last executing test programs: 10.159948439s ago: executing program 3 (id=57): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(r1, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x1ff, 0x0, 0xb4b, 0x9, 0x5, 0x0, 0x400003}, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={r1}, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x4, 0x8, 0x4, 0x0, 0x3, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x5, 0x0, 0x100000000]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './cgroup/pids.max\x00'}) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8}) socket$nl_route(0x10, 0x3, 0x0) 8.384773347s ago: executing program 3 (id=63): r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c00, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f00000000c0)='ufs\x00', 0x81, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x48000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x4}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf2570000000"], 0x14}, 0x1, 0x0, 0x0, 0x44100}, 0x4000000) r3 = accept4(r0, 0x0, 0x0, 0x80000) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7fffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x2, 0xfffffffa, 0x5, 0xc72}) mq_open(&(0x7f0000000000)='::%\x00', 0x40, 0x80, &(0x7f00000000c0)={0x1, 0x4c, 0x76}) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x640040, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, r7, &(0x7f0000000480)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe4) r9 = geteuid() mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000400)='\x00', &(0x7f0000000440), 0x2, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}, {@sq={'sq', 0x3d, 0x94}}, {@rq={'rq', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x9d7}}], [{@euid_eq={'euid', 0x3d, r7}}, {@fowner_gt={'fowner>', r8}}, {@euid_lt}, {@uid_gt={'uid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r9}}, {@dont_hash}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '*'}}, {@audit}]}}) 4.977075923s ago: executing program 0 (id=75): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x9, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x30, r3, 0x1, 0x70bd28, 0x2ddfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xcda}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x30}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4085}, 0x4c040) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) eventfd(0xfffffff9) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x8098f904, 0x3}) r6 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) shmctl$IPC_SET(r6, 0x1, &(0x7f00000005c0)={{0x2, r8, 0xee00, 0x0, 0x0, 0x80, 0xc01}, 0x5, 0x7fffffff, 0x0, 0x3, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) 4.885498541s ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='test2\x00', 0x15f) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000300)="ffffffff00"/24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x400002, 0x41) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r4, 0x70c, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4040000) mq_timedsend(r1, &(0x7f0000000080)="75c2bcfc508194178ff3294eb75ab3e0021c867cb67ed2d614db82b5cab0ffdbc2d7b5681e46ec287981b436", 0x2c, 0x8000, &(0x7f00000000c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x40) nanosleep(&(0x7f0000000600)={0x0, 0x2625a00}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r5, 0xc01c6f06, &(0x7f0000000500)="000000000100"/28) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x40a80, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000002300)) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) write(r8, &(0x7f0000000180)='B', 0x1) 4.394570856s ago: executing program 3 (id=80): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r7) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, r8, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r9, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 3.693601803s ago: executing program 0 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x6b, 0x4, 0xd, 0x0, 0x0, 0xff, 0x4, 0xd5, 0xe6, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x23, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) 2.872328994s ago: executing program 1 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x100010, r1, 0x9b379000) r3 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x83a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) connect$phonet_pipe(r5, &(0x7f0000000540)={0x23, 0xf, 0x7, 0x5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x12c, 0xfffffffffffffffe) r8 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000500)=@hat={'permhat '}, 0x1b) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet_tcp(0x2, 0x1, 0x0) 2.651625449s ago: executing program 2 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2}) dup(r0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x3}) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000101fdbdf25080300eea5ad0f3caa", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x24048080}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) set_mempolicy(0x6, 0x0, 0xe0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 2.643202424s ago: executing program 0 (id=89): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r1, 0x0, 0x40000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x1}) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x9]}, &(0x7f0000000100)=0x6) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c000000020601040000060000000000b2070000050001000600650016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a0000000500040000000000"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.367573501s ago: executing program 2 (id=90): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000019000910001d0cf70400020000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000000000008000100080000000c00018008000100050000002d0002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100)=0x8, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000080006000000000008000600db"], 0xd0}, 0x1, 0x0, 0x0, 0xb51fe8ad78ecd414}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000020}}, 0x1c}}, 0x4810) 1.927539083s ago: executing program 2 (id=91): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0x10002, [0x200000000000de99, 0x8c9, 0xfffffffffffffffc, 0x20000000000000c4, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1000000028, 0x8, 0x6, 0x9, 0x9, 0x0, 0x3, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r0, 0x0, 0x10448) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x800) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x2}, {0x8}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r11 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000740)={0x40000004}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r13) 1.864995214s ago: executing program 3 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x76798000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000001440)=""/40, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.71324933s ago: executing program 1 (id=93): socket$inet_smc(0x2b, 0x1, 0x0) openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x60}, {}, {0x3}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000002e00), 0x8, 0x2000) socket$can_raw(0x1d, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) pipe2(&(0x7f0000000040), 0x800) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x2004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1.510414442s ago: executing program 1 (id=94): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000001640)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x7}, 0x14) 1.482711409s ago: executing program 2 (id=95): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setresuid(0x0, 0xee00, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000fc0), 0x200, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f3, 0x0, 0x0, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.378366359s ago: executing program 1 (id=96): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) userfaultfd(0x800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 935.617987ms ago: executing program 3 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000040)={0x0, 0x0, 0x20, 0x1, 0x1fff, r0, 0x0, 0xfe, 0x3}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 732.187535ms ago: executing program 3 (id=98): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0xc5) r0 = socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ab3000/0x3000)=nil) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x48010) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(0x0, &(0x7f0000d6f000/0x3000)=nil, 0x6000) 387.00465ms ago: executing program 1 (id=99): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) socket$inet(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140)=[0x7fffffff], 0x0, 0x1}) 315.127251ms ago: executing program 2 (id=100): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x870bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6d8, 0x8, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x8000) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='1\n\x00', 0x2) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/os_desc/c.1\x00') symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='dummy_udc.0\n\x00', 0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') 264.721591ms ago: executing program 1 (id=101): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0xefed559896f81dcc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac2(0x3, 0xc8, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x6a, 0xc0, 0xdd, {0x8, 0xb, 0x1, 0x0, 0x1, 0x9, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x2, 0x34, 0xa}, [@processing_unit={0x11, 0x24, 0x8, 0x2, 0x1, [0x3, 0x1, 0x1, 0x1, 0x0, 0x1]}, @effect_unit={0x13, 0x24, 0x7, 0x6, 0x2, 0x5, [0x3, 0x2, 0x2, 0x3, 0x3, 0x2]}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x26, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x2, 0x0, 0x5, 0x83a, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x55, 0x0, 0x9, {0x8, 0x25, 0x1, 0x82, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x10, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x3, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x2, 0x8, {0x8, 0x25, 0x1, 0x0, 0xf, 0xc, 0x4f7e}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x8, 0x9, 0x6, 0x8, 0x2}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0xee, &(0x7f0000000400)=@string={0xee, 0x3, "1a567f7204a06f76e675e1585abafe9f1cbd5abbd35f9e9c4a438a17850792bc3268b0f5ceaed2fe38e97e9761b6803950b95a88e33e205fc166384fce9f86015b5bdc242a415efeb7351fb28842fe79b4f8519e52ea5836bd6e41a8f4570745dddb82d2d52fda7e25e848c5d59242e2dbf4509dcbd50474f296fb7d20274bbe13ef2d80e0dd1f3d795ca2450f4fcc63e6aa6237e432910781abf63cb0f0eaa631549dcbbda06bb581c5098098d0bc6ba22d1d33050a12cd5ad58ce5c8d946c4acaa3827b6fccd8af9eb589f03bc31b9761b9058ca2bf801c7f8994bad1bf88cebe054c006db2bd3278deca1"}}]}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff97f, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x10}}) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000011}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) write$input_event(r7, &(0x7f0000000140)={{}, 0x3, 0x3, 0x5}, 0x10) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) r8 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb807ca007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000) 245.625973ms ago: executing program 2 (id=102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210020000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="c9", 0x1) close(r1) write$binfmt_script(r2, 0x0, 0xd9) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x1b}) syz_usb_control_io$hid(r0, 0x0, 0x0) 25.74583ms ago: executing program 0 (id=103): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 0 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x1, 0x40, [0xfffffffffffffff9, 0x0, 0x4, 0xffffffffffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe2}]}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:40182' (ED25519) to the list of known hosts. [ 42.089721][ T5683] cgroup: Unknown subsys name 'net' [ 42.268003][ T5683] cgroup: Unknown subsys name 'cpuset' [ 42.271863][ T5683] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.221354][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.409851][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.413464][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.416729][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.418651][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.419914][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.422191][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.424600][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.427330][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.431427][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.432281][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.434565][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.436589][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.437469][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.438909][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.439024][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.440034][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.442091][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.444358][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.456327][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.460938][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.100207][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.104982][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.108201][ T5734] bridge_slave_0: entered allmulticast mode [ 48.112365][ T5734] bridge_slave_0: entered promiscuous mode [ 48.164355][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.167580][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.170963][ T5733] bridge_slave_0: entered allmulticast mode [ 48.175025][ T5733] bridge_slave_0: entered promiscuous mode [ 48.180348][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.183385][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.185774][ T5734] bridge_slave_1: entered allmulticast mode [ 48.188398][ T5734] bridge_slave_1: entered promiscuous mode [ 48.191161][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.193604][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.195955][ T5732] bridge_slave_0: entered allmulticast mode [ 48.198603][ T5732] bridge_slave_0: entered promiscuous mode [ 48.211259][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.213754][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.217138][ T5733] bridge_slave_1: entered allmulticast mode [ 48.220419][ T5733] bridge_slave_1: entered promiscuous mode [ 48.237619][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.240150][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.242893][ T5732] bridge_slave_1: entered allmulticast mode [ 48.246790][ T5732] bridge_slave_1: entered promiscuous mode [ 48.249956][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.252884][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.255931][ T5731] bridge_slave_0: entered allmulticast mode [ 48.258901][ T5731] bridge_slave_0: entered promiscuous mode [ 48.283403][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.286709][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.289185][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.291565][ T5731] bridge_slave_1: entered allmulticast mode [ 48.294351][ T5731] bridge_slave_1: entered promiscuous mode [ 48.306404][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.318020][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.327920][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.337750][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.343024][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.354106][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.374013][ T5734] team0: Port device team_slave_0 added [ 48.386776][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.401693][ T5734] team0: Port device team_slave_1 added [ 48.404464][ T5733] team0: Port device team_slave_0 added [ 48.414299][ T5732] team0: Port device team_slave_0 added [ 48.423641][ T5733] team0: Port device team_slave_1 added [ 48.433148][ T5732] team0: Port device team_slave_1 added [ 48.457037][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.459413][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.469646][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.485916][ T5731] team0: Port device team_slave_0 added [ 48.497175][ T5731] team0: Port device team_slave_1 added [ 48.499440][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.502409][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.510794][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.526884][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.529229][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.539187][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.549871][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.552156][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.560703][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.565386][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.567540][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.575567][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.582987][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.585596][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.595557][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.606883][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.609170][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.617217][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.623035][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.626072][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.636454][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.701750][ T5731] hsr_slave_0: entered promiscuous mode [ 48.704238][ T5731] hsr_slave_1: entered promiscuous mode [ 48.720048][ T5734] hsr_slave_0: entered promiscuous mode [ 48.722443][ T5734] hsr_slave_1: entered promiscuous mode [ 48.724715][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.727238][ T5734] Cannot create hsr debugfs directory [ 48.734408][ T5733] hsr_slave_0: entered promiscuous mode [ 48.737606][ T5733] hsr_slave_1: entered promiscuous mode [ 48.740429][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.742799][ T5733] Cannot create hsr debugfs directory [ 48.784169][ T5732] hsr_slave_0: entered promiscuous mode [ 48.786995][ T5732] hsr_slave_1: entered promiscuous mode [ 48.789258][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.791163][ T5732] Cannot create hsr debugfs directory [ 49.054796][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.061062][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.064059][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.069330][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.072791][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.078069][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.080783][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.084835][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.132962][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.139082][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.142837][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.149988][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.153776][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.159889][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.163857][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.169534][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.218026][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.223070][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.229249][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.233679][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.241301][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.247298][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.250087][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.254076][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.302285][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.306599][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.309431][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.313171][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.315915][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.319783][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.322564][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.326484][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.365849][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.381300][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.393739][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.407361][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.409918][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.419153][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.421227][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.424562][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.440528][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.442837][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.468392][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.472677][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.475142][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.487989][ T64] Bluetooth: hci0: command tx timeout [ 49.488242][ T5092] Bluetooth: hci3: command tx timeout [ 49.488250][ T5738] Bluetooth: hci2: command tx timeout [ 49.490339][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.495970][ T5092] Bluetooth: hci1: command tx timeout [ 49.536973][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.540498][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.555234][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.557553][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.565791][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.568137][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.577244][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.580160][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.594165][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.597123][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.850746][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.864069][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.900047][ T5731] veth0_vlan: entered promiscuous mode [ 49.913670][ T5731] veth1_vlan: entered promiscuous mode [ 49.923856][ T5733] veth0_vlan: entered promiscuous mode [ 49.934535][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.940385][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.947168][ T5733] veth1_vlan: entered promiscuous mode [ 49.974194][ T5731] veth0_macvtap: entered promiscuous mode [ 49.993078][ T5731] veth1_macvtap: entered promiscuous mode [ 49.997439][ T5732] veth0_vlan: entered promiscuous mode [ 50.000550][ T5733] veth0_macvtap: entered promiscuous mode [ 50.006211][ T5734] veth0_vlan: entered promiscuous mode [ 50.010844][ T5732] veth1_vlan: entered promiscuous mode [ 50.019109][ T5733] veth1_macvtap: entered promiscuous mode [ 50.024562][ T5734] veth1_vlan: entered promiscuous mode [ 50.029943][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.040767][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.049081][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.053989][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.076069][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092504][ T5732] veth0_macvtap: entered promiscuous mode [ 50.097462][ T5734] veth0_macvtap: entered promiscuous mode [ 50.103504][ T5734] veth1_macvtap: entered promiscuous mode [ 50.112723][ T5732] veth1_macvtap: entered promiscuous mode [ 50.136410][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.144048][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.151827][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.170121][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.177771][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.180368][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.211879][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.215255][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.239057][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.241950][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.273096][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.276062][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.299083][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.302838][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.312695][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.315080][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.315555][ T5731] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.345099][ T5733] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.350762][ T5731] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.353351][ T5733] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.357063][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.363437][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.370731][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.374306][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.378516][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.386308][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.389235][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.392384][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.400921][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.455625][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.462212][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.485448][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.497488][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.517385][ T5887] lo speed is unknown, defaulting to 1000 [ 50.520213][ T5887] lo speed is unknown, defaulting to 1000 [ 50.524445][ T5887] lo speed is unknown, defaulting to 1000 [ 50.527612][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.531649][ T5887] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 50.537268][ T5887] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 50.543476][ T5887] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 50.553218][ T5887] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 50.563674][ T5887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.566761][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.575590][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.581789][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.590672][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.592593][ T42] audit: type=1800 audit(1786154636.414:2): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="attr_allow_any_host" dev="configfs" ino=8883 res=0 errno=0 [ 50.597170][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.610960][ T5887] lo speed is unknown, defaulting to 1000 [ 50.616994][ T5887] lo speed is unknown, defaulting to 1000 [ 50.621715][ T5887] lo speed is unknown, defaulting to 1000 [ 50.624371][ T5887] lo speed is unknown, defaulting to 1000 [ 50.638700][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656853][ T5890] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 50.661585][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.858321][ T852] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.993407][ T5904] Invalid ELF header magic: != ELF [ 51.080272][ T852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.087469][ T852] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.099084][ T852] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 51.113309][ T852] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 51.142011][ T852] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.151053][ T852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.160558][ T852] usb 7-1: Product: syz [ 51.163872][ T852] usb 7-1: Manufacturer: syz [ 51.170038][ T852] usb 7-1: SerialNumber: syz [ 51.275539][ T852] cdc_mbim 7-1:1.0: skipping garbage [ 51.565616][ T5092] Bluetooth: hci2: command tx timeout [ 51.566400][ T64] Bluetooth: hci1: command tx timeout [ 51.575410][ T5092] Bluetooth: hci3: command tx timeout [ 51.576358][ T64] Bluetooth: hci0: command tx timeout [ 51.597847][ T5889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.281955][ T5889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.554846][ T852] cdc_mbim 7-1:1.0: bind() failure [ 52.578796][ T852] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 52.585929][ T852] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 52.599979][ T852] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 52.615612][ T852] usb 7-1: USB disconnect, device number 2 [ 52.670740][ T5889] libceph: resolve '400' (ret=-3): failed [ 53.645482][ T64] Bluetooth: hci0: command tx timeout [ 53.647313][ T64] Bluetooth: hci1: command tx timeout [ 53.649035][ T64] Bluetooth: hci3: command tx timeout [ 53.650744][ T64] Bluetooth: hci2: command tx timeout [ 53.740877][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 54.071469][ T5938] tipc: Started in network mode [ 54.073305][ T5938] tipc: Node identity 0010000000000000002, cluster identity 1 [ 54.089380][ T5938] Invalid ELF header magic: != ELF [ 54.103215][ T5938] overlayfs: overlapping lowerdir path [ 54.200342][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.418338][ T10] usb 8-1: device descriptor read/64, error -71 [ 54.615383][ T5944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'. [ 54.622366][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.626885][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.675382][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.829637][ T5952] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 54.858439][ T10] usb 8-1: device descriptor read/64, error -71 [ 54.966882][ T10] usb usb8-port1: attempt power cycle [ 55.445689][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.472480][ T10] usb 8-1: device descriptor read/8, error -71 [ 55.725426][ T5092] Bluetooth: hci2: command tx timeout [ 55.726292][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 55.726521][ T5738] Bluetooth: hci1: command tx timeout [ 55.726553][ T5738] Bluetooth: hci0: command tx timeout [ 55.726598][ T64] Bluetooth: hci3: command tx timeout [ 55.766064][ T10] usb 8-1: device descriptor read/8, error -71 [ 55.887267][ T10] usb usb8-port1: unable to enumerate USB device [ 56.702008][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.713343][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.721816][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.729504][ T5973] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 56.739620][ T5973] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 56.745166][ T5973] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 56.782893][ T5973] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 56.807483][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.810719][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.819265][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 56.823404][ T5973] wlan0 speed is unknown, defaulting to 1000 [ 57.628978][ T6011] process 'syz.2.23' launched './file2' with NULL argv: empty string added [ 57.640816][ T6011] kAFS: No cell specified [ 57.646612][ T6013] misc userio: Invalid payload size [ 57.750691][ T6016] Invalid ELF header magic: != ELF [ 57.835413][ T5841] wlan0 speed is unknown, defaulting to 1000 [ 57.954743][ T6018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.956977][ T6018] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 58.008264][ T6018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.010970][ T6018] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 58.027424][ T6018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.029997][ T6018] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 58.038223][ T6018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.041520][ T6018] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 58.984389][ T6069] lo speed is unknown, defaulting to 1000 [ 59.004445][ T6069] wlan0 speed is unknown, defaulting to 1000 [ 60.296489][ T6092] netlink: 188 bytes leftover after parsing attributes in process `syz.1.32'. [ 60.833463][ T42] audit: type=1800 audit(1786154644.653:3): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.35" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 61.023360][ T6106] Zero length message leads to an empty skb [ 61.026442][ T6106] syzkaller0: entered promiscuous mode [ 61.028244][ T6106] syzkaller0: entered allmulticast mode [ 61.369209][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 61.384893][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 61.390323][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 61.396581][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 62.376097][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40'. [ 63.392937][ T42] audit: type=1326 audit(1786154647.213:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.409448][ T42] audit: type=1326 audit(1786154647.223:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.424333][ T42] audit: type=1326 audit(1786154647.223:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.437783][ T42] audit: type=1326 audit(1786154647.223:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.450400][ T42] audit: type=1326 audit(1786154647.223:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.459892][ T42] audit: type=1326 audit(1786154647.223:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.470618][ T42] audit: type=1326 audit(1786154647.243:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.484136][ T42] audit: type=1326 audit(1786154647.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.505087][ T42] audit: type=1326 audit(1786154647.323:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6132 comm="syz.0.43" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 63.647092][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 63.697077][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.43'. [ 64.051351][ T6139] Bluetooth: MGMT ver 1.23 [ 64.264891][ T6152] ipt_rpfilter: unknown options [ 64.296221][ T6154] max out of range [ 65.621612][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.131852][ T6177] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 66.150602][ T10] lo speed is unknown, defaulting to 1000 [ 66.191968][ T6177] loop5: detected capacity change from 0 to 7 [ 66.198984][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.202222][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.204998][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.208019][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.210923][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.213935][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.216676][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.219703][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.224249][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.228171][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.231885][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.235897][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.239421][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.242598][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.245931][ T6177] ldm_validate_partition_table(): Disk read failed. [ 66.250456][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253627][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.257590][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.260648][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.263730][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.266811][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 66.277703][ T6177] Dev loop5: unable to read RDB block 0 [ 66.290339][ T6177] loop5: unable to read partition table [ 66.295758][ T6177] loop5: partition table beyond EOD, truncated [ 66.298366][ T6177] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 66.455167][ T6183] No source specified [ 67.085387][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 67.085402][ T42] audit: type=1326 audit(1786154650.873:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.2.55" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x0 [ 68.170001][ T6205] syzkaller0: entered promiscuous mode [ 68.171900][ T6205] syzkaller0: entered allmulticast mode [ 68.374923][ T6208] openvswitch: netlink: Duplicate key (type 6). [ 68.664326][ T6213] Bluetooth: MGMT ver 1.23 [ 68.697755][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 69.095647][ T6222] capability: warning: `syz.3.63' uses 32-bit capabilities (legacy support in use) [ 69.214105][ T6227] binder: 6226:6227 ioctl c0306201 0 returned -14 [ 69.229946][ T6227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.65'. [ 69.256464][ T6227] Console: switching to colour dummy device 80x25 [ 69.470304][ T6230] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 69.693240][ T6230] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 69.705591][ T6229] bridge_slave_0: left allmulticast mode [ 69.707996][ T6229] bridge_slave_0: left promiscuous mode [ 69.712547][ T6230] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 69.741790][ T6230] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 69.751321][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.759386][ T6230] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 69.786695][ T6230] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 26875 usecs [ 69.876764][ T6229] bridge_slave_1: left allmulticast mode [ 69.883943][ T6229] bridge_slave_1: left promiscuous mode [ 69.892059][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.957250][ T6230] pci 0000:00:01.0: Adding to iommu group 1 [ 69.969326][ T6230] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 69.971638][ T6230] pci 0000:00:01.0: vgaarb: bridge control possible [ 69.973827][ T6230] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 69.998559][ T6230] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 70.023827][ T6230] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 70.039750][ T6230] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 70.071413][ T6230] [drm] Found bochs VGA, ID 0xb0c5. [ 70.073144][ T6230] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 70.142919][ T6230] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 70.295435][ T6229] bond0: (slave bond_slave_0): Releasing backup interface [ 70.427881][ T6229] bond0: (slave bond_slave_1): Releasing backup interface [ 70.485790][ T6229] team0: Port device team_slave_0 removed [ 70.510315][ T6229] team0: Port device team_slave_1 removed [ 70.510907][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.510922][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.520661][ T6230] Console: switching to colour frame buffer device 160x50 [ 70.529750][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.529771][ T6229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.551099][ T6229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.603644][ T6230] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 70.932961][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.935621][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.026110][ T6246] netlink: 'syz.0.69': attribute type 62 has an invalid length. [ 71.056321][ T6248] syzkaller0: entered promiscuous mode [ 71.058160][ T6248] syzkaller0: entered allmulticast mode [ 71.767170][ T6261] 9pnet_virtio: no channels available for device syz [ 71.797407][ T6261] 9p: Bad value for 'rfdno' [ 71.965183][ T42] audit: type=1804 audit(1786154654.780:29): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.74" name="/newroot/18/cgroup.controllers" dev="tmpfs" ino=123 res=1 errno=0 [ 71.980271][ T42] audit: type=1800 audit(1786154654.790:30): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="cgroup.controllers" dev="tmpfs" ino=123 res=0 errno=0 [ 72.327411][ T6268] ubi0: attaching mtd0 [ 72.370223][ T6268] ubi0: scanning is finished [ 72.375392][ T6268] ubi0: empty MTD device detected [ 72.638747][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 72.643338][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 72.647256][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3217 instead [ 72.650739][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5c62 instead [ 72.654113][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 72.659855][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 72.665565][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 72.669201][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 72.673156][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 72.679792][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 72.680801][ T6268] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 72.686352][ T6269] jffs2: Further such events for this erase block will not be printed [ 72.689794][ T6268] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 72.690689][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 72.693083][ T6268] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 72.699299][ T6268] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 72.702424][ T6268] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 72.706040][ T6268] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 72.709457][ T6268] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 389202097 [ 72.713592][ T6268] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 72.719484][ T6277] ubi0: background thread "ubi_bgt0d" started, PID 6277 [ 72.743476][ T6279] 9pnet_virtio: no channels available for device syz [ 72.995373][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 72.998947][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3217 instead [ 73.002362][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5c62 instead [ 73.006515][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 73.009832][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 73.013302][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 73.016988][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 73.020274][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 73.023608][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 73.027281][ T6269] jffs2: Further such events for this erase block will not be printed [ 73.030319][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 73.033653][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 73.037111][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3217 instead [ 73.040480][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x5c62 instead [ 73.043874][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 73.047146][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 73.051229][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3217 instead [ 73.055661][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x5c62 instead [ 73.059565][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 73.063828][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 73.068330][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3217 instead [ 73.072790][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x5c62 instead [ 73.077108][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 73.081518][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 73.085968][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3217 instead [ 73.090378][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x5c62 instead [ 73.094881][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 73.099386][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 73.103868][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3217 instead [ 73.108333][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x5c62 instead [ 73.112875][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 73.117325][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 73.121765][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3217 instead [ 73.125715][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x5c62 instead [ 73.129834][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 73.134218][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 73.138171][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3217 instead [ 73.142596][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x5c62 instead [ 73.155396][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 73.158684][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 73.162022][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3217 instead [ 73.166967][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x5c62 instead [ 73.170288][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 73.173590][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 73.177562][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3217 instead [ 73.180998][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x5c62 instead [ 73.184575][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 73.188417][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 73.191751][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3217 instead [ 73.195034][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x5c62 instead [ 73.200935][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 73.204291][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 73.208380][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3217 instead [ 73.211761][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x5c62 instead [ 73.215219][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 73.218776][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 73.222211][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3217 instead [ 73.225721][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x5c62 instead [ 73.228974][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 73.232458][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 73.236092][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3217 instead [ 73.239330][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x5c62 instead [ 73.242734][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 73.247650][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 73.250904][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3217 instead [ 73.254282][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x5c62 instead [ 73.257939][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 73.261075][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 73.264797][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3217 instead [ 73.268178][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x5c62 instead [ 73.272067][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 73.276028][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 73.279526][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3217 instead [ 73.283158][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x5c62 instead [ 73.287497][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 73.291037][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 73.295024][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3217 instead [ 73.298576][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x5c62 instead [ 73.302469][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 73.306222][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 73.309905][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3217 instead [ 73.313691][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x5c62 instead [ 73.317346][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 73.321384][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 73.325814][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3217 instead [ 73.329993][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x5c62 instead [ 73.334068][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 73.337602][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 73.341105][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3217 instead [ 73.344659][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x5c62 instead [ 73.348400][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 73.351818][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 73.355133][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3217 instead [ 73.358657][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x5c62 instead [ 73.362245][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 73.365683][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 73.368962][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3217 instead [ 73.372350][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x5c62 instead [ 73.375798][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 73.379098][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 73.382521][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3217 instead [ 73.385985][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x5c62 instead [ 73.389323][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 73.392773][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 73.396300][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3217 instead [ 73.399680][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x5c62 instead [ 73.403153][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 73.406587][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 73.409899][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3217 instead [ 73.413536][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x5c62 instead [ 73.416978][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 73.420268][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 73.423708][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3217 instead [ 73.427086][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x5c62 instead [ 73.430431][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 73.433806][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 73.437207][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3217 instead [ 73.440522][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x5c62 instead [ 73.444090][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 73.447433][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 73.450851][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3217 instead [ 73.454250][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x5c62 instead [ 73.457705][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 73.461033][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 73.464472][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3217 instead [ 73.467968][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x5c62 instead [ 73.471850][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 73.476165][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 73.480417][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3217 instead [ 73.484723][ T6269] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x5c62 instead [ 73.488566][ T6269] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 73.492205][ T6269] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 73.632132][ T6285] Set syz0 is full, maxelem 0 reached [ 73.901459][ T6291] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 74.123002][ T6294] siw: device registration error -23 [ 74.186126][ T6297] pim6reg: entered allmulticast mode [ 74.191916][ T6298] ib_srp: QP creation failed for dev syz0: -22 [ 74.336680][ T6292] team0: entered allmulticast mode [ 74.338497][ T6292] team_slave_0: entered allmulticast mode [ 74.340392][ T6292] team_slave_1: entered allmulticast mode [ 74.372847][ T6292] team0: left allmulticast mode [ 74.375007][ T6292] team_slave_0: left allmulticast mode [ 74.378243][ T6292] team_slave_1: left allmulticast mode [ 74.381260][ T6292] pim6reg: left allmulticast mode [ 74.666604][ T42] audit: type=1800 audit(1786154657.490:31): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.89" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 74.777889][ T6314] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 74.779747][ T6314] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 74.785770][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 75.031930][ T6318] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 75.037758][ T6318] netlink: 200 bytes leftover after parsing attributes in process `syz.2.90'. [ 75.078994][ T6318] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 75.110179][ T6318] netlink: 29 bytes leftover after parsing attributes in process `syz.2.90'. [ 75.142700][ T6316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.90'. [ 75.925180][ T42] audit: type=1326 audit(1786154658.740:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.945410][ T42] audit: type=1326 audit(1786154658.750:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.952171][ T42] audit: type=1326 audit(1786154658.760:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.961129][ T42] audit: type=1326 audit(1786154658.760:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.968098][ T42] audit: type=1326 audit(1786154658.760:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.974863][ T42] audit: type=1326 audit(1786154658.760:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.982176][ T42] audit: type=1326 audit(1786154658.760:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.988904][ T42] audit: type=1326 audit(1786154658.760:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 75.996334][ T42] audit: type=1326 audit(1786154658.760:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.2.95" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f56fec code=0x7ffc0000 [ 76.914384][ T6358] Config c1/1 of g1 needs at least one function. [ 76.917420][ T6358] udc dummy_udc.0: failed to start g1: -22 [ 76.919976][ T6358] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 76.928364][ T6358] UDC core: g1: couldn't find an available UDC or it's busy [ 77.225554][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.255434][ T40] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.272352][ T6367] [ 77.273271][ T6367] ====================================================== [ 77.275449][ T6367] WARNING: possible circular locking dependency detected [ 77.278118][ T6367] syzkaller #0 Not tainted [ 77.279691][ T6367] ------------------------------------------------------ [ 77.281855][ T6367] syz.0.104/6367 is trying to acquire lock: [ 77.283755][ T6367] ffffffff901cc5e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 77.286862][ T6367] [ 77.286862][ T6367] but task is already holding lock: [ 77.289130][ T6367] ffff888028b78600 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 77.292146][ T6367] [ 77.292146][ T6367] which lock already depends on the new lock. [ 77.292146][ T6367] [ 77.295226][ T6367] [ 77.295226][ T6367] the existing dependency chain (in reverse order) is: [ 77.298050][ T6367] [ 77.298050][ T6367] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 77.300918][ T6367] lock_acquire+0x1b9/0x370 [ 77.302546][ T6367] down_write+0x8b/0x1f0 [ 77.304130][ T6367] configfs_depend_item_unlocked+0xf3/0x6a0 [ 77.306269][ T6367] usbg_make_tpg+0x261/0x620 [ 77.308223][ T6367] target_fabric_make_tpg+0xab/0x8c0 [ 77.310079][ T6367] configfs_mkdir+0x51e/0xb70 [ 77.311894][ T6367] vfs_mkdir+0x361/0x850 [ 77.313472][ T6367] filename_mkdirat+0x48b/0x5e0 [ 77.315135][ T6367] __ia32_sys_mkdir+0x6a/0x90 [ 77.316810][ T6367] __do_fast_syscall_32+0xe7/0x970 [ 77.318713][ T6367] do_fast_syscall_32+0x32/0x70 [ 77.320382][ T6367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.322511][ T6367] [ 77.322511][ T6367] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 77.324868][ T6367] lock_acquire+0x1b9/0x370 [ 77.326460][ T6367] __mutex_lock+0x1a4/0x1bd0 [ 77.328058][ T6367] tcm_set_name+0x29/0xb0 [ 77.329582][ T6367] function_make+0x21c/0x3f0 [ 77.331201][ T6367] configfs_mkdir+0x51e/0xb70 [ 77.332834][ T6367] vfs_mkdir+0x361/0x850 [ 77.334335][ T6367] filename_mkdirat+0x48b/0x5e0 [ 77.336011][ T6367] __ia32_sys_mkdir+0x6a/0x90 [ 77.337664][ T6367] __do_fast_syscall_32+0xe7/0x970 [ 77.339430][ T6367] do_fast_syscall_32+0x32/0x70 [ 77.341108][ T6367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.343203][ T6367] [ 77.343203][ T6367] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 77.345737][ T6367] check_prev_add+0xeb/0xe60 [ 77.347507][ T6367] __lock_acquire+0x136c/0x1a40 [ 77.349184][ T6367] lock_acquire+0x1b9/0x370 [ 77.350789][ T6367] __mutex_lock+0x1a4/0x1bd0 [ 77.352368][ T6367] configfs_rmdir+0x5ae/0x950 [ 77.354027][ T6367] vfs_rmdir+0x328/0x8a0 [ 77.355527][ T6367] filename_rmdir+0x31a/0x5c0 [ 77.357195][ T6367] __ia32_sys_unlinkat+0xf5/0x130 [ 77.358909][ T6367] __do_fast_syscall_32+0xe7/0x970 [ 77.360655][ T6367] do_fast_syscall_32+0x32/0x70 [ 77.362342][ T6367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.364451][ T6367] [ 77.364451][ T6367] other info that might help us debug this: [ 77.364451][ T6367] [ 77.367636][ T6367] Chain exists of: [ 77.367636][ T6367] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 77.367636][ T6367] [ 77.372351][ T6367] Possible unsafe locking scenario: [ 77.372351][ T6367] [ 77.374655][ T6367] CPU0 CPU1 [ 77.376330][ T6367] ---- ---- [ 77.377988][ T6367] lock(&sb->s_type->i_mutex_key#24); [ 77.379683][ T6367] lock(&opts->dep_lock); [ 77.381852][ T6367] lock(&sb->s_type->i_mutex_key#24); [ 77.384297][ T6367] lock(gadget_subsys.su_mutex); [ 77.385885][ T6367] [ 77.385885][ T6367] *** DEADLOCK *** [ 77.385885][ T6367] [ 77.388752][ T6367] 3 locks held by syz.0.104/6367: [ 77.390310][ T6367] #0: ffff888022aee450 (sb_writers#12){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 77.393244][ T6367] #1: ffff888012e56e80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 77.396734][ T6367] #2: ffff888028b78600 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 77.399833][ T6367] [ 77.399833][ T6367] stack backtrace: [ 77.401716][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 77.401732][ T6367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.401740][ T6367] Call Trace: [ 77.401747][ T6367] [ 77.401753][ T6367] dump_stack_lvl+0x100/0x190 [ 77.401782][ T6367] print_circular_bug.cold+0x178/0x1c7 [ 77.401802][ T6367] check_noncircular+0x146/0x160 [ 77.401823][ T6367] check_prev_add+0xeb/0xe60 [ 77.401841][ T6367] ? __bfs+0x150/0x2a0 [ 77.401857][ T6367] __lock_acquire+0x136c/0x1a40 [ 77.401879][ T6367] lock_acquire+0x1b9/0x370 [ 77.401889][ T6367] ? configfs_rmdir+0x5ae/0x950 [ 77.401903][ T6367] ? __pfx___might_resched+0x10/0x10 [ 77.401919][ T6367] ? __lock_acquire+0x49f/0x1a40 [ 77.401936][ T6367] __mutex_lock+0x1a4/0x1bd0 [ 77.401953][ T6367] ? configfs_rmdir+0x5ae/0x950 [ 77.401966][ T6367] ? configfs_rmdir+0x5ae/0x950 [ 77.401979][ T6367] ? reacquire_held_locks+0xce/0x1e0 [ 77.401989][ T6367] ? __pfx___mutex_lock+0x10/0x10 [ 77.402004][ T6367] ? do_raw_spin_lock+0x128/0x260 [ 77.402016][ T6367] ? find_held_lock+0x2b/0x80 [ 77.402029][ T6367] ? fast_dput+0x2fe/0x6d0 [ 77.402044][ T6367] ? _raw_spin_unlock+0x28/0x50 [ 77.402056][ T6367] ? fast_dput+0x168/0x6d0 [ 77.402070][ T6367] ? configfs_rmdir+0x5ae/0x950 [ 77.402082][ T6367] configfs_rmdir+0x5ae/0x950 [ 77.402097][ T6367] ? __pfx_configfs_rmdir+0x10/0x10 [ 77.402110][ T6367] ? __pfx_down_write+0x10/0x10 [ 77.402126][ T6367] vfs_rmdir+0x328/0x8a0 [ 77.402141][ T6367] filename_rmdir+0x31a/0x5c0 [ 77.402153][ T6367] ? __pfx_filename_rmdir+0x10/0x10 [ 77.402167][ T6367] ? do_getname+0x191/0x390 [ 77.402180][ T6367] __ia32_sys_unlinkat+0xf5/0x130 [ 77.402193][ T6367] __do_fast_syscall_32+0xe7/0x970 [ 77.402208][ T6367] ? lockdep_hardirqs_on+0x78/0x100 [ 77.402222][ T6367] do_fast_syscall_32+0x32/0x70 [ 77.402238][ T6367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 77.402253][ T6367] RIP: 0023:0xf6ffefec [ 77.402269][ T6367] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 77.402274][ T6367] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 77.402285][ T6367] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000340 [ 77.402291][ T6367] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.402297][ T6367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.402303][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.402309][ T6367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 77.402318][ T6367] [ 77.455511][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 77.486574][ T5839] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 85, changing to 7 [ 77.491690][ T5839] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 77.494892][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.497650][ T5839] usb 6-1: Product: syz [ 77.499737][ T5839] usb 6-1: Manufacturer: 嘚牿ꀄ癯痦壡멚鿾봜뭚忓鲞䍊ដޅ벒栲껎ﻒ靾뙡㦀륐衚㻣张曁伸鿎Ɔ孛ⓜ䄪﹞㖷눟䊈秾鹑㙘溽ꡁ埴䔇튂⿕绚안鋕鵐헋琄雲緻✠빋耭㴟屹䖢伏揌ꫦ㝢㋤ޑꮁ㳶ꛪ吱쮝ꂽ땫얁耉킘殼ⶢ㌝ਅ촒핚쑆ꪬ✸ﲶ諍齘밃뤱᭶墐⯊Ǹ䮙ᮭ賸쁔팫货ꇬ [ 77.511127][ T5839] usb 6-1: SerialNumber: syz [ 77.512849][ T40] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.516646][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.520303][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.523403][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.528324][ T40] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.531867][ T40] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.534565][ T40] usb 7-1: Manufacturer: syz [ 77.537419][ T40] usb 7-1: config 0 descriptor?? [ 77.747575][ T6360] uinput: write device info first [ 77.752533][ T6360] netlink: 'syz.1.101': attribute type 21 has an invalid length. [ 77.755429][ T6360] netlink: 128 bytes leftover after parsing attributes in process `syz.1.101'. [ 77.759084][ T6360] netlink: 3 bytes leftover after parsing attributes in process `syz.1.101'. [ 77.766341][ T5839] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 77.780340][ T5839] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.791392][ T5839] usb 6-1: USB disconnect, device number 2 [ 77.799379][ T5886] udevd[5886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.099829][ T6362] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 78.110348][ T40] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 78.114122][ T40] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 80.206554][ T29] usb 7-1: USB disconnect, device number 3 [ 81.168220][ T55] cfg80211: failed to load regulatory.db