last executing test programs: 14m30.043430392s ago: executing program 32 (id=1184): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) 13m4.24669819s ago: executing program 4 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa, 0xffffffff, 0x7, 0x6, 0xfffffffb, 0x400000}}}}]}, 0x4c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m3.352602007s ago: executing program 4 (id=1403): close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x612a, 0x17e, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x101000) 13m2.123969062s ago: executing program 4 (id=1408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendto$packet(r1, 0x0, 0x0, 0x4000010, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x23, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioperm(0x2, 0x7, 0x13) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 13m0.993357284s ago: executing program 4 (id=1411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13m0.388229895s ago: executing program 4 (id=1413): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) chdir(&(0x7f0000000140)='./bus\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 13m0.090258291s ago: executing program 4 (id=1415): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0xff, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) gettid() 12m44.424745048s ago: executing program 33 (id=1415): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0xff, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) gettid() 12m25.89939666s ago: executing program 1 (id=1472): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaadd604000000014060100000000000000000000000000000000fe8000000000000000000000000000aa00004e220000000000000000657288583b7db6bce24dbafafc7452002897e7f2be94d35b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500700009078000f"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @void, @x25={0x1, 0x6e, 0xb}}, 0x3) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) socket(0x10, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 12m20.330158589s ago: executing program 1 (id=1478): mknod(0x0, 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x14b800, 0x134) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 12m19.155966872s ago: executing program 1 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x800000001fe, 0x82) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x40202) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x3, 0xb, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c000000fc030000000000000000a30e6bb3af00", [0x101, 0x2]}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="700000001d00010026bd7000fcdbdf2508001e00910700000c1e000700000044000500e0000002000000000000000000000000000004d43c0000000a000000fc0000000000000000000000000000000135000004000e000f000000100000000200"/112], 0x70}}, 0x20004800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 12m14.725853949s ago: executing program 1 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 12m13.576117231s ago: executing program 0 (id=1489): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 12m13.314503666s ago: executing program 1 (id=1490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendto$packet(r1, 0x0, 0x0, 0x4000010, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x23, 0x6, @multicast}, 0x14) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) socket$kcm(0xa, 0x5, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 12m12.746526007s ago: executing program 0 (id=1491): gettid() r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r0, &(0x7f0000000340), 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 12m11.934968603s ago: executing program 0 (id=1492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x62f) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0x2, 0x5, &(0x7f0000000100)={0x14, "4f21a316284acccbfa2e1aef81eaba78d96f879a495a1200000000000000e00481"}}) 12m11.862810965s ago: executing program 1 (id=1493): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @void, @x25={0x1, 0x6e, 0xb}}, 0x3) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) socket(0x10, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 12m11.390068914s ago: executing program 34 (id=1493): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000180)={0x1}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @void, @x25={0x1, 0x6e, 0xb}}, 0x3) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x32}) socket(0x10, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 12m10.472100752s ago: executing program 0 (id=1495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x800000001fe, 0x82) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x40202) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x3, 0xb, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c000000fc030000000000000000a30e6bb3af00", [0x101, 0x2]}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="700000001d00010026bd7000fcdbdf2508001e00910700000c1e000700000044000500e0000002000000000000000000000000000004d43c0000000a000000fc0000000000000000000000000000000135000004000e000f000000100000000200"/112], 0x70}}, 0x20004800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 12m9.317706535s ago: executing program 0 (id=1497): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 12m8.924678742s ago: executing program 5 (id=1438): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0xb6, 0x0, 0x40}, 0x0) 12m8.856968924s ago: executing program 0 (id=1498): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 12m6.770015144s ago: executing program 5 (id=1500): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgsnd(r1, 0x0, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) mknod(0x0, 0x8001420, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xc5, @rand_addr=' \x01\x00', 0xffff}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, 0x0, 0x1b) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 12m5.137275377s ago: executing program 5 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x800000001fe, 0x82) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x40202) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x3, 0xb, 0x0, 0x0, 0x8, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c000000fc030000000000000000a30e6bb3af00", [0x101, 0x2]}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="700000001d00010026bd7000fcdbdf2508001e00910700000c1e000700000044000500e0000002000000000000000000000000000004d43c0000000a000000fc0000000000000000000000000000000135000004000e000f000000100000000200"/112], 0x70}}, 0x20004800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 12m4.015904618s ago: executing program 5 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 12m2.844138611s ago: executing program 5 (id=1507): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0xb6, 0x0, 0x40}, 0x0) 12m2.686690115s ago: executing program 2 (id=1508): gettid() signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 12m1.963699739s ago: executing program 2 (id=1509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000300)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12m1.005740027s ago: executing program 2 (id=1510): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgsnd(r1, 0x0, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) mknod(0x0, 0x8001420, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4045efe) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xc5, @rand_addr=' \x01\x00', 0xffff}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, 0x0, 0x1b) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 11m59.238309332s ago: executing program 2 (id=1511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.current\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0xa000, 0x7fffffff, 0x0, 0x0, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [], {0x4, 0x2}}, 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(0x0, 0x2182, 0x26) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) r6 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r6, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x0) 11m54.168441361s ago: executing program 2 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 11m53.944354495s ago: executing program 2 (id=1516): gettid() signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 11m53.108952212s ago: executing program 35 (id=1498): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f0000000040)={r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(&(0x7f0000000140)='./bus\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) socket$nl_route(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 11m46.911871843s ago: executing program 36 (id=1507): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x5e00, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x4, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0xb6, 0x0, 0x40}, 0x0) 11m37.978462938s ago: executing program 37 (id=1516): gettid() signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 2m19.81475898s ago: executing program 8 (id=2781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) 2m19.702325752s ago: executing program 8 (id=2783): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 2m19.428963387s ago: executing program 8 (id=2784): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2m18.030876916s ago: executing program 8 (id=2786): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='memory.swap.current\x00', 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0xfffffffffffffff3, 0xfffffffffffffffd, 0x9, 0x0, {0x2, 0x80000808000080, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0xa000, 0x7fffffff, 0x0, 0x0, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [], {0x4, 0x2}}, 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(0x0, 0x2182, 0x26) chdir(&(0x7f0000000140)='./bus\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 2m11.873216809s ago: executing program 8 (id=2800): syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) 2m9.781067791s ago: executing program 8 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x1c}, @void, @mpls}, 0x4) 1m53.967657029s ago: executing program 38 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x1c}, @void, @mpls}, 0x4) 22.689008144s ago: executing program 7 (id=2945): r0 = socket(0x3, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)}, {&(0x7f0000000880)="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", 0x780}, {0x0}, {&(0x7f0000000340)='os', 0x2}, {&(0x7f0000000500)="dfa6fe0bdeac2bd919ef32e4e46c6a74a7f0bfd56d464b4e4aae166aaaff2aca60d37d9d2dfcb49cf92efcfb2ca9ba713811d11157c3cb9d791a1366eadef3bce4128f7bfd9e66d92633ad1a92c9acf18ec6a044496c028531258052fee502e1b091db0a805f764f", 0x68}, {&(0x7f00000003c0)}, {&(0x7f0000000680)="440e1564683fe2e797311a54cd7efa4af85f66129b75718d2e40253128956abf8f2f67d8c16adee736c3eb32b3f339ca83e5d55c318f65d3febd2b6ff116bf73e717100634029a6cc532dc75d4cde5509c1358201bc955a4d2a4c7d67a1c5c773c657ef38b26974ee2a00a1435defc5aff17f9d476e0d6007158d8413f17e4fc09113b5d84126daa0def9482da6562a0015787f42ad6d204ec6f6624526ae7f6b3f7e9f5c21426da8ebefdf2ca8e47f89d268fd8e832d308c1d13d0d4f46e5498d354561", 0xc4}, {&(0x7f0000000780)="f9b6e11c8eb5d232c8c6ada542698e6c2f38d0aae3d6c01e56a2099faece63df0621034715a6b357151020ba4f021cb9a21de316ed69a20f7ea75be9b2423ea138a17ee01a1b0fd9e39fd30a539901d2c692a2a85431e7ab5a8fd07e", 0x5c}], 0x8, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x18}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {}, {@initdev}]}}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e20, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000400)={0x2, 0x5a6b9e18ff896410}, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xfffffff, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x5, '\x00', @ptr=0x5}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) close_range(r4, 0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 21.478860878s ago: executing program 3 (id=2947): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 21.421554759s ago: executing program 7 (id=2948): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x1a26, 0x1, 0x3, 0x165}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_to_batadv\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x3, [0x7, 0xffff, 0xff]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000019500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) io_setup(0x6, &(0x7f00000002c0)) r7 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.107042556s ago: executing program 3 (id=2951): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x200000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rfkill(0xffffff9c, &(0x7f00000001c0), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200004) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000180)) write$apparmor_exec(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 18.089321676s ago: executing program 9 (id=2952): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 17.9144834s ago: executing program 7 (id=2954): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xffffffff) socketpair(0x28, 0x5, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000580)=0x1) syz_usbip_server_init(0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) 14.844855371s ago: executing program 3 (id=2956): r0 = socket(0x3, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)}, {&(0x7f0000000880)="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", 0x780}, {0x0}, {&(0x7f0000000340)='os', 0x2}, {&(0x7f0000000500)="dfa6fe0bdeac2bd919ef32e4e46c6a74a7f0bfd56d464b4e4aae166aaaff2aca60d37d9d2dfcb49cf92efcfb2ca9ba713811d11157c3cb9d791a1366eadef3bce4128f7bfd9e66d92633ad1a92c9acf18ec6a044496c028531258052fee502e1b091db0a805f764f", 0x68}, {&(0x7f00000003c0)}, {&(0x7f0000000680)="440e1564683fe2e797311a54cd7efa4af85f66129b75718d2e40253128956abf8f2f67d8c16adee736c3eb32b3f339ca83e5d55c318f65d3febd2b6ff116bf73e717100634029a6cc532dc75d4cde5509c1358201bc955a4d2a4c7d67a1c5c773c657ef38b26974ee2a00a1435defc5aff17f9d476e0d6007158d8413f17e4fc09113b5d84126daa0def9482da6562a0015787f42ad6d204ec6f6624526ae7f6b3f7e9f5c21426da8ebefdf2ca8e47f89d268fd8e832d308c1d13d0d4f46e5498d354561", 0xc4}, {&(0x7f0000000780)="f9b6e11c8eb5d232c8c6ada542698e6c2f38d0aae3d6c01e56a2099faece63df0621034715a6b357151020ba4f021cb9a21de316ed69a20f7ea75be9b2423ea138a17ee01a1b0fd9e39fd30a539901d2c692a2a85431e7ab5a8fd07e", 0x5c}], 0x8, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x18}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {}, {@initdev}]}}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e20, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000400)={0x2, 0x5a6b9e18ff896410}, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xfffffff, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x5, '\x00', @ptr=0x5}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) close_range(r4, 0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 12.963744719s ago: executing program 6 (id=2957): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f7, 0x13290, 0xfffffffd, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x10091) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff200000002011000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 12.842869642s ago: executing program 3 (id=2958): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10.95614016s ago: executing program 6 (id=2959): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10.746254354s ago: executing program 6 (id=2960): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.459373109s ago: executing program 3 (id=2961): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgsnd(r1, 0x0, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) mknod(0x0, 0x8001420, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4045efe) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xc5, @rand_addr=' \x01\x00', 0xffff}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, 0x0, 0x1b) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 10.377101451s ago: executing program 9 (id=2962): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x1a26, 0x1, 0x3, 0x165}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth1_to_batadv\x00', &(0x7f0000000300)=@ethtool_stats={0x1d, 0x3, [0x7, 0xffff, 0xff]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000019500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) io_setup(0x6, &(0x7f00000002c0)) r7 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.317570472s ago: executing program 7 (id=2963): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000008, 0x8010, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@local, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c) socket(0x1d, 0x5, 0x6) r4 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 10.287918373s ago: executing program 6 (id=2964): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x1, 0x101, 0x0) 6.394546052s ago: executing program 9 (id=2965): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000008, 0x8010, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000080)={@local, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c) socket(0x1d, 0x5, 0x6) r5 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) 6.301605223s ago: executing program 7 (id=2966): r0 = socket(0x3, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)}, {&(0x7f0000000880)="a8cd8f0fccb2baf14d811a21d4d6f9ef512b3c7a6e616faf09b345f7968042fe48536d11686c363e68d4089c32c422fe8ae58d86f3d98b2574c2f9eda14a9f86c93908fd1f409aaf170cac9c84ac01291f14ca6cb8fad353ddf35468f02c908b097bb543311f9c56ca23ec228b138062879a9b1f5dbabd07945852c90aad461a5cd605b585a4ae9204df4b96e724b93d8e09c5542dc3296fcbbfcb81a9f7221263da7cb2c8eac338f3275c5c6655fd4210a8f8d050dee44dc3b8584a03e47c83a2f664361c4739b5133cdcbff0911616ba99e4f1e99c261edddc76374bdace7641af9dacae5b8c9b43e6367d3a7fd222a1f285abd600659eb44c59e5a68de4cf130172b5be106523d2c63d3f5cc9e97c56aa9c0f46dda9f0efdcf670fb2b4920d595ba4de782476823ef17bb3f0b673f88d267bedddb18a9222fd93b1fa2b0a438a107851ecb691c5d8e03ead108d4316c98088f8eb3b2426b3780a3255a16e800e53b8dd1df8bb664bf6f8e0c6685071a4a5364e5b17d98fa07c85b20cfdb0c17566604fcced863431a929a0fe385d80f02cad830194da29a31facaf9d148d66712bcbf8b0f0527b65329a1edc33f807721e62cab3a018c4f4b8f3d26c6d814592bbbb25a35d2aaecc896765a23603d1685963c01905f5c745e2d5cdd923ad27c7e13ff554bc445e39a74f12eda7bd5b5c170aa8fb9e728bd761c2c4d66a87a0aa7dd0f26e6c77c967bdefd9b8373720e26c6fcb381e8b3145e531c22728ead14a79d21cf89bb89332dc1ad17e2b8afb93c05422e2998a311845bceda24e4f055c3133117d0df02c12722d8116b606d1643589f27cd37fec8f3519f90dc2e7cfffba7d44249a400c3865855791e4a68143c5faaee408f946aa9b6050f4e65cd5b875cbcd11bf0e56d03a3fa2043cd65f2a4dd5ade88f34c253d0734e5af6a4e111800e918cac865ae47ce7e77fbfa67eb317e74ba5f62e21b0bbc1ace7d4e49fc2c64184c4890ccaf3c6e1a51a7285faef44b186c183d66033e91a124a03dbd131c3a1ce0b023633cc0f4158096d0c8db41d340c27eba9004ae1b1de950ecdeb03173389453f1db4f1ad382814ba8b82302782dee0a338b35eec5e1e217061669735de243ec36fbf0f01d44ad38884847f99887bdf5a79866a9650d88e658f95f57e8b39dbbc5db894702954dad4685e3db6fe9317c6e934e1b0cc866f63b736e88f817b08df009c50533ad68795984269c0beeb2ec3993dcbaf65480c23e20fece8a462d35a9b2848165f511768eeda0c2463a98e9c51215473fc39dd0e80606fa2afb2548a450db2927d93cbae1d6e71aa88e9dcb0d349d2feaf3d98ee4fa4c26be50544516c6a28a9ac881538469944f914ac9c9e18bd378978fea2cb340b615f948e7447b808095d9a184a9794cbfdef46b352e52be95368beee6c96d37db98015f4fc8a571e32e4f08e128d16400965e1f7396df4126de58f948595f01e4deb5d262c0b52053cb65200442551d9bffb05f73a249aa5a1d4dfbd6e70a04c75af8eed2823b8a33da9b93e703bb0ebbcf01786c85e38252a5734ffbf628512dc0ea96cff9f9050e2c18a74cd9694a9a3584ab98984004671821551ff6266d2cc4bddb786d756cc19e680e363872f85d0311b970c5d8ba37e0503f1af567e3b1b3f35e0a77eb87393720502ffd3efe495f9a51c95c466d442dc8b7b66a36e0d28fefead741cbd1baf684641123f7f837abd1ad91e3da80705890aa17e620e0f0f00c6265b9af4f8e7772b7d2b792a6e5946fd8d0db91a1bd88cabe51eef88a65bfc70d36fe94010563b502eae0305868590cbbbeb2abc07d9f491d862f72ce9165aeaa6803638f7d94f9a9a070b90ef630f721eaa027b85ee56d8ac142ff6939d61b91109706856a4e33cd92a6b0e6469a9bbb6c8d1240394ef784e4d4e26b3f2f0896cb5e60339c2527f59aa4ae4b54a5eed8a103852ff4d40efabf52efd2bef818c898ce9431f5855ccf8ea73f6e67c54b7bd02006db1626abf0f48f32d14f45b7af7435a1610239759eed607a4bbe219d25da790a3aa246ff86476b71ac8642764adfb9650c7278da31310fef5d7ddd7ea1d611d5a88cb14a04265044f5c7c2f2fee23a965f02d54ea120a5d4c1a3372ba44b2bccc496cd3b1088babe99a00f909420752c6dcae562067933c4e0a50d4e64d943323231f0568e91cedb7d7f26aa6000d4794d4b1768ca700a98061d22af78744a8e37071423e3d654b16f23f078de666520a84e3787f2343a8ebf472e4150bf62559bbcf63d1997ffdd8b7e47f9ea8312fff66e8957d9adb638e3029e4f7b2caa9f8711f41f6f4ffaa6932a097751995623d8fb5af4133c15708bd26e588b6be279ee4f428133b798ac07c860b31dfd0caa39b6b1ba93f3b09deda150be243457b7f3077589719415b2a80ca9b76d1fd47f1967baee4c5fb0b50ce10bee0ee220becd2494cdf927587d1b213ab9f60e4c7e9747f4bf813d9948a1f9d87b62c4bbf5cd3f52156896888985749795361c37b206fcb61e6a0ec6b908f83a6159f167e2709a939d1871af14976f94f826a6a514ed28b55468b288c7132850d33b44db55eaa6dbc17fb091eb89f72a84153124991dae7accf69b68fb970493c849baf807de3118f6d9e02dc5f47f0f3c774e54645afe71f827f9c75845e58b03b89d2ed37c96b7a6dd081f84ca", 0x780}, {0x0}, {&(0x7f0000000340)='os', 0x2}, {&(0x7f0000000500)="dfa6fe0bdeac2bd919ef32e4e46c6a74a7f0bfd56d464b4e4aae166aaaff2aca60d37d9d2dfcb49cf92efcfb2ca9ba713811d11157c3cb9d791a1366eadef3bce4128f7bfd9e66d92633ad1a92c9acf18ec6a044496c028531258052fee502e1b091db0a805f764f", 0x68}, {&(0x7f00000003c0)}, {&(0x7f0000000680)="440e1564683fe2e797311a54cd7efa4af85f66129b75718d2e40253128956abf8f2f67d8c16adee736c3eb32b3f339ca83e5d55c318f65d3febd2b6ff116bf73e717100634029a6cc532dc75d4cde5509c1358201bc955a4d2a4c7d67a1c5c773c657ef38b26974ee2a00a1435defc5aff17f9d476e0d6007158d8413f17e4fc09113b5d84126daa0def9482da6562a0015787f42ad6d204ec6f6624526ae7f6b3f7e9f5c21426da8ebefdf2ca8e47f89d268fd8e832d308c1d13d0d4f46e5498d354561", 0xc4}, {&(0x7f0000000780)="f9b6e11c8eb5d232c8c6ada542698e6c2f38d0aae3d6c01e56a2099faece63df0621034715a6b357151020ba4f021cb9a21de316ed69a20f7ea75be9b2423ea138a17ee01a1b0fd9e39fd30a539901d2c692a2a85431e7ab5a8fd07e", 0x5c}], 0x8, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x18}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001900)={@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {}, {@initdev}]}}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e20, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000400)={0x2, 0x5a6b9e18ff896410}, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, &(0x7f0000000100)={0xfffffff, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x5, '\x00', @ptr=0x5}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) close_range(r4, 0xffffffffffffffff, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4.697279966s ago: executing program 6 (id=2967): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0x18f7, 0x13290, 0xfffffffd, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x10091) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRESHEX], &(0x7f0000000340)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff200000002011000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.674601326s ago: executing program 7 (id=2968): r0 = socket(0x25, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x401}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x0, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 4.578065048s ago: executing program 3 (id=2969): syz_open_dev$vim2m(&(0x7f0000000240), 0x43d3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002780)) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x406, r7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x60000006}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r9}, 0x10) 4.577307278s ago: executing program 9 (id=2970): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c8, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x20}]}, &(0x7f0000000280)='GPL\x00', 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 908.883892ms ago: executing program 6 (id=2971): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r5 = socket(0x15, 0x80005, 0x0) getsockopt(r5, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xffffffff) socketpair(0x28, 0x5, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000580)=0x1) syz_usbip_server_init(0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) 806.682524ms ago: executing program 9 (id=2972): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 9 (id=2973): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix_mp={0xfffffff8, 0x5, 0x34325241, 0x9, 0x4, [{0x9, 0x3}, {0x3, 0x1000}, {0x1, 0x451}, {0xffffff16, 0x4}, {0x6, 0x4}, {0xfffffff8, 0x3d}, {0x4, 0x5}, {0x5, 0xfffffbff}], 0x1, 0x3, 0x0, 0x0, 0x6}}) sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) read(r3, &(0x7f00000009c0)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.797600][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.482370][T13201] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1529'. [ 1009.650687][T13210] autofs4:pid:13210:autofs_fill_super: called with bogus options [ 1010.476094][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d862400: rx timeout, send abort [ 1010.488048][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d862400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1012.400830][T13160] usb 9-1: USB disconnect, device number 2 [ 1013.364206][T13254] virtio-fs: tag not found [ 1013.687655][T13270] autofs4:pid:13270:autofs_fill_super: called with bogus options [ 1015.720262][ T967] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1015.936159][ T967] usb 10-1: Using ep0 maxpacket: 8 [ 1015.990834][ T967] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.032853][ T967] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.075992][ T967] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1016.107669][ T967] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.141882][ T967] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.179087][ T967] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1016.233838][ T967] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1016.243258][ T967] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1016.316256][ T967] usb 10-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1016.380039][ T967] usb 10-1: string descriptor 0 read error: -22 [ 1016.389904][ T967] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1016.422778][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.463079][ T967] adutux 10-1:168.0: interrupt endpoints not found [ 1017.284023][T13320] autofs4:pid:13320:autofs_fill_super: called with bogus options [ 1018.463606][T13352] Bluetooth: MGMT ver 1.22 [ 1018.926693][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880302b3800: rx timeout, send abort [ 1018.935533][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880302b3800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1020.822144][ T8216] usb 10-1: USB disconnect, device number 2 [ 1027.488052][T13478] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1027.494836][T13478] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1027.502971][T13478] vhci_hcd vhci_hcd.0: Device attached [ 1027.786845][ T8216] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1027.808810][T13479] vhci_hcd: connection reset by peer [ 1027.826084][ T2969] vhci_hcd: stop threads [ 1027.843719][ T2969] vhci_hcd: release socket [ 1027.869910][ T2969] vhci_hcd: disconnect device [ 1031.686439][T13524] ptrace attach of "./syz-executor exec"[12919] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x [ 1031.819241][T13529] syzkaller1: entered promiscuous mode [ 1031.945413][T13529] syzkaller1: entered allmulticast mode [ 1032.922552][ T8216] vhci_hcd: vhci_device speed not set [ 1034.441474][T13564] capability: warning: `syz.9.1628' uses 32-bit capabilities (legacy support in use) [ 1036.403321][T13589] ubi: mtd0 is already attached to ubi31 [ 1036.439121][T13589] kAFS: unparsable volume name [ 1038.740082][ T28] audit: type=1800 audit(1756850205.616:155): pid=13622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1642" name="bus" dev="overlay" ino=319 res=0 errno=0 [ 1041.427083][T12995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1041.699563][T12995] usb 7-1: Using ep0 maxpacket: 32 [ 1041.754593][T12995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.796646][T12995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.832991][T12995] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1041.846126][T12995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.866194][T12995] usb 7-1: config 0 descriptor?? [ 1041.939658][T13672] ubi: mtd0 is already attached to ubi31 [ 1041.965643][T13672] kAFS: unparsable volume name [ 1042.344133][T12995] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1043.838533][ T967] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 1044.980786][ T8216] usb 7-1: USB disconnect, device number 2 [ 1045.183078][T13700] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1050.246833][T12996] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1051.225037][T13769] ubi: mtd0 is already attached to ubi31 [ 1051.241754][T13769] kAFS: unparsable volume name [ 1051.405951][T12996] usb 8-1: Using ep0 maxpacket: 32 [ 1051.501136][T12996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.624428][T12996] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.279563][T12996] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1052.327854][T12996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.400590][T12996] usb 8-1: config 0 descriptor?? [ 1052.897898][T12996] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1053.748702][ T967] usb 8-1: USB disconnect, device number 2 [ 1054.008349][T13787] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1670'. [ 1054.919206][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.640019][T13820] [U]  [ 1056.643501][T13820] [U] K{ [ 1056.689263][T13820] [U] t 1ŠFfˊ`GJgo/mC [ 1056.697085][T13820] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1056.719510][T13820] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1056.743371][T13820] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1057.422429][T13820] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1057.521278][T13820] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1057.534201][T13820] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1057.547052][T13820] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1057.641030][T13820] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1057.659301][T13820] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1057.676187][T13820] [U] 22Ʃx?0;3u [ 1057.680633][T13820] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1057.776248][T13820] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1057.829127][T13820] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1057.838917][T13820] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1057.848343][T13820] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1057.876844][T13820] [U] ec [ 1057.880234][T13820] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1057.975324][T13818] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1058.265985][T11865] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1058.476071][T11865] usb 7-1: Using ep0 maxpacket: 32 [ 1058.496847][T11865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.549788][T13845] ubi: mtd0 is already attached to ubi31 [ 1058.564392][T11865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.612516][T13845] kAFS: unparsable volume name [ 1058.622436][T11865] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1058.656801][T11865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.676960][T11865] usb 7-1: config 0 descriptor?? [ 1058.969044][T13853] virtio-fs: tag not found [ 1059.234572][T11865] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1060.606538][T12996] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 1061.676001][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1061.838232][T12995] usb 7-1: USB disconnect, device number 3 [ 1061.895966][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1062.066406][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1062.186010][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1062.327223][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1062.365911][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.423216][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1062.453294][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.717476][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 1062.726007][ T9] usbtmc 8-1:16.0: can't read capabilities [ 1063.008526][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.018513][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.029084][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.038396][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.047503][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.056939][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.066882][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.079270][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.088786][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.098086][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.178332][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.187801][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.197216][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.299627][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.309188][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.318860][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1063.412720][ T5843] usb 8-1: USB disconnect, device number 3 [ 1063.650988][T13904] CIFS mount error: No usable UNC path provided in device string! [ 1063.650988][T13904] [ 1063.713089][T13904] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1066.507848][T13929] virtio-fs: tag not found [ 1067.712046][T13947] ubi: mtd0 is already attached to ubi31 [ 1067.795332][T13947] kAFS: unparsable volume name [ 1069.445935][ T967] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1070.328512][ T967] usb 10-1: Using ep0 maxpacket: 8 [ 1070.346399][ T967] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1070.388125][ T967] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.452022][ T967] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.535886][ T967] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1070.601320][ T967] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.694171][ T967] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1070.768071][ T967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.030101][ T967] usb 10-1: usb_control_msg returned -32 [ 1071.036371][ T967] usbtmc 10-1:16.0: can't read capabilities [ 1072.180920][ T9] usb 10-1: USB disconnect, device number 3 [ 1072.188826][T13979] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 1072.796077][T13993] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1072.803032][T13993] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1072.811608][T13993] vhci_hcd vhci_hcd.0: Device attached [ 1072.829298][T13994] vhci_hcd: connection closed [ 1072.842276][ T1098] vhci_hcd: stop threads [ 1072.884017][ T1098] vhci_hcd: release socket [ 1072.891697][ T1098] vhci_hcd: disconnect device [ 1074.216041][T14024] 9pnet_virtio: no channels available for device syz [ 1074.698752][T14029] ubi: mtd0 is already attached to ubi31 [ 1076.291554][T14046] vivid-007: ================= START STATUS ================= [ 1076.300800][T14046] vivid-007: Enable Output Cropping: true [ 1076.307918][T14046] vivid-007: Enable Output Composing: true [ 1076.314495][T14046] vivid-007: Enable Output Scaler: true [ 1076.320638][T14046] vivid-007: Tx RGB Quantization Range: Automatic [ 1076.327683][T14046] vivid-007: Transmit Mode: HDMI [ 1076.333318][T14046] vivid-007: Display Present: true inactive [ 1076.339850][T14046] vivid-007: Hotplug Present: 0x00000001 [ 1076.346189][T14046] vivid-007: RxSense Present: 0x00000001 [ 1076.352272][T14046] vivid-007: EDID Present: 0x00000001 [ 1076.358108][T14046] vivid-007: ================== END STATUS ================== [ 1078.288953][T14074] autofs4:pid:14074:autofs_fill_super: called with bogus options [ 1078.601699][ T28] audit: type=1804 audit(1756850245.476:156): pid=14084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1726" name="/newroot/46/bus/bus" dev="overlay" ino=278 res=1 errno=0 [ 1078.774493][ T28] audit: type=1804 audit(1756850245.646:157): pid=14070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1726" name="/newroot/46/bus/bus" dev="overlay" ino=278 res=1 errno=0 [ 1079.276049][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1079.492672][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1079.526885][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.577570][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.606836][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1079.636011][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.694637][ T9] usb 7-1: config 0 descriptor?? [ 1080.181006][ T9] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1080.198364][T14099] macsec0: entered promiscuous mode [ 1080.227191][T14099] macsec0: entered allmulticast mode [ 1080.349569][T14099] veth1_macvtap: entered allmulticast mode [ 1080.401931][T14105] nfs: Unknown parameter ' "' [ 1080.524708][ T967] usb 7-1: USB disconnect, device number 4 [ 1082.477115][T14148] binder: 14142:14148 ioctl c0306201 0 returned -14 [ 1082.906142][T14159] autofs4:pid:14159:autofs_fill_super: called with bogus options [ 1082.956591][T14160] ubi: mtd0 is already attached to ubi31 [ 1083.019594][T14160] kAFS: unparsable volume name [ 1083.296097][ T58] Bluetooth: hci4: Frame reassembly failed (-84) [ 1083.881253][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1740'. [ 1085.360041][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1085.386421][T10434] Bluetooth: hci4: command 0x1003 tx timeout [ 1086.346199][T12995] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1086.570252][T12995] usb 9-1: Using ep0 maxpacket: 32 [ 1086.592025][T12995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.627087][T12995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.640227][T12995] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1086.660243][T12995] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.686940][T12995] usb 9-1: config 0 descriptor?? [ 1087.172146][T12995] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 1087.401472][T14222] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1745'. [ 1087.499992][ T787] usb 9-1: USB disconnect, device number 3 [ 1087.605213][T14214] fido_id[14214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1087.785945][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.027145][T14235] autofs4:pid:14235:autofs_fill_super: called with bogus options [ 1088.176708][T14241] CIFS mount error: No usable UNC path provided in device string! [ 1088.176708][T14241] [ 1088.201875][T14241] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1088.816576][ T28] audit: type=1804 audit(1756850255.696:158): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1749" name="/newroot/83/bus/bus" dev="overlay" ino=497 res=1 errno=0 [ 1088.867982][ T28] audit: type=1804 audit(1756850255.726:159): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1749" name="/newroot/83/bus/bus" dev="overlay" ino=497 res=1 errno=0 [ 1088.966111][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1089.025882][T14264] ubi: mtd0 is already attached to ubi31 [ 1089.076567][T14264] kAFS: unparsable volume name [ 1089.396314][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1089.529341][ T9] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1089.576505][ T9] usb 10-1: config 0 has no interface number 0 [ 1089.646388][ T9] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1089.669410][ T9] usb 10-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1089.777898][ T9] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1090.026028][ T9] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1090.165965][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.205335][ T9] usb 10-1: config 0 descriptor?? [ 1090.232873][ T9] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1090.488572][ T967] usb 10-1: USB disconnect, device number 4 [ 1092.277927][T14297] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1756'. [ 1093.338050][T14303] CIFS mount error: No usable UNC path provided in device string! [ 1093.338050][T14303] [ 1093.365939][T14303] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1094.585442][T14320] vivid-007: ================= START STATUS ================= [ 1094.593944][T14320] vivid-007: Enable Output Cropping: true [ 1094.605425][T14320] vivid-007: Enable Output Composing: true [ 1094.612429][T14320] vivid-007: Enable Output Scaler: true [ 1094.620397][T14320] vivid-007: Tx RGB Quantization Range: Automatic [ 1094.627443][T14320] vivid-007: Transmit Mode: HDMI [ 1094.633269][T14320] vivid-007: Display Present: true inactive [ 1094.640213][T14320] vivid-007: Hotplug Present: 0x00000001 [ 1094.646324][T14320] vivid-007: RxSense Present: 0x00000001 [ 1094.652171][T14320] vivid-007: EDID Present: 0x00000001 [ 1094.657912][T14320] vivid-007: ================== END STATUS ================== [ 1095.682337][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1764'. [ 1095.847135][T14336] netlink: 'syz.6.1765': attribute type 1 has an invalid length. [ 1097.102256][T14362] CIFS mount error: No usable UNC path provided in device string! [ 1097.102256][T14362] [ 1097.136040][T14362] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1099.998112][T14407] CIFS mount error: No usable UNC path provided in device string! [ 1099.998112][T14407] [ 1100.010144][T14407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1102.538280][T14450] CIFS mount error: No usable UNC path provided in device string! [ 1102.538280][T14450] [ 1102.566018][T14450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1103.070236][T12921] Bluetooth: hci1: command 0x0406 tx timeout [ 1105.249675][T14498] CIFS mount error: No usable UNC path provided in device string! [ 1105.249675][T14498] [ 1105.260922][T14498] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1106.239598][T14520] ubi: mtd0 is already attached to ubi31 [ 1106.269944][T14520] kAFS: unparsable volume name [ 1108.067461][T14550] CIFS mount error: No usable UNC path provided in device string! [ 1108.067461][T14550] [ 1108.097339][T14550] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1108.189243][T12921] Bluetooth: hci2: command 0x0406 tx timeout [ 1108.395898][ T967] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1108.697937][ T967] usb 8-1: Using ep0 maxpacket: 8 [ 1108.730841][ T967] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1108.768518][ T967] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1108.808346][ T967] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1108.848995][ T967] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.916594][ T967] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1108.980251][ T967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.234707][ T967] usb 8-1: GET_CAPABILITIES returned 0 [ 1109.271341][ T967] usbtmc 8-1:16.0: can't read capabilities [ 1109.516524][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1109.532058][ T967] usb 8-1: USB disconnect, device number 4 [ 1112.763097][T14600] CIFS mount error: No usable UNC path provided in device string! [ 1112.763097][T14600] [ 1112.773646][T14600] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1113.511437][T14615] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1113.518145][T14615] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1113.526114][T14615] vhci_hcd vhci_hcd.0: Device attached [ 1113.640200][T14624] ubi: mtd0 is already attached to ubi31 [ 1113.651546][T14624] kAFS: unparsable volume name [ 1113.661753][T14616] vhci_hcd: connection closed [ 1113.667680][ T1120] vhci_hcd: stop threads [ 1113.736065][T11755] vhci_hcd: vhci_device speed not set [ 1113.777676][ T1120] vhci_hcd: release socket [ 1113.931798][ T1120] vhci_hcd: disconnect device [ 1114.605942][T11755] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 1114.624397][T11755] usb 51-1: enqueue for inactive port 0 [ 1114.708779][T11755] vhci_hcd: vhci_device speed not set [ 1116.373725][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.785946][T14666] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1117.792797][T14666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1117.800686][T14666] vhci_hcd vhci_hcd.0: Device attached [ 1118.006064][ T967] vhci_hcd: vhci_device speed not set [ 1118.086062][ T967] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 1118.121029][T14668] vhci_hcd: connection reset by peer [ 1118.157077][ T48] vhci_hcd: stop threads [ 1118.161773][ T48] vhci_hcd: release socket [ 1118.197316][ T48] vhci_hcd: disconnect device [ 1119.027592][T14691] fuse: Bad value for 'fd' [ 1120.493022][T14709] vivid-007: ================= START STATUS ================= [ 1120.501457][T14709] vivid-007: Enable Output Cropping: true [ 1120.508575][T14709] vivid-007: Enable Output Composing: true [ 1120.514754][T14709] vivid-007: Enable Output Scaler: true [ 1120.520807][T14709] vivid-007: Tx RGB Quantization Range: Automatic [ 1120.528764][T14709] vivid-007: Transmit Mode: HDMI [ 1120.534577][T14709] vivid-007: Display Present: true inactive [ 1120.541173][T14709] vivid-007: Hotplug Present: 0x00000001 [ 1120.558016][T14709] vivid-007: RxSense Present: 0x00000001 [ 1120.563947][T14709] vivid-007: EDID Present: 0x00000001 [ 1120.570045][T14709] vivid-007: ================== END STATUS ================== [ 1121.714604][T14722] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1121.721393][T14722] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1121.729332][T14722] vhci_hcd vhci_hcd.0: Device attached [ 1121.795305][T14726] ubi: mtd0 is already attached to ubi31 [ 1121.814579][T14726] kAFS: unparsable volume name [ 1121.945932][ T5843] vhci_hcd: vhci_device speed not set [ 1122.036126][ T5843] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1122.052960][T14723] vhci_hcd: connection reset by peer [ 1122.068943][ T6553] vhci_hcd: stop threads [ 1122.075680][ T6553] vhci_hcd: release socket [ 1122.095236][ T6553] vhci_hcd: disconnect device [ 1122.949548][T14744] fuse: Bad value for 'fd' [ 1123.236011][ T967] vhci_hcd: vhci_device speed not set [ 1124.766198][ T967] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1124.950716][ T967] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1124.971226][ T967] usb 10-1: config 6 has an invalid interface number: 200 but max is 0 [ 1124.976068][T14780] binder: 14778:14780 ioctl 4018620d 0 returned -22 [ 1125.016016][ T967] usb 10-1: config 6 has no interface number 0 [ 1125.033227][ T967] usb 10-1: config 6 interface 200 has no altsetting 0 [ 1125.058768][ T967] usb 10-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1125.085412][ T967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.113068][ T967] usb 10-1: Product: syz [ 1125.128260][ T967] usb 10-1: Manufacturer: syz [ 1125.129499][T14783] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1125.141380][T14783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1125.150522][T14783] vhci_hcd vhci_hcd.0: Device attached [ 1125.181431][ T967] usb 10-1: SerialNumber: syz [ 1125.356025][ T9] vhci_hcd: vhci_device speed not set [ 1125.426160][ T9] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 1125.450016][T14784] vhci_hcd: connection reset by peer [ 1125.496558][ T1120] vhci_hcd: stop threads [ 1125.511351][ T1120] vhci_hcd: release socket [ 1125.592821][ T1120] vhci_hcd: disconnect device [ 1127.104996][T14815] ubi: mtd0 is already attached to ubi31 [ 1127.140869][T14815] kAFS: unparsable volume name [ 1127.175975][ T5843] vhci_hcd: vhci_device speed not set [ 1127.847993][ T967] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1127.902650][ T967] dvb-usb: bulk message failed: -71 (3/0) [ 1127.964021][ T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1128.008590][ T967] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1128.044112][ T967] usb 10-1: media controller created [ 1128.118334][T14830] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1869'. [ 1128.244753][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1128.537222][ T967] dvb-usb: bulk message failed: -71 (6/0) [ 1128.565998][ T967] dvb-usb: bulk message failed: -71 (6/0) [ 1128.600192][ T967] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1128.650925][ T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input19 [ 1128.742183][ T967] dvb-usb: schedule remote query interval to 150 msecs. [ 1128.788169][ T967] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1128.808864][ T967] usb 10-1: USB disconnect, device number 5 [ 1129.107070][ T967] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1129.110972][T14843] binder: 14842:14843 ioctl 4018620d 0 returned -22 [ 1130.606196][ T9] vhci_hcd: vhci_device speed not set [ 1131.066232][ T787] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1131.256010][ T787] usb 8-1: Using ep0 maxpacket: 32 [ 1131.821419][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.015969][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.026417][ T787] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1132.036013][ T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.057590][ T787] usb 8-1: config 0 descriptor?? [ 1133.338457][ T787] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1133.792699][T14897] ubi: mtd0 is already attached to ubi31 [ 1133.825176][T14897] kAFS: unparsable volume name [ 1133.919094][T14896] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1882'. [ 1134.370824][T14902] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1884'. [ 1134.565984][T12996] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 1135.866253][T11755] usb 8-1: USB disconnect, device number 5 [ 1138.786283][T11755] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1138.985961][T11755] usb 8-1: Using ep0 maxpacket: 32 [ 1139.012714][T11755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.055129][T11755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.100434][T11755] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1139.120403][T11755] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.154020][T11755] usb 8-1: config 0 descriptor?? [ 1139.651257][T11755] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1140.110259][T14974] ubi: mtd0 is already attached to ubi31 [ 1140.141765][T14974] kAFS: unparsable volume name [ 1141.125926][ T967] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 1143.146030][ T787] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1143.337060][ T27] usb 8-1: USB disconnect, device number 6 [ 1143.795990][ T787] usb 10-1: Using ep0 maxpacket: 8 [ 1143.829396][ T787] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1143.982991][ T787] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.015447][ T787] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.062746][ T787] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.101190][ T787] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.119118][ T787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.359543][ T787] usb 10-1: usb_control_msg returned -71 [ 1144.377888][ T787] usbtmc 10-1:16.0: can't read capabilities [ 1144.412445][ T787] usb 10-1: USB disconnect, device number 6 [ 1146.166095][ T8] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1146.355912][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 1146.427393][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.481383][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.542707][ T8] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1146.573350][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.619713][ T8] usb 10-1: config 0 descriptor?? [ 1147.092135][T15065] ubi: mtd0 is already attached to ubi31 [ 1147.159886][T15065] kAFS: unparsable volume name [ 1147.231602][ T8] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1148.009707][T15075] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1916'. [ 1148.595992][T11865] usb 10-1: reset high-speed USB device number 7 using dummy_hcd [ 1149.237619][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1922'. [ 1149.596575][T15106] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1926'. [ 1149.671470][ T27] usb 10-1: USB disconnect, device number 7 [ 1149.970595][T15118] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1149.977355][T15118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1149.986164][T15118] vhci_hcd vhci_hcd.0: Device attached [ 1150.186130][T11755] vhci_hcd: vhci_device speed not set [ 1150.266233][T11755] usb 49-1: new full-speed USB device number 4 using vhci_hcd [ 1150.299581][T15120] vhci_hcd: connection reset by peer [ 1150.316159][T13580] vhci_hcd: stop threads [ 1150.349348][T13580] vhci_hcd: release socket [ 1150.416531][T13580] vhci_hcd: disconnect device [ 1151.800570][T15138] ubi: mtd0 is already attached to ubi31 [ 1151.811753][T15138] kAFS: unparsable volume name [ 1152.070707][T15145] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1933'. [ 1154.490847][T15178] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1942'. [ 1154.975576][T15190] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1944'. [ 1155.750421][T11755] vhci_hcd: vhci_device speed not set [ 1158.737932][T15236] ubi: mtd0 is already attached to ubi31 [ 1158.759332][T15236] kAFS: unparsable volume name [ 1161.162689][T15259] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1954'. [ 1163.672882][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1957'. [ 1165.556242][T12921] Bluetooth: hci2: command 0x0406 tx timeout [ 1166.712567][T15323] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1965'. [ 1167.554468][T15327] overlayfs: failed to resolve './file0': -2 [ 1167.766895][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1967'. [ 1171.207582][T15373] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 1171.214726][T15373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1171.278549][T15373] vhci_hcd vhci_hcd.0: Device attached [ 1171.352444][T15383] JFS: discard option not supported on device [ 1171.359827][T15383] Mount JFS Failure: -22 [ 1171.364829][T15383] jfs_mount failed w/return code = -22 [ 1171.477068][T13160] vhci_hcd: vhci_device speed not set [ 1171.602324][T13160] usb 49-1: new full-speed USB device number 5 using vhci_hcd [ 1171.609800][T15379] vhci_hcd: connection closed [ 1171.626385][ T2969] vhci_hcd: stop threads [ 1171.652815][ T2969] vhci_hcd: release socket [ 1171.672978][ T2969] vhci_hcd: disconnect device [ 1172.329571][T15392] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1975'. [ 1172.681817][T15394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1977'. [ 1176.704688][T15442] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1986'. [ 1176.746202][T13160] vhci_hcd: vhci_device speed not set [ 1177.794675][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.283866][T15440] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1178.283866][T15440] program syz.9.1985 not setting count and/or reply_len properly [ 1181.200701][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.208909][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.230953][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.269501][T15489] vivid-007: ================= START STATUS ================= [ 1181.277745][T15489] vivid-007: Enable Output Cropping: true [ 1181.284156][T15489] vivid-007: Enable Output Composing: true [ 1181.290416][T15489] vivid-007: Enable Output Scaler: true [ 1181.296368][T15489] vivid-007: Tx RGB Quantization Range: Automatic [ 1181.302976][T15489] vivid-007: Transmit Mode: HDMI [ 1181.308108][T15489] vivid-007: Display Present: true inactive [ 1181.314105][T15489] vivid-007: Hotplug Present: 0x00000001 [ 1181.319906][T15489] vivid-007: RxSense Present: 0x00000001 [ 1181.325733][T15489] vivid-007: EDID Present: 0x00000001 [ 1181.331603][T15489] vivid-007: ================== END STATUS ================== [ 1181.440749][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.490058][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.498297][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.506310][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.514152][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.522159][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.530343][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.550014][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.598976][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.678580][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.816770][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1181.824339][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1182.191780][T15498] random: crng reseeded on system resumption [ 1182.746452][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1182.754555][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1182.996257][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.004367][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.032232][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.040374][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.054450][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.065569][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.084130][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.115342][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.141591][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.195976][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.258629][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.322386][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.670163][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1183.719862][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.037435][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.066784][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.105151][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.151865][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.182137][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.194007][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.202558][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.210458][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.241437][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.274647][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.325952][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.396092][ T787] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1184.462485][ T787] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz1 [ 1185.236445][T15520] fido_id[15520]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1185.418428][T15535] ubi: mtd0 is already attached to ubi31 [ 1185.492352][T15535] kAFS: unparsable volume name [ 1186.676046][ T28] audit: type=1804 audit(1756850353.406:160): pid=15536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2003" name="/newroot/119/bus/bus" dev="overlay" ino=667 res=1 errno=0 [ 1186.818947][ T28] audit: type=1804 audit(1756850353.416:161): pid=15536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2003" name="/newroot/119/bus/bus" dev="overlay" ino=667 res=1 errno=0 [ 1187.008578][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 1189.494224][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2014'. [ 1192.380745][T15630] ubi: mtd0 is already attached to ubi31 [ 1192.405407][T15630] kAFS: unparsable volume name [ 1193.513883][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.524110][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.534794][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.545080][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.554813][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.564321][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.573841][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.583576][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.593658][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1193.602995][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 1198.601228][ T28] audit: type=1804 audit(1756850365.406:162): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2030" name="/newroot/124/bus/bus" dev="overlay" ino=704 res=1 errno=0 [ 1198.664851][ T28] audit: type=1804 audit(1756850365.416:163): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2030" name="/newroot/124/bus/bus" dev="overlay" ino=704 res=1 errno=0 [ 1199.015997][T15695] __nla_validate_parse: 43 callbacks suppressed [ 1199.016016][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2033'. [ 1199.056736][T15695] netlink: 'syz.6.2033': attribute type 5 has an invalid length. [ 1199.136148][T15695] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2033'. [ 1199.431734][T15695] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1199.441599][T15695] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1199.452097][T15695] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1199.474029][T15695] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1199.485193][T15695] geneve2: entered promiscuous mode [ 1199.507092][T15695] geneve2: entered allmulticast mode [ 1200.006453][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2035'. [ 1204.415177][T15743] ubi: mtd0 is already attached to ubi31 [ 1204.515365][T15743] kAFS: unparsable volume name [ 1208.249142][T15787] vivid-007: ================= START STATUS ================= [ 1208.257505][T15787] vivid-007: Enable Output Cropping: true [ 1208.263819][T15787] vivid-007: Enable Output Composing: true [ 1208.270859][T15787] vivid-007: Enable Output Scaler: true [ 1208.277158][T15787] vivid-007: Tx RGB Quantization Range: Automatic [ 1208.284426][T15787] vivid-007: Transmit Mode: HDMI [ 1208.289764][T15787] vivid-007: Display Present: true inactive [ 1208.296021][T15787] vivid-007: Hotplug Present: 0x00000001 [ 1208.312094][T15787] vivid-007: RxSense Present: 0x00000001 [ 1208.318537][T15787] vivid-007: EDID Present: 0x00000001 [ 1208.324611][T15787] vivid-007: ================== END STATUS ================== [ 1211.114022][ T28] audit: type=1804 audit(1756850377.856:164): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2054" name="/newroot/127/bus/bus" dev="overlay" ino=710 res=1 errno=0 [ 1211.278622][ T28] audit: type=1804 audit(1756850377.866:165): pid=15804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2054" name="/newroot/127/bus/bus" dev="overlay" ino=710 res=1 errno=0 [ 1211.404425][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2057'. [ 1215.944247][T15859] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2067'. [ 1217.579675][T15869] 9pnet: Unknown protocol version 9p200 [ 1220.357782][T15906] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2078'. [ 1222.889400][T15939] syz_tun: entered allmulticast mode [ 1223.041304][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2087'. [ 1223.800746][T15937] syz_tun: left allmulticast mode [ 1225.114045][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2092'. [ 1227.901578][T15965] kvm: user requested TSC rate below hardware speed [ 1228.606407][ T5843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1229.230552][ T5843] usb 8-1: device descriptor read/all, error -71 [ 1229.263181][T15988] binder: BINDER_SET_CONTEXT_MGR already set [ 1229.295942][T15988] binder: 15987:15988 ioctl 4018620d 2000000002c0 returned -16 [ 1229.461284][T15994] binder: 15987:15994 ioctl c0306201 0 returned -14 [ 1229.511472][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2099'. [ 1229.522698][T15995] netlink: 'syz.9.2099': attribute type 5 has an invalid length. [ 1229.690653][T15995] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2099'. [ 1229.738248][T15995] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1229.748154][T15995] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1229.759311][T15995] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1229.771210][T15995] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1229.976349][T15995] geneve2: entered promiscuous mode [ 1229.982363][T15995] geneve2: entered allmulticast mode [ 1229.989991][T16005] fuse: Unknown parameter 'grou00000000000000000000' [ 1231.456918][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2104'. [ 1233.131666][T16045] syz_tun: entered allmulticast mode [ 1233.189637][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2111'. [ 1233.386324][T16054] binder: 16043:16054 ioctl c0306201 0 returned -14 [ 1234.230700][T16061] ubi: mtd0 is already attached to ubi31 [ 1234.299482][T16061] kAFS: unparsable volume name [ 1234.391726][T16040] syz_tun: left allmulticast mode [ 1235.006432][T16077] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2116'. [ 1237.057963][T16093] netlink: 'syz.6.2114': attribute type 3 has an invalid length. [ 1237.066801][T16093] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2114'. [ 1237.494486][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2119'. [ 1237.617406][T16097] netlink: 'syz.8.2119': attribute type 5 has an invalid length. [ 1237.625549][T16097] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2119'. [ 1237.665687][T16097] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1237.675628][T16097] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1237.685589][T16097] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1237.725902][T16097] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1237.736013][T16097] geneve2: entered promiscuous mode [ 1237.767131][T16097] geneve2: entered allmulticast mode [ 1238.370769][T16110] binder: 16106:16110 ioctl c0306201 0 returned -14 [ 1239.235892][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.459529][T16129] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2125'. [ 1244.847972][T16156] ubi: mtd0 is already attached to ubi31 [ 1244.883251][T16156] kAFS: unparsable volume name [ 1245.298082][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2133'. [ 1245.310035][T16164] netlink: 'syz.6.2133': attribute type 5 has an invalid length. [ 1245.325661][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2133'. [ 1250.239588][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2138'. [ 1250.547053][T16196] vivid-007: ================= START STATUS ================= [ 1250.555336][T16196] vivid-007: Enable Output Cropping: true [ 1250.566115][T16196] vivid-007: Enable Output Composing: true [ 1250.573619][T16196] vivid-007: Enable Output Scaler: true [ 1250.579898][T16196] vivid-007: Tx RGB Quantization Range: Automatic [ 1250.593362][T16196] vivid-007: Transmit Mode: HDMI [ 1250.624030][T16196] vivid-007: Display Present: true inactive [ 1250.632943][T16196] vivid-007: Hotplug Present: 0x00000001 [ 1250.639350][T16196] vivid-007: RxSense Present: 0x00000001 [ 1250.645543][T16196] vivid-007: EDID Present: 0x00000001 [ 1250.652431][T16196] vivid-007: ================== END STATUS ================== [ 1253.183083][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2148'. [ 1253.259596][T16227] ubi: mtd0 is already attached to ubi31 [ 1253.272433][T16227] kAFS: unparsable volume name [ 1253.395091][T16229] vivid-007: ================= START STATUS ================= [ 1253.403232][T16229] vivid-007: Enable Output Cropping: true [ 1253.409329][T16229] vivid-007: Enable Output Composing: true [ 1253.415510][T16229] vivid-007: Enable Output Scaler: true [ 1253.421438][T16229] vivid-007: Tx RGB Quantization Range: Automatic [ 1253.428720][T16229] vivid-007: Transmit Mode: HDMI [ 1253.434238][T16229] vivid-007: Display Present: true inactive [ 1253.440488][T16229] vivid-007: Hotplug Present: 0x00000001 [ 1253.446959][T16229] vivid-007: RxSense Present: 0x00000001 [ 1253.452794][T16229] vivid-007: EDID Present: 0x00000001 [ 1253.458895][T16229] vivid-007: ================== END STATUS ================== [ 1259.043634][T10318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.719911][T10318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.998363][T10318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.083363][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2154'. [ 1261.146443][T16248] netlink: 'syz.6.2154': attribute type 5 has an invalid length. [ 1261.173350][T16248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2154'. [ 1261.371458][T10318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.757632][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1263.107770][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1263.157033][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.213394][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.284584][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1263.556512][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.632979][ T9] usb 10-1: config 0 descriptor?? [ 1263.710175][T16295] ubi: mtd0 is already attached to ubi31 [ 1263.734246][T16295] kAFS: unparsable volume name [ 1264.249899][ T9] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1264.280258][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2165'. [ 1264.547889][ T787] usb 10-1: USB disconnect, device number 8 [ 1264.792792][T16304] fido_id[16304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1265.654477][T10318] hsr_slave_0: left promiscuous mode [ 1265.749435][T10318] hsr_slave_1: left promiscuous mode [ 1265.818413][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.851050][T10318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.926720][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.935492][T10318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.036859][T10318] bridge0: port 3(team0) entered disabled state [ 1266.107562][T10318] bridge_slave_1: left allmulticast mode [ 1266.114951][T10318] bridge_slave_1: left promiscuous mode [ 1266.147499][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.196192][T10318] bridge_slave_0: left allmulticast mode [ 1266.202636][T10318] bridge_slave_0: left promiscuous mode [ 1266.215653][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.338405][T16337] vivid-007: ================= START STATUS ================= [ 1266.348163][T16337] vivid-007: Enable Output Cropping: true [ 1266.355534][T16337] vivid-007: Enable Output Composing: true [ 1266.363356][T16337] vivid-007: Enable Output Scaler: true [ 1266.371420][T16337] vivid-007: Tx RGB Quantization Range: Automatic [ 1266.380817][T16337] vivid-007: Transmit Mode: HDMI [ 1266.386410][T16337] vivid-007: Display Present: true inactive [ 1266.393256][T16337] vivid-007: Hotplug Present: 0x00000001 [ 1266.399585][T16337] vivid-007: RxSense Present: 0x00000001 [ 1266.405787][T16337] vivid-007: EDID Present: 0x00000001 [ 1266.411892][T16337] vivid-007: ================== END STATUS ================== [ 1266.472336][T10318] veth1_macvtap: left promiscuous mode [ 1266.485034][T10318] veth0_macvtap: left promiscuous mode [ 1266.493883][T10318] veth1_vlan: left promiscuous mode [ 1266.511525][T10318] veth0_vlan: left promiscuous mode [ 1268.409068][ T8] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1268.606077][ T8] usb 10-1: Using ep0 maxpacket: 32 [ 1268.631936][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.647451][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.659248][ T8] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1268.698095][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.757934][ T8] usb 10-1: config 0 descriptor?? [ 1269.020626][T10318] team_slave_1 (unregistering): left promiscuous mode [ 1269.028789][T10318] team_slave_1 (unregistering): left allmulticast mode [ 1269.045473][T10318] team0 (unregistering): Port device team_slave_1 removed [ 1269.132562][T10318] team_slave_0 (unregistering): left promiscuous mode [ 1269.139963][T10318] team_slave_0 (unregistering): left allmulticast mode [ 1269.151021][T10318] team0 (unregistering): Port device team_slave_0 removed [ 1269.214813][ T8] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1269.273244][T10318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.362913][T10318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.367959][T10318] bond0 (unregistering): Released all slaves [ 1270.487369][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2173'. [ 1270.500103][T16346] netlink: 'syz.8.2173': attribute type 5 has an invalid length. [ 1270.512481][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2173'. [ 1271.120008][T16365] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2176'. [ 1272.007590][ T967] usb 10-1: USB disconnect, device number 9 [ 1273.462083][T10318] IPVS: stop unused estimator thread 0... [ 1273.587882][T16385] ubi: mtd0 is already attached to ubi31 [ 1273.734558][T16385] kAFS: unparsable volume name [ 1274.551336][T16402] vivid-007: ================= START STATUS ================= [ 1274.560621][T16402] vivid-007: Enable Output Cropping: true [ 1274.567186][T16402] vivid-007: Enable Output Composing: true [ 1274.573991][T16402] vivid-007: Enable Output Scaler: true [ 1274.582130][T16402] vivid-007: Tx RGB Quantization Range: Automatic [ 1274.592532][T16402] vivid-007: Transmit Mode: HDMI [ 1274.598551][T16402] vivid-007: Display Present: true inactive [ 1274.604936][T16402] vivid-007: Hotplug Present: 0x00000001 [ 1274.611210][T16402] vivid-007: RxSense Present: 0x00000001 [ 1274.617231][T16402] vivid-007: EDID Present: 0x00000001 [ 1274.623089][T16402] vivid-007: ================== END STATUS ================== [ 1276.516307][T12996] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1276.735914][T12996] usb 7-1: Using ep0 maxpacket: 32 [ 1276.802215][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.868043][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.933529][T12996] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1276.960641][T12996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.012557][T12996] usb 7-1: config 0 descriptor?? [ 1277.573354][T12996] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1278.389943][ T787] usb 7-1: USB disconnect, device number 5 [ 1278.640538][T16442] fido_id[16442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1283.186783][T16471] ubi: mtd0 is already attached to ubi31 [ 1283.194918][T16471] kAFS: unparsable volume name [ 1283.722646][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2202'. [ 1283.802815][T16482] netlink: 'syz.8.2202': attribute type 5 has an invalid length. [ 1283.895996][T16482] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2202'. [ 1285.427144][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2204'. [ 1285.632919][T16505] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2206'. [ 1288.835847][T16529] ubi: mtd0 is already attached to ubi31 [ 1289.011267][T16529] kAFS: unparsable volume name [ 1291.236020][T16547] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1291.244015][T16547] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1291.253970][T16547] vhci_hcd vhci_hcd.0: Device attached [ 1291.545991][T11755] vhci_hcd: vhci_device speed not set [ 1291.646550][T11755] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 1291.769492][T16550] vhci_hcd: connection reset by peer [ 1291.803588][T10318] vhci_hcd: stop threads [ 1291.821438][T10318] vhci_hcd: release socket [ 1291.846287][T10318] vhci_hcd: disconnect device [ 1293.245382][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2215'. [ 1297.355902][T11755] vhci_hcd: vhci_device speed not set [ 1299.525997][T16595] vivid-007: ================= START STATUS ================= [ 1299.569427][T16595] vivid-007: Enable Output Cropping: true [ 1299.578444][T16595] vivid-007: Enable Output Composing: true [ 1299.586745][T16595] vivid-007: Enable Output Scaler: true [ 1299.600662][T16595] vivid-007: Tx RGB Quantization Range: Automatic [ 1299.641167][T16595] vivid-007: Transmit Mode: HDMI [ 1299.649286][T16595] vivid-007: Display Present: true inactive [ 1299.649602][T16595] vivid-007: Hotplug Present: 0x00000001 [ 1299.668997][T16595] vivid-007: RxSense Present: 0x00000001 [ 1299.680431][T16595] vivid-007: EDID Present: 0x00000001 [ 1299.692406][T16595] vivid-007: ================== END STATUS ================== [ 1300.790461][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.943134][T16603] ubi: mtd0 is already attached to ubi31 [ 1301.960926][T16603] kAFS: unparsable volume name [ 1302.463282][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2227'. [ 1308.308482][T16676] ubi: mtd0 is already attached to ubi31 [ 1308.341404][T16676] kAFS: unparsable volume name [ 1310.847705][T16695] fuse: Bad value for 'rootmode' [ 1312.001216][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.015899][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.037343][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.051527][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.066557][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.079769][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.093300][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.111808][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.127579][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1312.144343][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2250'. [ 1313.975376][T16729] fuse: Bad value for 'rootmode' [ 1314.736219][T16735] vivid-007: ================= START STATUS ================= [ 1314.746289][T16735] vivid-007: Enable Output Cropping: true [ 1314.753224][T16735] vivid-007: Enable Output Composing: true [ 1314.762183][T16735] vivid-007: Enable Output Scaler: true [ 1314.772432][T16735] vivid-007: Tx RGB Quantization Range: Automatic [ 1314.780882][T16735] vivid-007: Transmit Mode: HDMI [ 1314.788484][T16735] vivid-007: Display Present: true inactive [ 1314.854937][T16735] vivid-007: Hotplug Present: 0x00000001 [ 1314.862606][T16735] vivid-007: RxSense Present: 0x00000001 [ 1314.871628][T16735] vivid-007: EDID Present: 0x00000001 [ 1314.879351][T16735] vivid-007: ================== END STATUS ================== [ 1315.542739][T16757] ubi: mtd0 is already attached to ubi31 [ 1315.555345][T16757] kAFS: unparsable volume name [ 1316.738633][ T28] audit: type=1804 audit(1756850483.616:166): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2258" name="/newroot/184/bus/bus" dev="overlay" ino=1015 res=1 errno=0 [ 1316.980680][ T28] audit: type=1804 audit(1756850483.846:167): pid=16751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2258" name="/newroot/184/bus/bus" dev="overlay" ino=1015 res=1 errno=0 [ 1317.010667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.761562][T16774] fuse: Unknown parameter 'use00000000000000000000' [ 1319.741459][T16790] vivid-007: ================= START STATUS ================= [ 1319.777085][T16790] vivid-007: Enable Output Cropping: true [ 1319.783374][T16790] vivid-007: Enable Output Composing: true [ 1319.826146][T16790] vivid-007: Enable Output Scaler: true [ 1319.835791][T16790] vivid-007: Tx RGB Quantization Range: Automatic [ 1319.845191][T16790] vivid-007: Transmit Mode: HDMI [ 1319.855827][T16790] vivid-007: Display Present: true inactive [ 1319.865041][T16790] vivid-007: Hotplug Present: 0x00000001 [ 1319.876332][T16790] vivid-007: RxSense Present: 0x00000001 [ 1319.885492][T16790] vivid-007: EDID Present: 0x00000001 [ 1319.906249][T16790] vivid-007: ================== END STATUS ================== [ 1322.247056][T16816] fuse: Unknown parameter 'use00000000000000000000' [ 1324.319391][T16842] ubi: mtd0 is already attached to ubi31 [ 1324.333975][T16842] kAFS: unparsable volume name [ 1325.366763][T16839] vivid-007: ================= START STATUS ================= [ 1325.409074][T16839] vivid-007: Enable Output Cropping: true [ 1325.468046][T16839] vivid-007: Enable Output Composing: true [ 1325.478571][T16839] vivid-007: Enable Output Scaler: true [ 1325.638033][T16839] vivid-007: Tx RGB Quantization Range: Automatic [ 1325.686048][T16839] vivid-007: Transmit Mode: HDMI [ 1325.698667][T16839] vivid-007: Display Present: true inactive [ 1325.708493][T16839] vivid-007: Hotplug Present: 0x00000001 [ 1325.716904][T16839] vivid-007: RxSense Present: 0x00000001 [ 1325.753294][T16839] vivid-007: EDID Present: 0x00000001 [ 1325.812168][T16839] vivid-007: ================== END STATUS ================== [ 1327.477417][T16862] fuse: Unknown parameter 'use00000000000000000000' [ 1331.832502][T16919] fuse: Unknown parameter 'user_i00000000000000000000' [ 1335.429727][T16932] ubi: mtd0 is already attached to ubi31 [ 1335.437499][T16932] kAFS: unparsable volume name [ 1336.801122][ T28] audit: type=1804 audit(1756850503.576:168): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2303" name="/newroot/226/bus/bus" dev="overlay" ino=1255 res=1 errno=0 [ 1336.869467][ T28] audit: type=1804 audit(1756850503.586:169): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2303" name="/newroot/226/bus/bus" dev="overlay" ino=1255 res=1 errno=0 [ 1337.214206][T16960] fuse: Unknown parameter 'user_i00000000000000000000' [ 1337.486062][ T8216] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1338.268174][ T8216] usb 9-1: device descriptor read/64, error -71 [ 1338.566264][ T8216] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1339.546362][ T8216] usb 9-1: device descriptor read/64, error -71 [ 1339.666108][ T8216] usb usb9-port1: attempt power cycle [ 1340.626229][ T8216] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1340.883855][ T8216] usb 9-1: device descriptor read/8, error -71 [ 1340.917150][T16983] __nla_validate_parse: 43 callbacks suppressed [ 1340.917192][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1340.996161][T16983] netlink: 'syz.9.2312': attribute type 5 has an invalid length. [ 1341.005396][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1343.271744][T17010] fuse: Unknown parameter 'user_i00000000000000000000' [ 1344.273568][T17013] ubi: mtd0 is already attached to ubi31 [ 1344.329192][T17013] kAFS: unparsable volume name [ 1345.642863][T17025] vivid-007: ================= START STATUS ================= [ 1345.704259][T17025] vivid-007: Enable Output Cropping: true [ 1345.825913][T17025] vivid-007: Enable Output Composing: true [ 1345.977749][T17025] vivid-007: Enable Output Scaler: true [ 1346.027818][T17025] vivid-007: Tx RGB Quantization Range: Automatic [ 1346.055977][ T5843] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1346.150688][T17025] vivid-007: Transmit Mode: HDMI [ 1346.171996][T17025] vivid-007: Display Present: true inactive [ 1346.215109][T17025] vivid-007: Hotplug Present: 0x00000001 [ 1346.252126][T17025] vivid-007: RxSense Present: 0x00000001 [ 1346.286220][ T5843] usb 9-1: device descriptor read/64, error -71 [ 1346.476067][T17025] vivid-007: EDID Present: 0x00000001 [ 1346.552029][T17025] vivid-007: ================== END STATUS ================== [ 1346.666940][ T5843] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1346.865930][ T5843] usb 9-1: device descriptor read/64, error -71 [ 1347.015972][ T5843] usb usb9-port1: attempt power cycle [ 1347.026015][ T8216] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1347.916184][ T8216] usb 10-1: Using ep0 maxpacket: 8 [ 1347.939740][ T8216] usb 10-1: config 0 has no interfaces? [ 1347.962934][T17055] fuse: Unknown parameter 'user_id00000000000000000000' [ 1347.974658][ T8216] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1348.004249][ T8216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.030305][ T8216] usb 10-1: Product: syz [ 1348.044547][ T8216] usb 10-1: Manufacturer: syz [ 1348.062919][ T8216] usb 10-1: SerialNumber: syz [ 1348.083005][ T8216] usb 10-1: config 0 descriptor?? [ 1348.115887][ T5843] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1348.157413][ T5843] usb 9-1: device descriptor read/8, error -71 [ 1348.396075][T13160] usb 10-1: USB disconnect, device number 10 [ 1350.628980][T17088] syz_tun: entered allmulticast mode [ 1350.807315][T17087] syz_tun: left allmulticast mode [ 1351.805942][T17097] ubi: mtd0 is already attached to ubi31 [ 1351.884990][T17097] kAFS: unparsable volume name [ 1351.920492][T17100] fuse: Unknown parameter 'user_id00000000000000000000' [ 1352.565922][ T5843] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1352.914511][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 1352.928200][ T5843] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.970040][ T5843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1353.725020][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.236189][T13160] usb 8-1: USB disconnect, device number 9 [ 1356.870033][T17150] fuse: Unknown parameter 'user_id00000000000000000000' [ 1358.903173][T17178] ubi: mtd0 is already attached to ubi31 [ 1358.919175][T17178] kAFS: unparsable volume name [ 1359.797121][ T787] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1360.001722][ T787] usb 9-1: Using ep0 maxpacket: 8 [ 1360.014806][ T787] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.050895][ T787] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1360.089214][ T787] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.512272][T17195] fuse: Bad value for 'fd' [ 1362.123646][T17207] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2358'. [ 1362.140247][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.837776][ T787] usb 9-1: USB disconnect, device number 12 [ 1363.332670][T17223] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1363.369148][T17226] fuse: Unknown parameter 'ro000000000000040000' [ 1363.477325][T17232] ubi: mtd0 is already attached to ubi31 [ 1363.511671][T17232] kAFS: unparsable volume name [ 1363.823699][T17239] fuse: Bad value for 'fd' [ 1365.524086][T17251] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2368'. [ 1366.729110][ T1098] Bluetooth: hci4: Frame reassembly failed (-84) [ 1367.456033][T11755] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1367.705824][T17278] fuse: Bad value for 'fd' [ 1367.715913][T11755] usb 9-1: Using ep0 maxpacket: 8 [ 1367.773861][T11755] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.806318][T11755] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1367.850310][T11755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.745903][ T50] Bluetooth: hci4: command 0xfc11 tx timeout [ 1368.754566][T12921] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1369.077042][ T28] audit: type=1326 audit(1756850535.956:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.105017][ T28] audit: type=1326 audit(1756850535.986:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.217874][ T28] audit: type=1326 audit(1756850535.986:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.295527][ T28] audit: type=1326 audit(1756850535.986:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.405624][ T28] audit: type=1326 audit(1756850535.986:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.497452][ T28] audit: type=1326 audit(1756850535.986:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1369.686065][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 1369.786002][T17303] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2378'. [ 1370.626005][ T28] audit: type=1326 audit(1756850535.986:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1370.709478][ T28] audit: type=1326 audit(1756850535.986:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1370.839213][ T28] audit: type=1326 audit(1756850535.986:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1370.891054][T15110] usb 9-1: USB disconnect, device number 13 [ 1370.968120][ T28] audit: type=1326 audit(1756850535.986:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.7.2376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83a3b8ebe9 code=0x7ffc0000 [ 1371.474823][T12921] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1371.598792][T17319] syz_tun: entered allmulticast mode [ 1371.736912][T17318] syz_tun: left allmulticast mode [ 1372.094377][T17329] fuse: Unknown parameter '0x0000000000000003' [ 1373.553741][T17344] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2387'. [ 1375.849572][T11865] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1376.206745][T11865] usb 9-1: Using ep0 maxpacket: 8 [ 1376.346517][T11865] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.417347][T11865] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.678214][T11865] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1376.844713][T11865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.268405][T11865] usbtmc 9-1:16.0: bulk endpoints not found [ 1379.159071][T17034] usb 9-1: USB disconnect, device number 14 [ 1379.919527][T17409] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1379.927036][T17409] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1379.947782][T17409] vhci_hcd vhci_hcd.0: Device attached [ 1380.175846][T11755] vhci_hcd: vhci_device speed not set [ 1380.247212][T11755] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 1380.418597][T17413] vhci_hcd: connection reset by peer [ 1380.425335][T10314] vhci_hcd: stop threads [ 1380.435869][T10314] vhci_hcd: release socket [ 1380.445483][T10314] vhci_hcd: disconnect device [ 1382.138406][T17428] syz_tun: entered allmulticast mode [ 1382.244745][T17430] vivid-007: ================= START STATUS ================= [ 1382.253855][T17430] vivid-007: Enable Output Cropping: true [ 1382.261579][T17430] vivid-007: Enable Output Composing: true [ 1382.268946][T17430] vivid-007: Enable Output Scaler: true [ 1382.275600][T17430] vivid-007: Tx RGB Quantization Range: Automatic [ 1382.283321][T17430] vivid-007: Transmit Mode: HDMI [ 1382.289391][T17430] vivid-007: Display Present: true inactive [ 1382.304305][T17430] vivid-007: Hotplug Present: 0x00000001 [ 1382.310966][T17430] vivid-007: RxSense Present: 0x00000001 [ 1382.317380][T17430] vivid-007: EDID Present: 0x00000001 [ 1382.323047][T17430] vivid-007: ================== END STATUS ================== [ 1383.346075][T17034] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1383.565957][T17034] usb 7-1: Using ep0 maxpacket: 8 [ 1383.587489][T17034] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.605845][T17034] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1383.620994][T17034] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1383.631718][T17034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.770848][T17034] usbtmc 7-1:16.0: bulk endpoints not found [ 1385.398431][T11755] vhci_hcd: vhci_device speed not set [ 1386.545384][T15110] usb 7-1: USB disconnect, device number 6 [ 1386.662410][T17471] syz_tun: entered allmulticast mode [ 1387.023783][T17477] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2421'. [ 1389.815970][T15110] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1390.509098][T17520] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2430'. [ 1390.645819][T15110] usb 8-1: Using ep0 maxpacket: 8 [ 1390.705982][T15110] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.741966][T15110] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1390.783430][T15110] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1390.847316][T15110] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.881881][T15110] usbtmc 8-1:16.0: bulk endpoints not found [ 1391.030911][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1391.030925][ T28] audit: type=1804 audit(1756850557.906:199): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2434" name="/newroot/231/bus/bus" dev="overlay" ino=1287 res=1 errno=0 [ 1391.142782][ T28] audit: type=1804 audit(1756850558.016:200): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2434" name="/newroot/231/bus/bus" dev="overlay" ino=1287 res=1 errno=0 [ 1391.475456][T17535] ubi: mtd0 is already attached to ubi31 [ 1391.511339][T17535] kAFS: unparsable volume name [ 1392.608099][T15110] usb 8-1: USB disconnect, device number 10 [ 1397.114058][T17590] ubi: mtd0 is already attached to ubi31 [ 1397.127300][T17590] kAFS: unparsable volume name [ 1400.214295][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2452'. [ 1400.376131][T17613] random: crng reseeded on system resumption [ 1400.397829][T17619] netlink: zone id is out of range [ 1400.825861][ T28] audit: type=1804 audit(1756850567.676:201): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2453" name="/newroot/217/bus/bus" dev="overlay" ino=1191 res=1 errno=0 [ 1400.873676][ T28] audit: type=1804 audit(1756850567.696:202): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2453" name="/newroot/217/bus/bus" dev="overlay" ino=1191 res=1 errno=0 [ 1401.720891][T17628] fuse: Unknown parameter 'fd0x0000000000000003' [ 1402.290208][T17635] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2458'. [ 1403.519562][T17644] ubi: mtd0 is already attached to ubi31 [ 1403.532162][T17644] kAFS: unparsable volume name [ 1405.655129][T17659] vivid-007: ================= START STATUS ================= [ 1405.663917][T17659] vivid-007: Enable Output Cropping: true [ 1405.698524][T17659] vivid-007: Enable Output Composing: true [ 1405.706754][ T967] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1405.722426][T17659] vivid-007: Enable Output Scaler: true [ 1405.728764][T17659] vivid-007: Tx RGB Quantization Range: Automatic [ 1405.735837][T17659] vivid-007: Transmit Mode: HDMI [ 1405.740954][T17659] vivid-007: Display Present: true inactive [ 1405.747440][T17659] vivid-007: Hotplug Present: 0x00000001 [ 1405.753636][T17659] vivid-007: RxSense Present: 0x00000001 [ 1405.759971][T17659] vivid-007: EDID Present: 0x00000001 [ 1405.765961][T17659] vivid-007: ================== END STATUS ================== [ 1406.512440][T17665] fuse: Unknown parameter 'fd0x0000000000000003' [ 1406.559692][ T967] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.624955][ T967] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1406.671365][ T967] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1406.742725][ T967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.783450][ T967] usb 10-1: config 0 descriptor?? [ 1406.806290][ T967] usb 10-1: can't set config #0, error -71 [ 1406.837499][ T967] usb 10-1: USB disconnect, device number 11 [ 1407.211206][T17677] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1407.218313][T17677] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1407.252356][T17677] vhci_hcd vhci_hcd.0: Device attached [ 1407.466543][ T967] vhci_hcd: vhci_device speed not set [ 1407.585925][ T967] usb 51-1: new full-speed USB device number 3 using vhci_hcd [ 1408.014001][T17681] vhci_hcd: connection reset by peer [ 1408.066655][ T58] vhci_hcd: stop threads [ 1408.094533][ T58] vhci_hcd: release socket [ 1408.114514][ T58] vhci_hcd: disconnect device [ 1408.174069][T17696] ubi: mtd0 is already attached to ubi31 [ 1408.352198][T17696] kAFS: unparsable volume name [ 1409.287888][T17704] fuse: Unknown parameter 'fd0x0000000000000003' [ 1412.750556][ T967] vhci_hcd: vhci_device speed not set [ 1413.722967][T17749] ubi: mtd0 is already attached to ubi31 [ 1413.737721][T17749] kAFS: unparsable volume name [ 1417.128149][T17770] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2495'. [ 1418.446172][ T787] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1418.646030][ T787] usb 7-1: Using ep0 maxpacket: 8 [ 1418.657651][ T787] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1418.672636][ T787] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1418.693316][ T787] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1418.705220][ T787] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1418.716359][ T787] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1418.730527][ T787] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1418.741551][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.979140][ T787] usb 7-1: usb_control_msg returned -32 [ 1419.015358][ T787] usbtmc 7-1:16.0: can't read capabilities [ 1419.221827][ T787] usb 7-1: USB disconnect, device number 7 [ 1419.655421][T17794] netlink: 'syz.7.2502': attribute type 4 has an invalid length. [ 1419.755950][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2503'. [ 1421.743438][T17814] ubi: mtd0 is already attached to ubi31 [ 1421.755480][T17814] kAFS: unparsable volume name [ 1423.551525][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.671841][T17871] ubi: mtd0 is already attached to ubi31 [ 1427.695247][T17871] kAFS: unparsable volume name [ 1429.468885][T17890] vivid-007: ================= START STATUS ================= [ 1429.477411][T17890] vivid-007: Enable Output Cropping: true [ 1429.483541][T17890] vivid-007: Enable Output Composing: true [ 1429.489683][T17890] vivid-007: Enable Output Scaler: true [ 1429.495622][T17890] vivid-007: Tx RGB Quantization Range: Automatic [ 1429.502730][T17890] vivid-007: Transmit Mode: HDMI [ 1429.508176][T17890] vivid-007: Display Present: true inactive [ 1429.514462][T17890] vivid-007: Hotplug Present: 0x00000001 [ 1429.524880][T17890] vivid-007: RxSense Present: 0x00000001 [ 1429.531306][T17890] vivid-007: EDID Present: 0x00000001 [ 1429.537382][T17890] vivid-007: ================== END STATUS ================== [ 1433.001006][T17923] vivid-007: ================= START STATUS ================= [ 1433.009433][T17923] vivid-007: Enable Output Cropping: true [ 1433.015588][T17923] vivid-007: Enable Output Composing: true [ 1433.022489][T17923] vivid-007: Enable Output Scaler: true [ 1433.029134][T17923] vivid-007: Tx RGB Quantization Range: Automatic [ 1433.036403][T17923] vivid-007: Transmit Mode: HDMI [ 1433.041769][T17923] vivid-007: Display Present: true inactive [ 1433.048614][T17923] vivid-007: Hotplug Present: 0x00000001 [ 1433.092138][T17923] vivid-007: RxSense Present: 0x00000001 [ 1433.098590][T17923] vivid-007: EDID Present: 0x00000001 [ 1433.104242][T17923] vivid-007: ================== END STATUS ================== [ 1435.061279][T17935] ubi: mtd0 is already attached to ubi31 [ 1435.081264][T17935] kAFS: unparsable volume name [ 1436.871344][T17956] vivid-007: ================= START STATUS ================= [ 1436.880103][T17956] vivid-007: Enable Output Cropping: true [ 1436.886677][T17956] vivid-007: Enable Output Composing: true [ 1436.893720][T17956] vivid-007: Enable Output Scaler: true [ 1436.900386][T17956] vivid-007: Tx RGB Quantization Range: Automatic [ 1436.908258][T17956] vivid-007: Transmit Mode: HDMI [ 1436.913735][T17956] vivid-007: Display Present: true inactive [ 1436.932525][T17956] vivid-007: Hotplug Present: 0x00000001 [ 1436.939679][T17956] vivid-007: RxSense Present: 0x00000001 [ 1436.945975][T17956] vivid-007: EDID Present: 0x00000001 [ 1436.952352][T17956] vivid-007: ================== END STATUS ================== [ 1442.205255][T18018] ubi: mtd0 is already attached to ubi31 [ 1442.363991][T18023] kAFS: unparsable volume name [ 1449.005236][T18064] vivid-002: disconnect [ 1449.163236][T18063] vivid-002: reconnect [ 1449.730583][T18074] vivid-007: ================= START STATUS ================= [ 1449.739177][T18074] vivid-007: Enable Output Cropping: true [ 1449.745212][T18074] vivid-007: Enable Output Composing: true [ 1449.751771][T18074] vivid-007: Enable Output Scaler: true [ 1449.758972][T18074] vivid-007: Tx RGB Quantization Range: Automatic [ 1449.766284][T18074] vivid-007: Transmit Mode: HDMI [ 1449.771430][T18074] vivid-007: Display Present: true inactive [ 1449.777994][T18074] vivid-007: Hotplug Present: 0x00000001 [ 1449.791436][T18074] vivid-007: RxSense Present: 0x00000001 [ 1449.797947][T18074] vivid-007: EDID Present: 0x00000001 [ 1449.803768][T18074] vivid-007: ================== END STATUS ================== [ 1451.086187][T18085] ubi: mtd0 is already attached to ubi31 [ 1451.125062][T18085] kAFS: unparsable volume name [ 1455.566822][T18120] vivid-007: ================= START STATUS ================= [ 1455.575115][T18120] vivid-007: Enable Output Cropping: true [ 1455.581598][T18120] vivid-007: Enable Output Composing: true [ 1455.588126][T18120] vivid-007: Enable Output Scaler: true [ 1455.594078][T18120] vivid-007: Tx RGB Quantization Range: Automatic [ 1455.600929][T18120] vivid-007: Transmit Mode: HDMI [ 1455.606313][T18120] vivid-007: Display Present: true inactive [ 1455.612776][T18120] vivid-007: Hotplug Present: 0x00000001 [ 1455.651116][T18120] vivid-007: RxSense Present: 0x00000001 [ 1455.657442][T18120] vivid-007: EDID Present: 0x00000001 [ 1455.663082][T18120] vivid-007: ================== END STATUS ================== [ 1458.205840][T18151] ubi: mtd0 is already attached to ubi31 [ 1458.254476][T18151] kAFS: unparsable volume name [ 1462.678303][T18177] vivid-007: ================= START STATUS ================= [ 1462.686866][T18177] vivid-007: Enable Output Cropping: true [ 1462.693296][T18177] vivid-007: Enable Output Composing: true [ 1462.701521][T18177] vivid-007: Enable Output Scaler: true [ 1462.707777][T18177] vivid-007: Tx RGB Quantization Range: Automatic [ 1462.714801][T18177] vivid-007: Transmit Mode: HDMI [ 1462.720399][T18177] vivid-007: Display Present: true inactive [ 1462.726886][T18177] vivid-007: Hotplug Present: 0x00000001 [ 1462.732979][T18177] vivid-007: RxSense Present: 0x00000001 [ 1462.739400][T18177] vivid-007: EDID Present: 0x00000001 [ 1462.745064][T18177] vivid-007: ================== END STATUS ================== [ 1469.537044][T18200] ubi: mtd0 is already attached to ubi31 [ 1469.551477][T18200] kAFS: unparsable volume name [ 1470.100529][ T5843] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1470.317176][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 1470.340244][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.365789][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.395817][ T5843] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1470.436313][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.488259][ T5843] usb 8-1: config 0 descriptor?? [ 1470.947519][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 1470.962924][ T5843] usbhid: probe of 8-1:0.0 failed with error -71 [ 1471.020424][ T5843] usb 8-1: USB disconnect, device number 11 [ 1471.634995][T18213] vivid-007: ================= START STATUS ================= [ 1471.643959][T18213] vivid-007: Enable Output Cropping: true [ 1471.650496][T18213] vivid-007: Enable Output Composing: true [ 1471.658364][T18213] vivid-007: Enable Output Scaler: true [ 1471.664580][T18213] vivid-007: Tx RGB Quantization Range: Automatic [ 1471.672812][T18213] vivid-007: Transmit Mode: HDMI [ 1471.679195][T18213] vivid-007: Display Present: true inactive [ 1471.694369][T18213] vivid-007: Hotplug Present: 0x00000001 [ 1471.702527][T18213] vivid-007: RxSense Present: 0x00000001 [ 1471.709102][T18213] vivid-007: EDID Present: 0x00000001 [ 1471.715578][T18213] vivid-007: ================== END STATUS ================== [ 1475.739453][T11755] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1476.192912][T11755] usb 9-1: Using ep0 maxpacket: 32 [ 1476.257256][T11755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.270604][T11755] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.286286][T11755] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1476.307969][T11755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.351574][T11755] usb 9-1: config 0 descriptor?? [ 1476.407893][T18252] ubi: mtd0 is already attached to ubi31 [ 1476.432816][T18252] kAFS: unparsable volume name [ 1476.735961][T18256] vivid-007: ================= START STATUS ================= [ 1476.744342][T18256] vivid-007: Enable Output Cropping: true [ 1476.751082][T18256] vivid-007: Enable Output Composing: true [ 1476.757878][T18256] vivid-007: Enable Output Scaler: true [ 1476.764087][T18256] vivid-007: Tx RGB Quantization Range: Automatic [ 1476.771603][T18256] vivid-007: Transmit Mode: HDMI [ 1476.776993][T18256] vivid-007: Display Present: true inactive [ 1476.783315][T18256] vivid-007: Hotplug Present: 0x00000001 [ 1476.796561][T18256] vivid-007: RxSense Present: 0x00000001 [ 1476.802709][T18256] vivid-007: EDID Present: 0x00000001 [ 1476.808943][T18256] vivid-007: ================== END STATUS ================== [ 1476.874362][T11755] usbhid 9-1:0.0: can't add hid device: -71 [ 1478.153841][T11755] usbhid: probe of 9-1:0.0 failed with error -71 [ 1479.404755][T11755] usb 9-1: USB disconnect, device number 15 [ 1481.012275][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2637'. [ 1481.031757][T18266] netlink: 'syz.8.2637': attribute type 5 has an invalid length. [ 1481.066382][T18266] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2637'. [ 1484.994197][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.681842][ T787] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1486.039460][T18287] hub 9-0:1.0: USB hub found [ 1486.048347][T18287] hub 9-0:1.0: 1 port detected [ 1486.075724][ T787] usb 8-1: Using ep0 maxpacket: 32 [ 1486.084365][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.336385][ T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.349186][ T787] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1486.358443][ T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.369792][ T787] usb 8-1: config 0 descriptor?? [ 1487.538063][ T787] usbhid 8-1:0.0: can't add hid device: -71 [ 1487.570768][ T787] usbhid: probe of 8-1:0.0 failed with error -71 [ 1487.655494][ T787] usb 8-1: USB disconnect, device number 12 [ 1490.468074][T18318] ubi: mtd0 is already attached to ubi31 [ 1490.475581][T18318] kAFS: unparsable volume name [ 1492.475583][T18358] vivid-007: ================= START STATUS ================= [ 1492.484131][T18358] vivid-007: Enable Output Cropping: true [ 1492.492260][T18358] vivid-007: Enable Output Composing: true [ 1492.499382][T18358] vivid-007: Enable Output Scaler: true [ 1492.505214][T18358] vivid-007: Tx RGB Quantization Range: Automatic [ 1492.513098][T18358] vivid-007: Transmit Mode: HDMI [ 1492.518678][T18358] vivid-007: Display Present: true inactive [ 1492.525045][T18358] vivid-007: Hotplug Present: 0x00000001 [ 1492.558491][T18358] vivid-007: RxSense Present: 0x00000001 [ 1492.565041][T18358] vivid-007: EDID Present: 0x00000001 [ 1492.570871][T18358] vivid-007: ================== END STATUS ================== [ 1494.985752][T15110] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1497.305833][T15110] usb 10-1: Using ep0 maxpacket: 32 [ 1498.356757][T18368] ubi: mtd0 is already attached to ubi31 [ 1498.371041][T18368] kAFS: unparsable volume name [ 1499.588552][T15110] usb 10-1: device descriptor read/all, error -71 [ 1500.424858][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2666'. [ 1500.463273][T18384] netlink: 'syz.8.2666': attribute type 5 has an invalid length. [ 1500.505232][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2666'. [ 1505.426044][ T787] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1505.812345][ T787] usb 10-1: Using ep0 maxpacket: 32 [ 1505.844249][ T787] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.942996][ T787] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.010201][T18434] ubi: mtd0 is already attached to ubi31 [ 1506.040853][T18434] kAFS: unparsable volume name [ 1506.051568][ T787] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1506.061136][ T787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.086617][ T787] usb 10-1: config 0 descriptor?? [ 1506.443084][ T787] usbhid 10-1:0.0: can't add hid device: -71 [ 1506.484124][ T787] usbhid: probe of 10-1:0.0 failed with error -71 [ 1506.538747][ T787] usb 10-1: USB disconnect, device number 14 [ 1510.605753][T13160] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1511.675790][T13160] usb 10-1: Using ep0 maxpacket: 32 [ 1511.691123][T13160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.729920][T13160] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.924504][T13160] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1511.934350][T13160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.956649][T13160] usb 10-1: config 0 descriptor?? [ 1512.039399][T18486] ubi: mtd0 is already attached to ubi31 [ 1512.048885][T18486] kAFS: unparsable volume name [ 1512.395145][T13160] usbhid 10-1:0.0: can't add hid device: -71 [ 1512.408487][T13160] usbhid: probe of 10-1:0.0 failed with error -71 [ 1512.455335][T13160] usb 10-1: USB disconnect, device number 15 [ 1514.256486][T18504] tipc: Started in network mode [ 1514.261717][T18504] tipc: Node identity 4, cluster identity 4711 [ 1514.270495][T18504] tipc: Node number set to 4 [ 1516.652526][T18530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1518.394722][T18556] ubi: mtd0 is already attached to ubi31 [ 1518.406148][T18556] kAFS: unparsable volume name [ 1520.153688][T18576] vivid-007: ================= START STATUS ================= [ 1520.162680][T18576] vivid-007: Enable Output Cropping: true [ 1520.168805][T18576] vivid-007: Enable Output Composing: true [ 1520.175019][T18576] vivid-007: Enable Output Scaler: true [ 1520.181219][T18576] vivid-007: Tx RGB Quantization Range: Automatic [ 1520.188709][T18576] vivid-007: Transmit Mode: HDMI [ 1520.194150][T18576] vivid-007: Display Present: true inactive [ 1520.200925][T18576] vivid-007: Hotplug Present: 0x00000001 [ 1520.240169][T18576] vivid-007: RxSense Present: 0x00000001 [ 1520.247498][T18576] vivid-007: EDID Present: 0x00000001 [ 1520.253277][T18576] vivid-007: ================== END STATUS ================== [ 1530.856113][T18645] ubi: mtd0 is already attached to ubi31 [ 1530.867737][T18645] kAFS: unparsable volume name [ 1533.231751][T18659] virtio-fs: tag not found [ 1538.458768][T18698] ubi: mtd0 is already attached to ubi31 [ 1538.484310][T18698] kAFS: unparsable volume name [ 1545.618420][T18755] ubi: mtd0 is already attached to ubi31 [ 1545.634109][T18755] kAFS: unparsable volume name [ 1546.447336][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1548.858379][ T28] audit: type=1804 audit(1756850715.726:203): pid=18792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2773" name="/newroot/346/bus/bus" dev="overlay" ino=1902 res=1 errno=0 [ 1548.930833][ T28] audit: type=1804 audit(1756850715.806:204): pid=18792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2773" name="/newroot/346/bus/bus" dev="overlay" ino=1902 res=1 errno=0 [ 1550.635727][ T787] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1550.835867][ T787] usb 8-1: Using ep0 maxpacket: 8 [ 1550.852415][ T787] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1550.880770][ T787] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1550.904620][ T787] usb 8-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1550.938758][ T787] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.956821][ T787] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1550.967596][ T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.996688][ T787] usbtmc 8-1:16.0: bulk endpoints not found [ 1551.447908][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2778'. [ 1551.458936][T18805] netlink: 'syz.6.2778': attribute type 5 has an invalid length. [ 1551.468717][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2778'. [ 1552.016019][T18820] ubi: mtd0 is already attached to ubi31 [ 1552.053447][T18820] kAFS: unparsable volume name [ 1553.370364][T11865] usb 8-1: USB disconnect, device number 13 [ 1553.619204][ T28] audit: type=1804 audit(1756850720.496:205): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2786" name="/newroot/293/bus/bus" dev="overlay" ino=1600 res=1 errno=0 [ 1553.704205][ T28] audit: type=1804 audit(1756850720.536:206): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2786" name="/newroot/293/bus/bus" dev="overlay" ino=1600 res=1 errno=0 [ 1556.596412][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2793'. [ 1556.625450][T18847] netlink: 'syz.9.2793': attribute type 5 has an invalid length. [ 1556.637629][T18847] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2793'. [ 1557.985703][T11865] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1558.985758][T11865] usb 10-1: Using ep0 maxpacket: 8 [ 1559.014559][T11865] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1559.028129][T11865] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1559.040232][T11865] usb 10-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1559.051972][T11865] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1559.086576][T11865] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1559.116678][T11865] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.216568][T11865] usbtmc 10-1:16.0: bulk endpoints not found [ 1561.532596][ T787] usb 10-1: USB disconnect, device number 16 [ 1561.658488][T18873] ubi: mtd0 is already attached to ubi31 [ 1561.708937][T18873] kAFS: unparsable volume name [ 1565.704975][T18901] vivid-007: ================= START STATUS ================= [ 1565.715797][T18901] vivid-007: Enable Output Cropping: true [ 1565.723048][T18901] vivid-007: Enable Output Composing: true [ 1565.729762][T18901] vivid-007: Enable Output Scaler: true [ 1565.736164][T18901] vivid-007: Tx RGB Quantization Range: Automatic [ 1565.743622][T18901] vivid-007: Transmit Mode: HDMI [ 1565.749222][T18901] vivid-007: Display Present: true inactive [ 1565.784341][T18901] vivid-007: Hotplug Present: 0x00000001 [ 1565.791064][T18901] vivid-007: RxSense Present: 0x00000001 [ 1565.797619][T18901] vivid-007: EDID Present: 0x00000001 [ 1565.804372][T18901] vivid-007: ================== END STATUS ================== [ 1569.095267][T18912] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1569.101898][T18912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1569.162282][T18912] vhci_hcd vhci_hcd.0: Device attached [ 1571.391204][ T9] vhci_hcd: vhci_device speed not set [ 1571.523650][ T9] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 1571.561615][T18914] vhci_hcd: connection closed [ 1571.562269][ T6553] vhci_hcd: stop threads [ 1571.614757][ T6553] vhci_hcd: release socket [ 1571.633516][ T6553] vhci_hcd: disconnect device [ 1571.865827][T13160] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1572.085821][T13160] usb 8-1: Using ep0 maxpacket: 8 [ 1572.812107][T13160] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1572.844136][T13160] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1572.874181][T13160] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1572.909606][T13160] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1572.940206][T13160] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1572.993242][T13160] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1573.018828][T13160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.109871][T13160] usbtmc: probe of 8-1:16.0 failed with error -22 [ 1574.793588][T11865] usb 8-1: USB disconnect, device number 14 [ 1576.342400][T18950] ubi: mtd0 is already attached to ubi31 [ 1576.352254][T18950] kAFS: unparsable volume name [ 1576.855754][ T9] vhci_hcd: vhci_device speed not set [ 1580.283050][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1580.313041][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1580.324167][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1580.333744][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1580.342789][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1580.552076][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1580.614631][T12921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1580.641185][T12921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1580.653236][T12921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1580.672201][T12921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1580.711858][T12921] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1580.720080][T12921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1582.440822][T18984] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1582.448048][T18984] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1582.462184][T18984] vhci_hcd vhci_hcd.0: Device attached [ 1582.693244][ T9] vhci_hcd: vhci_device speed not set [ 1582.825767][T12921] Bluetooth: hci4: command tx timeout [ 1583.535749][ T9] usb 51-1: new full-speed USB device number 4 using vhci_hcd [ 1583.544586][T18989] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1583.556414][T18966] chnl_net:caif_netlink_parms(): no params data found [ 1583.566864][T18987] vhci_hcd: connection closed [ 1583.570240][T13580] vhci_hcd: stop threads [ 1583.630233][T13580] vhci_hcd: release socket [ 1583.634821][T13580] vhci_hcd: disconnect device [ 1584.137014][T18966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.442294][T18966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.463503][T18966] bridge_slave_0: entered allmulticast mode [ 1584.494901][T18966] bridge_slave_0: entered promiscuous mode [ 1584.679715][T19006] ubi: mtd0 is already attached to ubi31 [ 1584.703983][T19006] kAFS: unparsable volume name [ 1584.786654][T18894] syz_tun (unregistering): left allmulticast mode [ 1584.874067][T18966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.883079][T18966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.893348][T18966] bridge_slave_1: entered allmulticast mode [ 1584.905805][T12921] Bluetooth: hci4: command tx timeout [ 1584.911786][T18966] bridge_slave_1: entered promiscuous mode [ 1585.283644][T10318] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.309328][T10318] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1587.406258][ T50] Bluetooth: hci4: command tx timeout [ 1587.413284][T18966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.748686][T10318] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.772952][T10318] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1587.845334][T18966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.974667][T10318] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.005917][T10318] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1588.169851][T10318] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.232483][T10318] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1588.397561][T18966] team0: Port device team_slave_0 added [ 1588.464202][T18966] team0: Port device team_slave_1 added [ 1588.676024][ T9] vhci_hcd: vhci_device speed not set [ 1588.696520][T18966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.703740][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.845978][T18966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.897693][T18966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.920295][T18966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.005946][T18966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.980407][ T50] Bluetooth: hci4: command tx timeout [ 1590.178017][T18966] hsr_slave_0: entered promiscuous mode [ 1590.230715][T18966] hsr_slave_1: entered promiscuous mode [ 1590.540296][T19048] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1590.547793][T19048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1590.694183][T19048] vhci_hcd vhci_hcd.0: Device attached [ 1590.906225][T15110] vhci_hcd: vhci_device speed not set [ 1590.996900][T15110] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 1591.064197][T19052] vhci_hcd: connection reset by peer [ 1591.086525][ T6553] vhci_hcd: stop threads [ 1591.129426][ T6553] vhci_hcd: release socket [ 1591.154086][ T6553] vhci_hcd: disconnect device [ 1596.325837][T15110] vhci_hcd: vhci_device speed not set [ 1596.835871][T19091] ubi: mtd0 is already attached to ubi31 [ 1597.026715][T10318] hsr_slave_0: left promiscuous mode [ 1597.047628][T10318] hsr_slave_1: left promiscuous mode [ 1597.108250][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.131433][T19091] kAFS: unparsable volume name [ 1597.145216][T10318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.203732][T10318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.319427][T10318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.358764][T10318] bridge_slave_1: left allmulticast mode [ 1597.406313][T10318] bridge_slave_1: left promiscuous mode [ 1597.413371][T10318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.472014][T10318] bridge_slave_0: left allmulticast mode [ 1597.508620][T10318] bridge_slave_0: left promiscuous mode [ 1597.551979][T10318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.700368][T10318] veth1_macvtap: left allmulticast mode [ 1597.717807][T10318] veth1_macvtap: left promiscuous mode [ 1597.723972][T10318] veth0_macvtap: left promiscuous mode [ 1597.753292][T10318] veth1_vlan: left promiscuous mode [ 1597.802296][T10318] veth0_vlan: left promiscuous mode [ 1603.912798][T10318] team0 (unregistering): Port device team_slave_1 removed [ 1604.330081][T10318] team0 (unregistering): Port device team_slave_0 removed [ 1604.541469][T10318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.728876][T10318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.463419][T19158] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1607.470544][T19158] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1607.507637][T19158] vhci_hcd vhci_hcd.0: Device attached [ 1607.637892][T19160] vhci_hcd: connection closed [ 1607.643351][ T6553] vhci_hcd: stop threads [ 1607.696277][ T6553] vhci_hcd: release socket [ 1607.703516][ T6553] vhci_hcd: disconnect device [ 1607.716548][T15110] vhci_hcd: vhci_device speed not set [ 1607.874825][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.269787][T10318] bond0 (unregistering): Released all slaves [ 1608.503793][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2846'. [ 1608.513611][T19144] netlink: 'syz.6.2846': attribute type 5 has an invalid length. [ 1608.522089][T19144] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2846'. [ 1608.677732][T18966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1608.738188][T18966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1608.981452][T18966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1609.028529][T18966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1609.151159][T19175] ubi: mtd0 is already attached to ubi31 [ 1609.606446][T19175] kAFS: unparsable volume name [ 1610.325067][T18966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1610.422681][T18966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1610.521934][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.529601][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.594637][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.602577][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.314812][T18966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.574884][T18966] veth0_vlan: entered promiscuous mode [ 1612.644666][T18966] veth1_vlan: entered promiscuous mode [ 1612.824070][T18966] veth0_macvtap: entered promiscuous mode [ 1612.869103][T18966] veth1_macvtap: entered promiscuous mode [ 1612.957567][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1612.991029][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.024980][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.082139][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.107397][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1613.120373][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.140601][T18966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.228951][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1613.247348][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.264850][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1613.283270][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.318377][T18966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1613.333733][T18966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1613.348133][T18966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.369295][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1613.379244][T19236] netlink: 'syz.7.2862': attribute type 5 has an invalid length. [ 1613.387925][T19236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2862'. [ 1613.401752][T19236] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1613.411553][T19236] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1613.420834][T19236] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1613.430144][T19236] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1613.441642][T19236] geneve2: entered promiscuous mode [ 1613.447554][T19236] geneve2: entered allmulticast mode [ 1613.501478][T18966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.535841][T18966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.587243][T18966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.596940][T18966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.626594][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.635366][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.091660][T19261] netlink: 'syz.9.2865': attribute type 4 has an invalid length. [ 1615.360917][T10318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.395691][T10318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.382569][T19273] vivid-007: ================= START STATUS ================= [ 1616.391036][T19273] vivid-007: Enable Output Cropping: true [ 1616.397714][T19273] vivid-007: Enable Output Composing: true [ 1616.403999][T19273] vivid-007: Enable Output Scaler: true [ 1616.410366][T19273] vivid-007: Tx RGB Quantization Range: Automatic [ 1616.418514][T19273] vivid-007: Transmit Mode: HDMI [ 1616.424202][T19273] vivid-007: Display Present: true inactive [ 1616.431810][T19273] vivid-007: Hotplug Present: 0x00000001 [ 1616.448448][T19273] vivid-007: RxSense Present: 0x00000001 [ 1616.454668][T19273] vivid-007: EDID Present: 0x00000001 [ 1616.460550][T19273] vivid-007: ================== END STATUS ================== [ 1618.495418][T19282] ubi: mtd0 is already attached to ubi31 [ 1618.586059][T19282] kAFS: unparsable volume name [ 1620.546908][T19312] hub 9-0:1.0: USB hub found [ 1620.552682][T19312] hub 9-0:1.0: 1 port detected [ 1622.700738][T19325] vivid-007: ================= START STATUS ================= [ 1622.709451][T19325] vivid-007: Enable Output Cropping: true [ 1622.716088][T19325] vivid-007: Enable Output Composing: true [ 1622.722632][T19325] vivid-007: Enable Output Scaler: true [ 1622.729291][T19325] vivid-007: Tx RGB Quantization Range: Automatic [ 1622.736768][T19325] vivid-007: Transmit Mode: HDMI [ 1622.742395][T19325] vivid-007: Display Present: true inactive [ 1622.748931][T19325] vivid-007: Hotplug Present: 0x00000001 [ 1622.788138][T19325] vivid-007: RxSense Present: 0x00000001 [ 1622.795082][T19325] vivid-007: EDID Present: 0x00000001 [ 1622.801606][T19325] vivid-007: ================== END STATUS ================== [ 1626.185092][T19351] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2883'. [ 1626.212276][T19351] unsupported nlmsg_type 40 [ 1632.270148][T19380] ubi: mtd0 is already attached to ubi31 [ 1632.321176][T19380] kAFS: unparsable volume name [ 1635.236832][T19402] vivid-007: ================= START STATUS ================= [ 1635.245076][T19402] vivid-007: Enable Output Cropping: true [ 1635.252018][T19402] vivid-007: Enable Output Composing: true [ 1635.259999][T19402] vivid-007: Enable Output Scaler: true [ 1635.267198][T19402] vivid-007: Tx RGB Quantization Range: Automatic [ 1635.274374][T19402] vivid-007: Transmit Mode: HDMI [ 1635.280557][T19402] vivid-007: Display Present: true inactive [ 1635.292078][T19402] vivid-007: Hotplug Present: 0x00000001 [ 1635.298507][T19402] vivid-007: RxSense Present: 0x00000001 [ 1635.304324][T19402] vivid-007: EDID Present: 0x00000001 [ 1635.310350][T19402] vivid-007: ================== END STATUS ================== [ 1643.724585][T19466] vivid-007: ================= START STATUS ================= [ 1643.732883][T19466] vivid-007: Enable Output Cropping: true [ 1643.739311][T19466] vivid-007: Enable Output Composing: true [ 1643.747438][T19466] vivid-007: Enable Output Scaler: true [ 1643.754226][T19466] vivid-007: Tx RGB Quantization Range: Automatic [ 1643.761209][T19466] vivid-007: Transmit Mode: HDMI [ 1643.766572][T19466] vivid-007: Display Present: true inactive [ 1643.772931][T19466] vivid-007: Hotplug Present: 0x00000001 [ 1643.823995][T19466] vivid-007: RxSense Present: 0x00000001 [ 1643.833467][T19466] vivid-007: EDID Present: 0x00000001 [ 1643.839680][T19466] vivid-007: ================== END STATUS ================== [ 1644.254898][T19467] ubi: mtd0 is already attached to ubi31 [ 1644.401563][T19467] kAFS: unparsable volume name [ 1646.821775][T19497] sp0: Synchronizing with TNC [ 1646.886811][T19501] sp0: Found TNC [ 1652.288681][T19534] vivid-007: ================= START STATUS ================= [ 1652.297321][T19534] vivid-007: Enable Output Cropping: true [ 1652.303444][T19534] vivid-007: Enable Output Composing: true [ 1652.310020][T19534] vivid-007: Enable Output Scaler: true [ 1652.316234][T19534] vivid-007: Tx RGB Quantization Range: Automatic [ 1652.323068][T19534] vivid-007: Transmit Mode: HDMI [ 1652.328536][T19534] vivid-007: Display Present: true inactive [ 1652.335035][T19534] vivid-007: Hotplug Present: 0x00000001 [ 1652.341223][T19534] vivid-007: RxSense Present: 0x00000001 [ 1652.347414][T19534] vivid-007: EDID Present: 0x00000001 [ 1652.353078][T19534] vivid-007: ================== END STATUS ================== [ 1655.405939][T19546] vivid-008: disconnect [ 1655.671859][T19545] vivid-008: reconnect [ 1660.263624][T19591] vivid-004: disconnect [ 1660.615062][T19590] vivid-004: reconnect [ 1663.235783][T15110] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1663.307929][T19619] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1663.314653][T19619] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1663.801308][T19619] vhci_hcd vhci_hcd.0: Device attached [ 1664.139909][T12996] vhci_hcd: vhci_device speed not set [ 1664.317555][T15110] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1664.329822][T15110] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1664.335018][T19623] vhci_hcd: connection closed [ 1664.340565][T15110] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1664.355036][T15110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.390952][T10242] vhci_hcd: stop threads [ 1664.395723][T10242] vhci_hcd: release socket [ 1664.400732][T19613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1664.413547][T10242] vhci_hcd: disconnect device [ 1664.425931][T12996] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 1664.434029][T12996] usb 45-1: enqueue for inactive port 0 [ 1664.503200][T15110] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1664.528615][T12996] vhci_hcd: vhci_device speed not set [ 1665.012272][T15110] usb 4-1: USB disconnect, device number 5 [ 1665.138101][T19646] vivid-008: disconnect [ 1665.633595][T19635] vivid-008: reconnect [ 1669.321673][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1671.985759][T19708] vivid-004: disconnect [ 1672.234541][T19697] vivid-004: reconnect [ 1673.347292][T19724] FAT-fs (nullb0): bogus number of reserved sectors [ 1673.356951][T19724] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1673.910441][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1676.380045][T19739] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1676.386744][T19739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1676.452327][ T9] usb 4-1: device descriptor read/all, error -71 [ 1676.573237][T19739] vhci_hcd vhci_hcd.0: Device attached [ 1676.887580][T19742] vhci_hcd: connection closed [ 1676.931453][ T2969] vhci_hcd: stop threads [ 1677.033668][ T2969] vhci_hcd: release socket [ 1677.111328][ T2969] vhci_hcd: disconnect device [ 1677.184335][T17034] vhci_hcd: vhci_device speed not set [ 1678.995996][T19765] vivid-007: ================= START STATUS ================= [ 1679.004730][T19765] vivid-007: Enable Output Cropping: true [ 1679.010917][T19765] vivid-007: Enable Output Composing: true [ 1679.017797][T19765] vivid-007: Enable Output Scaler: true [ 1679.023563][T19765] vivid-007: Tx RGB Quantization Range: Automatic [ 1679.030543][T19765] vivid-007: Transmit Mode: HDMI [ 1679.035905][T19765] vivid-007: Display Present: true inactive [ 1679.042038][T19765] vivid-007: Hotplug Present: 0x00000001 [ 1679.048224][T19765] vivid-007: RxSense Present: 0x00000001 [ 1679.054293][T19765] vivid-007: EDID Present: 0x00000001 [ 1679.060064][T19765] vivid-007: ================== END STATUS ================== [ 1687.329812][T19820] vivid-007: ================= START STATUS ================= [ 1687.337753][T19820] vivid-007: Enable Output Cropping: true [ 1687.344002][T19820] vivid-007: Enable Output Composing: true [ 1687.350194][T19820] vivid-007: Enable Output Scaler: true [ 1687.356333][T19820] vivid-007: Tx RGB Quantization Range: Automatic [ 1687.363384][T19820] vivid-007: Transmit Mode: HDMI [ 1687.368929][T19820] vivid-007: Display Present: true inactive [ 1687.375136][T19820] vivid-007: Hotplug Present: 0x00000001 [ 1687.381377][T19820] vivid-007: RxSense Present: 0x00000001 [ 1687.388096][T19820] vivid-007: EDID Present: 0x00000001 [ 1687.394281][T19820] vivid-007: ================== END STATUS ================== [ 1691.747931][T19831] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1691.754776][T19831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1691.763738][T19838] loop7: detected capacity change from 0 to 7 [ 1691.852245][ C0] blk_print_req_error: 9 callbacks suppressed [ 1691.852266][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1691.859638][T19840] [ 1691.867959][ C0] buffer_io_error: 8 callbacks suppressed [ 1691.867976][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1691.870415][T19840] ================================================ [ 1691.870424][T19840] WARNING: lock held when returning to user space! [ 1691.879061][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1691.884492][T19840] syzkaller #0 Not tainted [ 1691.891972][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1691.898616][T19840] ------------------------------------------------ [ 1691.898626][T19840] syz.9.2973/19840 is leaving the kernel with locks still held! [ 1691.898638][T19840] 1 lock held by syz.9.2973/19840: [ 1691.898650][T19840] #0: ffff888021707b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 1691.953964][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1691.963434][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.002112][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.011862][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.037020][T19831] vhci_hcd vhci_hcd.0: Device attached [ 1692.037348][T19834] vhci_hcd: connection closed [ 1692.087499][ T2969] vhci_hcd: stop threads [ 1692.105090][ T2969] vhci_hcd: release socket [ 1692.115861][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.126920][ T2969] vhci_hcd: disconnect device [ 1692.127076][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.145563][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.155139][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.164171][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.174273][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.185860][T19838] ldm_validate_partition_table(): Disk read failed. [ 1692.268699][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.278108][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.297603][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.307017][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.347992][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1692.357324][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1692.369690][T19838] Dev loop7: unable to read RDB block 0 [ 1692.388594][T19838] loop7: unable to read partition table [ 1692.397896][T19838] loop7: partition table beyond EOD, truncated [ 1692.407935][T19838] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1692.736518][T12863] ================================================================== [ 1692.745533][T12863] BUG: KASAN: slab-use-after-free in __mutex_lock+0xc47/0xcc0 [ 1692.753590][T12863] Read of size 4 at addr ffff8880301cda34 by task syz-executor/12863 [ 1692.761878][T12863] [ 1692.764379][T12863] CPU: 1 PID: 12863 Comm: syz-executor Not tainted syzkaller #0 [ 1692.772534][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1692.782981][T12863] Call Trace: [ 1692.786345][T12863] [ 1692.789431][T12863] dump_stack_lvl+0x16c/0x230 [ 1692.794292][T12863] ? __lock_acquire+0x7c80/0x7c80 [ 1692.799462][T12863] ? show_regs_print_info+0x20/0x20 [ 1692.804758][T12863] ? load_image+0x3b0/0x3b0 [ 1692.809320][T12863] ? __virt_addr_valid+0x469/0x540 [ 1692.814565][T12863] print_report+0xac/0x220 [ 1692.819120][T12863] ? __mutex_lock+0xc47/0xcc0 [ 1692.824370][T12863] kasan_report+0x117/0x150 [ 1692.829156][T12863] ? __mutex_lock+0xc47/0xcc0 [ 1692.834470][T12863] __mutex_lock+0xc47/0xcc0 [ 1692.839173][T12863] ? stack_trace_save+0xe0/0xe0 [ 1692.844134][T12863] ? arch_stack_walk+0x160/0x190 [ 1692.849521][T12863] ? lo_ioctl+0x840/0x19f0 [ 1692.853965][T12863] ? mutex_lock_nested+0x20/0x20 [ 1692.858925][T12863] ? stack_trace_snprint+0xf0/0xf0 [ 1692.864489][T12863] ? path_openat+0x274b/0x3190 [ 1692.869377][T12863] lo_ioctl+0x840/0x19f0 [ 1692.873730][T12863] ? kasan_set_track+0x4e/0x70 [ 1692.878517][T12863] ? kasan_save_free_info+0x2e/0x50 [ 1692.883739][T12863] ? tomoyo_check_open_permission+0x2d3/0x3c0 [ 1692.889829][T12863] ? security_file_open+0x62/0xa0 [ 1692.894869][T12863] ? do_dentry_open+0x380/0x1500 [ 1692.900285][T12863] ? path_openat+0x274b/0x3190 [ 1692.905336][T12863] ? do_filp_open+0x1c5/0x3d0 [ 1692.910212][T12863] ? do_sys_openat2+0x12c/0x1c0 [ 1692.915299][T12863] ? __x64_sys_openat+0x139/0x160 [ 1692.920599][T12863] ? do_syscall_64+0x55/0xb0 [ 1692.925575][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.932748][T12863] ? lo_release+0x200/0x200 [ 1692.937740][T12863] ? rcu_is_watching+0x15/0xb0 [ 1692.942768][T12863] ? lock_release+0xba/0x8b0 [ 1692.948334][T12863] ? rcu_is_watching+0x15/0xb0 [ 1692.953151][T12863] ? lock_release+0xba/0x8b0 [ 1692.958123][T12863] ? __lock_acquire+0x7c80/0x7c80 [ 1692.963358][T12863] ? __read_once_word_nocheck+0x9/0x10 [ 1692.968874][T12863] ? deref_stack_reg+0x1bd/0x240 [ 1692.973858][T12863] ? is_bpf_text_address+0x28f/0x2a0 [ 1692.979254][T12863] ? is_bpf_text_address+0x26/0x2a0 [ 1692.984482][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1692.991036][T12863] ? kernel_text_address+0xa0/0xd0 [ 1692.996270][T12863] ? __kernel_text_address+0xd/0x30 [ 1693.001488][T12863] ? unwind_get_return_address+0x91/0xc0 [ 1693.007150][T12863] ? stack_trace_save+0xe0/0xe0 [ 1693.012193][T12863] ? arch_stack_walk+0x160/0x190 [ 1693.017730][T12863] ? stack_trace_save+0x9c/0xe0 [ 1693.022623][T12863] ? stack_trace_snprint+0xf0/0xf0 [ 1693.027841][T12863] ? __stack_depot_save+0x1f/0x630 [ 1693.033136][T12863] ? do_syscall_64+0x55/0xb0 [ 1693.037744][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.044182][T12863] ? kasan_set_track+0x5f/0x70 [ 1693.049416][T12863] ? kasan_set_track+0x4e/0x70 [ 1693.054736][T12863] ? kasan_save_free_info+0x2e/0x50 [ 1693.060039][T12863] ? ____kasan_slab_free+0x126/0x1e0 [ 1693.065635][T12863] ? slab_free_freelist_hook+0x130/0x1b0 [ 1693.071556][T12863] ? __kmem_cache_free+0xba/0x1f0 [ 1693.076725][T12863] ? tomoyo_path_number_perm+0x477/0x590 [ 1693.083436][T12863] ? security_file_ioctl+0x70/0xa0 [ 1693.089026][T12863] ? __se_sys_ioctl+0x48/0x170 [ 1693.094261][T12863] ? do_syscall_64+0x55/0xb0 [ 1693.099597][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.106356][T12863] ? do_vfs_ioctl+0xd31/0x1bb0 [ 1693.111314][T12863] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 1693.117250][T12863] ? lock_release+0xba/0x8b0 [ 1693.121893][T12863] ? rcu_is_watching+0x15/0xb0 [ 1693.126883][T12863] ? __lock_acquire+0x7c80/0x7c80 [ 1693.132252][T12863] ? slab_free_freelist_hook+0x130/0x1b0 [ 1693.138150][T12863] ? tomoyo_path_number_perm+0x477/0x590 [ 1693.144202][T12863] ? __kmem_cache_free+0xba/0x1f0 [ 1693.149371][T12863] ? blkdev_common_ioctl+0x105b/0x23d0 [ 1693.154971][T12863] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1693.160736][T12863] ? blkdev_bszset+0x1f0/0x1f0 [ 1693.165796][T12863] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1693.172527][T12863] ? lo_release+0x200/0x200 [ 1693.177205][T12863] blkdev_ioctl+0x58b/0x6f0 [ 1693.182096][T12863] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1693.187666][T12863] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1693.192965][T12863] ? security_file_ioctl+0x80/0xa0 [ 1693.198480][T12863] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1693.204410][T12863] __se_sys_ioctl+0xfd/0x170 [ 1693.209289][T12863] do_syscall_64+0x55/0xb0 [ 1693.213763][T12863] ? clear_bhb_loop+0x40/0x90 [ 1693.218546][T12863] ? clear_bhb_loop+0x40/0x90 [ 1693.223610][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.230092][T12863] RIP: 0033:0x7f83a3b8e7eb [ 1693.234713][T12863] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1693.255288][T12863] RSP: 002b:00007ffffbd79330 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1693.263812][T12863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f83a3b8e7eb [ 1693.272344][T12863] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 1693.280624][T12863] RBP: 00007ffffbd793cc R08: 0000000000000000 R09: 00007ffffbd790d7 [ 1693.288978][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000167 [ 1693.297171][T12863] R13: 00005555616ab590 R14: 000000000019c878 R15: 00007ffffbd79420 [ 1693.305260][T12863] [ 1693.308402][T12863] [ 1693.310751][T12863] Allocated by task 19837: [ 1693.315795][T12863] kasan_set_track+0x4e/0x70 [ 1693.320680][T12863] __kasan_slab_alloc+0x6c/0x80 [ 1693.325918][T12863] slab_post_alloc_hook+0x6e/0x4d0 [ 1693.331680][T12863] kmem_cache_alloc_node+0x150/0x330 [ 1693.337679][T12863] dup_task_struct+0x57/0x7c0 [ 1693.342630][T12863] copy_process+0x549/0x3d70 [ 1693.347754][T12863] kernel_clone+0x21b/0x840 [ 1693.352453][T12863] __se_sys_clone3+0x252/0x2c0 [ 1693.357926][T12863] do_syscall_64+0x55/0xb0 [ 1693.362377][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.368383][T12863] [ 1693.370811][T12863] Freed by task 5774: [ 1693.374908][T12863] kasan_set_track+0x4e/0x70 [ 1693.379540][T12863] kasan_save_free_info+0x2e/0x50 [ 1693.384762][T12863] ____kasan_slab_free+0x126/0x1e0 [ 1693.389979][T12863] slab_free_freelist_hook+0x130/0x1b0 [ 1693.395911][T12863] kmem_cache_free+0xf8/0x280 [ 1693.400718][T12863] delayed_put_task_struct+0x10f/0x2b0 [ 1693.406570][T12863] rcu_core+0xcc4/0x1720 [ 1693.410827][T12863] handle_softirqs+0x280/0x820 [ 1693.415777][T12863] do_softirq+0xed/0x180 [ 1693.420169][T12863] __local_bh_enable_ip+0x178/0x1c0 [ 1693.425496][T12863] tcp_recvmsg+0x1fa/0x810 [ 1693.430194][T12863] inet_recvmsg+0x130/0x1e0 [ 1693.435011][T12863] sock_read_iter+0x2b7/0x3b0 [ 1693.439982][T12863] vfs_read+0x431/0x920 [ 1693.444239][T12863] ksys_read+0x147/0x250 [ 1693.448776][T12863] do_syscall_64+0x55/0xb0 [ 1693.453408][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.459512][T12863] [ 1693.461932][T12863] Last potentially related work creation: [ 1693.467678][T12863] kasan_save_stack+0x3e/0x60 [ 1693.472672][T12863] __kasan_record_aux_stack+0xaf/0xc0 [ 1693.478327][T12863] call_rcu+0x158/0x930 [ 1693.482551][T12863] __schedule+0x14da/0x44d0 [ 1693.487371][T12863] schedule+0xbd/0x170 [ 1693.491663][T12863] schedule_timeout+0x9b/0x280 [ 1693.496549][T12863] wait_for_completion+0x2bd/0x590 [ 1693.501859][T12863] rdmsr_safe_on_cpu+0x151/0x220 [ 1693.507078][T12863] msr_read+0x151/0x250 [ 1693.511348][T12863] vfs_read+0x27e/0x920 [ 1693.515696][T12863] ksys_read+0x147/0x250 [ 1693.519959][T12863] do_syscall_64+0x55/0xb0 [ 1693.524390][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.530350][T12863] [ 1693.532680][T12863] Second to last potentially related work creation: [ 1693.539457][T12863] kasan_save_stack+0x3e/0x60 [ 1693.544351][T12863] __kasan_record_aux_stack+0xaf/0xc0 [ 1693.549847][T12863] task_work_add+0xe4/0x440 [ 1693.554587][T12863] scheduler_tick+0x2c9/0x6a0 [ 1693.559364][T12863] update_process_times+0x17b/0x1b0 [ 1693.565089][T12863] tick_sched_timer+0x3a2/0x580 [ 1693.570070][T12863] __hrtimer_run_queues+0x4df/0xc40 [ 1693.575415][T12863] hrtimer_interrupt+0x3c9/0x9c0 [ 1693.580476][T12863] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1693.586741][T12863] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1693.592692][T12863] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1693.598712][T12863] [ 1693.601155][T12863] The buggy address belongs to the object at ffff8880301cda00 [ 1693.601155][T12863] which belongs to the cache task_struct of size 7424 [ 1693.615651][T12863] The buggy address is located 52 bytes inside of [ 1693.615651][T12863] freed 7424-byte region [ffff8880301cda00, ffff8880301cf700) [ 1693.630130][T12863] [ 1693.632553][T12863] The buggy address belongs to the physical page: [ 1693.639111][T12863] page:ffffea0000c07200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x301c8 [ 1693.649554][T12863] head:ffffea0000c07200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1693.658619][T12863] memcg:ffff88802e162041 [ 1693.662962][T12863] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1693.671656][T12863] page_type: 0xffffffff() [ 1693.676013][T12863] raw: 00fff00000000840 ffff888019a4c500 0000000000000000 dead000000000001 [ 1693.684618][T12863] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88802e162041 [ 1693.693312][T12863] page dumped because: kasan: bad access detected [ 1693.700092][T12863] page_owner tracks the page as allocated [ 1693.705906][T12863] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11836, tgid 11836 (syz.4.1345), ts 885073749337, free_ts 884029253518 [ 1693.729725][T12863] post_alloc_hook+0x1cd/0x210 [ 1693.734694][T12863] get_page_from_freelist+0x195c/0x19f0 [ 1693.740439][T12863] __alloc_pages+0x1e3/0x460 [ 1693.745049][T12863] alloc_slab_page+0x5d/0x170 [ 1693.749834][T12863] new_slab+0x87/0x2e0 [ 1693.753920][T12863] ___slab_alloc+0xc6d/0x12f0 [ 1693.759135][T12863] kmem_cache_alloc_node+0x1ea/0x330 [ 1693.764457][T12863] dup_task_struct+0x57/0x7c0 [ 1693.769146][T12863] copy_process+0x549/0x3d70 [ 1693.773808][T12863] kernel_clone+0x21b/0x840 [ 1693.778515][T12863] __se_sys_clone3+0x252/0x2c0 [ 1693.783401][T12863] do_syscall_64+0x55/0xb0 [ 1693.787918][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.793919][T12863] page last free stack trace: [ 1693.798632][T12863] free_unref_page_prepare+0x7ce/0x8e0 [ 1693.804341][T12863] free_unref_page+0x32/0x2e0 [ 1693.809212][T12863] __unfreeze_partials+0x1cf/0x210 [ 1693.815485][T12863] put_cpu_partial+0x17c/0x250 [ 1693.820370][T12863] __slab_free+0x31d/0x410 [ 1693.824811][T12863] qlist_free_all+0x75/0xe0 [ 1693.829329][T12863] kasan_quarantine_reduce+0x143/0x160 [ 1693.834803][T12863] __kasan_slab_alloc+0x22/0x80 [ 1693.839836][T12863] slab_post_alloc_hook+0x6e/0x4d0 [ 1693.844997][T12863] kmem_cache_alloc+0x11e/0x2e0 [ 1693.849870][T12863] getname_flags+0xbb/0x500 [ 1693.854659][T12863] do_sys_openat2+0xcb/0x1c0 [ 1693.859290][T12863] __x64_sys_openat+0x139/0x160 [ 1693.864373][T12863] do_syscall_64+0x55/0xb0 [ 1693.868892][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.875067][T12863] [ 1693.877485][T12863] Memory state around the buggy address: [ 1693.883127][T12863] ffff8880301cd900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1693.891459][T12863] ffff8880301cd980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1693.900418][T12863] >ffff8880301cda00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1693.908589][T12863] ^ [ 1693.914256][T12863] ffff8880301cda80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1693.922701][T12863] ffff8880301cdb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1693.931237][T12863] ================================================================== [ 1693.940874][T12863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1693.948391][T12863] CPU: 1 PID: 12863 Comm: syz-executor Not tainted syzkaller #0 [ 1693.956330][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1693.966770][T12863] Call Trace: [ 1693.970096][T12863] [ 1693.973219][T12863] dump_stack_lvl+0x16c/0x230 [ 1693.978205][T12863] ? show_regs_print_info+0x20/0x20 [ 1693.983918][T12863] ? load_image+0x3b0/0x3b0 [ 1693.988567][T12863] panic+0x2c0/0x710 [ 1693.997392][T12863] ? bpf_jit_dump+0xd0/0xd0 [ 1694.002499][T12863] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1694.009434][T12863] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1694.015821][T12863] ? _raw_spin_unlock+0x40/0x40 [ 1694.020811][T12863] ? print_memory_metadata+0x314/0x400 [ 1694.026531][T12863] ? __mutex_lock+0xc47/0xcc0 [ 1694.032823][T12863] check_panic_on_warn+0x84/0xa0 [ 1694.037917][T12863] ? __mutex_lock+0xc47/0xcc0 [ 1694.042801][T12863] end_report+0x6f/0x140 [ 1694.047714][T12863] kasan_report+0x128/0x150 [ 1694.052368][T12863] ? __mutex_lock+0xc47/0xcc0 [ 1694.057336][T12863] __mutex_lock+0xc47/0xcc0 [ 1694.062080][T12863] ? stack_trace_save+0xe0/0xe0 [ 1694.067523][T12863] ? arch_stack_walk+0x160/0x190 [ 1694.072884][T12863] ? lo_ioctl+0x840/0x19f0 [ 1694.077797][T12863] ? mutex_lock_nested+0x20/0x20 [ 1694.083063][T12863] ? stack_trace_snprint+0xf0/0xf0 [ 1694.088787][T12863] ? path_openat+0x274b/0x3190 [ 1694.093792][T12863] lo_ioctl+0x840/0x19f0 [ 1694.098366][T12863] ? kasan_set_track+0x4e/0x70 [ 1694.103518][T12863] ? kasan_save_free_info+0x2e/0x50 [ 1694.109468][T12863] ? tomoyo_check_open_permission+0x2d3/0x3c0 [ 1694.115610][T12863] ? security_file_open+0x62/0xa0 [ 1694.120859][T12863] ? do_dentry_open+0x380/0x1500 [ 1694.125840][T12863] ? path_openat+0x274b/0x3190 [ 1694.130941][T12863] ? do_filp_open+0x1c5/0x3d0 [ 1694.136128][T12863] ? do_sys_openat2+0x12c/0x1c0 [ 1694.141389][T12863] ? __x64_sys_openat+0x139/0x160 [ 1694.146637][T12863] ? do_syscall_64+0x55/0xb0 [ 1694.151453][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.157940][T12863] ? lo_release+0x200/0x200 [ 1694.162765][T12863] ? rcu_is_watching+0x15/0xb0 [ 1694.167590][T12863] ? lock_release+0xba/0x8b0 [ 1694.172340][T12863] ? rcu_is_watching+0x15/0xb0 [ 1694.177237][T12863] ? lock_release+0xba/0x8b0 [ 1694.181963][T12863] ? __lock_acquire+0x7c80/0x7c80 [ 1694.187165][T12863] ? __read_once_word_nocheck+0x9/0x10 [ 1694.193068][T12863] ? deref_stack_reg+0x1bd/0x240 [ 1694.198326][T12863] ? is_bpf_text_address+0x28f/0x2a0 [ 1694.204278][T12863] ? is_bpf_text_address+0x26/0x2a0 [ 1694.209593][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.215897][T12863] ? kernel_text_address+0xa0/0xd0 [ 1694.221394][T12863] ? __kernel_text_address+0xd/0x30 [ 1694.226896][T12863] ? unwind_get_return_address+0x91/0xc0 [ 1694.233838][T12863] ? stack_trace_save+0xe0/0xe0 [ 1694.239243][T12863] ? arch_stack_walk+0x160/0x190 [ 1694.244401][T12863] ? stack_trace_save+0x9c/0xe0 [ 1694.249464][T12863] ? stack_trace_snprint+0xf0/0xf0 [ 1694.254812][T12863] ? __stack_depot_save+0x1f/0x630 [ 1694.260292][T12863] ? do_syscall_64+0x55/0xb0 [ 1694.265193][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.271304][T12863] ? kasan_set_track+0x5f/0x70 [ 1694.276174][T12863] ? kasan_set_track+0x4e/0x70 [ 1694.280959][T12863] ? kasan_save_free_info+0x2e/0x50 [ 1694.286613][T12863] ? ____kasan_slab_free+0x126/0x1e0 [ 1694.291999][T12863] ? slab_free_freelist_hook+0x130/0x1b0 [ 1694.298056][T12863] ? __kmem_cache_free+0xba/0x1f0 [ 1694.303339][T12863] ? tomoyo_path_number_perm+0x477/0x590 [ 1694.309532][T12863] ? security_file_ioctl+0x70/0xa0 [ 1694.314761][T12863] ? __se_sys_ioctl+0x48/0x170 [ 1694.319646][T12863] ? do_syscall_64+0x55/0xb0 [ 1694.324407][T12863] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.331528][T12863] ? do_vfs_ioctl+0xd31/0x1bb0 [ 1694.336778][T12863] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 1694.342892][T12863] ? lock_release+0xba/0x8b0 [ 1694.347866][T12863] ? rcu_is_watching+0x15/0xb0 [ 1694.352801][T12863] ? __lock_acquire+0x7c80/0x7c80 [ 1694.358216][T12863] ? slab_free_freelist_hook+0x130/0x1b0 [ 1694.364150][T12863] ? tomoyo_path_number_perm+0x477/0x590 [ 1694.369894][T12863] ? __kmem_cache_free+0xba/0x1f0 [ 1694.374942][T12863] ? blkdev_common_ioctl+0x105b/0x23d0 [ 1694.380708][T12863] ? tomoyo_path_number_perm+0x4dc/0x590 [ 1694.386565][T12863] ? blkdev_bszset+0x1f0/0x1f0 [ 1694.391456][T12863] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1694.397036][T12863] ? lo_release+0x200/0x200 [ 1694.401740][T12863] blkdev_ioctl+0x58b/0x6f0 [ 1694.406401][T12863] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1694.411891][T12863] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1694.417022][T12863] ? security_file_ioctl+0x80/0xa0 [ 1694.422155][T12863] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 1694.427801][T12863] __se_sys_ioctl+0xfd/0x170 [ 1694.432588][T12863] do_syscall_64+0x55/0xb0 [ 1694.437148][T12863] ? clear_bhb_loop+0x40/0x90 [ 1694.441940][T12863] ? clear_bhb_loop+0x40/0x90 [ 1694.446828][T12863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1694.453420][T12863] RIP: 0033:0x7f83a3b8e7eb [ 1694.458286][T12863] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1694.478618][T12863] RSP: 002b:00007ffffbd79330 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.487491][T12863] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f83a3b8e7eb [ 1694.495909][T12863] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 1694.504078][T12863] RBP: 00007ffffbd793cc R08: 0000000000000000 R09: 00007ffffbd790d7 [ 1694.512414][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000167 [ 1694.520568][T12863] R13: 00005555616ab590 R14: 000000000019c878 R15: 00007ffffbd79420 [ 1694.528954][T12863] [ 1694.532616][T12863] Kernel Offset: disabled [ 1694.537064][T12863] Rebooting in 86400 seconds..