132][ T7417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.939622][ T7650] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 239.946789][ T7650] overlayfs: failed to set xattr on upper [ 239.952516][ T7650] overlayfs: ...falling back to redirect_dir=nofollow. [ 239.959486][ T7650] overlayfs: ...falling back to index=off. [ 239.965343][ T7650] overlayfs: ...falling back to uuid=null. [ 240.041980][ T7651] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 240.969391][ T7656] ntfs3(nullb0): Primary boot signature is not NTFS. [ 240.976260][ T7417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.990897][ T7656] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 241.066140][ T7345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 241.241353][ T7345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.127236][ T7345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.754061][ T7345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 242.924446][ T7676] lo speed is unknown, defaulting to 1000 [ 243.352151][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.519313][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.625938][ T7417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.643217][ T7417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.790398][ T7698] Invalid logical block size (1792) [ 243.968322][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.975564][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.154843][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.162170][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.235792][ T7345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.309866][ T7345] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.434016][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.441250][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.595317][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.602670][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.935770][ T7721] xt_hashlimit: size too large, truncated to 1048576 [ 247.168189][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.767263][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.971409][ T7417] veth0_vlan: entered promiscuous mode [ 249.051721][ T7417] veth1_vlan: entered promiscuous mode [ 249.262028][ T7417] veth0_macvtap: entered promiscuous mode [ 249.340883][ T7417] veth1_macvtap: entered promiscuous mode [ 249.477194][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.528174][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.584732][ T6021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.605722][ T6021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.648250][ T6021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.693189][ T6021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.777150][ T7345] veth0_vlan: entered promiscuous mode [ 249.867551][ T7345] veth1_vlan: entered promiscuous mode [ 250.117206][ T6271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.134867][ T6271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.664590][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.692039][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.706808][ T7345] veth0_macvtap: entered promiscuous mode [ 251.755324][ T7345] veth1_macvtap: entered promiscuous mode [ 251.822880][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.868203][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.974995][ T6270] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.647272][ T6270] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.682632][ T6270] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.698306][ T6270] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.005098][ T7807] 0: reclassify loop, rule prio 0, protocol 800 [ 254.040544][ T30] audit: type=1804 audit(1762920564.737:42): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.374" name="/newroot/0/file0" dev="tmpfs" ino=18 res=1 errno=0 [ 254.595366][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.603569][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.711617][ T6270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.749695][ T6270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.995858][ T7832] tmpfs: Bad value for 'nr_blocks' [ 255.614964][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.723579][ T7892] sd 0:0:1:0: device reset [ 261.424094][ T30] audit: type=1804 audit(1762920572.127:43): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.458" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 261.458068][ T7894] ntfs3(nullb0): Primary boot signature is not NTFS. [ 261.491658][ T7894] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 263.326828][ T7912] netlink: 'syz.7.463': attribute type 1 has an invalid length. [ 263.358487][ T7912] netlink: 224 bytes leftover after parsing attributes in process `syz.7.463'. [ 263.793337][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 264.990652][ T7928] lo speed is unknown, defaulting to 1000 [ 265.905150][ T7927] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.913416][ T7927] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 265.947529][ T7927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.044403][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 266.174079][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 266.203726][ T7927] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 266.255740][ T7927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.294519][ T7927] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.322143][ T43] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 266.451638][ T7927] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.459816][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.594341][ T7927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.610547][ T7927] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.611828][ T43] usb 8-1: config 0 descriptor?? [ 266.700697][ T7927] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.727623][ T7927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.732947][ T43] usb 8-1: can't set config #0, error -71 [ 266.862092][ T7927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.231422][ T7927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 267.250966][ T43] usb 8-1: USB disconnect, device number 2 [ 267.672431][ T7960] sd 0:0:1:0: device reset [ 267.983460][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 268.015679][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 268.303817][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.152800][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.152805][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.079402][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 270.079423][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 270.383902][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 271.186459][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 271.192735][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 272.323796][ T30] audit: type=1326 audit(1762920583.037:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 272.346216][ T8021] futex_wake_op: syz.3.489 tries to shift op by 32; fix this program [ 272.409879][ T30] audit: type=1326 audit(1762920583.037:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 272.462679][ T30] audit: type=1326 audit(1762920583.057:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 272.467538][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.678051][ T30] audit: type=1326 audit(1762920583.067:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 273.303361][ T30] audit: type=1326 audit(1762920583.067:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8020 comm="syz.3.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 273.308016][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.325508][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.492294][ T8038] ntfs3(nullb0): Primary boot signature is not NTFS. [ 273.533070][ T8038] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 276.314053][ T8069] nbd0: detected capacity change from 0 to 127 [ 276.331225][ T5826] block nbd0: Receive control failed (result -104) [ 276.341025][ T6381] block nbd0: Send control failed (result -32) [ 276.350022][ T6381] block nbd0: Request send failed, requeueing [ 276.366043][ T56] block nbd0: Dead connection, failed to find a fallback [ 276.374019][ T56] block nbd0: shutting down sockets [ 276.379916][ T56] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.390386][ T56] Buffer I/O error on dev nbd0, logical block 3, async page read [ 276.418956][ T8061] syzkaller0: entered promiscuous mode [ 276.442769][ T8061] syzkaller0: entered allmulticast mode [ 278.154120][ T8085] program syz.6.506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.243658][ T8091] random: crng reseeded on system resumption [ 278.263144][ T8089] Restarting kernel threads ... [ 278.273566][ T8089] Done restarting kernel threads. [ 278.573376][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 278.826510][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 278.843303][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 278.872358][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 278.944148][ T9] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 278.980504][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.023300][ T9] usb 8-1: Product: syz [ 279.027514][ T9] usb 8-1: Manufacturer: syz [ 279.032125][ T9] usb 8-1: SerialNumber: syz [ 279.094990][ T9] usb 8-1: config 0 descriptor?? [ 279.101666][ T8093] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.110588][ T8093] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.131627][ T9] usb 8-1: ucan: probing device on interface #0 [ 279.747578][ T9] ucan 8-1:0.0: probe with driver ucan failed with error -71 [ 279.769977][ T9] usb 8-1: USB disconnect, device number 3 [ 280.123919][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 282.912228][ T8152] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 282.912228][ T8152] program syz.5.520 not setting count and/or reply_len properly [ 283.708279][ T8168] tipc: Enabling of bearer rejected, failed to enable media [ 286.006485][ T8204] input: syz0 as /devices/virtual/input/input7 [ 289.945750][ T8262] ntfs3(nullb0): Primary boot signature is not NTFS. [ 289.960802][ T8262] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 291.910303][ T8289] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 291.934711][ T9] IPVS: starting estimator thread 0... [ 291.941797][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 292.035556][ T8291] IPVS: using max 24 ests per chain, 57600 per kthread [ 293.387731][ T8305] ntfs3(nullb0): Primary boot signature is not NTFS. [ 293.394702][ T8305] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 293.625064][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 295.913619][ T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 296.498300][ T24] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 296.524294][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.533384][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 296.542452][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.558363][ T24] usb 4-1: config 0 descriptor?? [ 297.376282][ T8356] ntfs3(nullb0): Primary boot signature is not NTFS. [ 297.909447][ T8356] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 298.556677][ T9] usb 4-1: USB disconnect, device number 3 [ 306.287416][ T8458] sd 0:0:1:0: device reset [ 306.790153][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 30 seconds [ 306.802219][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 30 seconds [ 306.815121][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 30 seconds [ 306.899317][ T8468] netlink: 'syz.6.595': attribute type 1 has an invalid length. [ 306.907732][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.595'. [ 307.403593][ T8467] fuse: Bad value for 'fd' [ 308.733182][ T8491] No control pipe specified [ 310.203147][ T8523] syzkaller0: entered promiscuous mode [ 310.243392][ T8523] syzkaller0: entered allmulticast mode [ 310.904879][ T8532] sd 0:0:1:0: device reset [ 313.851245][ T8563] No control pipe specified [ 316.612676][ T8598] sd 0:0:1:0: device reset [ 317.031536][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.685884][ T8611] autofs: Bad value for 'fd' [ 319.643544][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 320.313359][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 320.332083][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 320.343884][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.366918][ T9] usb 3-1: Product: syz [ 320.371178][ T9] usb 3-1: Manufacturer: syz [ 320.405295][ T9] usb 3-1: SerialNumber: syz [ 320.438885][ T9] usb 3-1: config 0 descriptor?? [ 320.486420][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 320.864403][ T8630] sd 0:0:1:0: device reset [ 321.086800][ T8633] ntfs3(nullb0): Primary boot signature is not NTFS. [ 321.094884][ T8633] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 321.795318][ T8641] netlink: 'syz.6.635': attribute type 1 has an invalid length. [ 321.803048][ T8641] netlink: 60 bytes leftover after parsing attributes in process `syz.6.635'. [ 321.813010][ T8641] netlink: 'syz.6.635': attribute type 1 has an invalid length. [ 322.390246][ T30] audit: type=1326 audit(1762920632.487:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 322.476207][ T30] audit: type=1326 audit(1762920632.487:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 322.506629][ T30] audit: type=1326 audit(1762920632.487:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 322.596239][ T9] gspca_sonixj: i2c_w8 err -71 [ 322.633464][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 322.676535][ T9] usb 3-1: USB disconnect, device number 4 [ 322.734647][ T30] audit: type=1326 audit(1762920632.487:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 322.794435][ T8647] autofs: Bad value for 'fd' [ 322.843469][ T30] audit: type=1326 audit(1762920632.487:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 322.889359][ T30] audit: type=1326 audit(1762920632.487:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 323.005371][ T30] audit: type=1326 audit(1762920632.487:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 323.075022][ T30] audit: type=1326 audit(1762920632.487:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 323.183210][ T30] audit: type=1326 audit(1762920632.487:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 323.251166][ T30] audit: type=1326 audit(1762920632.487:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8637 comm="syz.6.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 325.798571][ T8687] autofs: Bad value for 'fd' [ 325.815093][ T5944] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 326.022876][ T5944] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 326.033608][ T5944] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 326.193351][ T5944] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 326.259550][ T5944] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 326.367202][ T5944] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 326.478063][ T5944] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.003336][ T5944] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.011455][ T5944] usb 8-1: Product: syz [ 327.016708][ T5944] usb 8-1: Manufacturer: syz [ 327.062478][ T5944] cdc_wdm 8-1:1.0: skipping garbage [ 327.068231][ T5944] cdc_wdm 8-1:1.0: skipping garbage [ 327.091267][ T5944] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 327.097467][ T5944] cdc_wdm 8-1:1.0: Unknown control protocol [ 329.870462][ T9] usb 8-1: USB disconnect, device number 4 [ 330.114221][ T8716] binder: BINDER_SET_CONTEXT_MGR already set [ 330.125831][ T8716] binder: 8715:8716 ioctl 4018620d 200000000040 returned -16 [ 330.404875][ T8726] sd 0:0:1:0: device reset [ 330.601913][ T8732] autofs: Unknown parameter '0x0000000000000000' [ 331.738134][ T8720] orangefs_mount: mount request failed with -4 [ 333.727228][ T8757] tmpfs: Bad value for 'nr_blocks' [ 334.633336][ T5944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 334.770593][ T8772] autofs: Unknown parameter '0x0000000000000000' [ 334.818986][ T5944] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.833334][ T5944] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.863360][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.883720][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 334.923369][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 334.969799][ T5944] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.010745][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.050736][ T5944] usb 3-1: Product: syz [ 335.060855][ T5944] usb 3-1: Manufacturer: syz [ 335.108157][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 335.130186][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 335.148910][ T5944] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 335.171182][ T5944] cdc_wdm 3-1:1.0: Unknown control protocol [ 335.995387][ T5908] usb 3-1: USB disconnect, device number 5 [ 336.874225][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 60 seconds [ 336.885185][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 60 seconds [ 336.896602][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 60 seconds [ 339.411046][ T8815] tmpfs: Bad value for 'nr_blocks' [ 339.793796][ T8817] autofs: Unknown parameter '0x0000000000000000' [ 339.863739][ T8819] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 339.898795][ T8819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.685'. [ 339.919450][ T8819] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 340.129838][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 340.129854][ T30] audit: type=1800 audit(1762920650.837:74): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.687" name="bus" dev="tmpfs" ino=448 res=0 errno=0 [ 340.163622][ T43] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 340.323782][ T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.347793][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 340.373138][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.404416][ T43] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.412804][ T43] usb 4-1: Product: syz [ 340.423910][ T43] usb 4-1: Manufacturer: syz [ 340.430628][ T43] usb 4-1: SerialNumber: syz [ 340.503611][ T5944] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 341.232744][ T5944] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.652568][ T5944] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.665471][ T5944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.679905][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 341.696046][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 341.700683][ T43] usb 4-1: config 0 descriptor?? [ 341.719304][ T5944] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.728738][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.760786][ T5944] usb 3-1: Product: syz [ 341.767046][ T5944] usb 3-1: Manufacturer: syz [ 341.771320][ T43] usb 4-1: selecting invalid altsetting 0 [ 341.788675][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 341.813345][ T5944] cdc_wdm 3-1:1.0: skipping garbage [ 341.829884][ T5944] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 342.206870][ T5944] cdc_wdm 3-1:1.0: Unknown control protocol [ 343.669310][ T5944] usb 3-1: USB disconnect, device number 6 [ 344.323413][ T5944] usb 4-1: USB disconnect, device number 4 [ 345.235712][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.6.700'. [ 345.253627][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.389854][ T8859] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.409330][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.427035][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.033558][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.384843][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 347.343441][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 347.423518][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 347.513383][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.113426][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.232079][ T8897] sd 0:0:1:0: device reset [ 348.269174][ T8896] syzkaller0: entered promiscuous mode [ 348.281116][ T8896] syzkaller0: entered allmulticast mode [ 348.488363][ T8906] netlink: 'syz.2.711': attribute type 12 has an invalid length. [ 349.654387][ T8911] futex_wake_op: syz.2.713 tries to shift op by 32; fix this program [ 349.683327][ T30] audit: type=1326 audit(1762920660.367:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 349.760667][ T30] audit: type=1326 audit(1762920660.367:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 349.833390][ T30] audit: type=1326 audit(1762920660.367:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 350.153368][ T30] audit: type=1326 audit(1762920660.377:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 350.448964][ T8922] tmpfs: Bad value for 'nr_blocks' [ 350.655556][ T30] audit: type=1326 audit(1762920660.377:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8910 comm="syz.2.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 354.619895][ T8953] futex_wake_op: syz.6.726 tries to shift op by 32; fix this program [ 354.632112][ T30] audit: type=1326 audit(1762920665.327:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 354.928491][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.727'. [ 355.473378][ T30] audit: type=1326 audit(1762920665.327:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 355.501681][ T30] audit: type=1326 audit(1762920665.327:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 355.531567][ T30] audit: type=1326 audit(1762920665.337:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 355.769182][ T30] audit: type=1326 audit(1762920665.337:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412b78f6c9 code=0x7ffc0000 [ 356.875562][ T8977] sd 0:0:1:0: device reset [ 358.448934][ T8979] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 358.496608][ T8990] futex_wake_op: syz.5.738 tries to shift op by 32; fix this program [ 358.516424][ T30] audit: type=1326 audit(1762920669.207:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 358.570630][ T30] audit: type=1326 audit(1762920669.207:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 358.841977][ T30] audit: type=1326 audit(1762920669.207:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 359.248673][ T8997] netlink: 'syz.2.739': attribute type 12 has an invalid length. [ 359.267443][ T30] audit: type=1326 audit(1762920669.217:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 359.629328][ T30] audit: type=1326 audit(1762920669.217:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.5.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 360.306668][ T9007] Bluetooth: MGMT ver 1.23 [ 361.800224][ T30] audit: type=1326 audit(1762920672.507:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 361.826306][ T9024] futex_wake_op: syz.2.750 tries to shift op by 32; fix this program [ 362.294456][ T30] audit: type=1326 audit(1762920672.507:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 362.317720][ T30] audit: type=1326 audit(1762920672.537:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 362.385628][ T30] audit: type=1326 audit(1762920672.967:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 363.308667][ T30] audit: type=1326 audit(1762920672.977:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 364.428425][ T9050] tmpfs: Bad value for 'nr_blocks' [ 365.837984][ T30] audit: type=1326 audit(1762920676.547:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 365.840874][ T9067] futex_wake_op: syz.3.762 tries to shift op by 32; fix this program [ 365.896725][ T30] audit: type=1326 audit(1762920676.547:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 366.564277][ T30] audit: type=1326 audit(1762920676.547:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 366.825664][ T30] audit: type=1326 audit(1762920676.577:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 367.003855][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 90 seconds [ 367.014838][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 90 seconds [ 367.026033][ T30] audit: type=1326 audit(1762920676.577:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9063 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 367.053590][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 90 seconds [ 367.544147][ T9080] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 369.084027][ T9098] futex_wake_op: syz.2.774 tries to shift op by 32; fix this program [ 369.092426][ T30] audit: type=1326 audit(1762920679.777:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 369.283311][ T30] audit: type=1326 audit(1762920679.777:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 369.325723][ T30] audit: type=1326 audit(1762920679.797:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 369.483502][ T30] audit: type=1326 audit(1762920679.797:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 369.506374][ T30] audit: type=1326 audit(1762920679.797:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9097 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 370.257066][ T9109] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 376.643704][ T9177] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 376.686035][ T30] audit: type=1326 audit(1762920687.397:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 376.723746][ T9179] futex_wake_op: syz.3.797 tries to shift op by 32; fix this program [ 376.933444][ T30] audit: type=1326 audit(1762920687.397:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 376.968921][ T30] audit: type=1326 audit(1762920687.437:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 377.214504][ T30] audit: type=1326 audit(1762920687.437:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 377.439995][ T30] audit: type=1326 audit(1762920687.437:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.3.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 378.530704][ T9184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.590132][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.747024][ T9184] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.784287][ T9184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.158185][ T9184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.207601][ T9184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.503633][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 379.527464][ T9201] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 379.800677][ T9205] vxfs: WRONG superblock magic 00000000 at 1 [ 379.809665][ T9205] vxfs: WRONG superblock magic 00000000 at 8 [ 379.815807][ T9205] vxfs: can't find superblock. [ 379.831631][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.802'. [ 379.840745][ T9205] netlink: 9 bytes leftover after parsing attributes in process `syz.2.802'. [ 379.850621][ T9205] netlink: 9 bytes leftover after parsing attributes in process `syz.2.802'. [ 379.867304][ T9205] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 380.795092][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 380.864350][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.191189][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 381.207806][ T30] audit: type=1326 audit(1762920691.917:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.7.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 381.236283][ T9225] futex_wake_op: syz.7.808 tries to shift op by 32; fix this program [ 381.268269][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.342281][ T30] audit: type=1326 audit(1762920691.917:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.7.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 381.438504][ T30] audit: type=1326 audit(1762920691.947:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.7.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 381.617824][ T30] audit: type=1326 audit(1762920691.957:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.7.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 381.726057][ T30] audit: type=1326 audit(1762920691.957:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9224 comm="syz.7.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 387.033362][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 387.240779][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.263300][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 387.303302][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.332956][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 387.371407][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 387.431465][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.457110][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.483013][ T9292] 9pnet_virtio: no channels available for device 127.0.0.1 [ 387.491994][ T9] usb 7-1: Product: syz [ 387.503706][ T9] usb 7-1: Manufacturer: syz [ 387.537131][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 387.551997][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 387.575834][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 387.589960][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 387.594501][ T9292] netlink: 60 bytes leftover after parsing attributes in process `syz.5.830'. [ 389.853672][ T5900] usb 7-1: USB disconnect, device number 2 [ 392.640093][ T9340] evm: overlay not supported [ 392.983648][ T9339] bridge0: entered promiscuous mode [ 393.000138][ T9339] macvlan2: entered promiscuous mode [ 394.465845][ T9361] tmpfs: Bad value for 'nr_blocks' [ 394.793078][ T9367] fuse: Unknown parameter 'user_i00000000000000000000' [ 394.811549][ T9369] 9pnet_virtio: no channels available for device 127.0.0.1 [ 395.088569][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.5.851'. [ 396.015367][ T9380] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 397.024039][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 120 seconds [ 397.035063][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 120 seconds [ 397.073581][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 120 seconds [ 397.445209][ T9391] syzkaller0: entered promiscuous mode [ 397.463470][ T9391] syzkaller0: entered allmulticast mode [ 397.744444][ T30] audit: type=1326 audit(1762920708.457:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 397.766887][ T9393] futex_wake_op: syz.5.861 tries to shift op by 32; fix this program [ 397.840179][ T30] audit: type=1326 audit(1762920708.457:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 398.028878][ T30] audit: type=1326 audit(1762920708.477:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 398.053099][ T30] audit: type=1326 audit(1762920708.487:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 398.603688][ T30] audit: type=1326 audit(1762920708.487:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9392 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 398.866313][ T9403] fuse: Unknown parameter 'user_i00000000000000000000' [ 401.345858][ T9417] syzkaller0: entered promiscuous mode [ 401.351541][ T9417] syzkaller0: entered allmulticast mode [ 402.793593][ T9429] 9pnet_virtio: no channels available for device 127.0.0.1 [ 402.888492][ T9429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.871'. [ 404.147274][ T9445] fuse: Unknown parameter 'user_i00000000000000000000' [ 404.408295][ T9449] tmpfs: Bad value for 'nr_blocks' [ 407.153612][ T9468] tipc: Started in network mode [ 407.172244][ T9468] tipc: Node identity bad5a764f0cd, cluster identity 4711 [ 407.215447][ T9468] tipc: Enabled bearer , priority 0 [ 407.379628][ T9467] tipc: Disabling bearer [ 407.642272][ T9479] fuse: Unknown parameter 'user_id00000000000000000000' [ 408.613412][ T30] audit: type=1326 audit(1762920718.897:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 408.638981][ T30] audit: type=1326 audit(1762920718.897:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 408.662839][ T30] audit: type=1326 audit(1762920719.017:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 408.899384][ T9480] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 408.907986][ T9480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.887'. [ 408.917034][ T9480] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 408.925639][ T30] audit: type=1326 audit(1762920719.017:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 408.971767][ T30] audit: type=1326 audit(1762920719.327:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 409.029967][ T30] audit: type=1326 audit(1762920719.327:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 409.129430][ T30] audit: type=1326 audit(1762920719.327:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 409.181407][ T30] audit: type=1326 audit(1762920719.597:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 409.208271][ T30] audit: type=1326 audit(1762920719.597:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 409.330633][ T30] audit: type=1326 audit(1762920719.607:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.2.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 411.100538][ T9493] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 414.308912][ T9524] 9pnet_virtio: no channels available for device 127.0.0.1 [ 414.405603][ T9518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.898'. [ 414.530215][ T9528] fuse: Unknown parameter 'user_id00000000000000000000' [ 416.159304][ T9552] sd 0:0:1:0: device reset [ 419.039140][ T9574] 9pnet_virtio: no channels available for device 127.0.0.1 [ 419.077830][ T9574] netlink: 60 bytes leftover after parsing attributes in process `syz.6.913'. [ 419.439143][ T9576] fuse: Bad value for 'fd' [ 419.757627][ T43] IPVS: starting estimator thread 0... [ 419.936211][ T9585] IPVS: using max 29 ests per chain, 69600 per kthread [ 420.348067][ T9596] syzkaller0: entered promiscuous mode [ 420.353668][ T9596] syzkaller0: entered allmulticast mode [ 422.498197][ T9612] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 423.105575][ T9619] futex_wake_op: syz.2.928 tries to shift op by 32; fix this program [ 423.113954][ T30] audit: type=1326 audit(1762920733.817:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 423.363711][ T30] audit: type=1326 audit(1762920733.817:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 424.147761][ T30] audit: type=1326 audit(1762920733.817:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 424.200536][ T30] audit: type=1326 audit(1762920733.827:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 424.259061][ T30] audit: type=1326 audit(1762920733.827:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 425.736549][ T9641] sd 0:0:1:0: device reset [ 427.183422][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 150 seconds [ 427.250591][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 150 seconds [ 427.261825][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 150 seconds [ 428.549971][ T9658] futex_wake_op: syz.3.940 tries to shift op by 32; fix this program [ 428.568804][ T30] audit: type=1326 audit(1762920739.257:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 428.653412][ T30] audit: type=1326 audit(1762920739.257:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 428.743618][ T30] audit: type=1326 audit(1762920739.257:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 428.767140][ T30] audit: type=1326 audit(1762920739.267:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 429.526565][ T30] audit: type=1326 audit(1762920739.267:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 433.907270][ T9702] futex_wake_op: syz.5.953 tries to shift op by 32; fix this program [ 434.063406][ T30] audit: type=1326 audit(1762920744.617:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 434.092937][ T30] audit: type=1326 audit(1762920744.617:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 434.196574][ T9710] syzkaller0: entered promiscuous mode [ 434.202153][ T9710] syzkaller0: entered allmulticast mode [ 434.273428][ T30] audit: type=1326 audit(1762920744.617:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 434.303688][ T30] audit: type=1326 audit(1762920744.627:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 434.530456][ T30] audit: type=1326 audit(1762920744.627:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9701 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301618f6c9 code=0x7ffc0000 [ 435.019302][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.414812][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.837882][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.191522][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.462290][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.474747][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 436.493454][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 436.517544][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 436.525302][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.740019][ T9732] lo speed is unknown, defaulting to 1000 [ 437.035670][ T13] bridge_slave_1: left allmulticast mode [ 437.041355][ T13] bridge_slave_1: left promiscuous mode [ 437.097280][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.171832][ T13] bridge_slave_0: left allmulticast mode [ 437.190569][ T13] bridge_slave_0: left promiscuous mode [ 437.229040][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.313772][ T30] audit: type=1326 audit(1762920748.027:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 437.369538][ T9749] futex_wake_op: syz.3.965 tries to shift op by 32; fix this program [ 437.561990][ T30] audit: type=1326 audit(1762920748.027:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 437.619028][ T30] audit: type=1326 audit(1762920748.077:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 437.690571][ T30] audit: type=1326 audit(1762920748.087:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 437.757628][ T30] audit: type=1326 audit(1762920748.087:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 438.627496][ T5144] Bluetooth: hci0: command tx timeout [ 439.919886][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.078449][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.094798][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.113059][ T13] bond0 (unregistering): Released all slaves [ 440.132903][ T9769] netlink: 'syz.7.968': attribute type 1 has an invalid length. [ 440.140703][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.7.968'. [ 440.143054][ T9773] syzkaller0: entered promiscuous mode [ 440.149803][ T9769] netlink: 'syz.7.968': attribute type 1 has an invalid length. [ 440.163378][ T9773] syzkaller0: entered allmulticast mode [ 440.634780][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 440.704051][ T5144] Bluetooth: hci0: command tx timeout [ 440.846196][ T9794] vxfs: WRONG superblock magic 00000000 at 1 [ 440.852452][ T9794] vxfs: WRONG superblock magic 00000000 at 8 [ 440.858534][ T9794] vxfs: can't find superblock. [ 440.864933][ T9794] netlink: 32 bytes leftover after parsing attributes in process `syz.3.972'. [ 440.948560][ T9794] netlink: 9 bytes leftover after parsing attributes in process `syz.3.972'. [ 440.958512][ T9794] netlink: 9 bytes leftover after parsing attributes in process `syz.3.972'. [ 440.968702][ T9794] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 442.118968][ T13] hsr_slave_0: left promiscuous mode [ 442.181097][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 442.181115][ T30] audit: type=1804 audit(1762920752.887:168): pid=9818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.976" name="/newroot/174/file0" dev="tmpfs" ino=919 res=1 errno=0 [ 442.349015][ T13] hsr_slave_1: left promiscuous mode [ 442.355328][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.481083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.496603][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.514623][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.558896][ T13] veth1_macvtap: left promiscuous mode [ 442.590030][ T13] veth0_macvtap: left promiscuous mode [ 442.774125][ T13] veth1_vlan: left promiscuous mode [ 442.833668][ T5144] Bluetooth: hci0: command tx timeout [ 442.877699][ T13] veth0_vlan: left promiscuous mode [ 443.574707][ T9840] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 443.582377][ T9840] netlink: 60 bytes leftover after parsing attributes in process `syz.3.979'. [ 443.591314][ T9840] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 444.120868][ T30] audit: type=1326 audit(1762920754.267:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.206614][ T9842] ubi31: attaching mtd0 [ 444.235233][ T9842] ubi31: scanning is finished [ 444.397912][ T30] audit: type=1326 audit(1762920754.267:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.631089][ T30] audit: type=1326 audit(1762920754.267:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.683413][ T30] audit: type=1326 audit(1762920754.267:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.748999][ T30] audit: type=1326 audit(1762920754.267:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.788367][ T30] audit: type=1326 audit(1762920754.267:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.836645][ T9842] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 444.865086][ T5144] Bluetooth: hci0: command tx timeout [ 444.941562][ T30] audit: type=1326 audit(1762920754.267:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 444.999050][ T30] audit: type=1326 audit(1762920754.267:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 445.067429][ T30] audit: type=1326 audit(1762920754.267:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.3.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d37d8f6c9 code=0x7ffc0000 [ 445.828034][ T13] team0 (unregistering): Port device team_slave_1 removed [ 445.899191][ T13] team0 (unregistering): Port device team_slave_0 removed [ 446.957503][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.986220][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.000473][ T9732] bridge_slave_0: entered allmulticast mode [ 447.010546][ T9732] bridge_slave_0: entered promiscuous mode [ 447.133712][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.153082][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.177222][ T9732] bridge_slave_1: entered allmulticast mode [ 447.185663][ T9872] vxfs: WRONG superblock magic 00000000 at 1 [ 447.192148][ T9872] vxfs: WRONG superblock magic 00000000 at 8 [ 447.196533][ T9732] bridge_slave_1: entered promiscuous mode [ 447.198488][ T9872] vxfs: can't find superblock. [ 447.206996][ T9851] syzkaller0: entered promiscuous mode [ 447.217880][ T9872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 447.231369][ T9851] syzkaller0: entered allmulticast mode [ 447.288708][ T9872] netlink: 9 bytes leftover after parsing attributes in process `syz.3.986'. [ 447.299097][ T9872] netlink: 9 bytes leftover after parsing attributes in process `syz.3.986'. [ 447.308772][ T9872] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 447.385027][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.408640][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.500583][ T9732] team0: Port device team_slave_0 added [ 447.534014][ T9732] team0: Port device team_slave_1 added [ 447.631959][ T9877] fuse: Unknown parameter 'grou00000000000000000000' [ 447.691507][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.706378][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.745962][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.769577][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.954156][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.141383][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.119135][ T9732] hsr_slave_0: entered promiscuous mode [ 450.142386][ T9732] hsr_slave_1: entered promiscuous mode [ 450.216393][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 450.216409][ T30] audit: type=1804 audit(1762920760.927:187): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.994" name="/newroot/106/file0" dev="tmpfs" ino=579 res=1 errno=0 [ 450.548642][ T9911] tipc: Started in network mode [ 450.553806][ T9911] tipc: Node identity b62eae78197a, cluster identity 4711 [ 450.585861][ T9911] tipc: Enabled bearer , priority 0 [ 450.658186][ T9914] syzkaller0: entered promiscuous mode [ 450.687996][ T9914] syzkaller0: entered allmulticast mode [ 450.742677][ T9925] fuse: Unknown parameter 'group_i00000000000000000000' [ 450.750065][ T9907] tipc: Resetting bearer [ 450.985327][ T9907] tipc: Disabling bearer [ 453.368506][ T9732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 453.384440][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 453.398967][ T9732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 453.415244][ T9732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 453.429025][ T9732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 453.553341][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 453.571503][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 453.602992][ T24] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 453.621570][ T24] usb 3-1: Product: syz [ 453.631731][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.654556][ T24] usb 3-1: Manufacturer: syz [ 453.659367][ T24] usb 3-1: SerialNumber: syz [ 453.669317][ T24] usb 3-1: config 0 descriptor?? [ 453.697264][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.725378][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.732595][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.899148][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.906379][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.096542][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.103918][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.147898][ T9977] bridge_slave_1: left allmulticast mode [ 454.182439][ T9977] bridge_slave_1: left promiscuous mode [ 454.203621][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.296635][ T9982] fuse: Unknown parameter 'group_i00000000000000000000' [ 454.317525][ T9977] bridge_slave_0: left allmulticast mode [ 454.323340][ T9977] bridge_slave_0: left promiscuous mode [ 454.362262][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.467300][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.095026][ T24] usb 3-1: USB disconnect, device number 7 [ 456.773448][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 456.785180][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 456.795926][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.804153][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.812061][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.864447][T10028] lo speed is unknown, defaulting to 1000 [ 457.391001][ T9732] veth0_vlan: entered promiscuous mode [ 457.438572][ T9732] veth1_vlan: entered promiscuous mode [ 457.571833][ T9732] veth0_macvtap: entered promiscuous mode [ 457.618938][ T9732] veth1_macvtap: entered promiscuous mode [ 457.662190][T10028] chnl_net:caif_netlink_parms(): no params data found [ 458.230538][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 180 seconds [ 458.241399][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 180 seconds [ 458.252499][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 180 seconds [ 458.619421][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.872081][ T5826] Bluetooth: hci1: command tx timeout [ 459.111879][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.333186][ T1093] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.342173][ T1093] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.352429][T10028] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.370030][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.554642][T10028] bridge_slave_0: entered allmulticast mode [ 459.571068][T10028] bridge_slave_0: entered promiscuous mode [ 459.596144][T10028] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.603592][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.611275][T10028] bridge_slave_1: entered allmulticast mode [ 459.620195][T10028] bridge_slave_1: entered promiscuous mode [ 459.632554][ T1093] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.663719][ T1093] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.801483][T10068] syzkaller0: entered promiscuous mode [ 459.811063][T10068] syzkaller0: entered allmulticast mode [ 459.826315][T10028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.848575][T10068] tipc: Started in network mode [ 459.853670][T10068] tipc: Node identity c2b483fe2c19, cluster identity 4711 [ 459.861317][T10068] tipc: Enabled bearer , priority 0 [ 459.878372][T10028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.893007][T10067] tipc: Resetting bearer [ 459.913638][T10067] tipc: Disabling bearer [ 459.990649][T10028] team0: Port device team_slave_0 added [ 460.020155][T10028] team0: Port device team_slave_1 added [ 460.255194][T10074] fuse: Unknown parameter 'group_id00000000000000000000' [ 460.314784][T10028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.334125][T10028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.368610][T10028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.423962][T10028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.430936][T10028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.499770][T10028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.240972][ T5826] Bluetooth: hci1: command tx timeout [ 461.745320][T10094] futex_wake_op: syz.7.1037 tries to shift op by 32; fix this program [ 461.763121][ T9896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.780612][ T30] audit: type=1326 audit(1762920772.457:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.7.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 461.803891][ T9896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.843407][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.851247][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.874777][ T30] audit: type=1326 audit(1762920772.457:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.7.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 461.945426][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1039'. [ 461.952598][ T30] audit: type=1326 audit(1762920772.457:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.7.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 462.016060][ T30] audit: type=1326 audit(1762920772.467:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.7.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 462.043435][ T30] audit: type=1326 audit(1762920772.467:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.7.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88c98f6c9 code=0x7ffc0000 [ 462.838939][T10108] sd 0:0:1:0: device reset [ 463.234933][T10028] hsr_slave_0: entered promiscuous mode [ 463.272247][ T5826] Bluetooth: hci1: command tx timeout [ 463.456596][T10028] hsr_slave_1: entered promiscuous mode [ 463.464582][T10028] debugfs: 'hsr0' already exists in 'hsr' [ 463.470476][T10028] Cannot create hsr debugfs directory [ 463.586148][T10112] 9pnet_virtio: no channels available for device 127.0.0.1 [ 463.643741][T10112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1042'. [ 463.978470][T10114] fuse: Unknown parameter 'group_id00000000000000000000' [ 465.343609][ T5826] Bluetooth: hci1: command tx timeout [ 466.736507][T10028] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.960383][T10028] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.971922][T10028] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.004896][T10028] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.668518][ T30] audit: type=1804 audit(1762920778.357:193): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1053" name="/newroot/117/file0" dev="tmpfs" ino=636 res=1 errno=0 [ 467.681655][T10028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.798350][T10028] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.847579][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.854768][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.920649][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.927916][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.009220][T10167] 9pnet_virtio: no channels available for device 127.0.0.1 [ 468.045137][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1054'. [ 469.804604][ T5194] udevd[5194]: worker [6381] /devices/virtual/block/nbd0 timeout; kill it [ 469.875430][ T5194] udevd[5194]: seq 13305 '/devices/virtual/block/nbd0' killed [ 469.891798][T10028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.126137][T10028] veth0_vlan: entered promiscuous mode [ 472.200548][T10028] veth1_vlan: entered promiscuous mode [ 472.358978][T10229] 9pnet_virtio: no channels available for device 127.0.0.1 [ 472.400069][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1064'. [ 472.961681][T10028] veth0_macvtap: entered promiscuous mode [ 473.030815][T10028] veth1_macvtap: entered promiscuous mode [ 473.983138][T10231] [U]  [ 474.079604][T10028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.289132][T10243] fuse: Bad value for 'user_id' [ 474.319545][T10028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.327684][T10243] fuse: Bad value for 'user_id' [ 474.477952][ T6271] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.553425][ T6271] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.609715][ T6271] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.633352][T10249] futex_wake_op: syz.2.1069 tries to shift op by 32; fix this program [ 474.652028][ T30] audit: type=1326 audit(1762920785.337:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.2.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 474.679615][ T6271] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.855284][ T30] audit: type=1326 audit(1762920785.337:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.2.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 474.969576][ T30] audit: type=1326 audit(1762920785.337:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.2.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 475.078238][ T30] audit: type=1326 audit(1762920785.347:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.2.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 475.082888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.114793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.577378][ T30] audit: type=1326 audit(1762920785.347:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10248 comm="syz.2.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 475.605179][ T6271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.446003][ T6271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.662311][T10270] fuse: Bad value for 'fd' [ 477.528032][T10284] 9pnet_virtio: no channels available for device 127.0.0.1 [ 477.584145][T10284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1076'. [ 478.134900][T10296] fuse: Bad value for 'user_id' [ 478.155585][T10296] fuse: Bad value for 'user_id' [ 480.816813][ T30] audit: type=1326 audit(1762920791.517:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 480.842955][T10339] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 480.850769][T10339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1088'. [ 480.859968][T10339] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 481.035961][T10342] 9pnet_virtio: no channels available for device 127.0.0.1 [ 481.059440][ T30] audit: type=1326 audit(1762920791.517:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 481.292257][ T30] audit: type=1326 audit(1762920791.527:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 481.492383][ T30] audit: type=1326 audit(1762920791.527:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 481.673966][ T30] audit: type=1326 audit(1762920791.527:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 481.785671][ T30] audit: type=1326 audit(1762920791.527:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 481.803887][T10347] fuse: Bad value for 'fd' [ 481.866234][ T30] audit: type=1326 audit(1762920791.527:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 482.172635][ T30] audit: type=1326 audit(1762920791.547:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 482.508628][ T30] audit: type=1326 audit(1762920791.547:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 482.646070][T10362] netlink: 'syz.9.1094': attribute type 12 has an invalid length. [ 482.725205][ T30] audit: type=1326 audit(1762920791.547:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 484.209160][T10375] netlink: 'syz.7.1099': attribute type 1 has an invalid length. [ 484.223123][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1099'. [ 484.893160][T10382] netlink: 'syz.9.1100': attribute type 1 has an invalid length. [ 484.901436][T10382] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1100'. [ 484.910591][T10382] netlink: 'syz.9.1100': attribute type 1 has an invalid length. [ 486.344886][T10391] 9pnet_virtio: no channels available for device 127.0.0.1 [ 486.835368][T10395] vxfs: WRONG superblock magic 00000000 at 1 [ 486.841985][T10395] vxfs: WRONG superblock magic 00000000 at 8 [ 486.848500][T10395] vxfs: can't find superblock. [ 486.854598][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1104'. [ 486.863598][T10395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1104'. [ 486.872504][T10395] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1104'. [ 486.883207][T10395] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 488.556818][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 210 seconds [ 488.567674][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 210 seconds [ 488.578725][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 210 seconds [ 492.663735][T10450] fuse: Invalid rootmode [ 496.685788][T10489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 497.435246][T10494] ./file0: Can't open blockdev [ 497.477365][T10495] fuse: Bad value for 'fd' [ 498.938768][T10506] fuse: Bad value for 'fd' [ 501.122387][T10531] fuse: Bad value for 'rootmode' [ 501.351745][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.386062][T10544] 9pnet_virtio: no channels available for device 127.0.0.1 [ 502.411003][T10543] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1149'. [ 502.860544][T10547] netlink: 'syz.2.1151': attribute type 12 has an invalid length. [ 505.638044][T10577] fuse: Bad value for 'rootmode' [ 506.690820][T10594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 506.693943][T10590] tmpfs: Bad value for 'nr_blocks' [ 506.762058][T10591] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1163'. [ 508.151163][T10600] netlink: 'syz.9.1165': attribute type 12 has an invalid length. [ 508.888030][T10609] syzkaller0: entered promiscuous mode [ 509.132542][T10609] syzkaller0: entered allmulticast mode [ 509.345819][T10609] tipc: Started in network mode [ 509.353522][T10609] tipc: Node identity 4ad4309294ae, cluster identity 4711 [ 509.366630][T10609] tipc: Enabled bearer , priority 0 [ 509.433884][T10608] tipc: Resetting bearer [ 509.651250][T10608] tipc: Disabling bearer [ 510.292476][T10628] fuse: Bad value for 'rootmode' [ 510.853445][T10573] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 511.017053][T10573] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.037870][T10573] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 511.074826][T10573] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 511.095125][T10573] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.137891][T10573] usb 10-1: config 0 descriptor?? [ 511.178964][T10573] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 511.410137][T10573] dvb-usb: bulk message failed: -22 (3/0) [ 511.712702][T10573] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 511.757810][T10573] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 511.776262][T10573] usb 10-1: media controller created [ 511.782800][T10573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.820218][T10573] dvb-usb: bulk message failed: -22 (6/0) [ 511.850429][T10573] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 511.884137][T10573] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input8 [ 511.975178][T10573] dvb-usb: schedule remote query interval to 150 msecs. [ 511.982180][T10573] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 512.061285][T10573] usb 10-1: USB disconnect, device number 2 [ 513.372889][T10573] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 513.453813][T10652] netlink: 'syz.9.1180': attribute type 12 has an invalid length. [ 514.347999][T10664] syzkaller0: entered promiscuous mode [ 514.358313][T10664] syzkaller0: entered allmulticast mode [ 514.435275][T10665] tipc: Enabled bearer , priority 0 [ 514.462897][T10663] tipc: Resetting bearer [ 514.544613][T10669] netlink: 'syz.8.1186': attribute type 27 has an invalid length. [ 514.654318][T10663] tipc: Disabling bearer [ 514.759488][T10673] sd 0:0:1:0: device reset [ 515.258860][T10669] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.266748][T10669] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.860864][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.893313][T10688] vxfs: WRONG superblock magic 00000000 at 1 [ 516.907194][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.033450][T10688] vxfs: WRONG superblock magic 00000000 at 8 [ 517.046089][T10692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1188'. [ 517.073159][T10688] vxfs: can't find superblock. [ 517.270222][ T5832] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 517.338812][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.357166][T10670] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.385864][T10670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.429357][ T1144] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.455213][ T5832] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 517.473406][ T1144] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.483749][ T5832] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 517.506943][T10692] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1188'. [ 517.513315][ T5832] usb 8-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 517.545250][T10692] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1188'. [ 517.579497][ T5832] usb 8-1: config 220 has no interface number 1 [ 517.587191][T10692] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 517.587904][ T5832] usb 8-1: config 220 interface 0 has no altsetting 0 [ 517.635218][ T5832] usb 8-1: config 220 interface 76 has no altsetting 0 [ 517.647708][ T1144] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.665950][ T5832] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 517.681654][ T1144] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.701609][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.732349][ T5832] usb 8-1: Product: syz [ 517.739721][ T5832] usb 8-1: Manufacturer: syz [ 517.752541][ T5832] usb 8-1: SerialNumber: syz [ 518.005034][ T5832] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 518.035917][ T5832] uvcvideo 8-1:220.0: No valid video chain found. [ 518.116436][ T5832] usb 8-1: USB disconnect, device number 5 [ 518.439202][T10706] No buffer was provided with the request [ 518.490447][T10708] syzkaller0: entered promiscuous mode [ 518.503584][T10708] syzkaller0: entered allmulticast mode [ 518.624388][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 240 seconds [ 518.635618][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 240 seconds [ 518.647068][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 240 seconds [ 518.659247][T10708] tipc: Enabled bearer , priority 0 [ 518.709999][T10707] tipc: Resetting bearer [ 518.889895][T10707] tipc: Disabling bearer [ 518.966021][T10718] sd 0:0:1:0: device reset [ 520.356273][ T5832] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 521.027382][ T5832] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.378890][T10734] Mount JFS Failure: -22 [ 521.383404][T10734] jfs_mount failed w/return code = -22 [ 521.733293][ T5832] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 521.759171][ T5832] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.850568][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 521.893533][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 522.240686][ T5832] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.259805][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 522.303514][ T5832] usb 8-1: Product: syz [ 522.317664][ T5832] usb 8-1: Manufacturer: syz [ 522.583069][ T5832] cdc_wdm 8-1:1.0: skipping garbage [ 522.718091][T10747] netlink: 'syz.9.1206': attribute type 1 has an invalid length. [ 523.118779][ T5832] cdc_wdm 8-1:1.0: skipping garbage [ 523.129902][ T5832] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 523.135956][ T5832] cdc_wdm 8-1:1.0: Unknown control protocol [ 523.252182][ T5832] usb 8-1: USB disconnect, device number 6 [ 523.268006][T10749] fuse: Bad value for 'rootmode' [ 523.749237][T10759] vxfs: WRONG superblock magic 00000000 at 1 [ 523.769715][T10759] vxfs: WRONG superblock magic 00000000 at 8 [ 523.847069][T10759] vxfs: can't find superblock. [ 523.937698][T10764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1210'. [ 524.063435][T10764] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1210'. [ 524.072333][T10764] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1210'. [ 524.286124][T10764] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 525.034891][T10767] random: crng reseeded on system resumption [ 525.050279][T10767] Restarting kernel threads ... [ 525.055655][T10767] Done restarting kernel threads. [ 525.504805][T10781] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.828948][T10793] fuse: Unknown parameter 'use00000000000000000000' [ 527.086000][T10798] ./file0: Can't open blockdev [ 530.265510][T10829] Mount JFS Failure: -22 [ 530.308881][T10829] jfs_mount failed w/return code = -22 [ 530.664129][T10838] sd 0:0:1:0: device reset [ 532.270345][T10851] vxfs: WRONG superblock magic 00000000 at 1 [ 532.322845][T10851] vxfs: WRONG superblock magic 00000000 at 8 [ 532.357551][T10852] No buffer was provided with the request [ 533.019563][T10851] vxfs: can't find superblock. [ 533.063842][T10853] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1235'. [ 533.112898][T10853] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1235'. [ 533.196294][T10853] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1235'. [ 533.207579][T10853] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 533.544168][T10859] netlink: 'syz.9.1241': attribute type 12 has an invalid length. [ 534.660972][T10865] fuse: Unknown parameter 'use00000000000000000000' [ 534.743929][ T5826] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 535.060593][T10874] fuse: Unknown parameter 'user_i00000000000000000000' [ 537.715572][T10908] sd 0:0:1:0: device reset [ 539.833982][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 540.277264][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.286219][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 540.301166][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.333487][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 540.405019][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 540.451726][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.470005][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.505551][ T10] usb 3-1: Product: syz [ 540.549121][ T10] usb 3-1: Manufacturer: syz [ 540.576543][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 540.613373][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 540.671835][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 540.718140][T10925] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1257'. [ 541.206267][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 541.380339][ T10] usb 3-1: USB disconnect, device number 8 [ 541.614461][ T5832] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 541.823315][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 541.998749][ T5832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 542.043384][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.058449][ T5832] usb 4-1: Product: syz [ 542.074459][ T5832] usb 4-1: Manufacturer: syz [ 542.084751][ T5832] usb 4-1: SerialNumber: syz [ 542.568875][ T5832] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 542.846287][T10957] sd 0:0:1:0: device reset [ 543.429604][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 543.438992][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 543.495713][ T5826] Bluetooth: hci1: hardware error 0x00 [ 544.602721][T10976] fuse: Unknown parameter 'user_id00000000000000000000' [ 544.611909][ T5891] usb 4-1: USB disconnect, device number 5 [ 544.644511][ T5891] usblp0: removed [ 544.769965][T10978] siw: device registration error -23 [ 545.553766][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 545.663387][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 545.718022][ T43] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.256705][ T43] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 546.281451][ T43] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.292270][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 546.305639][ T43] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 546.384868][ T43] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.402980][ T43] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.422142][ T43] usb 9-1: Product: syz [ 546.441108][ T43] usb 9-1: Manufacturer: syz [ 546.687900][ T43] cdc_wdm 9-1:1.0: skipping garbage [ 546.693113][ T43] cdc_wdm 9-1:1.0: skipping garbage [ 547.237385][ T43] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 547.253330][ T43] cdc_wdm 9-1:1.0: Unknown control protocol [ 547.884855][ T5832] usb 9-1: USB disconnect, device number 2 [ 548.718710][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 270 seconds [ 548.731206][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 270 seconds [ 548.743966][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 270 seconds [ 548.959827][T11025] fuse: Unknown parameter 'user_id00000000000000000000' [ 549.373352][ T43] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 549.446358][T11041] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 550.982018][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 550.996250][T11046] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 552.155006][ T43] usb 8-1: unable to get BOS descriptor set [ 552.473580][ T43] usb 8-1: unable to read config index 0 descriptor/all [ 552.480753][ T43] usb 8-1: can't read configurations, error -71 [ 552.849864][T11055] sd 0:0:1:0: device reset [ 553.698586][T11064] Driver unsupported XDP return value 0 on prog (id 305) dev N/A, expect packet loss! [ 554.486037][T11046] bond1: entered promiscuous mode [ 554.534197][T11046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.542347][T11039] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 554.686324][T11062] netlink: 'syz.8.1297': attribute type 12 has an invalid length. [ 555.649448][T11087] fuse: Bad value for 'fd' [ 558.532783][T11114] 9p: Bad value for 'wfdno' [ 558.538495][T11114] trusted_key: encrypted_key: insufficient parameters specified [ 558.547991][T11114] tmpfs: Bad value for 'mpol' [ 559.260664][T11124] No buffer was provided with the request [ 559.753404][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 559.870275][T11112] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 561.054448][T11138] fuse: Bad value for 'fd' [ 562.797664][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.240951][T11161] Mount JFS Failure: -22 [ 563.245422][T11161] jfs_mount failed w/return code = -22 [ 563.981934][T11172] netlink: 'syz.7.1319': attribute type 1 has an invalid length. [ 563.993154][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1319'. [ 564.305916][T11179] No buffer was provided with the request [ 566.503294][T11189] fuse: Bad value for 'fd' [ 566.767446][T11192] futex_wake_op: syz.3.1325 tries to shift op by 32; fix this program [ 570.040830][T11229] futex_wake_op: syz.7.1338 tries to shift op by 32; fix this program [ 570.174627][T11233] syzkaller0: entered promiscuous mode [ 570.190654][T11233] syzkaller0: entered allmulticast mode [ 571.733210][T11256] hpfs: Bad magic ... probably not HPFS [ 573.291707][T11264] No buffer was provided with the request [ 574.793476][T11275] netlink: 'syz.3.1351': attribute type 12 has an invalid length. [ 575.134407][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 575.169701][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 576.286358][T11286] Mount JFS Failure: -22 [ 576.290702][T11286] jfs_mount failed w/return code = -22 [ 578.735163][T11315] No buffer was provided with the request [ 579.019057][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 300 seconds [ 579.030033][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 300 seconds [ 579.042818][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 300 seconds [ 580.191609][T11325] ./file0: Can't open blockdev [ 582.336973][T11347] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1370'. [ 584.435701][T11368] ./file0: Can't open blockdev [ 586.584483][T11381] bond1: entered allmulticast mode [ 586.590343][T11381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 589.018690][T11393] comedi comedi0: reset error (fatal) [ 590.974838][T11422] hpfs: Bad magic ... probably not HPFS [ 594.150133][T11443] No buffer was provided with the request [ 596.528896][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 596.528914][ T30] audit: type=1326 audit(1762920907.237:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 596.614203][T11469] hpfs: Bad magic ... probably not HPFS [ 597.186578][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1408'. [ 597.197660][ T30] audit: type=1326 audit(1762920907.237:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 597.304948][ T30] audit: type=1326 audit(1762920907.237:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 597.403377][ T30] audit: type=1326 audit(1762920907.237:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 597.453200][ T30] audit: type=1326 audit(1762920907.237:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11460 comm="syz.2.1405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe37e98f6c9 code=0x7ffc0000 [ 600.319832][T11498] fuse: Unknown parameter 'grou00000000000000000000' [ 601.183057][T11500] Mount JFS Failure: -22 [ 601.187988][T11500] jfs_mount failed w/return code = -22 [ 601.382523][T11510] hpfs: Bad magic ... probably not HPFS [ 602.074154][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 602.845127][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1425'. [ 602.893325][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 602.908426][ T9] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 602.917395][ T9] usb 10-1: config 0 has no interface number 0 [ 602.928366][ T9] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 602.939344][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.953617][ T9] usb 10-1: Product: syz [ 602.989025][ T9] usb 10-1: Manufacturer: syz [ 603.009257][ T9] usb 10-1: SerialNumber: syz [ 603.042688][ T9] usb 10-1: config 0 descriptor?? [ 603.216044][ T9] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 605.552377][T11549] fuse: Unknown parameter 'group_i00000000000000000000' [ 606.109693][ T9] usb 10-1: qt2_attach - failed to power on unit: -71 [ 606.182255][ T9] quatech2 10-1:0.51: probe with driver quatech2 failed with error -71 [ 606.197975][T11556] syzkaller0: entered promiscuous mode [ 606.204584][T11556] syzkaller0: entered allmulticast mode [ 606.245481][ T9] usb 10-1: USB disconnect, device number 3 [ 607.035316][T11573] netlink: 'syz.8.1438': attribute type 1 has an invalid length. [ 607.045019][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1438'. [ 607.603817][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 607.622789][T11582] fuse: Unknown parameter 'group_i00000000000000000000' [ 607.777179][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 607.801187][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 607.826940][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 607.836835][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 607.853729][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 607.880570][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 607.893803][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 607.902687][ T9] usb 8-1: Product: syz [ 607.920752][ T9] usb 8-1: Manufacturer: syz [ 608.000381][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 608.019148][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 608.101353][T11589] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 608.637726][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 608.647446][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 609.044202][T10573] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 609.217872][T11595] syzkaller0: entered promiscuous mode [ 609.224079][T11595] syzkaller0: entered allmulticast mode [ 609.237245][T11596] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20001 [ 609.246232][ T24] IPVS: starting estimator thread 0... [ 609.272120][T11594] lo speed is unknown, defaulting to 1000 [ 609.292887][T10573] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 609.301605][T10573] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 609.312738][T10573] usb 10-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 609.322343][T10573] usb 10-1: config 220 has no interface number 1 [ 609.343392][T11597] IPVS: using max 25 ests per chain, 60000 per kthread [ 609.380709][T10573] usb 10-1: config 220 interface 0 has no altsetting 0 [ 609.392574][T10573] usb 10-1: config 220 interface 76 has no altsetting 0 [ 609.426602][T10573] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 609.438188][T10573] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.447285][T10573] usb 10-1: Product: syz [ 609.452765][T10573] usb 10-1: Manufacturer: syz [ 609.458071][T10573] usb 10-1: SerialNumber: syz [ 609.507251][ T56] block nbd0: Possible stuck request ffff888025310000: control (read@0,1024B). Runtime 330 seconds [ 609.518399][ T56] block nbd0: Possible stuck request ffff888025310200: control (read@1024,1024B). Runtime 330 seconds [ 609.529995][ T56] block nbd0: Possible stuck request ffff888025310400: control (read@2048,1024B). Runtime 330 seconds [ 610.003370][T11605] Bluetooth: MGMT ver 1.23 [ 610.622275][ T10] usb 8-1: USB disconnect, device number 9 [ 611.052568][T10573] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 611.119223][T10573] uvcvideo 10-1:220.0: No valid video chain found. [ 611.184176][T10573] usb 10-1: USB disconnect, device number 4 [ 611.250211][T11619] hpfs: Bad magic ... probably not HPFS [ 612.394270][T11633] syzkaller0: entered promiscuous mode [ 612.473516][T11633] syzkaller0: entered allmulticast mode [ 613.554574][ T5891] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 613.725116][ T5891] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.746058][ T5891] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 613.776588][ T5891] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.796114][ T5891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 613.823439][ T5891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 613.866799][ T5891] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.880537][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.899121][ T5891] usb 9-1: Product: syz [ 613.909273][ T5891] usb 9-1: Manufacturer: syz [ 613.942831][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 613.990254][ T5891] cdc_wdm 9-1:1.0: skipping garbage [ 614.010481][ T5891] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 614.027629][ T5891] cdc_wdm 9-1:1.0: Unknown control protocol [ 614.454627][T11661] Mount JFS Failure: -22 [ 614.458984][T11661] jfs_mount failed w/return code = -22 [ 616.563197][T10573] usb 9-1: USB disconnect, device number 3 [ 616.635670][T11671] fuse: Unknown parameter 'group_id00000000000000000000' [ 618.334528][T11690] syzkaller0: entered promiscuous mode [ 618.472199][T11690] syzkaller0: entered allmulticast mode [ 624.230233][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.864466][ T31] INFO: task udevd:6381 blocked for more than 143 seconds. [ 625.049175][ T31] Not tainted syzkaller #0 [ 625.191019][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 625.316544][ T31] task:udevd state:D stack:19864 pid:6381 tgid:6381 ppid:5194 task_flags:0x400140 flags:0x00080003 [ 625.359119][ T31] Call Trace: [ 625.362617][ T31] [ 625.393543][ T31] __schedule+0x1836/0x4ed0 [ 625.398427][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.417254][ T31] ? __pfx___schedule+0x10/0x10 [ 625.432608][ T31] ? schedule+0x91/0x360 [ 625.445612][ T31] schedule+0x165/0x360 [ 625.454010][ T31] io_schedule+0x80/0xd0 [ 625.468516][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 625.497051][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 625.503129][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 625.519163][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 625.539606][ T31] do_read_cache_folio+0x1ad/0x590 [ 625.550583][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 625.566521][ T31] read_part_sector+0xb6/0x2b0 [ 625.583852][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 625.591802][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 625.602012][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 625.616878][ T31] bdev_disk_changed+0x75f/0x14b0 [ 625.622241][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 625.627964][ T31] blkdev_get_whole+0x380/0x510 [ 625.643407][ T31] bdev_open+0x31e/0xd30 [ 625.649636][ T31] blkdev_open+0x457/0x600 [ 625.663972][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 625.673056][ T31] do_dentry_open+0x953/0x13f0 [ 625.680182][ T31] vfs_open+0x3b/0x340 [ 625.684792][ T31] ? path_openat+0x2ede/0x3860 [ 625.690453][ T31] path_openat+0x2efb/0x3860 [ 625.696029][ T31] ? __pfx_path_openat+0x10/0x10 [ 625.718522][ T31] do_filp_open+0x1fa/0x410 [ 625.723166][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.728350][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 625.734716][ T31] ? _raw_spin_unlock+0x28/0x50 [ 625.739693][ T31] ? alloc_fd+0x64c/0x6c0 [ 625.744915][ T31] do_sys_openat2+0x121/0x1c0 [ 625.749752][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 625.755234][ T31] __x64_sys_openat+0x138/0x170 [ 625.760248][ T31] do_syscall_64+0xfa/0xfa0 [ 625.764926][ T31] ? irqentry_exit+0x10f/0x640 [ 625.769797][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.776068][ T31] ? clear_bhb_loop+0x60/0xb0 [ 625.781137][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.787487][ T31] RIP: 0033:0x7f7ca62a7407 [ 625.792333][ T31] RSP: 002b:00007fff1314c4b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 625.801042][ T31] RAX: ffffffffffffffda RBX: 00007f7ca6a8a880 RCX: 00007f7ca62a7407 [ 625.809190][ T31] RDX: 00000000000a0800 RSI: 000055e719299840 RDI: ffffffffffffff9c [ 625.817335][ T31] RBP: 000055e71928d910 R08: 0000000000000000 R09: 0000000000000000 [ 625.825546][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e7192a0ad0 [ 625.835100][ T31] R13: 000055e71929b190 R14: 0000000000000000 R15: 000055e7192a0ad0 [ 625.843556][ T31] [ 625.847034][ T31] [ 625.847034][ T31] Showing all locks held in the system: [ 625.855378][ T31] 1 lock held by khungtaskd/31: [ 625.860323][ T31] #0: ffffffff8df3d820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 625.871025][ T31] 2 locks held by getty/5584: [ 625.875848][ T31] #0: ffff88814e1150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 625.886397][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 625.897374][ T31] 1 lock held by udevd/6381: [ 625.902005][ T31] #0: ffff8881427af358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 625.911669][ T31] 2 locks held by syz.3.1490/11748: [ 625.916971][ T31] #0: ffff888073e20208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 625.928366][ T31] #1: ffffffff8df432f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 625.957385][ T31] [ 625.963105][ T31] ============================================= [ 625.963105][ T31] [ 625.986494][ T31] NMI backtrace for cpu 0 [ 625.986524][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 625.986537][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.986544][ T31] Call Trace: [ 625.986549][ T31] [ 625.986554][ T31] dump_stack_lvl+0x189/0x250 [ 625.986573][ T31] ? irqentry_exit+0x5ba/0x640 [ 625.986585][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.986600][ T31] ? __pfx__printk+0x10/0x10 [ 625.986618][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 625.986633][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 625.986647][ T31] ? __pfx__printk+0x10/0x10 [ 625.986660][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 625.986674][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 625.986688][ T31] watchdog+0xfa8/0xff0 [ 625.986707][ T31] ? watchdog+0x1f4/0xff0 [ 625.986726][ T31] kthread+0x711/0x8a0 [ 625.986738][ T31] ? __pfx_watchdog+0x10/0x10 [ 625.986753][ T31] ? __pfx_kthread+0x10/0x10 [ 625.986763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.986777][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.986792][ T31] ? __pfx_kthread+0x10/0x10 [ 625.986802][ T31] ret_from_fork+0x599/0xb30 [ 625.986816][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.986834][ T31] ? __switch_to_asm+0x39/0x70 [ 625.986843][ T31] ? __switch_to_asm+0x33/0x70 [ 625.986852][ T31] ? __pfx_kthread+0x10/0x10 [ 625.986862][ T31] ret_from_fork_asm+0x1a/0x30 [ 625.986880][ T31] [ 625.986893][ T31] Sending NMI from CPU 0 to CPUs 1: [ 626.141875][ C1] NMI backtrace for cpu 1 [ 626.141894][ C1] CPU: 1 UID: 0 PID: 1093 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 626.141915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.141926][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 626.141954][ C1] RIP: 0010:ieee80211_sta_get_rates+0x307/0x5d0 [ 626.141975][ C1] Code: 25 4d f7 48 ba 00 00 00 00 00 fc ff df 49 63 c6 49 8b 0f 48 8d 04 40 48 8d 1c 81 48 83 c3 04 48 89 d8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 a2 00 00 00 0f b7 1b 89 ef 89 de e8 55 92 e6 f6 39 dd [ 626.141991][ C1] RSP: 0018:ffffc90003c67608 EFLAGS: 00000a07 [ 626.142006][ C1] RAX: 0000000000000000 RBX: ffff88806663dc9c RCX: ffff88806663dc98 [ 626.142019][ C1] RDX: dffffc0000000000 RSI: 0000000000000082 RDI: 00000000000000ff [ 626.142031][ C1] RBP: 000000000000000a R08: 0000000000000000 R09: 000000000000000c [ 626.142041][ C1] R10: 000000000000000c R11: 0000000000000000 R12: 1ffff1100ccc7626 [ 626.142052][ C1] R13: ffff888063708801 R14: 0000000000000000 R15: ffff88806663b130 [ 626.142065][ C1] FS: 0000000000000000(0000) GS:ffff888125fcc000(0000) knlGS:0000000000000000 [ 626.142079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.142091][ C1] CR2: 0000000000000000 CR3: 0000000073b62000 CR4: 00000000003526f0 [ 626.142106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.142116][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 626.142128][ C1] Call Trace: [ 626.142134][ C1] [ 626.142149][ C1] ieee80211_ibss_rx_queued_mgmt+0x131a/0x2b10 [ 626.142171][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.142204][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfaa/0x2b10 [ 626.142225][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 626.142247][ C1] ? __lock_acquire+0xab9/0xd20 [ 626.142273][ C1] ? __lock_acquire+0xab9/0xd20 [ 626.142305][ C1] ? kcov_remote_start+0x18e/0x810 [ 626.142336][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 626.142364][ C1] cfg80211_wiphy_work+0x2ab/0x470 [ 626.142389][ C1] ? process_one_work+0x868/0x15e0 [ 626.142410][ C1] process_one_work+0x93a/0x15e0 [ 626.142434][ C1] ? __lock_acquire+0xab9/0xd20 [ 626.142464][ C1] ? __pfx_process_one_work+0x10/0x10 [ 626.142491][ C1] ? assign_work+0x3a1/0x410 [ 626.142515][ C1] worker_thread+0x9b0/0xee0 [ 626.142548][ C1] kthread+0x711/0x8a0 [ 626.142566][ C1] ? __pfx_worker_thread+0x10/0x10 [ 626.142588][ C1] ? __pfx_kthread+0x10/0x10 [ 626.142605][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.142628][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.142660][ C1] ? __pfx_kthread+0x10/0x10 [ 626.142677][ C1] ret_from_fork+0x599/0xb30 [ 626.142700][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 626.142726][ C1] ? __switch_to_asm+0x39/0x70 [ 626.142743][ C1] ? __switch_to_asm+0x33/0x70 [ 626.142759][ C1] ? __pfx_kthread+0x10/0x10 [ 626.142774][ C1] ret_from_fork_asm+0x1a/0x30 [ 626.142799][ C1] [ 626.500540][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 626.507428][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 626.516520][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.526559][ T31] Call Trace: [ 626.529853][ T31] [ 626.532782][ T31] dump_stack_lvl+0x99/0x250 [ 626.537374][ T31] ? __asan_memcpy+0x40/0x70 [ 626.541954][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.547144][ T31] ? __pfx__printk+0x10/0x10 [ 626.551750][ T31] vpanic+0x237/0x6d0 [ 626.555726][ T31] ? __pfx_vpanic+0x10/0x10 [ 626.560219][ T31] ? preempt_schedule+0xae/0xc0 [ 626.565070][ T31] panic+0xb9/0xc0 [ 626.568780][ T31] ? __pfx_panic+0x10/0x10 [ 626.573188][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 626.577951][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 626.583320][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 626.589467][ T31] watchdog+0xfe7/0xff0 [ 626.593632][ T31] ? watchdog+0x1f4/0xff0 [ 626.597964][ T31] kthread+0x711/0x8a0 [ 626.602027][ T31] ? __pfx_watchdog+0x10/0x10 [ 626.606700][ T31] ? __pfx_kthread+0x10/0x10 [ 626.611287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.616481][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.621673][ T31] ? __pfx_kthread+0x10/0x10 [ 626.626251][ T31] ret_from_fork+0x599/0xb30 [ 626.630835][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 626.635951][ T31] ? __switch_to_asm+0x39/0x70 [ 626.640703][ T31] ? __switch_to_asm+0x33/0x70 [ 626.645461][ T31] ? __pfx_kthread+0x10/0x10 [ 626.650043][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.654810][ T31] [ 626.658104][ T31] Kernel Offset: disabled [ 626.662412][ T31] Rebooting in 86400 seconds..