last executing test programs: 6m9.996538711s ago: executing program 0 (id=159): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 6m8.770603209s ago: executing program 0 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000140)='./file0\x00') setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) 6m8.631089092s ago: executing program 0 (id=154): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x37f, 0x148, 0x110, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e24], [0x4e20, 0x4e24], 0x8, 0x2, 0x1, 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000400)={0x2, 0x2000, 0x0, 'queue0\x00', 0x401}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a8008000400050000001400020029"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x1411, 0x8, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40890) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6m8.100676405s ago: executing program 0 (id=155): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m7.777749699s ago: executing program 0 (id=157): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) epoll_create1(0x0) syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) syz_usb_disconnect(0xffffffffffffffff) select(0x40, &(0x7f0000001040)={0x7, 0x1, 0x1, 0x7fffffff, 0x5, 0x101, 0x3, 0x5}, 0x0, &(0x7f00000010c0)={0x19, 0x4, 0x3, 0x8001, 0x99, 0x1, 0xc, 0x6}, &(0x7f0000001100)={0x0, 0xea60}) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 6m7.376210378s ago: executing program 0 (id=161): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) 6m7.004207749s ago: executing program 32 (id=161): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) 6m0.581773976s ago: executing program 4 (id=190): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5m59.568832923s ago: executing program 4 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000002440)=[{&(0x7f0000002280)="fae5948470c2d2c65da057c0e31c3feed808848ade53583016107fcfd36df89607b7421a421f3887", 0x28}], 0x1, 0x8) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffe, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) 5m59.447425866s ago: executing program 4 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 5m59.332152225s ago: executing program 4 (id=197): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m58.870707086s ago: executing program 4 (id=200): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r2}, './file0\x00'}) 5m58.628110731s ago: executing program 4 (id=202): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0x20, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r1, 0x0, 0x30}]) 5m43.061185016s ago: executing program 33 (id=202): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000280)='./file1\x00', 0x20, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r1, 0x0, 0x30}]) 3m15.73124154s ago: executing program 6 (id=837): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}}, 0x0) 3m11.661252767s ago: executing program 6 (id=845): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x181) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3m9.829897378s ago: executing program 6 (id=852): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000"/34], 0xffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 3m7.685941665s ago: executing program 6 (id=860): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 3m6.47997576s ago: executing program 6 (id=862): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000780)='!', 0x6}]) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) 3m5.840308056s ago: executing program 6 (id=869): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000001300)=""/135, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 3m4.58993765s ago: executing program 34 (id=869): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000001300)=""/135, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 12.125712811s ago: executing program 7 (id=1416): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x40000000002, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 10.631637416s ago: executing program 5 (id=1421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}, {0x3f00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) 9.184389744s ago: executing program 2 (id=1422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x100}) semget$private(0x0, 0x4000000009, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@local, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x1, 0x3, 0x7, 0x7f}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000) 8.430229902s ago: executing program 5 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 8.429133713s ago: executing program 1 (id=1424): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000000000002000000000000000000000000000004"], &(0x7f0000000280)=""/265, 0x3e, 0x109, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xab}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r4, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@empty, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xff, 0x21, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6, "6a31f8", 0x7f, "290f61"}}}}}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x301, 0x0, 0xffffffff}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) 8.427569026s ago: executing program 7 (id=1425): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.117897948s ago: executing program 1 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 8.117146537s ago: executing program 2 (id=1427): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.856474307s ago: executing program 1 (id=1428): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 6.320379558s ago: executing program 7 (id=1429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) 5.464446668s ago: executing program 7 (id=1431): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r1, &(0x7f0000000300)="0113", 0x2) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) sendmmsg$sock(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)='m', 0xff7e}, {&(0x7f0000001b40)="9028c4de831acc6ba627fe0b9016b2", 0xf}], 0x2}}], 0x1, 0x4000000) 5.077389707s ago: executing program 2 (id=1432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.041452492s ago: executing program 3 (id=1433): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 4.817046915s ago: executing program 1 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000480)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xf, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x0, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x2000, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x0, 0xe, 0xfe, 0x0, 0xff}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0x5000}, 0xddf8ffdb, 0x0, 0x8080000, 0x12, 0x0, 0xf801, 0x0, [0x98fe, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)) 4.801132178s ago: executing program 3 (id=1435): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x21e0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setreuid(0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) listen(0xffffffffffffffff, 0xe63) mlock(&(0x7f0000ff8000/0x1000)=nil, 0x1000) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.765411433s ago: executing program 2 (id=1436): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/49, 0x0, 0x6000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x17, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 3.664307734s ago: executing program 7 (id=1437): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x656}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev}, {@multicast2}, {@private=0xa010101}, {@broadcast, 0x52b1}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.663880507s ago: executing program 3 (id=1438): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r2}, &(0x7f0000000d80), &(0x7f0000000dc0)=r3}, 0x20) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x201, 0x0, 0x9, 0xb7, 0x20, @link_local}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'gre0\x00', {0x2, 0xffff, @broadcast}}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000001c0)='p', 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000000)={'gre0\x00', {0x2, 0x0, @broadcast}}) 3.548595621s ago: executing program 5 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000080)={0x0, {0x5, 0x4}}) r1 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', r1, 0x0, 0x0) write$usbip_server(r1, &(0x7f0000000100)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x5}, {0x1}}, 0x30) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) 3.545110688s ago: executing program 1 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.547011888s ago: executing program 1 (id=1441): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x23b) 2.530050606s ago: executing program 3 (id=1442): creat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec7, 0x3, 0x5, 0x40, 0x0, 0x1, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0xfffffffe, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb6, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x9, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x2, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0x0, 0x0, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238cc, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0x1, 0x0, 0x40, 0x0, 0x21, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x0, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x203, 0x0, 0xd63, 0x400006, 0x0, 0x0, 0xfffffffc, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xfffffffc]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r4, 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 2.447748707s ago: executing program 5 (id=1443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = userfaultfd(0x801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r3, 0x0, 0x18) getpid() r4 = dup(r0) read$usbfs(r4, &(0x7f0000000000)=""/161, 0xa1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000010400)={0x0, 0x614, 0x1ff, 0xfffffffd, 0x9, "972c700500141000000000002000052c707400"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) 1.271072753s ago: executing program 5 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) 1.216384709s ago: executing program 7 (id=1445): socket$inet6(0x10, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 1.173663371s ago: executing program 2 (id=1446): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e0000000400000004000000030000"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), &(0x7f0000000140)=@tcp=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100000000fcdbdf2500000000", @ANYRES32=r4], 0x20}}, 0x20008040) 1.17289198s ago: executing program 3 (id=1447): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x4) epoll_create1(0x0) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 289.818352ms ago: executing program 5 (id=1448): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0xfffffffffffffdb5, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x0, 0x0) 150.131184ms ago: executing program 3 (id=1449): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000010c0)=0xffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) socket(0x25, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=@newchain={0x24, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0xfff2, 0x5}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 0s ago: executing program 2 (id=1450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="66bad004ec66baf80cb8e44eda8def66bafc0cb886e90000effdd93ac744240000980000c74424029100c0fe0f01cb0f011c24c74424002b010000c74424020d000000ff2c243e65f3420f0936262626460f01cf260f01c966b8e7008ec867d9e9", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000240)={0x190003, 0x0, [0x8, 0xc24c, 0x0, 0x8, 0x8, 0x4e4, 0xe30351e, 0x5]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xbf000}}, &(0x7f0000000040)='GPL\x00', 0x1, 0xeb, &(0x7f0000000280)=""/235, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x6, 0x10000}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000140)=[{0x1, 0x2, 0xa, 0x5}, {0x3, 0x5, 0xd, 0x8}, {0x4, 0x3, 0xe, 0x6}, {0x1, 0x3, 0xd, 0x8}, {0x0, 0x3, 0x1}, {0x0, 0x1, 0x9, 0x3}], 0x10, 0x4, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 97][ T5836] Bluetooth: hci0: command tx timeout [ 107.834918][ T6491] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 108.132055][ T6494] netlink: 'syz.2.182': attribute type 4 has an invalid length. [ 108.195818][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.220582][ T6433] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.242195][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.249388][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.367500][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.375524][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.481850][ T6433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.493154][ T6433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.026474][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.105658][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.176545][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 109.213237][ T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.286554][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.294638][ T25] usb 3-1: Product: syz [ 109.298931][ T25] usb 3-1: Manufacturer: syz [ 109.303541][ T25] usb 3-1: SerialNumber: syz [ 109.331908][ T25] usb 3-1: config 0 descriptor?? [ 109.561804][ T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 109.750406][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.189'. [ 109.762082][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 109.876622][ T5836] Bluetooth: hci0: command tx timeout [ 109.892502][ T6433] veth0_vlan: entered promiscuous mode [ 109.966770][ T6433] veth1_vlan: entered promiscuous mode [ 110.050584][ T6433] veth0_macvtap: entered promiscuous mode [ 110.071021][ T6433] veth1_macvtap: entered promiscuous mode [ 110.103421][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.119469][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.130080][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.141011][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.151160][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.162065][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.183333][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.215291][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.236270][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.250667][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.261424][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.278786][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.293534][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.313561][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.342938][ T6433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.353355][ T6433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.364662][ T6433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.373954][ T6433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.509770][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.517929][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.615666][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.627419][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.089814][ T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 111.152105][ T25] usb 3-1: USB disconnect, device number 4 [ 111.247160][ T6552] kvm: pic: non byte write [ 111.814354][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 111.825468][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 111.959309][ T5836] Bluetooth: hci0: command tx timeout [ 112.608990][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 112.617734][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 112.628741][ T5836] Bluetooth: hci2: hardware error 0x00 [ 112.971939][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 112.971957][ T29] audit: type=1326 audit(1734762404.249:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.020132][ T6576] fuse: Unknown parameter '0x0000000000000004' [ 113.026648][ T29] audit: type=1326 audit(1734762404.289:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.076439][ T29] audit: type=1326 audit(1734762404.289:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.212928][ T29] audit: type=1326 audit(1734762404.289:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.235226][ T29] audit: type=1326 audit(1734762404.289:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.266401][ T29] audit: type=1326 audit(1734762404.289:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.339581][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.207'. [ 113.492448][ T29] audit: type=1326 audit(1734762404.289:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.770948][ T29] audit: type=1326 audit(1734762404.289:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 113.936065][ T29] audit: type=1326 audit(1734762404.289:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 114.011383][ T29] audit: type=1326 audit(1734762404.289:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6575 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 114.556774][ T6596] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 114.581139][ T6596] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 114.756640][ T5820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.757155][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 115.040622][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.124419][ T5820] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.350962][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.360227][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.214'. [ 115.418286][ T5820] usb 2-1: config 0 descriptor?? [ 115.899162][ T5820] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 115.920527][ T5820] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input7 [ 115.984672][ T6614] kvm: pic: non byte write [ 116.039549][ T5820] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 116.123422][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.134237][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.353644][ T25] usb 2-1: USB disconnect, device number 4 [ 116.805560][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 116.968913][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.988179][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.008720][ T58] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 117.066436][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.099077][ T58] usb 6-1: config 0 descriptor?? [ 117.530326][ T6620] netlink: 'syz.5.220': attribute type 1 has an invalid length. [ 117.733691][ T58] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 117.745848][ T58] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 117.757261][ T58] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 117.955022][ T8] usb 6-1: USB disconnect, device number 2 [ 119.185151][ T6662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.363156][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 119.405022][ T6666] bridge_slave_1: left allmulticast mode [ 119.433708][ T6666] bridge_slave_1: left promiscuous mode [ 119.441106][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.463635][ T6666] bridge_slave_0: left allmulticast mode [ 119.476571][ T6666] bridge_slave_0: left promiscuous mode [ 119.485403][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.906611][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.270244][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.383536][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.584037][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.604192][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.626586][ T8] usb 2-1: SerialNumber: syz [ 121.858206][ T8] usb 2-1: 0:2 : does not exist [ 122.146806][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.291744][ T5901] usb 2-1: USB disconnect, device number 5 [ 122.309079][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.327270][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.343961][ T5872] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 122.354357][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.370669][ T5872] usb 3-1: config 0 descriptor?? [ 122.839895][ T974] iguanair 5-1:0.0: failed to get version [ 122.846510][ T974] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 122.903530][ T974] usb 5-1: USB disconnect, device number 2 [ 122.995193][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 123.014354][ T6708] binder: 6707:6708 ioctl c0306201 20000680 returned -14 [ 123.032033][ T5872] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 123.055743][ T5872] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 123.070796][ T5872] usb 3-1: USB disconnect, device number 5 [ 123.091421][ T6704] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.265997][ T6704] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.402384][ T6704] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.500458][ T6704] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.689874][ T6704] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.752186][ T6704] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.835436][ T6704] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.860764][ T6704] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.536418][ T6747] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 125.575736][ T6747] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 126.713747][ T6754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.788411][ T6754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.900421][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.5.272'. [ 127.975807][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.985058][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.061344][ T6754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.085166][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.107397][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.127206][ T5826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.134799][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.395753][ T6754] bond0: (slave netdevsim0): Releasing backup interface [ 128.405456][ T6754] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 128.420162][ T6754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.627054][ T6754] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.818009][ T6754] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.932886][ T6754] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.993155][ T6754] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.196492][ T5836] Bluetooth: hci5: command tx timeout [ 131.519645][ T6774] chnl_net:caif_netlink_parms(): no params data found [ 131.738077][ T69] bridge_slave_1: left allmulticast mode [ 131.752707][ T69] bridge_slave_1: left promiscuous mode [ 131.772791][ T6831] netlink: 'syz.5.290': attribute type 10 has an invalid length. [ 131.785381][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.819119][ T69] bridge_slave_0: left allmulticast mode [ 131.830682][ T69] bridge_slave_0: left promiscuous mode [ 131.837801][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.290'. [ 131.842847][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.277339][ T5836] Bluetooth: hci5: command tx timeout [ 133.089398][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.095712][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.859633][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.870183][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.885076][ T69] bond0 (unregistering): Released all slaves [ 133.931990][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.940497][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.987817][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.994952][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.002453][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.009626][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.044206][ T6831] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.076791][ T6833] bridge_slave_1: left allmulticast mode [ 134.082651][ T6833] bridge_slave_1: left promiscuous mode [ 134.092929][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.105573][ T6833] bridge_slave_0: left allmulticast mode [ 134.116512][ T6833] bridge_slave_0: left promiscuous mode [ 134.123296][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.186679][ T6833] bond0: (slave bridge0): Releasing backup interface [ 134.338678][ T6840] warning: `syz.1.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.378163][ T5836] Bluetooth: hci5: command tx timeout [ 134.495547][ T6838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.707772][ T6866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.300'. [ 134.722513][ T6838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.723560][ T6866] unsupported nlmsg_type 40 [ 134.766617][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.784411][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.794224][ T6774] bridge_slave_0: entered allmulticast mode [ 134.803049][ T6774] bridge_slave_0: entered promiscuous mode [ 134.870122][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.880449][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.905356][ T6774] bridge_slave_1: entered allmulticast mode [ 134.920812][ T6774] bridge_slave_1: entered promiscuous mode [ 134.992063][ T6838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.092204][ T6838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.132191][ T6774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.153993][ T6774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.199435][ T69] hsr_slave_0: left promiscuous mode [ 135.206058][ T69] hsr_slave_1: left promiscuous mode [ 135.214579][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.237427][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.384094][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.437038][ T5836] Bluetooth: hci5: command tx timeout [ 136.792868][ T69] team0 (unregistering): Port device team_slave_1 removed [ 136.842699][ T69] team0 (unregistering): Port device team_slave_0 removed [ 137.255764][ T6903] sit1: entered promiscuous mode [ 137.271348][ T6903] sit1: entered allmulticast mode [ 137.314238][ T6774] team0: Port device team_slave_0 added [ 137.326862][ T6774] team0: Port device team_slave_1 added [ 137.480066][ T6838] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.495410][ T6838] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.507319][ T6838] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.518860][ T6838] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.553146][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.560599][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.586548][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.592848][ T6774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.605595][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.612886][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.638793][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.645425][ T6774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.861235][ T6774] hsr_slave_0: entered promiscuous mode [ 137.884884][ T6774] hsr_slave_1: entered promiscuous mode [ 137.903184][ T6774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.924090][ T6774] Cannot create hsr debugfs directory [ 137.956695][ T5901] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 138.037056][ T25] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 138.106561][ T5916] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.118129][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.143225][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.163662][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.180915][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.194426][ T6774] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.198606][ T5901] usb 4-1: Product: syz [ 138.217795][ T5901] usb 4-1: Manufacturer: syz [ 138.229275][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.241199][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.244747][ T6774] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.252874][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.267742][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.275064][ T5901] usb 4-1: SerialNumber: syz [ 138.276103][ T25] usb 2-1: Product: syz [ 138.290694][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.311107][ T5916] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 138.322733][ T25] usb 2-1: Manufacturer: syz [ 138.332848][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.343077][ T25] usb 2-1: SerialNumber: syz [ 138.366062][ T5916] usb 6-1: config 0 descriptor?? [ 138.383889][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 138.400659][ T6774] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.450531][ T6774] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.504855][ T5901] usb 4-1: 0:2 : does not exist [ 138.534619][ T5901] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 138.611289][ T25] usb 2-1: 0:2 : does not exist [ 138.627750][ T5901] usb 4-1: USB disconnect, device number 3 [ 138.633299][ T25] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 138.719843][ T6774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.728406][ T25] usb 2-1: USB disconnect, device number 6 [ 138.826542][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.852202][ T6774] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.866800][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 138.887035][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 138.898064][ T6557] udevd[6557]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.927964][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 138.936187][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.943377][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.946248][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 138.961374][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 138.978347][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.985517][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.003415][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 139.014739][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 139.052115][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 139.288148][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 139.318082][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 139.346570][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 139.388288][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 139.411550][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 139.447155][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 139.483127][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.523567][ T5916] pwc: Registered as video103. [ 139.553861][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 139.637624][ T5916] usb 6-1: USB disconnect, device number 3 [ 139.719268][ T6774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.756518][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 139.882702][ T6964] bridge0: port 1(bridge_slave_1) entered blocking state [ 139.943447][ T6964] bridge0: port 1(bridge_slave_1) entered disabled state [ 139.962492][ T6964] bridge_slave_1: entered allmulticast mode [ 139.994423][ T6964] bridge_slave_1: entered promiscuous mode [ 140.242551][ T6984] process 'syz.1.325' launched './file0' with NULL argv: empty string added [ 140.808910][ T6774] veth0_vlan: entered promiscuous mode [ 140.905722][ T6774] veth1_vlan: entered promiscuous mode [ 141.021891][ T6774] veth0_macvtap: entered promiscuous mode [ 141.066736][ T6774] veth1_macvtap: entered promiscuous mode [ 141.640232][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.652477][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.662781][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.676392][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.686471][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.705986][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.716279][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.727522][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.740350][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.750085][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.760612][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.776556][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.787080][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.797014][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.807526][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.817430][ T6774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.827985][ T6774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.839916][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.867955][ T7017] netlink: 92 bytes leftover after parsing attributes in process `syz.3.333'. [ 142.104994][ T6774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.115332][ T6774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.936413][ T6774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.945164][ T6774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.447273][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.455138][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.255136][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.404320][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.599840][ T7060] syz.1.343 uses obsolete (PF_INET,SOCK_PACKET) [ 146.448573][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 147.065129][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 147.197207][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.210293][ T9] usb 6-1: config 1 has no interface number 1 [ 147.216625][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 147.237789][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.281295][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.292889][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.346516][ T9] usb 6-1: Product: syz [ 147.350724][ T9] usb 6-1: Manufacturer: syz [ 147.368024][ T7083] kvm: pic: level sensitive irq not supported [ 147.380423][ T9] usb 6-1: SerialNumber: syz [ 148.065308][ T9] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 148.646491][ T9] usb 6-1: USB disconnect, device number 4 [ 148.713791][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'. [ 148.795051][ T7103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'. [ 149.271262][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'. [ 149.346236][ T6557] udevd[6557]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.809139][ T7103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'. [ 150.410115][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 150.593287][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 150.599959][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.607878][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.615679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.623550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.631363][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.639296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.647156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.655042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.662887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.670756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.678583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.686449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.694281][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.702158][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.709974][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.717834][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.725627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.733474][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.741306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.749160][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.756997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.764852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.772663][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.780517][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.788433][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.796339][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.804156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.812019][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.819831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.827687][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.835478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.843349][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.851167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.859048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.866890][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.874756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.882576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.890431][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.898244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.906074][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.913883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.921742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.929586][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.937496][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.945293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.953186][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.961027][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.968883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.976720][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 150.984576][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 150.992387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.000237][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.008047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.015878][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.023689][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.031561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.039372][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.047220][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.055023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.062895][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.070707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.078562][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.086392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.094242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.102081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.109933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.117745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.125579][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.133390][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.141249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.149094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.156998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.164834][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.172732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.180550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.188407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.196203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.204060][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.211875][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.219738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.227550][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.235393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.243203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.252024][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.259880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.267751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.275544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.283425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.291278][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.299144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.306958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.314783][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.322593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.330442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.338251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.346070][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.353875][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.361758][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.369584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.377527][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.385333][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.393240][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.401056][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.408911][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.416721][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.424549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.432355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.440199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.448006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.455830][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.463649][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.471502][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.479311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.487156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.494946][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.502781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.510595][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.518442][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.526232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.534069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.541880][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.549743][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 151.557587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 151.874251][ T974] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 152.198411][ T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.198431][ T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.201451][ T974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.201471][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.201483][ T974] usb 7-1: Product: syz [ 152.201529][ T974] usb 7-1: Manufacturer: syz [ 152.201539][ T974] usb 7-1: SerialNumber: syz [ 152.446875][ T974] usb 7-1: 0:2 : does not exist [ 152.451076][ T974] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 152.478447][ T974] usb 7-1: USB disconnect, device number 2 [ 153.517858][ T6557] udevd[6557]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.041336][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.326420][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 154.333665][ T8] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.360487][ T8] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.393380][ T8] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.454343][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.480766][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 154.510265][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.542689][ T8] usb 4-1: config 0 descriptor?? [ 155.001681][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5010.0004/input/input9 [ 155.037347][ T8] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 156.138309][ C0] kye 0003:0458:5010.0004: usb_submit_urb(ctrl) failed: -1 [ 156.149380][ T9] usb 4-1: USB disconnect, device number 4 [ 157.826115][ T7208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 160.274002][ T7233] binder: transaction release 53 bad handle 1, ret = -22 [ 161.839656][ T7273] serio: Serial port pts0 [ 162.805241][ T7292] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 164.001213][ T7309] binder: 7308:7309 ioctl c0306201 20000680 returned -14 [ 165.446547][ T974] IPVS: starting estimator thread 0... [ 165.469130][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.404'. [ 165.546627][ T7337] IPVS: using max 19 ests per chain, 45600 per kthread [ 167.731447][ T7368] usb usb4: usbfs: process 7368 (syz.5.412) did not claim interface 0 before use [ 167.815444][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 167.815463][ T29] audit: type=1326 audit(1734762459.079:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 167.905902][ T29] audit: type=1326 audit(1734762459.089:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 167.989366][ T29] audit: type=1326 audit(1734762459.089:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.019227][ T29] audit: type=1326 audit(1734762459.089:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.051445][ T29] audit: type=1326 audit(1734762459.089:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.092673][ T29] audit: type=1326 audit(1734762459.089:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.122184][ T29] audit: type=1326 audit(1734762459.089:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.151968][ T29] audit: type=1326 audit(1734762459.089:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.202691][ T5836] Bluetooth: hci5: command tx timeout [ 168.257037][ T29] audit: type=1326 audit(1734762459.089:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.312131][ T7383] bridge_slave_1: left allmulticast mode [ 168.359519][ T7383] bridge_slave_1: left promiscuous mode [ 168.366158][ T7383] bridge0: port 1(bridge_slave_1) entered disabled state [ 168.376364][ T29] audit: type=1326 audit(1734762459.089:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7367 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x7ffc0000 [ 168.560556][ T7383] bond0: (slave bond_slave_0): Releasing backup interface [ 168.588606][ T7383] bond_slave_0: left promiscuous mode [ 168.611339][ T7383] bond0: (slave bond_slave_1): Releasing backup interface [ 168.619489][ T7383] bond_slave_1: left promiscuous mode [ 168.645028][ T7383] team0: Port device team_slave_0 removed [ 168.652113][ T7397] vivid-007: disconnect [ 168.671645][ T7389] vivid-007: reconnect [ 168.711399][ T7383] team0: Port device team_slave_1 removed [ 168.723022][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.743759][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.765928][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.832518][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.933827][ T7384] team0: Mode changed to "loadbalance" [ 169.010704][ T7388] tipc: Started in network mode [ 169.136908][ T7388] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 169.981095][ T7388] tipc: Enabled bearer , priority 0 [ 170.284922][ T7418] binder_alloc: 7416: pid 7416 spamming oneway? 1 buffers allocated for a total size of 4096 [ 170.479536][ T35] tipc: Resetting bearer [ 171.056792][ T25] tipc: Node number set to 11578026 [ 171.350829][ T7443] netlink: 4093 bytes leftover after parsing attributes in process `syz.5.432'. [ 172.996655][ T7460] netfs: Couldn't get user pages (rc=-14) [ 173.497637][ T7491] Device name cannot be null; rc = [-22] [ 174.792896][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 174.813151][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 174.855292][ T7504] netlink: 'syz.5.444': attribute type 21 has an invalid length. [ 174.895141][ T7504] netlink: 'syz.5.444': attribute type 1 has an invalid length. [ 174.951480][ T7504] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.444'. [ 177.214455][ T7547] loop7: detected capacity change from 0 to 16384 [ 177.387947][ T7553] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.433812][ T7547] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.462199][ T7547] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.482938][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 177.507771][ T7547] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.528691][ T7547] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.563254][ T7563] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 177.576884][ T7547] loop7: unable to read partition table [ 177.607999][ T7547] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 177.651516][ T7563] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 177.734035][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 177.758299][ T7563] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 177.767342][ T7563] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 177.789869][ T7563] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 177.804334][ T7563] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 177.814479][ T7563] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 177.843670][ T7567] dccp_xmit_packet: Payload too large (65475) for featneg. [ 177.876954][ T7563] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 177.888434][ T7563] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 177.946770][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 179.900529][ T5872] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 179.908808][ T5872] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.918748][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 179.928576][ T5872] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 179.939051][ T5872] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.952519][ T5872] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.961813][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.031278][ T7596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 180.257528][ T5872] usb 6-1: usb_control_msg returned -32 [ 180.263157][ T5872] usbtmc 6-1:16.0: can't read capabilities [ 180.563898][ T7617] Cannot find del_set index 3 as target [ 180.746877][ T7619] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 180.812767][ T974] usb 6-1: USB disconnect, device number 5 [ 182.363142][ T7653] netlink: 'syz.6.478': attribute type 12 has an invalid length. [ 183.492978][ T7673] netlink: 'syz.6.480': attribute type 1 has an invalid length. [ 184.076363][ T7678] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 184.104794][ T7678] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 184.204632][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 184.213814][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 185.754883][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 185.885995][ T7719] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 185.912421][ T7719] netlink: 'syz.1.491': attribute type 3 has an invalid length. [ 185.990479][ T7719] bridge_slave_0: left allmulticast mode [ 185.996179][ T7719] bridge_slave_0: left promiscuous mode [ 186.015740][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.071307][ T7719] bridge_slave_1: left allmulticast mode [ 186.078420][ T7719] bridge_slave_1: left promiscuous mode [ 186.097012][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.141730][ T7719] bond0: (slave bond_slave_0): Releasing backup interface [ 186.203280][ T7719] bond_slave_0: left allmulticast mode [ 186.230748][ T7719] bond0: (slave bond_slave_1): Releasing backup interface [ 186.245149][ T7719] bond_slave_1: left allmulticast mode [ 186.922975][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 186.929355][ T5134] Bluetooth: hci3: command 0x0406 tx timeout [ 187.142429][ T7719] team0: Port device team_slave_0 removed [ 187.199024][ T7719] team0: Port device team_slave_1 removed [ 187.211191][ T7742] netlink: 'syz.2.496': attribute type 4 has an invalid length. [ 187.218038][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.226268][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.257111][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.272230][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.464276][ T7756] fuse: Unknown parameter '0x0000000000000004' [ 187.518632][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 187.518645][ T29] audit: type=1326 audit(1734762478.739:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.546557][ T29] audit: type=1326 audit(1734762478.739:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.568369][ T29] audit: type=1326 audit(1734762478.739:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.590117][ T29] audit: type=1326 audit(1734762478.739:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.612181][ T29] audit: type=1326 audit(1734762478.739:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.634245][ T29] audit: type=1326 audit(1734762478.739:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.656172][ T29] audit: type=1326 audit(1734762478.739:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.677936][ T29] audit: type=1326 audit(1734762478.739:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.699650][ T29] audit: type=1326 audit(1734762478.739:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.721753][ T29] audit: type=1326 audit(1734762478.739:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7755 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ed85d29 code=0x7ffc0000 [ 187.940821][ T7772] binder: BINDER_SET_CONTEXT_MGR already set [ 187.947618][ T7772] binder: 7771:7772 ioctl 4018620d 200002c0 returned -16 [ 188.144409][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.507'. [ 188.184781][ T7781] bridge_slave_1: left allmulticast mode [ 188.190554][ T7781] bridge_slave_1: left promiscuous mode [ 188.202957][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.314236][ T7781] bridge_slave_0: left allmulticast mode [ 188.326009][ T7781] bridge_slave_0: left promiscuous mode [ 188.334523][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.943494][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 191.256946][ T974] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 191.525042][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.538877][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.556886][ T974] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 191.573818][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.597716][ T974] usb 7-1: config 0 descriptor?? [ 192.306427][ T974] usb 7-1: string descriptor 0 read error: -71 [ 192.339345][ T974] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 192.339387][ T974] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 192.340942][ T974] usb 7-1: USB disconnect, device number 3 [ 194.827490][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.063235][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.439594][ T7915] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.175666][ T7958] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 197.223366][ T7958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 197.444085][ C1] hrtimer: interrupt took 1207813 ns [ 198.492961][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.513759][ T7990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.645949][ T7990] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.654663][ T7990] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.663362][ T7990] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.677221][ T7990] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.096505][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 199.313889][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.332484][ T9] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.676395][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.846669][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 200.076215][ T9] usb 7-1: config 0 descriptor?? [ 200.395458][ T8024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.556'. [ 200.947535][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 200.962175][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0006/input/input11 [ 201.801613][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.944977][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.986394][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 202.646889][ T25] usb 7-1: USB disconnect, device number 4 [ 205.128375][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 206.443616][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.463391][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.168432][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.178698][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.194078][ T9] usb 7-1: SerialNumber: syz [ 208.384485][ T9] usb 7-1: 0:2 : does not exist [ 208.394290][ T9] usb 7-1: unit 255 not found! [ 209.388855][ T9] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 209.452831][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 209.452847][ T29] audit: type=1326 audit(1734762756.729:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8124 comm="syz.3.586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x0 [ 209.459109][ T9] usb 7-1: USB disconnect, device number 5 [ 209.462469][ T8123] netlink: 'syz.6.584': attribute type 4 has an invalid length. [ 209.708887][ T6557] udevd[6557]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.507191][ T8163] binder: 8162:8163 ioctl c0306201 20000680 returned -14 [ 214.066567][ T29] audit: type=1800 audit(1734762761.339:5174): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.606" name="file1" dev="overlay" ino=12 res=0 errno=0 [ 217.089996][ T8233] binder: transaction release 91 bad handle 1, ret = -22 [ 219.768786][ T8260] binder: BINDER_SET_CONTEXT_MGR already set [ 219.818050][ T8260] binder: 8255:8260 ioctl 4018620d 200001c0 returned -16 [ 220.917936][ T8279] VFS: could not find a valid V7 on nullb0. [ 222.936832][ T8298] syz.5.627: attempt to access beyond end of device [ 222.936832][ T8298] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 222.969994][ T29] audit: type=1326 audit(1734762770.239:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.6.628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1927f85d29 code=0x0 [ 222.997196][ T8298] syz.5.627: attempt to access beyond end of device [ 222.997196][ T8298] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 223.030517][ T8293] nbd5: detected capacity change from 0 to 20 [ 223.052097][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.076836][ T6557] block nbd5: Send control failed (result -89) [ 223.100603][ T6557] block nbd5: Request send failed, requeueing [ 223.119867][ T5836] block nbd5: Receive control failed (result -32) [ 223.132117][ T44] block nbd5: Dead connection, failed to find a fallback [ 223.139925][ T44] block nbd5: shutting down sockets [ 223.146052][ T44] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.155605][ T44] buffer_io_error: 8 callbacks suppressed [ 223.155621][ T44] Buffer I/O error on dev nbd5, logical block 0, async page read [ 223.171513][ T8298] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.187164][ T6557] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.196702][ T6557] Buffer I/O error on dev nbd5, logical block 1, async page read [ 223.204710][ T6557] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.213902][ T6557] Buffer I/O error on dev nbd5, logical block 2, async page read [ 223.221256][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 223.222647][ T6557] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.240014][ T6557] Buffer I/O error on dev nbd5, logical block 3, async page read [ 223.253310][ T6557] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.262529][ T6557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 223.270514][ T6557] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.279627][ T6557] Buffer I/O error on dev nbd5, logical block 1, async page read [ 223.287533][ T6557] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.290267][ T8298] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.296630][ T6557] Buffer I/O error on dev nbd5, logical block 2, async page read [ 223.296778][ T6557] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.323075][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 223.332720][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.342469][ T6557] Buffer I/O error on dev nbd5, logical block 3, async page read [ 223.351523][ T6557] Buffer I/O error on dev nbd5, logical block 0, async page read [ 223.361989][ T6557] Buffer I/O error on dev nbd5, logical block 1, async page read [ 223.388070][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.401033][ T6557] ldm_validate_partition_table(): Disk read failed. [ 223.411845][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4 [ 223.428493][ T6557] Dev nbd5: unable to read RDB block 0 [ 223.450450][ T6557] nbd5: unable to read partition table [ 223.460082][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3 [ 223.474079][ T6557] nbd5: partition table beyond EOD, truncated [ 223.475446][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2 [ 223.494606][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.508568][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.518531][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1 [ 223.519468][ T6557] ldm_validate_partition_table(): Disk read failed. [ 223.545183][ T6557] Dev nbd5: unable to read RDB block 0 [ 223.556026][ T6557] nbd5: unable to read partition table [ 223.558763][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0 [ 223.570965][ T6557] nbd5: partition table beyond EOD, truncated [ 223.599704][ T8298] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.614176][ T8298] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 223.698967][ T8315] loop7: detected capacity change from 0 to 16384 [ 225.684484][ T5836] block nbd5: Receive control failed (result -32) [ 225.694716][ T5836] block nbd5: Receive control failed (result -32) [ 226.188856][ T8328] block nbd5: shutting down sockets [ 226.424223][ T29] audit: type=1804 audit(1734762773.699:5176): pid=8348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.644" name="/newroot/61/bus/file0" dev="overlay" ino=369 res=1 errno=0 [ 226.900193][ T8358] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.907907][ T8358] UDF-fs: Scanning with blocksize 512 failed [ 226.915947][ T8358] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.923620][ T8358] UDF-fs: Scanning with blocksize 1024 failed [ 226.932238][ T8358] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.940286][ T8358] UDF-fs: Scanning with blocksize 2048 failed [ 226.948375][ T8358] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 226.955920][ T8358] UDF-fs: Scanning with blocksize 4096 failed [ 227.635441][ T8370] netlink: 'syz.5.650': attribute type 2 has an invalid length. [ 227.646575][ T8370] netlink: 212144 bytes leftover after parsing attributes in process `syz.5.650'. [ 227.689820][ T8373] capability: warning: `syz.1.651' uses 32-bit capabilities (legacy support in use) [ 228.336571][ T58] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.539339][ T58] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 228.649913][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.751689][ T58] usb 6-1: config 0 descriptor?? [ 228.775887][ T58] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.031094][ T5916] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 229.467437][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.496553][ T5916] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 229.566854][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.603365][ T5916] usb 7-1: config 0 descriptor?? [ 229.722095][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 230.354518][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 230.361593][ T8402] sctp: failed to load transform for md5: -2 [ 230.377025][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 230.384229][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 230.416891][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 230.490731][ T8418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 230.544151][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 230.556581][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 230.567394][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 230.574632][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 230.582344][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 230.678987][ T29] audit: type=1804 audit(1734762777.949:5177): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.665" name="/newroot/143/file1" dev="fuse" ino=1 res=1 errno=0 [ 230.747265][ T29] audit: type=1800 audit(1734762777.949:5178): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.665" name="/" dev="fuse" ino=1 res=0 errno=0 [ 230.799093][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 230.825785][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 230.846642][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 230.857044][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 230.866798][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 230.873907][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 230.881056][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 230.899606][ T5916] pwc: Registered as video103. [ 230.911179][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 230.951587][ T5916] usb 7-1: USB disconnect, device number 6 [ 231.133980][ T58] usb 6-1: USB disconnect, device number 6 [ 232.695766][ T8458] netlink: 140 bytes leftover after parsing attributes in process `syz.1.676'. [ 233.197807][ T8460] netlink: 'syz.5.677': attribute type 10 has an invalid length. [ 233.543715][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'. [ 234.897654][ T8484] syzkaller0: entered promiscuous mode [ 234.903460][ T8484] syzkaller0: entered allmulticast mode [ 234.923737][ T8479] syz.6.683 (8479): drop_caches: 2 [ 235.034402][ T29] audit: type=1800 audit(1734762782.309:5179): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.686" name="/" dev="9p" ino=2 res=0 errno=0 [ 235.380194][ T5820] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 235.550180][ T5820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.572828][ T5820] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 235.582088][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.614366][ T5820] usb 6-1: config 0 descriptor?? [ 236.305516][ T5820] usbhid 6-1:0.0: can't add hid device: -71 [ 236.311980][ T5820] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 236.322893][ T5820] usb 6-1: USB disconnect, device number 7 [ 238.592010][ T8489] bond0: (slave bond_slave_0): Releasing backup interface [ 238.603963][ T8489] bond0: (slave bond_slave_1): Releasing backup interface [ 238.632565][ T8489] team0: Port device team_slave_0 removed [ 238.658796][ T8489] team0: Port device team_slave_1 removed [ 238.668369][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.684905][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.703234][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.713941][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.774376][ T8489] bond1: (slave veth3): Releasing backup interface [ 238.781553][ T8489] bond1: (slave veth3): the permanent HWaddr of slave - 2a:3c:b2:46:07:5b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 238.810046][ T8489] bond1: (slave veth5): Releasing backup interface [ 240.204169][ T8536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.401610][ T8550] binder: 8549:8550 ioctl c0306201 0 returned -14 [ 240.424025][ T8550] binder: 8549:8550 ioctl c0306201 0 returned -14 [ 243.537336][ T8584] bond0: (slave bond_slave_0): Releasing backup interface [ 243.558881][ T8584] bond0: (slave bond_slave_1): Releasing backup interface [ 243.608059][ T8584] team0: Port device team_slave_0 removed [ 243.638780][ T8584] team0: Port device team_slave_1 removed [ 243.647777][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.656068][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.498007][ T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 244.676534][ T974] usb 7-1: Using ep0 maxpacket: 8 [ 244.684727][ T974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.695412][ T974] usb 7-1: config 0 has no interfaces? [ 244.707013][ T974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.721332][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.765250][ T974] usb 7-1: Product: syz [ 244.781875][ T974] usb 7-1: Manufacturer: syz [ 244.791998][ T974] usb 7-1: SerialNumber: syz [ 244.813510][ T974] usb 7-1: config 0 descriptor?? [ 245.197461][ T974] usb 7-1: USB disconnect, device number 7 [ 247.880437][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.912979][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.931844][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.942163][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.955502][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 247.968299][ T5916] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 247.982889][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.009014][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.025742][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.042896][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.054890][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.076514][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.084844][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.112989][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.122303][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.135098][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.143600][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.160432][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 248.170473][ T5916] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 248.184351][ T5916] usb 7-1: config 0 has no interface number 0 [ 248.211381][ T5916] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 248.225004][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.255376][ T5916] usb 7-1: Product: syz [ 248.270676][ T5916] usb 7-1: Manufacturer: syz [ 248.294072][ T5916] usb 7-1: SerialNumber: syz [ 248.321135][ T5916] usb 7-1: config 0 descriptor?? [ 248.343325][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.351417][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.359513][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.367228][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.374887][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.389207][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.398889][ T5916] smsc95xx v2.0.0 [ 248.403599][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.421498][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.429503][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.446609][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.454293][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 248.866151][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.409357][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.416979][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.424448][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.431981][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.439536][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.447404][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.454841][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.463083][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.471289][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.479657][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.487336][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.494764][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.502605][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.510158][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.517836][ T974] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 249.582121][ T5916] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 249.597132][ T5916] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.636782][ T974] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 249.712555][ T8668] veth0_to_team: entered promiscuous mode [ 249.735117][ T8668] macsec1: entered allmulticast mode [ 249.740717][ T8668] veth0_to_team: entered allmulticast mode [ 249.803827][ T8668] veth0_to_team: left allmulticast mode [ 249.872805][ T8668] veth0_to_team: left promiscuous mode [ 251.777304][ T5916] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 251.795104][ T5916] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 251.840353][ T5916] usb 7-1: USB disconnect, device number 8 [ 254.303960][ T8706] team0: Mode changed to "loadbalance" [ 254.383999][ T8706] tipc: Started in network mode [ 254.409821][ T8706] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 254.444853][ T8706] tipc: Enabled bearer , priority 0 [ 255.171978][ T29] audit: type=1804 audit(1734762802.449:5180): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.759" name="/newroot/166/file1" dev="fuse" ino=1 res=1 errno=0 [ 255.246974][ T29] audit: type=1800 audit(1734762802.449:5181): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.759" name="/" dev="fuse" ino=1 res=0 errno=0 [ 255.364802][ T29] audit: type=1804 audit(1734762802.449:5182): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.759" name="/newroot/166/file1" dev="fuse" ino=1 res=1 errno=0 [ 255.394848][ T8734] netlink: 156 bytes leftover after parsing attributes in process `syz.6.760'. [ 255.430035][ T8733] syzkaller1: entered promiscuous mode [ 255.435567][ T8733] syzkaller1: entered allmulticast mode [ 255.451437][ T29] audit: type=1804 audit(1734762802.449:5183): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.759" name="/newroot/166/file1" dev="fuse" ino=1 res=1 errno=0 [ 255.493593][ T29] audit: type=1800 audit(1734762802.449:5184): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.759" name="/" dev="fuse" ino=1 res=0 errno=0 [ 255.556611][ T8] tipc: Node number set to 11578026 [ 255.567607][ T8736] dvmrp0: entered allmulticast mode [ 255.632043][ T8736] pimreg: entered allmulticast mode [ 255.715639][ T8736] batadv_slave_1: entered promiscuous mode [ 255.766699][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 255.906663][ T5916] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 255.929595][ T25] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 255.940257][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.962841][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.969427][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.969574][ T25] usb 3-1: Product: syz [ 256.012918][ T25] usb 3-1: Manufacturer: syz [ 256.023825][ T25] usb 3-1: SerialNumber: syz [ 256.044267][ T25] usb 3-1: config 0 descriptor?? [ 256.076478][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 256.089809][ T5916] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 256.111583][ T5916] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 256.150925][ T5916] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.170068][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.198263][ T5916] usb 7-1: Product: я [ 256.202446][ T5916] usb 7-1: Manufacturer: 翼老㠣魑鴦 [ 256.271503][ T25] hso 3-1:0.0: Failed to find BULK IN ep [ 256.312087][ T25] usb-storage 3-1:0.0: USB Mass Storage device detected [ 256.486836][ T5916] cdc_ncm 7-1:1.0: bind() failure [ 256.521574][ T8769] netlink: 64 bytes leftover after parsing attributes in process `syz.5.771'. [ 256.531297][ T5916] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 256.546481][ T5916] cdc_ncm 7-1:1.1: bind() failure [ 256.557155][ T5916] usb 7-1: USB disconnect, device number 9 [ 256.567325][ T25] usb 3-1: USB disconnect, device number 6 [ 256.843848][ T8775] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 257.541006][ T8789] [U] [ 257.572041][ T8789] [U] [ 257.583293][ T8789] [U] B-LRJ[Ćќ6}%4̾ H@K-YLEU@F%PEZE,9F* [ 257.596867][ T8789] [U] CW* 9JQ#ESWCV1! GPX [ 257.610764][ T8789] [U] N%9C_NʅBC$4( [ 257.632076][ T8789] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 257.647862][ T8789] [U] Ϡ4RЛ<)6JG؃K^R\ [ 257.657318][ T8789] [U] 7R:J37 [ 257.688344][ T8789] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 257.716590][ T8789] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 257.753040][ T8789] [U] M<@NKJ(6))VLR [ 257.890191][ T8789] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 257.931862][ T8789] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 257.975315][ T8789] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 257.986854][ T8789] [U] V{ըVNB>DMTQT [ 257.992670][ T8789] [U] G*|9ٺņ [ 258.013045][ T8789] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 258.023539][ T8789] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 258.082856][ T8789] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 258.113433][ T8789] [U] Yҟ844N<; [ 258.119336][ T8789] [U] UI7X#E4VMLȋG͔A)-(N̗NL#)׌SU6 [ 258.138399][ T8789] [U] )<E?AUܤ9 %]DCCE+L<'T1Kȅ3.ɻ WSZYϼ9I>]Ȝ}{/`ܿ5'E 41 TNAX߿ʯϭQëI T%G7L~BS [ 258.161721][ T8789] [U] ͢ [ 258.167744][ T8789] [U] ZUĪ4&˙E~8Eσ1L{ȨGVY$PNO4M*F`ATM0?*I#;Ѥ+4VGAݬ%H[AYX)LG]F H|ZVE/ϧ17Ǭ-ǽHO+^)8&E@A8G˅-WRS-V-ұO>ŝQ#9UA [ 259.175303][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888029eeb000: rx timeout, send abort [ 259.187233][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888029eeb000: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.487599][ T8815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.786'. [ 261.187851][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.196552][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 261.356399][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 261.363470][ T8] usb 3-1: config index 0 descriptor too short (expected 75, got 45) [ 261.387880][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 261.418659][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.925586][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.954878][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.003352][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.038860][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.281773][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 262.306584][ T8] usbtmc 3-1:16.0: can't read capabilities [ 262.438841][ T8849] syz.3.795: attempt to access beyond end of device [ 262.438841][ T8849] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 262.477533][ T8843] nbd3: detected capacity change from 0 to 20 [ 262.498917][ T8853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (245259927488 ns) > initial count (134218304 ns). Using initial count to start timer. [ 262.519622][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 262.591929][ T6557] block nbd3: Send control failed (result -89) [ 262.653811][ T6557] block nbd3: Request send failed, requeueing [ 262.700215][ T8849] block nbd3: Dead connection, failed to find a fallback [ 262.716420][ T5836] block nbd3: Receive control failed (result -32) [ 262.827587][ T8849] block nbd3: shutting down sockets [ 262.831132][ T44] blk_print_req_error: 55 callbacks suppressed [ 262.831157][ T44] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.853507][ T6557] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.853642][ T44] buffer_io_error: 62 callbacks suppressed [ 262.853657][ T44] Buffer I/O error on dev nbd3, logical block 0, async page read [ 262.863081][ T6557] Buffer I/O error on dev nbd3, logical block 1, async page read [ 262.889376][ T8849] I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.896825][ T6557] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.902733][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 262.914133][ T6557] Buffer I/O error on dev nbd3, logical block 2, async page read [ 262.920442][ T8849] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.938606][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 262.948375][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 262.948838][ T8849] I/O error, dev nbd3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.967984][ T6557] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 262.968264][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 262.990317][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 263.000290][ T6557] Buffer I/O error on dev nbd3, logical block 3, async page read [ 263.025731][ T6557] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.064391][ T6557] Buffer I/O error on dev nbd3, logical block 0, async page read [ 263.087739][ T6557] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.213709][ T6557] Buffer I/O error on dev nbd3, logical block 1, async page read [ 263.216638][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 263.269149][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.278915][ T6557] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.281958][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.298058][ T6557] Buffer I/O error on dev nbd3, logical block 2, async page read [ 263.314975][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.325652][ T8] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.351524][ T6557] Buffer I/O error on dev nbd3, logical block 3, async page read [ 263.365720][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 263.365730][ T6557] Buffer I/O error on dev nbd3, logical block 0, async page read [ 263.365904][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 263.394302][ T6557] Buffer I/O error on dev nbd3, logical block 1, async page read [ 263.408331][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.425282][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 263.427371][ T6557] ldm_validate_partition_table(): Disk read failed. [ 263.435716][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 263.442496][ T6557] Dev nbd3: unable to read RDB block 0 [ 263.457870][ T6557] nbd3: unable to read partition table [ 263.459412][ T8] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.463682][ T6557] nbd3: partition table beyond EOD, truncated [ 263.493170][ T8] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.515618][ T8] usb 7-1: Manufacturer: syz [ 263.518377][ T6557] ldm_validate_partition_table(): Disk read failed. [ 263.522866][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 263.532270][ T6557] Dev nbd3: unable to read RDB block 0 [ 263.542686][ T6557] nbd3: unable to read partition table [ 263.549916][ T8] usb 7-1: config 0 descriptor?? [ 263.551204][ T6557] nbd3: partition table beyond EOD, truncated [ 263.594539][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 263.618153][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 263.630187][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 263.654130][ T8849] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 263.687008][ T8849] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 263.755506][ T8862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 263.936414][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.5.800'. [ 264.386463][ T8] rc_core: IR keymap rc-hauppauge not found [ 264.392685][ T8] Registered IR keymap rc-empty [ 264.398889][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.418307][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.453138][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 264.471087][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 264.519678][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.565106][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.608131][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.845775][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.866560][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 264.887493][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 265.829455][ T25] usb 3-1: USB disconnect, device number 7 [ 265.846837][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 265.945749][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 266.191937][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 266.216460][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 266.285838][ T8882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.296501][ T8] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 266.328137][ T8] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 266.375082][ T8] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 267.082538][ T8] usb 7-1: USB disconnect, device number 10 [ 270.198969][ T8944] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.142777][ T8944] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.387233][ T8944] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.529366][ T8944] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.748509][ T8944] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.819238][ T8944] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.969566][ T8944] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.225285][ T8944] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.568796][ T9001] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 276.595646][ T9001] CIFS mount error: No usable UNC path provided in device string! [ 276.595646][ T9001] [ 276.608439][ T9001] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.182452][ T8998] random: crng reseeded on system resumption [ 277.308394][ T8994] kvm: pic: non byte read [ 280.325282][ T9043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.915520][ T29] audit: type=1326 audit(1734762829.189:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 281.942830][ T29] audit: type=1326 audit(1734762829.189:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 281.972459][ T29] audit: type=1326 audit(1734762829.189:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 282.020328][ T29] audit: type=1326 audit(1734762829.189:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 282.064117][ T29] audit: type=1326 audit(1734762829.189:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c90f84690 code=0x7ffc0000 [ 282.091274][ T29] audit: type=1326 audit(1734762829.189:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c90f84690 code=0x7ffc0000 [ 282.138285][ T29] audit: type=1326 audit(1734762829.189:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 282.189995][ T29] audit: type=1326 audit(1734762829.189:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c90f84690 code=0x7ffc0000 [ 282.278796][ T29] audit: type=1326 audit(1734762829.189:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 282.301512][ T29] audit: type=1326 audit(1734762829.449:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9049 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c90f85d29 code=0x7ffc0000 [ 284.041457][ T9084] netlink: 'syz.2.864': attribute type 11 has an invalid length. [ 285.724268][ T9104] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhI% [ 285.724268][ T9104] [ 286.040436][ T5836] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 286.055919][ T5836] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 286.221885][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.236613][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.255910][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.267684][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.292071][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.301800][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.432892][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 287.701705][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.738445][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.748274][ T9115] bridge_slave_0: entered allmulticast mode [ 287.755759][ T9115] bridge_slave_0: entered promiscuous mode [ 287.765855][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.775113][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.782997][ T9115] bridge_slave_1: entered allmulticast mode [ 287.791106][ T9115] bridge_slave_1: entered promiscuous mode [ 287.912845][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.925474][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.954100][ T9149] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.030523][ T9115] team0: Port device team_slave_0 added [ 288.050462][ T9115] team0: Port device team_slave_1 added [ 288.263834][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.293891][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.385003][ T5836] Bluetooth: hci4: command tx timeout [ 288.393927][ T9115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.408154][ T9115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.415869][ T9115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.443158][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.449852][ T9115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.330372][ T9115] hsr_slave_0: entered promiscuous mode [ 289.367616][ T9115] hsr_slave_1: entered promiscuous mode [ 289.411070][ T9115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.424068][ T9115] Cannot create hsr debugfs directory [ 289.505954][ T9174] netlink: 'syz.1.887': attribute type 4 has an invalid length. [ 289.571123][ T9181] netlink: 'syz.1.887': attribute type 4 has an invalid length. [ 290.120297][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 290.129014][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 290.141389][ T5836] Bluetooth: hci3: hardware error 0x00 [ 290.451857][ T5826] Bluetooth: hci4: command tx timeout [ 290.479203][ T9115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 291.387057][ T9115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 291.485557][ T9115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 291.506033][ T9115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.213543][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 292.387883][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.403936][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.436787][ T9115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.447413][ T9115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.470806][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.478336][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.489984][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.497856][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.518821][ T5836] Bluetooth: hci4: command tx timeout [ 293.406126][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.123448][ T9115] veth0_vlan: entered promiscuous mode [ 294.667142][ T9115] veth1_vlan: entered promiscuous mode [ 294.686955][ T5836] Bluetooth: hci4: command tx timeout [ 294.758042][ T9115] veth0_macvtap: entered promiscuous mode [ 294.787282][ T9115] veth1_macvtap: entered promiscuous mode [ 294.860799][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.948516][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.074725][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.325559][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.433524][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.492765][ T9115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.514819][ T9115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.556156][ T9115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.578020][ T9115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.603646][ T9115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.015600][ T6760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.067603][ T6760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.119366][ T6760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.197320][ T6760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.676103][ T9288] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 298.143878][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 300.792633][ T9319] xt_hashlimit: max too large, truncated to 1048576 [ 305.827126][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.3.942'. [ 314.106690][ T9476] netlink: 'syz.5.972': attribute type 1 has an invalid length. [ 314.159998][ T9476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.318066][ T9476] bond1: (slave ip6gretap1): making interface the new active one [ 314.368492][ T9476] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 314.447661][ T9482] vlan2: entered promiscuous mode [ 314.610779][ T9482] bond1: entered promiscuous mode [ 314.635467][ T9482] ip6gretap1: entered promiscuous mode [ 314.654240][ T9482] vlan2: entered allmulticast mode [ 314.659686][ T9482] bond1: entered allmulticast mode [ 314.664945][ T9482] ip6gretap1: entered allmulticast mode [ 316.001553][ T9500] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 317.707361][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.714390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.728031][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 317.737257][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 317.748971][ T5836] Bluetooth: hci4: hardware error 0x00 [ 319.019147][ T5134] Bluetooth: hci5: sending frame failed (-49) [ 319.028079][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 319.396563][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 319.396583][ T29] audit: type=1804 audit(1734762866.669:5215): pid=9522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.981" name="/newroot/209/bus/file1" dev="overlay" ino=1176 res=1 errno=0 [ 320.046802][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 321.316621][ T5826] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 322.100380][ T9565] ptrace attach of "./syz-executor exec"[6433] was attempted by " [ 326.544987][ T9611] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 328.995565][ T9635] netlink: 'syz.7.1016': attribute type 1 has an invalid length. [ 333.593833][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 339.032113][ T9705] syz.7.1035 (9705): drop_caches: 2 [ 344.057428][ T9767] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 344.086779][ T9767] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1052'. [ 344.144917][ T9770] netlink: 'syz.3.1052': attribute type 2 has an invalid length. [ 348.455850][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028da1800: rx timeout, send abort [ 348.464964][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888028da1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 351.563186][ T29] audit: type=1800 audit(1734762898.839:5216): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1068" name="/" dev="9p" ino=2 res=0 errno=0 [ 353.658006][ T9848] Bluetooth: MGMT ver 1.23 [ 354.877099][ T9866] syz.7.1083 (9866): /proc/9866/oom_adj is deprecated, please use /proc/9866/oom_score_adj instead. [ 356.506719][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 356.686770][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.706137][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.798566][ T9] usb 8-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 356.810444][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.820882][ T9] usb 8-1: config 0 descriptor?? [ 358.944680][ T9] hid-generic 0003:22ED:1010.0008: unknown main item tag 0x0 [ 359.355756][ T9] hid-generic 0003:22ED:1010.0008: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.7-1/input0 [ 359.382821][ T9] usb 8-1: USB disconnect, device number 2 [ 360.384487][ T9925] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 361.128799][ T9938] batman_adv: batadv0: Adding interface: ip6gretap1 [ 361.166547][ T9938] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.202219][ T9938] batman_adv: batadv0: Interface activated: ip6gretap1 [ 361.975764][ T9956] wg1: entered promiscuous mode [ 362.269500][ T9955] xt_bpf: check failed: parse error [ 362.701628][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.995798][ T5836] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 363.699711][ T9979] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 364.785630][ T9986] trusted_key: syz.7.1114 sent an empty control message without MSG_MORE. [ 365.784392][ T9994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1117'. [ 367.143722][T10004] kvm: pic: non byte read [ 367.669949][T10020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 369.480327][T10050] ipvlan2: entered promiscuous mode [ 369.485988][T10050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 369.494298][T10050] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 372.134275][T10081] devtmpfs: Cannot enable quota on remount [ 373.975663][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 374.031647][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 374.125721][T10099] bond0: entered promiscuous mode [ 374.543946][T10099] bond0: left promiscuous mode [ 375.657362][T10122] Process accounting resumed [ 375.686565][ T29] audit: type=1804 audit(1734762922.959:5217): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1154" name="/newroot/247/bus/bus" dev="overlay" ino=1396 res=1 errno=0 [ 377.219891][T10131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.247022][T10131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 377.680000][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 377.792868][ T29] audit: type=1326 audit(1734762925.069:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10150 comm="syz.5.1163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedc1f85d29 code=0x0 [ 378.106398][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 378.164772][ T9] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 378.173551][ T9] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 378.213855][ T9] usb 8-1: config 0 has no interface number 0 [ 378.231376][ T9] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.264205][ T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.296421][ T9] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 378.336107][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 378.347609][T10161] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 378.356480][ T9] usb 8-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 378.364774][ T9] usb 8-1: Product: syz [ 378.378401][ T9] usb 8-1: Manufacturer: syz [ 378.395037][ T9] usb 8-1: config 0 descriptor?? [ 378.590223][T10144] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 378.848892][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.005356][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.237642][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 379.321875][T10174] QAT: Invalid ioctl 1075883590 [ 379.329954][T10174] QAT: Invalid ioctl 1075883590 [ 379.343667][T10174] QAT: Invalid ioctl 1075883590 [ 379.348955][T10174] QAT: Invalid ioctl 1075883590 [ 379.354480][T10174] QAT: Invalid ioctl 1075883590 [ 379.366452][T10174] QAT: Invalid ioctl 1075883590 [ 379.372213][T10174] QAT: Invalid ioctl 1075883590 [ 379.382759][T10174] QAT: Invalid ioctl 1075883590 [ 379.392837][T10174] QAT: Invalid ioctl 1075883590 [ 379.400314][T10174] QAT: Invalid ioctl 1075883590 [ 379.527370][ T9] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.21/input/input14 [ 379.789531][ T9] usb 8-1: USB disconnect, device number 3 [ 379.795455][ C0] keyspan_remote 8-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 380.855147][T10183] binder: BINDER_SET_CONTEXT_MGR already set [ 380.863088][T10183] binder: 10182:10183 ioctl 4018620d 20000040 returned -16 [ 381.358630][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 386.056449][ T29] audit: type=1326 audit(1734762933.329:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10230 comm="syz.3.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c90f85d29 code=0x0 [ 386.519848][T10238] kvm: kvm [10234]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 387.493127][T10242] rdma_op ffff8880254391f0 conn xmit_rdma 0000000000000000 [ 391.572583][T10269] binder: 10268:10269 ioctl c0306201 20000140 returned -14 [ 392.811681][ T29] audit: type=1800 audit(1734762940.089:5220): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1200" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 393.769345][T10286] netlink: 341 bytes leftover after parsing attributes in process `syz.3.1201'. [ 393.910718][T10294] syz.2.1203: attempt to access beyond end of device [ 393.910718][T10294] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 393.924331][T10294] EXT4-fs (nbd2): unable to read superblock [ 394.657039][T10295] overlayfs: statfs failed on './file0' [ 397.195346][T10322] bond0: left promiscuous mode [ 397.214885][T10322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.231115][ T29] audit: type=1804 audit(1734762944.509:5221): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1213" name="/newroot/50/bus/bus" dev="overlay" ino=285 res=1 errno=0 [ 397.260596][T10322] tipc: Resetting bearer [ 397.287170][T10322] tipc: Resetting bearer [ 397.308060][T10322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.332951][T10329] tap0: tun_chr_ioctl cmd 1074025677 [ 397.351171][T10329] tap0: linktype set to 0 [ 397.654149][T10338] xt_l2tp: invalid flags combination: 0 [ 398.537792][T10340] kvm: user requested TSC rate below hardware speed [ 398.736518][ T5872] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 398.996366][ T5872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 399.046242][ T5872] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 399.552873][ T5872] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 399.562401][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.585977][T10344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.598193][ T5872] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.369124][ T5872] usb 3-1: USB disconnect, device number 8 [ 404.167089][T10381] XFS (nullb0): Invalid superblock magic number [ 408.349030][T10433] binder: 10432:10433 ioctl 4018620d 0 returned -22 [ 413.951177][ T974] kernel write not supported for file [eventfd] (pid: 974 comm: kworker/0:2) [ 414.806403][T10535] binder: 10530:10535 ioctl 4018620d 0 returned -22 [ 415.262905][T10534] overlayfs: overlapping lowerdir path [ 416.370545][T10552] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 416.983541][T10562] loop7: detected capacity change from 0 to 16384 [ 417.276780][T10564] loop7: detected capacity change from 16384 to 16383 [ 417.345146][T10562] blk_print_req_error: 68 callbacks suppressed [ 417.345171][T10562] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 0 [ 417.402855][T10562] I/O error, dev loop7, sector 3848 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 417.448703][T10562] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.472110][T10562] buffer_io_error: 59 callbacks suppressed [ 417.472130][T10562] Buffer I/O error on dev loop7, logical block 449, async page read [ 417.513217][T10562] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.531134][T10562] Buffer I/O error on dev loop7, logical block 449, async page read [ 417.543308][T10562] I/O error, dev loop7, sector 3592 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.562795][T10562] Buffer I/O error on dev loop7, logical block 449, async page read [ 417.811160][ T2818] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 417.823729][ T2818] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 417.832719][ T2818] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 417.841470][ T2818] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 417.850217][ T2818] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 417.858913][ T2818] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 417.867702][ T2818] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 417.876168][ T2818] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 417.885785][ T2818] I/O error, dev loop7, sector 1536 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 417.896238][ T2818] I/O error, dev loop7, sector 1544 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 417.906207][ T2818] I/O error, dev loop7, sector 1552 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 417.916731][ T2818] I/O error, dev loop7, sector 1560 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 422.641011][T10605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.665011][T10605] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 423.079104][T10608] capability: warning: `syz.2.1295' uses deprecated v2 capabilities in a way that may be insecure [ 423.827391][T10615] binder: BINDER_SET_CONTEXT_MGR already set [ 423.833488][T10615] binder: 10614:10615 ioctl 4018620d 200001c0 returned -16 [ 423.927671][T10618] Process accounting resumed [ 423.955052][ T29] audit: type=1804 audit(1734762971.209:5222): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1296" name="/newroot/68/bus/bus" dev="overlay" ino=394 res=1 errno=0 [ 427.562862][T10656] SET target dimension over the limit! [ 428.382348][T10654] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 429.299384][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1313'. [ 432.116934][T10693] input: syz0 as /devices/virtual/input/input15 [ 435.911911][T10742] ======================================================= [ 435.911911][T10742] WARNING: The mand mount option has been deprecated and [ 435.911911][T10742] and is ignored by this kernel. Remove the mand [ 435.911911][T10742] option from the mount to silence this warning. [ 435.911911][T10742] ======================================================= [ 436.637941][ T5826] block nbd2: Receive control failed (result -32) [ 436.651698][ T5836] block nbd2: Receive control failed (result -32) [ 436.711731][T10739] block nbd2: shutting down sockets [ 436.835954][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1339'. [ 436.851949][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1339'. [ 436.862555][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1339'. [ 436.875716][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1339'. [ 439.836464][T10800] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 440.273089][ T540] Bluetooth: hci5: Frame reassembly failed (-84) [ 440.281507][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.281605][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.297834][T10803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1355'. [ 440.307518][T10803] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1355'. [ 440.325348][T10803] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1355'. [ 440.706748][T10810] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1357'. [ 440.734287][T10810] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1357'. [ 441.350419][ T5916] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 441.518010][ T5916] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.553522][ T5916] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.596749][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.631390][ T5916] usb 8-1: config 0 descriptor?? [ 441.648499][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 441.744896][T10826] input: syz0 as /devices/virtual/input/input16 [ 441.867443][T10824] block nbd1: NBD_DISCONNECT [ 441.873485][T10824] block nbd1: Send disconnect failed -22 [ 441.891753][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 441.898743][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 442.602991][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 442.637721][T10818] block nbd1: Disconnected due to user request. [ 442.644556][T10818] block nbd1: shutting down sockets [ 442.696663][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 442.721051][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 442.759676][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 442.844882][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 442.967433][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 442.975252][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 442.983304][ T5916] pwc: recv_control_msg error -32 req 02 val 2100 [ 442.991493][ T5916] pwc: recv_control_msg error -32 req 04 val 1500 [ 443.036717][ T5916] pwc: recv_control_msg error -32 req 02 val 2500 [ 443.846435][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 443.857088][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 443.863969][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 443.873445][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 443.883549][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 444.140566][ T5916] pwc: Registered as video103. [ 444.146863][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 445.213871][ T5916] usb 8-1: USB disconnect, device number 4 [ 445.579198][T10858] tipc: Resetting bearer [ 445.736124][T10863] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 446.597502][T10863] netlink: 'syz.2.1371': attribute type 2 has an invalid length. [ 450.829425][T10914] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.276545][T10936] vlan2: entered promiscuous mode [ 452.300521][T10936] team0: entered promiscuous mode [ 452.319270][T10936] team0: Device vlan2 is already an upper device of the team interface [ 452.461055][T10941] overlayfs: missing 'lowerdir' [ 452.492782][T10936] team0: left promiscuous mode [ 453.045281][T10946] Bluetooth: MGMT ver 1.23 [ 453.155211][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 456.179897][T10984] Option 'TXƮ' to dns_resolver key: bad/missing value [ 457.679640][T10989] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR [ 459.509842][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 459.606152][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 460.702808][T11034] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 466.848642][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 467.646428][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 467.671252][ T5872] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.703480][ T5872] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.752201][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 467.769783][ T5872] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 467.793772][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.857970][ T5872] usb 3-1: config 0 descriptor?? [ 468.176271][T11115] syz.1.1441 (11115): drop_caches: 2 [ 468.204787][T11115] syz.1.1441 (11115): drop_caches: 2 [ 468.871863][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 468.939745][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.990918][ T5872] usb 3-1: USB disconnect, device number 9 [ 470.304339][T11137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'. [ 470.346056][T11137] [ 470.348435][T11137] ====================================================== [ 470.355443][T11137] WARNING: possible circular locking dependency detected [ 470.362466][T11137] 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted [ 470.369570][T11137] ------------------------------------------------------ [ 470.376595][T11137] syz.2.1450/11137 is trying to acquire lock: [ 470.382650][T11137] ffff888028424a50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x149/0x400 [ 470.392058][T11137] [ 470.392058][T11137] but task is already holding lock: [ 470.399499][T11137] ffff888028424ae0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x67/0x400 [ 470.409669][T11137] [ 470.409669][T11137] which lock already depends on the new lock. [ 470.409669][T11137] [ 470.420063][T11137] [ 470.420063][T11137] the existing dependency chain (in reverse order) is: [ 470.429078][T11137] [ 470.429078][T11137] -> #7 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 470.437016][T11137] lock_acquire+0x1ed/0x550 [ 470.442062][T11137] __mutex_lock+0x1ac/0xee0 [ 470.447101][T11137] blk_mq_sysfs_unregister_hctxs+0xaa/0x300 [ 470.453524][T11137] blk_mq_update_nr_hw_queues+0x6cc/0x1ae0 [ 470.459845][T11137] nbd_start_device+0x16c/0xaa0 [ 470.465216][T11137] nbd_ioctl+0x5dc/0xf40 [ 470.469982][T11137] blkdev_ioctl+0x57d/0x6a0 [ 470.474999][T11137] __se_sys_ioctl+0xf5/0x170 [ 470.480102][T11137] do_syscall_64+0xf3/0x230 [ 470.485118][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.491531][T11137] [ 470.491531][T11137] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 470.500140][T11137] lock_acquire+0x1ed/0x550 [ 470.505159][T11137] blk_mq_submit_bio+0x1536/0x2390 [ 470.510785][T11137] __submit_bio+0x2c6/0x560 [ 470.515809][T11137] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 470.522042][T11137] block_read_full_folio+0x9b3/0xae0 [ 470.527845][T11137] filemap_read_folio+0x148/0x3b0 [ 470.533386][T11137] filemap_get_pages+0x18ca/0x2080 [ 470.539018][T11137] filemap_read+0x452/0xf50 [ 470.544039][T11137] blkdev_read_iter+0x2d8/0x430 [ 470.549501][T11137] vfs_read+0x991/0xb70 [ 470.554262][T11137] ksys_read+0x18f/0x2b0 [ 470.559023][T11137] do_syscall_64+0xf3/0x230 [ 470.564181][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.570609][T11137] [ 470.570609][T11137] -> #5 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 470.579136][T11137] lock_acquire+0x1ed/0x550 [ 470.584155][T11137] down_read+0xb1/0xa40 [ 470.588822][T11137] page_cache_ra_unbounded+0x142/0x720 [ 470.594796][T11137] filemap_fault+0x818/0x1490 [ 470.599983][T11137] __do_fault+0x135/0x390 [ 470.604837][T11137] handle_pte_fault+0x39eb/0x5ed0 [ 470.610575][T11137] handle_mm_fault+0x1053/0x1ad0 [ 470.616039][T11137] exc_page_fault+0x2b9/0x8b0 [ 470.621231][T11137] asm_exc_page_fault+0x26/0x30 [ 470.626650][T11137] rep_movs_alternative+0x4a/0x70 [ 470.632212][T11137] _copy_from_iter+0x268/0x1c20 [ 470.637609][T11137] sk_msg_memcopy_from_iter+0x2ee/0x5f0 [ 470.643688][T11137] tcp_bpf_sendmsg+0x678/0x1be0 [ 470.649060][T11137] __sock_sendmsg+0xef/0x270 [ 470.654171][T11137] ____sys_sendmsg+0x52a/0x7e0 [ 470.659449][T11137] __sys_sendmsg+0x269/0x350 [ 470.664552][T11137] do_syscall_64+0xf3/0x230 [ 470.669580][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.675995][T11137] [ 470.675995][T11137] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 470.683725][T11137] lock_acquire+0x1ed/0x550 [ 470.688741][T11137] lock_sock_nested+0x48/0x100 [ 470.694021][T11137] inet_shutdown+0x6d/0x390 [ 470.699036][T11137] nbd_mark_nsock_dead+0x2e3/0x560 [ 470.704673][T11137] recv_work+0x225a/0x25c0 [ 470.709600][T11137] process_scheduled_works+0xa66/0x1840 [ 470.715672][T11137] worker_thread+0x870/0xd30 [ 470.720863][T11137] kthread+0x2f0/0x390 [ 470.725454][T11137] ret_from_fork+0x4b/0x80 [ 470.730392][T11137] ret_from_fork_asm+0x1a/0x30 [ 470.735681][T11137] [ 470.735681][T11137] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 470.743408][T11137] lock_acquire+0x1ed/0x550 [ 470.748426][T11137] __mutex_lock+0x1ac/0xee0 [ 470.753447][T11137] nbd_queue_rq+0x29c/0x2ef0 [ 470.758556][T11137] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 470.764615][T11137] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 470.771459][T11137] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 470.777948][T11137] blk_mq_run_hw_queue+0x354/0x500 [ 470.783585][T11137] blk_mq_flush_plug_list+0x118e/0x1870 [ 470.789649][T11137] __blk_flush_plug+0x420/0x500 [ 470.795023][T11137] __submit_bio+0x46a/0x560 [ 470.800047][T11137] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 470.806196][T11137] block_read_full_folio+0x9b3/0xae0 [ 470.812002][T11137] filemap_read_folio+0x148/0x3b0 [ 470.817569][T11137] do_read_cache_folio+0x373/0x5b0 [ 470.823194][T11137] read_part_sector+0xb3/0x260 [ 470.828577][T11137] adfspart_check_ICS+0xd9/0x9a0 [ 470.834045][T11137] bdev_disk_changed+0x72c/0x13f0 [ 470.839611][T11137] blkdev_get_whole+0x2d2/0x450 [ 470.845413][T11137] bdev_open+0x2d4/0xc50 [ 470.850194][T11137] blkdev_open+0x389/0x4f0 [ 470.855132][T11137] do_dentry_open+0xbe1/0x1b70 [ 470.860513][T11137] vfs_open+0x3e/0x330 [ 470.865195][T11137] path_openat+0x2c84/0x3590 [ 470.870389][T11137] do_filp_open+0x27f/0x4e0 [ 470.875405][T11137] do_sys_openat2+0x13e/0x1d0 [ 470.880591][T11137] __x64_sys_openat+0x247/0x2a0 [ 470.885950][T11137] do_syscall_64+0xf3/0x230 [ 470.890978][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.897389][T11137] [ 470.897389][T11137] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 470.904594][T11137] lock_acquire+0x1ed/0x550 [ 470.909609][T11137] __mutex_lock+0x1ac/0xee0 [ 470.914626][T11137] nbd_queue_rq+0xfe/0x2ef0 [ 470.919641][T11137] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 470.925705][T11137] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 470.932542][T11137] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 470.939031][T11137] blk_mq_run_hw_queue+0x354/0x500 [ 470.944655][T11137] blk_mq_flush_plug_list+0x118e/0x1870 [ 470.950718][T11137] __blk_flush_plug+0x420/0x500 [ 470.956114][T11137] __submit_bio+0x46a/0x560 [ 470.961132][T11137] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 470.967277][T11137] block_read_full_folio+0x9b3/0xae0 [ 470.973091][T11137] filemap_read_folio+0x148/0x3b0 [ 470.978753][T11137] do_read_cache_folio+0x373/0x5b0 [ 470.984487][T11137] read_part_sector+0xb3/0x260 [ 470.989857][T11137] adfspart_check_ICS+0xd9/0x9a0 [ 470.995311][T11137] bdev_disk_changed+0x72c/0x13f0 [ 471.000868][T11137] blkdev_get_whole+0x2d2/0x450 [ 471.006416][T11137] bdev_open+0x2d4/0xc50 [ 471.011184][T11137] blkdev_open+0x389/0x4f0 [ 471.016118][T11137] do_dentry_open+0xbe1/0x1b70 [ 471.021492][T11137] vfs_open+0x3e/0x330 [ 471.026074][T11137] path_openat+0x2c84/0x3590 [ 471.031183][T11137] do_filp_open+0x27f/0x4e0 [ 471.036199][T11137] do_sys_openat2+0x13e/0x1d0 [ 471.041387][T11137] __x64_sys_openat+0x247/0x2a0 [ 471.046753][T11137] do_syscall_64+0xf3/0x230 [ 471.051776][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.058190][T11137] [ 471.058190][T11137] -> #1 (set->srcu){.+.+}-{0:0}: [ 471.065319][T11137] lock_sync+0x18b/0x310 [ 471.070077][T11137] __synchronize_srcu+0xb1/0x400 [ 471.075528][T11137] elevator_disable+0x8c/0x3f0 [ 471.080845][T11137] blk_mq_update_nr_hw_queues+0x646/0x1ae0 [ 471.087183][T11137] nbd_start_device+0x16c/0xaa0 [ 471.092548][T11137] nbd_ioctl+0x5dc/0xf40 [ 471.097310][T11137] blkdev_ioctl+0x57d/0x6a0 [ 471.102341][T11137] __se_sys_ioctl+0xf5/0x170 [ 471.107460][T11137] do_syscall_64+0xf3/0x230 [ 471.112494][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.118991][T11137] [ 471.118991][T11137] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 471.126549][T11137] validate_chain+0x18ef/0x5920 [ 471.131924][T11137] __lock_acquire+0x1397/0x2100 [ 471.137283][T11137] lock_acquire+0x1ed/0x550 [ 471.142290][T11137] __mutex_lock+0x1ac/0xee0 [ 471.147394][T11137] blk_register_queue+0x149/0x400 [ 471.152927][T11137] add_disk_fwnode+0x648/0xf80 [ 471.158204][T11137] nbd_dev_add+0x812/0xc60 [ 471.163142][T11137] nbd_genl_connect+0xc01/0x1c80 [ 471.168596][T11137] genl_rcv_msg+0xb14/0xec0 [ 471.173621][T11137] netlink_rcv_skb+0x1e3/0x430 [ 471.178909][T11137] genl_rcv+0x28/0x40 [ 471.183404][T11137] netlink_unicast+0x7f6/0x990 [ 471.188698][T11137] netlink_sendmsg+0x8e4/0xcb0 [ 471.194058][T11137] __sock_sendmsg+0x221/0x270 [ 471.199252][T11137] ____sys_sendmsg+0x52a/0x7e0 [ 471.204530][T11137] __sys_sendmsg+0x269/0x350 [ 471.209674][T11137] do_syscall_64+0xf3/0x230 [ 471.214695][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.221104][T11137] [ 471.221104][T11137] other info that might help us debug this: [ 471.221104][T11137] [ 471.231336][T11137] Chain exists of: [ 471.231336][T11137] &q->sysfs_lock --> &q->q_usage_counter(io)#54 --> &q->sysfs_dir_lock [ 471.231336][T11137] [ 471.245504][T11137] Possible unsafe locking scenario: [ 471.245504][T11137] [ 471.253013][T11137] CPU0 CPU1 [ 471.258464][T11137] ---- ---- [ 471.263827][T11137] lock(&q->sysfs_dir_lock); [ 471.268502][T11137] lock(&q->q_usage_counter(io)#54); [ 471.276481][T11137] lock(&q->sysfs_dir_lock); [ 471.283758][T11137] lock(&q->sysfs_lock); [ 471.288105][T11137] [ 471.288105][T11137] *** DEADLOCK *** [ 471.288105][T11137] [ 471.296240][T11137] 3 locks held by syz.2.1450/11137: [ 471.301514][T11137] #0: ffffffff8fd03250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 471.309785][T11137] #1: ffffffff8fd03108 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 471.318839][T11137] #2: ffff888028424ae0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_register_queue+0x67/0x400 [ 471.328955][T11137] [ 471.328955][T11137] stack backtrace: [ 471.334877][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.2.1450 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 471.345714][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 471.356023][T11137] Call Trace: [ 471.359310][T11137] [ 471.362244][T11137] dump_stack_lvl+0x241/0x360 [ 471.367016][T11137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.372223][T11137] ? __pfx__printk+0x10/0x10 [ 471.376812][T11137] print_circular_bug+0x13a/0x1b0 [ 471.381839][T11137] check_noncircular+0x36a/0x4a0 [ 471.386775][T11137] ? mark_lock+0x9a/0x360 [ 471.391096][T11137] ? __pfx_check_noncircular+0x10/0x10 [ 471.396556][T11137] ? lockdep_lock+0x123/0x2b0 [ 471.401227][T11137] ? mark_lock+0x9a/0x360 [ 471.405549][T11137] validate_chain+0x18ef/0x5920 [ 471.410404][T11137] ? __pfx_validate_chain+0x10/0x10 [ 471.415596][T11137] ? up_write+0x1a9/0x590 [ 471.419922][T11137] ? up_write+0x1a9/0x590 [ 471.424248][T11137] ? mark_lock+0x9a/0x360 [ 471.428571][T11137] ? mark_lock+0x9a/0x360 [ 471.432980][T11137] ? mark_lock+0x9a/0x360 [ 471.437308][T11137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.443630][T11137] __lock_acquire+0x1397/0x2100 [ 471.448484][T11137] lock_acquire+0x1ed/0x550 [ 471.452990][T11137] ? blk_register_queue+0x149/0x400 [ 471.458183][T11137] ? __pfx_lock_acquire+0x10/0x10 [ 471.463195][T11137] ? __pfx___might_resched+0x10/0x10 [ 471.468485][T11137] ? xa_find_after+0x689/0x700 [ 471.473244][T11137] ? xa_find_after+0x1b1/0x700 [ 471.478004][T11137] __mutex_lock+0x1ac/0xee0 [ 471.482511][T11137] ? blk_register_queue+0x149/0x400 [ 471.487709][T11137] ? blk_register_queue+0x149/0x400 [ 471.492896][T11137] ? __pfx___mutex_lock+0x10/0x10 [ 471.497926][T11137] ? kobject_init+0x83/0x1f0 [ 471.502511][T11137] blk_register_queue+0x149/0x400 [ 471.507619][T11137] add_disk_fwnode+0x648/0xf80 [ 471.512552][T11137] ? __raw_spin_lock_init+0x45/0x100 [ 471.517834][T11137] nbd_dev_add+0x812/0xc60 [ 471.522243][T11137] ? __mutex_lock+0x37f/0xee0 [ 471.526920][T11137] ? __pfx_nbd_dev_add+0x10/0x10 [ 471.531858][T11137] ? bpf_lsm_capable+0x9/0x10 [ 471.536696][T11137] ? security_capable+0x7e/0x2d0 [ 471.541628][T11137] ? radix_tree_lookup+0x253/0x290 [ 471.546734][T11137] nbd_genl_connect+0xc01/0x1c80 [ 471.551764][T11137] ? __pfx_nbd_genl_connect+0x10/0x10 [ 471.557307][T11137] ? __nla_parse+0x40/0x60 [ 471.561719][T11137] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 471.568218][T11137] genl_rcv_msg+0xb14/0xec0 [ 471.572808][T11137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.577842][T11137] ? __pfx_lock_acquire+0x10/0x10 [ 471.582859][T11137] ? __pfx_nbd_genl_connect+0x10/0x10 [ 471.588327][T11137] ? __pfx___might_resched+0x10/0x10 [ 471.593701][T11137] netlink_rcv_skb+0x1e3/0x430 [ 471.598455][T11137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.603474][T11137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.608772][T11137] genl_rcv+0x28/0x40 [ 471.612754][T11137] netlink_unicast+0x7f6/0x990 [ 471.617534][T11137] ? __pfx_netlink_unicast+0x10/0x10 [ 471.622816][T11137] ? __phys_addr_symbol+0x48/0x70 [ 471.627834][T11137] ? __phys_addr_symbol+0x2f/0x70 [ 471.632850][T11137] ? __check_object_size+0x47a/0x730 [ 471.638137][T11137] netlink_sendmsg+0x8e4/0xcb0 [ 471.642899][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.648190][T11137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.653561][T11137] __sock_sendmsg+0x221/0x270 [ 471.658261][T11137] ____sys_sendmsg+0x52a/0x7e0 [ 471.663052][T11137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.668384][T11137] ? __fget_files+0x2a/0x410 [ 471.673153][T11137] ? __fget_files+0x2a/0x410 [ 471.677756][T11137] __sys_sendmsg+0x269/0x350 [ 471.682349][T11137] ? __pfx_futex_wake+0x10/0x10 [ 471.687202][T11137] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.692321][T11137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.698653][T11137] do_syscall_64+0xf3/0x230 [ 471.703169][T11137] ? clear_bhb_loop+0x35/0x90 [ 471.707839][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.713741][T11137] RIP: 0033:0x7ff8cdd85d29 [ 471.718152][T11137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.737772][T11137] RSP: 002b:00007ff8ceaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.746382][T11137] RAX: ffffffffffffffda RBX: 00007ff8cdf75fa0 RCX: 00007ff8cdd85d29 [ 471.754444][T11137] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 471.762495][T11137] RBP: 00007ff8cde01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 471.770592][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.778739][T11137] R13: 0000000000000000 R14: 00007ff8cdf75fa0 R15: 00007ffe709cbb48 [ 471.786907][T11137] [ 471.804401][T11133] caif:caif_disconnect_client(): nothing to disconnect [ 471.987365][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'.