last executing test programs: 28m44.415492787s ago: executing program 32 (id=663): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x20001, 0x81, 0x0, 'queue1\x00', 0xffffffff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xd, 0xfffffff8}, {}, {}, @raw32}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x69, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x401, &(0x7f0000000080)=ANY=[@ANYBLOB=',trans=fd']) r6 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0xa, @pix_mp={0xaeda, 0x4006, 0x33565348, 0x9, 0x3, [{0x74, 0x2d}, {0x8, 0xe}, {0x4}, {0x6, 0x8}, {0xff1, 0x8}, {0xff, 0x203}, {0x0, 0x6}, {0x6, 0xffffe59a}], 0x5, 0x4, 0x0, 0x2, 0x7}}, 0x10000}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r8 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/27, 0x1b}], &(0x7f00000005c0), 0x1}, 0x20) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x204200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0xe}) 23m11.677951337s ago: executing program 33 (id=1247): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0], &(0x7f00000006c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0x1400e, &(0x7f00000008c0)={[{@nogrpid}], [{@appraise}, {@obj_type={'obj_type', 0x3d, '+[^\\&&-$}'}}, {@obj_role={'obj_role', 0x3d, '\xb6'}}, {@uid_lt}, {@measure}]}, 0x0, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") sendfile(r2, r2, 0x0, 0xe0000000) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 20m48.85758313s ago: executing program 34 (id=2068): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x459, &(0x7f00000004c0)="$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") syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x62000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80281, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf, 0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x10, 0x3, 0x1, 0x4, 0x1002, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0xffffffff, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) mremap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000444000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 19m48.608922447s ago: executing program 35 (id=2484): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 19m15.331745572s ago: executing program 36 (id=2636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x33a952a061e205a0, 0x11012, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18m28.913104194s ago: executing program 37 (id=2801): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xfffffffffffffff4, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0xed3dd074, 0x6}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}, {0xf, 0x4, 0xa}]}]}, {0x0, [0x0, 0x5f, 0x7f, 0x30, 0x30]}}, &(0x7f0000000100)=""/141, 0x73, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 13m3.536971097s ago: executing program 38 (id=3720): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20004000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='/dev/snd/seq\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff) getpid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0) setns(0xffffffffffffffff, 0x24020000) openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 9m36.503547692s ago: executing program 9 (id=4143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000940)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) close(0x3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_INFO(0x0, 0x4, 0x13, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, 0x0, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 9m33.793187724s ago: executing program 9 (id=4146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xc, 0x20010, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a46ea826e7a3bb2"], 0x64}}, 0x0) 9m30.930407913s ago: executing program 9 (id=4152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = shmget(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) getitimer(0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) keyctl$session_to_parent(0x12) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close_range(r2, 0xffffffffffffffff, 0x0) 9m29.222511575s ago: executing program 9 (id=4153): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) r7 = fcntl$dupfd(r6, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 9m27.941473245s ago: executing program 9 (id=4156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x3ff}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) shutdown(r0, 0x0) socket$inet(0x2, 0x800, 0xa1df) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) syz_clone(0x180000, &(0x7f00000000c0), 0x0, &(0x7f00000002c0), &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r6, 0x10000}, &(0x7f0000000180)=0x8) 9m25.989106387s ago: executing program 9 (id=4162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syncfs(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078008001240000000000500050002000000050004000000000013000300686173683a6e65742c696661636500004adb2ef69b71f3c941f718fe11d8484a679aae92589dbf4c23ab572aa94615cbc0fb3ea3e25be866c15c1a08edbf46b2c0bf2820305e49f5d29674e5546931c73642cd"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) iopl(0x3) 9m10.336891204s ago: executing program 39 (id=4162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)=0xfffffffffffff800, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syncfs(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078008001240000000000500050002000000050004000000000013000300686173683a6e65742c696661636500004adb2ef69b71f3c941f718fe11d8484a679aae92589dbf4c23ab572aa94615cbc0fb3ea3e25be866c15c1a08edbf46b2c0bf2820305e49f5d29674e5546931c73642cd"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c0d4}, 0xc40) iopl(0x3) 1m40.179050108s ago: executing program 1 (id=5757): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x36) mkdir(&(0x7f0000000580)='./file0\x00', 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m39.865499251s ago: executing program 1 (id=5760): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) rmdir(0x0) 1m39.277043744s ago: executing program 1 (id=5763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="2e260f23f4440f20c03503000000440f22c0f4650f7813360f6e3c723666810f00002e65660f79d2660f2d310f12f1c4e27978b171620000", 0x38}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.825376511s ago: executing program 1 (id=5768): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x35d}) 1m38.178880886s ago: executing program 1 (id=5770): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x22000b0, 0x0, 0x3, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m38.056189263s ago: executing program 1 (id=5774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)={0x60, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m29.367043637s ago: executing program 0 (id=5826): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1000000, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000900)="e02742e8680d85ff", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1m29.311135146s ago: executing program 0 (id=5827): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1m27.96765596s ago: executing program 0 (id=5831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="2ef20f017df4ba4200b07aeeb80e000f00d0660f3acfc30d0f01b91a000f20e06635000010000f22e06766c744240033d500006766c74424020001c0fe6766c744240600000000670f0114240f00d466b9410101c066b869d281cd66ba000000000f302e0f017500", 0x68}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m27.75048517s ago: executing program 0 (id=5833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m27.471181269s ago: executing program 0 (id=5835): ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="80000000080211000001080211000000aa09b799c0d70000000000000000000064000110000602020202020201010b"], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 1m26.383331328s ago: executing program 0 (id=5841): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1m26.217634103s ago: executing program 40 (id=5841): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1m21.904165579s ago: executing program 41 (id=5774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)={0x60, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.972861191s ago: executing program 4 (id=5886): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) 1m17.938358945s ago: executing program 4 (id=5887): socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) read$FUSE(r5, 0x0, 0x6c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1m16.795844256s ago: executing program 4 (id=5894): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c80)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x4085) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r2, &(0x7f0000000180)=""/37, 0x25, 0x0, 0x0, 0xff04) 1m15.776932495s ago: executing program 4 (id=5900): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r1, 0x0, 0x200002) 1m15.183541857s ago: executing program 4 (id=5901): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) 1m14.913097145s ago: executing program 4 (id=5905): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b8004", 0xd}], 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x100000000, 0x4002004c4, 0x1004, 0x45c5, 0x2, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12c7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.745468705s ago: executing program 42 (id=5905): sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4001) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b8004", 0xd}], 0x1) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x100000000, 0x4002004c4, 0x1004, 0x45c5, 0x2, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x12c7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.050799205s ago: executing program 5 (id=6035): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b"]) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000462000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x62, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 49.610064448s ago: executing program 5 (id=6040): mkdir(0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x3}, {0x4}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="88ff7c33bdcbc8349cfc7b9412a8026e3cb06304ed03cef662a2b8a27602cf6857117ab00cf1a937dce17459b876ac1d394142f48dacafccfb7259a80f8a213fd6fdf2c53200f3dfef55305052b6b895", 0x50, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f00000164010102000000000500010000000000080007"], 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 47.650356421s ago: executing program 5 (id=6043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="69e183a2de2e20d7250f3165003f3d5989cb8c83644613d9e16f95dae3759442db55f9f73c54d5e6d845236108051b7b51d959db573f9f555ff8c9e138f9ee36c0518e1ac62ec327d0dfd5bcf6a692e508a39a9d00cb89534e83136dd56255cddc08", 0x62}], 0x1, 0x0, 0x0, 0x28024000}}], 0x1, 0x20008804) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x0, 0x2, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x3346c4e8, 0x0, 0xffffffffffffffff, 0x6, 0x967], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.318603783s ago: executing program 5 (id=6049): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x800) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x1cb020, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 46.970951437s ago: executing program 5 (id=6051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="640000003f0001002abd7000fedbdf2514009e00ff0100000000000000000000000000013f0018800800a700000000007f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd58d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"], 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.648562388s ago: executing program 5 (id=6052): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x7ffffffd, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x2, 0x805f, 0x200000000000, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 45.972193915s ago: executing program 43 (id=6052): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x7ffffffd, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x2, 0x805f, 0x200000000000, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15.876990116s ago: executing program 7 (id=6158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(0x0, 0xfff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.712929466s ago: executing program 7 (id=6169): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x2, 0x3, 0xfffffff9, 0x9, 0x15, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 12.908890282s ago: executing program 8 (id=6173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 12.899755703s ago: executing program 2 (id=6174): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2c8c0, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000480)='./file1\x00', 0x810010, &(0x7f000001c200)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16, @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$eJzskk9rE08Yxz+zu0n296OlQaKiCEUtWg9tNqnGPwcFLwb1JBVqQTAkaQ2m/mkCNaGHCEIRL4JVaBEPoqSIB/ENmIOn3hSKt1LouYcevEjryuxOtpN34GE+h/3uzDzP99nn2blbe1RLALvb80VIInFI8V0IHGBQBFuU7FBdpdeVxtX5FSvUjtLfSnfPNicmQVSOreeszsHSUZGkL/VrdYMiA7c5//bapx83Yotr+7Y+fJXxV282viBOlgbevfn84vJSf2Avbk3qPnbnyLIrjYCXOxPrG84hUl2vyuLafvfPgdWn7Y+5Z7KD11MIb9kFRr+NLF30+p9byrPWaN4rVKvl2dqlJxZbQamf2/NF+XInAb7v+0HvQB7QY2T7K+zFHHZgHLDxoxiHPdL1mYfpWqM5UpkpTJeny/ez2bGcd9rzzmTTU5Xq+1fyWfaEVkJNEKmnAPmb/tPOY8COivkfWlo1hPZp6lzouXHt1w0fpwdLy+2qoBPlJlScHME4J5CjnWsJbXcocHEIWsojsOfCRcbRvi+s5QYHo8UH1dICAtFNa+NEHplNYtEiqy/GzkVtLygdUppX2la6qXTQ7b2pTuBgqfs83II4jwv1+mwmDit9KkvtZeXgwrdkSx+YrJq0e5u7YGMwGAwGg8FgMBgM/wx/AwAA//+2K50Q") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000001006f9595d6538c6dc80804fa586226a23d71aafd23663ae6610952721f71faa0f9bbbf412166404116aa2b81a0443a169f41457a94c3cc54fe08aab15e489617968f5436df3a99f504fa0088e8b1448974a9b93c6085171af52ad83dc1a0d9db61bc4258ff449644dd8c597ebbcbc361f54e298ca8e5d80a5f64c515683dc72d205fc8529a6f849ee1806cc8d60ce55bbc50c1742c19f75d4d0081b6e6ccfb837bb993d2e941da721d6d88c6ecc94d80a1e22bd8e625"], 0x3, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") 10.752734745s ago: executing program 8 (id=6177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x3f7a) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x191c) 10.660537228s ago: executing program 2 (id=6179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getitimer(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x2, 0x4, "8f4b1a98"}, 0xc) 8.388460244s ago: executing program 6 (id=6183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200400c1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x0, 0x2, 0x6}, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x4200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r2) 8.315751111s ago: executing program 2 (id=6184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x803, 0x6) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 7.738082354s ago: executing program 8 (id=6185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 6.920973759s ago: executing program 7 (id=6186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r4}, 0x38) 6.726358534s ago: executing program 8 (id=6187): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x100000001, 0x3}, {0x4, 0x7}, 0x1}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r3, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 6.643422788s ago: executing program 2 (id=6188): syz_open_dev$evdev(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000000004032150e0100000000000109022400010000c00009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e3100000000"], 0xfc}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.422066611s ago: executing program 7 (id=6189): r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x1001006, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 4.742498819s ago: executing program 6 (id=6191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) pread64(r0, 0x0, 0x6, 0xc2b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 3.305635117s ago: executing program 7 (id=6193): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20048000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x1, 0x0, 0xffffffff}, {0x87, 0xfe, 0x4, 0xff}, {0x6}]}) 3.305028076s ago: executing program 3 (id=6194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.991975667s ago: executing program 8 (id=6195): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x4, 0xf5, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x1, 0x1}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r2, r1, 0x2, 0x1, 0x3}, 0x50) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002202000000000000000000008000200ffffffff080003"], 0x2c}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xc1, 0xd1, 0x10, 0x19d2, 0xff70, 0x821b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x5, 0xa0, 0x0, [{{0x9, 0x4, 0x4e, 0x9, 0x0, 0xff, 0xff, 0xff, 0xdc}}]}}]}}, 0x0) 2.991654738s ago: executing program 7 (id=6196): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 2.991123686s ago: executing program 3 (id=6197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) 2.956754584s ago: executing program 2 (id=6198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',roo', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getitimer(0x2, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x80c, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0xfffffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 2.955811588s ago: executing program 6 (id=6199): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.895071947s ago: executing program 3 (id=6200): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') epoll_create(0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet6(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 1.893289975s ago: executing program 6 (id=6201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xffff, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 1.582108879s ago: executing program 3 (id=6202): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.516937596s ago: executing program 2 (id=6203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0xfffffffe, 0x35b}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0xfffffffffffffffd, 0x0, 0x40000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.481826746s ago: executing program 3 (id=6204): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 1.125105527s ago: executing program 6 (id=6205): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x20, 0x1, 0x53, 0xfffff00c}, {0x6, 0x4, 0x6, 0x4}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 960.248477ms ago: executing program 6 (id=6206): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000908000/0x1000)=nil, &(0x7f0000db6000/0x1000)=nil, 0x0}, 0x68) brk(0x55555ede6001) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 432.401451ms ago: executing program 3 (id=6207): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 8 (id=6208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) kernel console output (not intermixed with test programs): op1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1995.844697][T24331] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1998.011874][T24353] blk_print_req_error: 3 callbacks suppressed [ 1998.011939][T24353] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1998.028087][T24353] SQUASHFS error: Failed to read block 0x0: -5 [ 1998.034595][T24353] unable to read squashfs_super_block [ 1999.807184][T24365] sg_write: data in/out 2097116/10 bytes for SCSI command 0xfd-- guessing data in; [ 1999.807184][T24365] program syz.7.4764 not setting count and/or reply_len properly [ 2000.018325][T24368] vfat: Unexpected value for 'dos1xfloppy' [ 2002.211903][T24383] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2004.298023][T11307] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2004.340132][T24404] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2004.347968][T24404] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2004.356231][T24404] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2004.363952][T24404] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2006.194483][T24416] netlink: 'syz.3.4776': attribute type 29 has an invalid length. [ 2006.396138][T24416] netlink: 'syz.3.4776': attribute type 29 has an invalid length. [ 2008.193832][T24444] batadv_slave_1: entered allmulticast mode [ 2008.447784][T24442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4781'. [ 2008.560282][T24438] batadv_slave_1: left allmulticast mode [ 2010.985423][T24457] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2011.367838][T24457] EXT4-fs (loop0): unable to read superblock [ 2014.433176][T24485] siw: device registration error -23 [ 2017.575453][ T30] audit: type=1400 audit(2033556011.872:603): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=24507 comm="syz.1.4800" [ 2018.141933][T24516] netlink: 'syz.7.4799': attribute type 2 has an invalid length. [ 2018.186929][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'. [ 2018.196876][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4797'. [ 2018.214863][T24515] netlink: 'syz.5.4797': attribute type 11 has an invalid length. [ 2018.916130][T24516] netlink: 119 bytes leftover after parsing attributes in process `syz.7.4799'. [ 2019.169264][T24531] sctp: [Deprecated]: syz.3.4803 (pid 24531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2019.169264][T24531] Use struct sctp_sack_info instead [ 2022.929693][T24542] exfat: Deprecated parameter 'utf8' [ 2022.935458][T24542] exfat: Deprecated parameter 'namecase' [ 2022.942609][T24542] exfat: Deprecated parameter 'utf8' [ 2022.950015][T24542] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2022.959531][T24542] exFAT-fs (loop1): unable to read boot sector [ 2022.966983][T24542] exFAT-fs (loop1): failed to read boot sector [ 2022.983502][T24542] exFAT-fs (loop1): failed to recognize exfat type [ 2023.820926][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2023.993072][ T30] audit: type=1326 audit(2033556018.832:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24539 comm="syz.1.4805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddffd8eec9 code=0x0 [ 2025.792098][T24568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2025.896670][T24572] netlink: 'syz.3.4812': attribute type 9 has an invalid length. [ 2026.527487][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4811'. [ 2027.040655][T24579] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2027.064877][T24579] EXT4-fs (loop1): unable to read superblock [ 2027.780048][T24577] tmpfs: Unknown parameter 'usrquotar' [ 2029.033302][T24599] syzkaller1: entered promiscuous mode [ 2029.039062][T24599] syzkaller1: entered allmulticast mode [ 2029.109424][T24598] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 2029.117065][T24598] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2029.124214][T24598] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2029.130893][T24598] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 2029.137649][T24598] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2029.144346][T24598] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 2029.151657][T24598] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2029.158376][T24598] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 2029.165319][T24598] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2029.172475][T24598] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 2029.181118][T24598] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2029.187826][T24598] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2031.116358][T24617] tmpfs: Unknown parameter 'usrquotar' [ 2031.893514][T24626] netlink: 'syz.1.4823': attribute type 9 has an invalid length. [ 2033.364101][T24636] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 2035.343838][T24653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4829'. [ 2035.875405][T21516] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2036.028032][T21516] usb 6-1: Using ep0 maxpacket: 16 [ 2036.212789][T21516] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.295364][T21516] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 2036.337630][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4833'. [ 2036.376493][T21516] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2036.422512][T21516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.431836][T21516] usb 6-1: Product: syz [ 2036.436012][T21516] usb 6-1: Manufacturer: syz [ 2036.455516][T21516] usb 6-1: SerialNumber: syz [ 2036.609254][T11281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2036.719318][T15583] usb 6-1: USB disconnect, device number 4 [ 2036.922972][T24673] trusted_key: encrypted_key: master key parameter 'cY?(<`Ͼ3Q#Pd' is invalid [ 2038.780242][T24682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2039.476108][T24693] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2039.491359][T24693] SQUASHFS error: Failed to read block 0x0: -5 [ 2039.498783][T24693] unable to read squashfs_super_block [ 2040.017238][T24703] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2040.027063][T24703] FAT-fs (loop5): unable to read boot sector [ 2041.757392][T24723] netlink: 'syz.5.4853': attribute type 9 has an invalid length. [ 2043.329936][T21516] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2043.600747][T21516] usb 2-1: Using ep0 maxpacket: 32 [ 2043.894704][T21516] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2043.913132][T21516] usb 2-1: config 0 has no interface number 0 [ 2043.953187][T21516] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2043.973280][T21516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.000363][T21516] usb 2-1: Product: syz [ 2044.027518][T21516] usb 2-1: Manufacturer: syz [ 2044.060228][T21516] usb 2-1: SerialNumber: syz [ 2044.573987][T21516] usb 2-1: config 0 descriptor?? [ 2044.589738][T21516] smsc95xx v2.0.0 [ 2044.965809][T24759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2045.642860][T21516] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 2045.654252][T21516] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 2045.669372][T21516] usb 2-1: USB disconnect, device number 18 [ 2045.701867][T24761] NILFS (loop5): device size too small [ 2046.553043][T24767] : entered promiscuous mode [ 2047.843557][T24778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2047.850903][T24778] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 2047.907374][T24778] bond0: (slave gre0): Error -95 calling set_mac_address [ 2050.313816][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4877'. [ 2050.410527][T24805] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4877'. [ 2050.600999][T24808] nilfs2: Unknown parameter 'dis0x0000000000000003' [ 2051.545120][T24810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4881'. [ 2051.960052][T24820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2052.974164][T24853] kernel read not supported for file / ԢW)S- (pid: 24853 comm: syz.1.4900) [ 2052.999689][ T30] audit: type=1800 audit(2041944657.286:605): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4900" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=96414 res=0 errno=0 [ 2053.180060][ T30] audit: type=1326 audit(2041944657.474:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24866 comm="syz.1.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddffd8eec9 code=0x7ffc0000 [ 2053.206476][ T30] audit: type=1326 audit(2041944657.506:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24866 comm="syz.1.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddffd8eec9 code=0x7ffc0000 [ 2053.249012][ T30] audit: type=1326 audit(2041944657.527:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24866 comm="syz.1.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fddffd8eec9 code=0x7ffc0000 [ 2053.272921][ T30] audit: type=1326 audit(2041944657.527:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24866 comm="syz.1.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddffd8eec9 code=0x7ffc0000 [ 2053.298235][ T30] audit: type=1326 audit(2041944657.527:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24866 comm="syz.1.4906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddffd8eec9 code=0x7ffc0000 [ 2053.623048][T24888] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2055.413726][T24922] netlink: 'syz.0.4920': attribute type 9 has an invalid length. [ 2055.851531][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2056.079249][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2056.091209][ T9] usb 2-1: config 0 has no interfaces? [ 2056.290113][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2056.304039][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.904229][ T9] usb 2-1: Product: syz [ 2056.908981][ T9] usb 2-1: Manufacturer: syz [ 2056.914278][ T9] usb 2-1: SerialNumber: syz [ 2056.922271][ T9] usb 2-1: config 0 descriptor?? [ 2057.047294][ T30] audit: type=1326 audit(2041944661.537:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2057.072615][ T30] audit: type=1326 audit(2041944661.569:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2057.139860][ T9] usb 2-1: USB disconnect, device number 19 [ 2057.146989][ T30] audit: type=1326 audit(2041944661.569:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2057.765138][ T30] audit: type=1326 audit(2041944661.569:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2057.789101][ T30] audit: type=1326 audit(2041944661.569:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2058.531075][ T30] audit: type=1326 audit(2072.361:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2058.876211][T24969] tmpfs: Unknown parameter 'usrquotar' [ 2058.901310][ T30] audit: type=1326 audit(2072.361:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24942 comm="syz.5.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c0f8eec9 code=0x7ffc0000 [ 2059.203692][T13339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2059.212878][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2059.220418][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2059.290760][T24987] ceph: No mds server is up or the cluster is laggy [ 2059.299831][T24993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 2059.309018][T24993] bridge_slave_1: left allmulticast mode [ 2059.314741][T24993] bridge_slave_1: left promiscuous mode [ 2059.320731][T24993] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.360313][T13339] usb 6-1: Using ep0 maxpacket: 32 [ 2059.372453][T13339] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2059.390193][T24993] bridge_slave_0: left allmulticast mode [ 2059.397444][T24993] bridge_slave_0: left promiscuous mode [ 2059.398768][T13339] usb 6-1: config 0 has no interface number 0 [ 2059.403313][T24993] bridge0: port 1(bridge_slave_0) entered disabled state [ 2059.431636][T13339] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2059.443829][T13339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.458531][T13339] usb 6-1: Product: syz [ 2059.464188][T13339] usb 6-1: Manufacturer: syz [ 2059.469729][T13339] usb 6-1: SerialNumber: syz [ 2059.482132][T13339] usb 6-1: config 0 descriptor?? [ 2059.504276][T24993] bond0: (slave bridge0): Releasing backup interface [ 2059.505455][T13339] smsc95xx v2.0.0 [ 2060.095238][T13339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2060.106184][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2060.114973][T13339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2060.125666][T13339] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2060.141915][T13339] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 2060.155149][T13339] usb 6-1: USB disconnect, device number 5 [ 2060.256345][ T9] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2060.265661][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.274276][ T9] usb 2-1: Product: syz [ 2060.278628][ T9] usb 2-1: Manufacturer: syz [ 2060.283681][ T9] usb 2-1: SerialNumber: syz [ 2060.299424][ T9] usb 2-1: config 0 descriptor?? [ 2060.311090][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2060.335010][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2060.349788][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2060.359648][ T9] usb 2-1: media controller created [ 2060.388197][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2060.432655][ T9] DVB: Unable to find symbol mt352_attach() [ 2060.460360][ T9] DVB: Unable to find symbol nxt6000_attach() [ 2060.469753][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2060.482305][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 2060.496008][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 2060.507596][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2060.519897][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 2060.528334][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 2060.547806][ T9] usb 2-1: USB disconnect, device number 20 [ 2060.584195][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2060.966233][T13339] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2061.131553][T13339] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2061.142203][T13339] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2061.154597][T13339] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2061.171284][T13339] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2061.181179][T13339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.189462][T13339] usb 6-1: Product: syz [ 2061.193637][T13339] usb 6-1: Manufacturer: syz [ 2061.198718][T13339] usb 6-1: SerialNumber: syz [ 2061.207677][T13339] usb 6-1: config 0 descriptor?? [ 2061.219265][T25037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2061.227723][T25037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2061.238387][T13339] usb 6-1: ucan: probing device on interface #0 [ 2061.556438][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2061.624828][T13339] usb 6-1: ucan: device reported invalid device info [ 2061.631647][T13339] usb 6-1: ucan: probe failed; try to update the device firmware [ 2061.708846][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2061.715700][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2061.724899][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.734816][ T9] usb 2-1: config 0 descriptor?? [ 2061.745084][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2061.838961][ T2153] usb 6-1: USB disconnect, device number 6 [ 2061.850391][T25066] tipc: Enabling of bearer rejected, failed to enable media [ 2062.320019][ T9] usb 2-1: USB disconnect, device number 21 [ 2062.651378][T19531] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2062.787252][T25093] netlink: 'syz.0.5003': attribute type 9 has an invalid length. [ 2063.198261][T19531] usb 6-1: Using ep0 maxpacket: 16 [ 2063.216923][T19531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2063.236421][T19531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2063.249502][T19531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2063.260989][T19531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2063.274910][T19531] usb 6-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb [ 2063.275385][T25095] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5006'. [ 2063.290118][T19531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.314901][T19531] usb 6-1: Product: syz [ 2063.319493][T19531] usb 6-1: Manufacturer: syz [ 2063.324326][T19531] usb 6-1: SerialNumber: syz [ 2063.336799][T25095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2063.370079][T19531] usb 6-1: config 0 descriptor?? [ 2063.546978][T19531] io_ti 6-1:0.0: required endpoints missing [ 2063.840547][T19531] usb 6-1: USB disconnect, device number 7 [ 2064.486971][T25114] IPVS: Error connecting to the multicast addr [ 2064.957127][T13339] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2065.245848][T13339] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2065.340171][T13339] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2065.479277][T13339] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2065.564108][T13339] usb 2-1: config 220 has no interface number 2 [ 2065.615190][T13339] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2065.727254][T13339] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2065.763924][T13339] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2065.783599][T13339] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2065.810798][T13339] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2065.847204][T13339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.861868][T13339] usb 2-1: Product: syz [ 2065.869274][T13339] usb 2-1: Manufacturer: syz [ 2065.891406][T13339] usb 2-1: SerialNumber: syz [ 2066.122628][T13339] usb 2-1: selecting invalid altsetting 0 [ 2066.232154][T13339] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2066.239606][T13339] uvcvideo 2-1:220.0: No valid video chain found. [ 2066.260970][T13339] usb 2-1: selecting invalid altsetting 0 [ 2066.271736][T13339] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2066.287897][T13339] usb 2-1: USB disconnect, device number 22 [ 2066.629745][T25168] tmpfs: Unknown parameter 'usrquotar' [ 2067.117343][T25178] sp0: Synchronizing with TNC [ 2067.199315][T25178] [U] [ 2067.357654][T13339] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2067.510019][T13339] usb 6-1: Using ep0 maxpacket: 16 [ 2067.517582][T13339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.535665][T13339] usb 6-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 2067.546964][T13339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.556325][T13339] usb 6-1: Product: syz [ 2067.560982][T13339] usb 6-1: Manufacturer: syz [ 2067.565749][T13339] usb 6-1: SerialNumber: syz [ 2067.587880][T13339] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input37 [ 2068.129712][ T5218] bcm5974 6-1:1.0: could not read from device [ 2068.149917][ T5218] bcm5974 6-1:1.0: could not read from device [ 2068.253798][T13339] usb 6-1: USB disconnect, device number 8 [ 2068.256761][ T5218] bcm5974 6-1:1.0: could not read from device [ 2069.001419][ T9] libceph: connect (1)[c::]:6789 error -101 [ 2069.009186][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 2069.075989][T25225] ceph: No mds server is up or the cluster is laggy [ 2069.085684][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5062'. [ 2069.095792][T25230] bridge_slave_1: left allmulticast mode [ 2069.101625][T25230] bridge_slave_1: left promiscuous mode [ 2069.108203][T25230] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.144057][T25230] bridge_slave_0: left allmulticast mode [ 2069.150039][T25230] bridge_slave_0: left promiscuous mode [ 2069.155840][T25230] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.529804][ T44] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2069.692022][T19531] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 2069.701222][ T2153] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 2069.834702][ T2153] usb 2-1: device descriptor read/64, error -71 [ 2069.856359][T19531] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 2069.864852][T19531] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2069.873121][T19531] usb 6-1: config 0 has no interface number 0 [ 2069.879255][T19531] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2069.890032][T19531] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2069.901521][T19531] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2069.911103][T19531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.923769][T19531] usb 6-1: config 0 descriptor?? [ 2070.063051][ T2153] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 2070.205813][ T2153] usb 2-1: device descriptor read/64, error -71 [ 2070.609215][T19531] usb 6-1: USB disconnect, device number 9 [ 2070.710719][ T2153] usb usb2-port1: attempt power cycle [ 2071.034719][ T2153] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 2071.063943][ T2153] usb 2-1: device descriptor read/8, error -71 [ 2071.291858][ T2153] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 2071.312003][T19531] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2071.323991][ T2153] usb 2-1: device descriptor read/8, error -71 [ 2071.886946][ T2153] usb usb2-port1: unable to enumerate USB device [ 2071.901221][T19531] usb 6-1: Using ep0 maxpacket: 16 [ 2071.908195][T19531] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.919373][T19531] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.929402][T19531] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2071.943190][T19531] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2071.949968][T19531] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 2071.959242][T19531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.971806][T19531] usb 6-1: config 0 descriptor?? [ 2072.367332][T19531] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 2072.375399][T19531] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 2072.383734][T19531] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 2072.390611][T19531] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 2072.397633][T19531] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 2072.411918][T19531] kye 0003:0458:0087.0014: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0 [ 2072.449740][T12407] block nbd0: Receive control failed (result -32) [ 2072.593648][T19531] usb 6-1: USB disconnect, device number 10 [ 2072.909021][T25312] tipc: Enabling of bearer rejected, failed to enable media [ 2073.039318][T25321] tap0: tun_chr_ioctl cmd 1074025677 [ 2073.045745][T25321] tap0: linktype set to 825 [ 2073.206311][T13339] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2073.259779][T25329] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5106'. [ 2073.358846][T13339] usb 2-1: Using ep0 maxpacket: 32 [ 2073.371960][T13339] usb 2-1: config 0 has no interfaces? [ 2073.383973][T13339] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 2073.407967][T13339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.426562][T13339] usb 2-1: config 0 descriptor?? [ 2073.641423][T15583] usb 2-1: USB disconnect, device number 27 [ 2073.682663][T13339] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2073.827729][T13339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.839565][T13339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2073.854327][T13339] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 2073.865280][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.879562][T13339] usb 6-1: config 0 descriptor?? [ 2074.287150][T13339] ortek 0003:1223:3F07.0015: Fixing up logical maximum in report descriptor (Skycable) [ 2074.312456][T13339] ortek 0003:1223:3F07.0015: unknown main item tag 0x6 [ 2074.319746][T13339] ortek 0003:1223:3F07.0015: report_id 29495 is invalid [ 2074.327188][T13339] ortek 0003:1223:3F07.0015: item 0 2 1 8 parsing failed [ 2074.335177][T13339] ortek 0003:1223:3F07.0015: probe with driver ortek failed with error -22 [ 2074.485677][T13246] usb 6-1: USB disconnect, device number 11 [ 2074.635351][T13339] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 2074.779714][T13339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.789951][T13339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2074.801103][T13339] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2074.810352][T13339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.818413][T13339] usb 2-1: Product: syz [ 2074.822632][T13339] usb 2-1: Manufacturer: syz [ 2074.827270][T13339] usb 2-1: SerialNumber: syz [ 2075.033702][T13339] usb 2-1: 0:2 : does not exist [ 2075.058218][T13339] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2075.093282][T13339] usb 2-1: USB disconnect, device number 28 [ 2075.134169][T24827] udevd[24827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2075.228369][T13246] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2075.380944][T13246] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2075.396333][T13246] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2075.409505][T13246] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2075.419573][T13246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.434411][T25357] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2075.467850][T13246] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2075.623774][ T30] audit: type=1800 audit(2091.825:618): pid=25365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5121" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2075.677092][T19531] usb 6-1: USB disconnect, device number 12 [ 2076.100951][ T30] audit: type=1326 audit(2092.328:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.131878][ T30] audit: type=1326 audit(2092.328:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.177095][ T30] audit: type=1326 audit(2092.328:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.201759][ T30] audit: type=1326 audit(2092.328:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.273554][ T30] audit: type=1326 audit(2092.328:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.342115][ T30] audit: type=1326 audit(2092.328:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d5e78d710 code=0x7ffc0000 [ 2076.425704][ T30] audit: type=1326 audit(2092.328:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d5e78d710 code=0x7ffc0000 [ 2076.498194][ T30] audit: type=1326 audit(2092.328:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.524209][ T30] audit: type=1326 audit(2092.328:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2076.619038][T25408] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2077.699157][T13339] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2077.771596][T19531] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2077.869518][T13339] usb 2-1: Using ep0 maxpacket: 8 [ 2078.022632][T19531] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2078.035611][T13339] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 2078.037028][T19531] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2078.125943][T19531] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 7227, setting to 1024 [ 2078.140281][T19531] usb 6-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2078.158940][T13339] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2078.160248][T19531] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2078.248088][T19531] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2078.258292][T19531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.261651][T13339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.267096][T19531] usb 6-1: Product: syz [ 2078.275813][T13339] usb 2-1: Product: syz [ 2078.285915][T19531] usb 6-1: Manufacturer: syz [ 2078.296990][T19531] usb 6-1: SerialNumber: syz [ 2078.318799][T13339] usb 2-1: Manufacturer: syz [ 2078.325830][T13339] usb 2-1: SerialNumber: syz [ 2078.327945][T25441] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2078.381867][T25441] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2078.497306][T13339] usb 2-1: config 0 descriptor?? [ 2078.537348][T13339] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2078.545822][T13339] usb 2-1: setting power ON [ 2078.550726][T13339] dvb-usb: bulk message failed: -22 (2/0) [ 2078.571116][T13339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2078.584938][T13339] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2078.596379][T13339] usb 2-1: media controller created [ 2078.628642][T13339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2078.673559][T13339] usb 2-1: selecting invalid altsetting 6 [ 2078.673653][T19531] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 2078.688752][T19531] usb 6-1: USB disconnect, device number 13 [ 2078.701849][T13339] usb 2-1: digital interface selection failed (-22) [ 2078.710211][T13339] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2078.721769][T13339] usb 2-1: setting power OFF [ 2078.730124][T13339] dvb-usb: bulk message failed: -22 (2/0) [ 2078.737610][T13339] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2078.753472][T25438] dvb-usb: bulk message failed: -22 (3/0) [ 2078.754889][T13339] (NULL device *): no alternate interface [ 2078.762105][T25438] dvb-usb: bulk message failed: -22 (4/0) [ 2078.793959][T25438] cxusb: i2c read failed [ 2078.801745][T25438] dvb-usb: bulk message failed: -22 (3/0) [ 2078.807564][T25438] cxusb: i2c wr: len=8192 is too big! [ 2078.807564][T25438] [ 2078.839284][T13339] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2078.859164][T13339] usb 2-1: USB disconnect, device number 29 [ 2079.439048][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5160'. [ 2079.541790][T25475] netlink: 'syz.5.5159': attribute type 9 has an invalid length. [ 2080.531647][T13339] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2080.732663][T13339] usb 6-1: Using ep0 maxpacket: 8 [ 2080.799821][T13339] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2080.850546][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.041760][T13339] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2081.049208][T13339] pvrusb2: ********** [ 2081.053663][T13339] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2081.065336][T13339] pvrusb2: Important functionality might not be entirely working. [ 2081.073241][T13339] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2081.093366][T13339] pvrusb2: ********** [ 2081.197838][ T2344] pvrusb2: Invalid write control endpoint [ 2081.306942][ T2344] pvrusb2: Invalid write control endpoint [ 2081.321090][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2081.336011][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2081.343685][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2081.357833][ T2344] pvrusb2: Device being rendered inoperable [ 2081.369875][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2081.382631][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2081.408741][ T2344] pvrusb2: Attached sub-driver cx25840 [ 2081.425511][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2081.446802][T13339] usb 6-1: USB disconnect, device number 14 [ 2081.457547][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2081.865510][T19531] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2082.025885][T19531] usb 2-1: Using ep0 maxpacket: 8 [ 2082.047874][T19531] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2082.071846][T19531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.108813][T19531] usb 2-1: Product: syz [ 2082.114312][T19531] usb 2-1: Manufacturer: syz [ 2082.119822][T19531] usb 2-1: SerialNumber: syz [ 2082.132557][T19531] usb 2-1: config 0 descriptor?? [ 2082.152793][T19531] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2082.348569][T25542] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2082.358077][T25542] SQUASHFS error: Failed to read block 0x0: -5 [ 2082.364273][T25542] unable to read squashfs_super_block [ 2082.656795][T13339] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2082.807538][T19531] gspca_sonixj: reg_w1 err -71 [ 2082.813024][T19531] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 2082.826688][T19531] usb 2-1: USB disconnect, device number 30 [ 2082.861643][T13339] usb 6-1: config 4 has an invalid interface number: 95 but max is 0 [ 2082.869770][T13339] usb 6-1: config 4 has no interface number 0 [ 2082.878627][T13339] usb 6-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 2082.893836][T13339] usb 6-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 2082.903024][T13339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.911373][T13339] usb 6-1: Product: syz [ 2082.916190][T13339] usb 6-1: Manufacturer: syz [ 2082.920805][T13339] usb 6-1: SerialNumber: syz [ 2082.933348][T25542] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2082.960356][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2083.159988][T13339] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2083.167956][T13339] usb 6-1: MIDIStreaming interface descriptor not found [ 2083.202153][T13339] usb 6-1: USB disconnect, device number 15 [ 2083.419537][T15583] kernel write not supported for file bpf-prog (pid: 15583 comm: kworker/1:7) [ 2083.551753][T25561] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 2083.564299][T25561] macsec1: entered promiscuous mode [ 2083.571208][T25561] macsec1: entered allmulticast mode [ 2083.577145][T25561] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 2083.580935][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5200'. [ 2083.787898][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'. [ 2083.835445][T25573] bond0: entered promiscuous mode [ 2083.840564][T25573] bond_slave_0: entered promiscuous mode [ 2083.849167][T25573] bond_slave_1: entered promiscuous mode [ 2083.859223][T25573] bond0: left promiscuous mode [ 2083.864487][T25573] bond_slave_0: left promiscuous mode [ 2083.871707][T25573] bond_slave_1: left promiscuous mode [ 2084.046435][T13246] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2084.379334][T13246] usb 6-1: Using ep0 maxpacket: 16 [ 2084.396743][T13246] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 2084.413345][T13246] usb 6-1: config 0 has no interface number 0 [ 2084.443904][T25590] tmpfs: Unknown parameter 'usrquotar' [ 2084.467164][T13246] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2084.487626][T13246] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2084.517135][T13246] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2084.526453][T13246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.537506][T13339] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2084.553903][T13246] usb 6-1: Product: syz [ 2084.558304][T13246] usb 6-1: Manufacturer: syz [ 2084.576985][T13246] usb 6-1: SerialNumber: syz [ 2084.637925][T13246] usb 6-1: config 0 descriptor?? [ 2084.645336][T25575] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2084.663786][T25575] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2084.722730][T13339] usb 2-1: Using ep0 maxpacket: 8 [ 2084.731089][T13339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2084.759953][T13339] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2084.772074][T13339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.814252][T13339] usb 2-1: config 0 descriptor?? [ 2084.899609][T25575] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2084.908118][T25575] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2084.938259][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2084.939073][ T30] audit: type=1326 audit(2100.728:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2084.970492][ T30] audit: type=1326 audit(2100.728:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2084.983218][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2084.993453][ T30] audit: type=1326 audit(2100.728:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.024719][ T30] audit: type=1326 audit(2100.728:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.053106][ T30] audit: type=1326 audit(2100.728:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.063392][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2085.108512][T13339] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2085.170623][ T30] audit: type=1326 audit(2100.756:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.254104][ T30] audit: type=1326 audit(2100.756:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.291684][ T30] audit: type=1326 audit(2100.756:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.317934][ T30] audit: type=1326 audit(2100.756:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.342095][ T30] audit: type=1326 audit(2100.756:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25599 comm="syz.3.5216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5e78eec9 code=0x7ffc0000 [ 2085.349456][T13246] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2085.397149][T13246] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2085.417624][T13246] asix 6-1:0.251: probe with driver asix failed with error -71 [ 2085.450286][T13246] usb 6-1: USB disconnect, device number 16 [ 2085.550682][ T9] usb 2-1: USB disconnect, device number 31 [ 2086.266187][T25650] wg2 speed is unknown, defaulting to 1000 [ 2086.483529][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2086.559798][T25650] lo speed is unknown, defaulting to 1000 [ 2086.567579][T25650] lo speed is unknown, defaulting to 1000 [ 2086.581783][T25650] wlan0 speed is unknown, defaulting to 1000 [ 2086.590851][T25661] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 2086.597392][T25661] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2086.607232][T25661] vhci_hcd vhci_hcd.0: Device attached [ 2086.616935][T25662] vhci_hcd: connection closed [ 2086.617200][T11307] vhci_hcd: stop threads [ 2086.635322][T11307] vhci_hcd: release socket [ 2086.639873][T11307] vhci_hcd: disconnect device [ 2086.667263][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2086.676530][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.697226][ T9] usb 6-1: config 0 descriptor?? [ 2086.721705][ T9] cp210x 6-1:0.0: cp210x converter detected [ 2087.058988][T25676] sctp: [Deprecated]: syz.7.5245 (pid 25676) Use of int in max_burst socket option deprecated. [ 2087.058988][T25676] Use struct sctp_assoc_value instead [ 2087.410090][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2087.421758][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2087.443364][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2087.469192][ T9] usb 6-1: USB disconnect, device number 17 [ 2087.495680][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2087.563109][ T9] cp210x 6-1:0.0: device disconnected [ 2088.006169][T25694] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2088.014982][T25694] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2088.023294][T25694] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2088.031029][T25694] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2089.281296][T25707] tmpfs: Unknown parameter 'usrquotar' [ 2090.492204][T25760] tmpfs: Unknown parameter 'usrquotar' [ 2091.550066][T15583] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2091.572865][T19531] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2091.742547][T19531] usb 2-1: Using ep0 maxpacket: 8 [ 2091.768304][T15583] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2091.791001][T19531] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2091.807295][T15583] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2091.827956][T19531] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2091.860608][T15583] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2091.871986][T19531] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2091.882320][T19531] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2091.900675][T19531] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2091.914176][T19531] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.924635][T15583] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2091.933785][T15583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.943721][T15583] usb 6-1: Product: syz [ 2091.969509][T15583] usb 6-1: Manufacturer: syz [ 2091.990061][T15583] usb 6-1: SerialNumber: syz [ 2092.073082][T25797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5290'. [ 2092.173335][T19531] usb 2-1: GET_CAPABILITIES returned 0 [ 2092.179163][T19531] usbtmc 2-1:16.0: can't read capabilities [ 2092.414084][T19531] usb 2-1: USB disconnect, device number 32 [ 2092.840112][T25821] syzkaller1: entered promiscuous mode [ 2092.845707][T25821] syzkaller1: entered allmulticast mode [ 2093.054585][T25827] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2093.064190][T25827] FAT-fs (loop1): unable to read boot sector [ 2093.080616][T25826] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5304'. [ 2093.116685][T15583] cdc_ncm 6-1:1.0: bind() failure [ 2093.174795][T15583] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2093.208422][T15583] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2093.224951][T15583] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 2093.268482][T15583] usb 6-1: USB disconnect, device number 18 [ 2093.608433][T25846] syzkaller1: entered promiscuous mode [ 2093.618181][T25846] syzkaller1: entered allmulticast mode [ 2094.030322][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2094.211640][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2094.219808][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 2094.233315][ T9] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2094.242756][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.252619][ T9] usb 6-1: Product: syz [ 2094.258102][ T9] usb 6-1: Manufacturer: syz [ 2094.263405][ T9] usb 6-1: SerialNumber: syz [ 2094.281415][ T9] usb 6-1: config 0 descriptor?? [ 2094.294242][T25853] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2094.340914][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 2094.525929][T25872] tmpfs: Unknown parameter 'usrquotar' [ 2094.672730][T13246] usb 6-1: USB disconnect, device number 19 [ 2094.678743][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2095.500611][T25891] can0: slcan on ptm0. [ 2095.700161][T25890] can0 (unregistered): slcan off ptm0. [ 2096.556108][T25899] tmpfs: Unknown parameter 'usrquotar' [ 2097.506411][T25950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5356'. [ 2097.522974][T25943] tmpfs: Unknown parameter 'usrquotar' [ 2099.190283][T25990] overlayfs: failed to clone upperpath [ 2099.217316][T25990] overlayfs: failed to clone upperpath [ 2100.073470][ T2153] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2100.240337][ T2153] usb 6-1: Using ep0 maxpacket: 8 [ 2100.247019][ T2153] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2100.255494][ T2153] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2100.265420][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2100.275349][ T2153] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2100.285366][ T2153] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2100.299080][ T2153] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2100.308314][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.542556][ T2153] usb 6-1: GET_CAPABILITIES returned 0 [ 2100.548233][ T2153] usbtmc 6-1:16.0: can't read capabilities [ 2100.780582][T26014] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 2100.790966][T13246] usb 6-1: USB disconnect, device number 20 [ 2100.933242][T26065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2100.950637][T26065] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2101.977318][T26114] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2101.988054][T26114] SQUASHFS error: Failed to read block 0x0: -5 [ 2101.995181][T26114] unable to read squashfs_super_block [ 2102.003511][T26114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5429'. [ 2102.486906][ T2153] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2102.553534][T26137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5438'. [ 2102.656160][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 2102.681037][ T2153] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2102.695427][ T2153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2102.716302][ T2153] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2102.738256][ T2153] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2102.768043][ T2153] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2102.782830][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.795920][T11281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2103.052388][ T2153] usb 2-1: GET_CAPABILITIES returned 0 [ 2103.057952][ T2153] usbtmc 2-1:16.0: can't read capabilities [ 2103.293109][T13246] usb 2-1: USB disconnect, device number 33 [ 2103.564327][T26186] syzkaller1: entered promiscuous mode [ 2103.576422][T26186] syzkaller1: entered allmulticast mode [ 2103.586019][T26186] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 2104.537354][T13246] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2104.714335][T13246] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2104.733542][T13246] usb 2-1: config 1 has no interface number 0 [ 2104.739716][T13246] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2104.804606][T13246] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2104.826668][T13246] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 2104.880780][T13246] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2104.901091][T13246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.909980][T13246] usb 2-1: Product: syz [ 2104.914715][T13246] usb 2-1: Manufacturer: syz [ 2104.919344][T13246] usb 2-1: SerialNumber: syz [ 2104.945597][T26213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2105.201090][T26213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2105.215044][T13246] usb 2-1: No status endpoint found [ 2105.448259][T13246] usb 2-1: USB disconnect, device number 34 [ 2107.481881][T26220] syz.7.5472: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 2107.565955][T26220] CPU: 1 UID: 0 PID: 26220 Comm: syz.7.5472 Not tainted syzkaller #0 PREEMPT(full) [ 2107.565982][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2107.565993][T26220] Call Trace: [ 2107.566001][T26220] [ 2107.566011][T26220] dump_stack_lvl+0x189/0x250 [ 2107.566042][T26220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2107.566063][T26220] ? __pfx__printk+0x10/0x10 [ 2107.566088][T26220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2107.566110][T26220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2107.566132][T26220] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2107.566154][T26220] warn_alloc+0x214/0x310 [ 2107.566179][T26220] ? __pfx_warn_alloc+0x10/0x10 [ 2107.566206][T26220] ? __get_vm_area_node+0x28f/0x300 [ 2107.566231][T26220] ? hash_netport4_resize+0x235/0x1b60 [ 2107.566264][T26220] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2107.566289][T26220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.566331][T26220] ? alloc_pages_mpol+0x3cd/0x4a0 [ 2107.566353][T26220] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2107.566382][T26220] ? rcu_is_watching+0x15/0xb0 [ 2107.566408][T26220] ? hash_netport4_resize+0x235/0x1b60 [ 2107.566430][T26220] __kvmalloc_node_noprof+0x674/0x910 [ 2107.566448][T26220] ? hash_netport4_resize+0x235/0x1b60 [ 2107.566480][T26220] hash_netport4_resize+0x235/0x1b60 [ 2107.566502][T26220] ? hash_netport4_uadt+0xc97/0xf30 [ 2107.566529][T26220] ? __pfx_hash_netport4_add+0x10/0x10 [ 2107.566551][T26220] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 2107.566583][T26220] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2107.566620][T26220] call_ad+0x44e/0xb00 [ 2107.566655][T26220] ? __pfx_call_ad+0x10/0x10 [ 2107.566695][T26220] ? __nla_parse+0x40/0x60 [ 2107.566724][T26220] ip_set_ad+0x791/0x930 [ 2107.566760][T26220] ? __pfx_ip_set_ad+0x10/0x10 [ 2107.566822][T26220] nfnetlink_rcv_msg+0xb4d/0x1130 [ 2107.566849][T26220] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2107.566893][T26220] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2107.566916][T26220] ? __netlink_deliver_tap+0x5d9/0x8b0 [ 2107.566986][T26220] netlink_rcv_skb+0x208/0x470 [ 2107.567006][T26220] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2107.567034][T26220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2107.567065][T26220] ? bpf_lsm_capable+0x9/0x20 [ 2107.567086][T26220] ? security_capable+0x7e/0x2e0 [ 2107.567114][T26220] nfnetlink_rcv+0x26a/0x2520 [ 2107.567142][T26220] ? __kernel_text_address+0xd/0x40 [ 2107.567163][T26220] ? unwind_get_return_address+0x4d/0x90 [ 2107.567179][T26220] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2107.567199][T26220] ? arch_stack_walk+0xfc/0x150 [ 2107.567229][T26220] ? stack_trace_save+0x9c/0xe0 [ 2107.567247][T26220] ? __pfx_stack_trace_save+0x10/0x10 [ 2107.567275][T26220] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2107.567299][T26220] ? save_netdev_trace_buffer+0x14f/0x5e0 [ 2107.567328][T26220] ? save_netdev_trace_buffer+0x4e2/0x5e0 [ 2107.567359][T26220] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 2107.567382][T26220] ? ref_tracker_free+0x63a/0x7d0 [ 2107.567404][T26220] ? __netlink_deliver_tap+0x636/0x8b0 [ 2107.567420][T26220] ? netlink_deliver_tap+0x19c/0x1b0 [ 2107.567437][T26220] ? netlink_unicast+0x7fa/0x9e0 [ 2107.567460][T26220] ? netlink_sendmsg+0x805/0xb30 [ 2107.567477][T26220] ? __sock_sendmsg+0x21c/0x270 [ 2107.567499][T26220] ? ____sys_sendmsg+0x505/0x830 [ 2107.567517][T26220] ? ___sys_sendmsg+0x21f/0x2a0 [ 2107.567535][T26220] ? __x64_sys_sendmsg+0x19b/0x260 [ 2107.567554][T26220] ? do_syscall_64+0xfa/0xfa0 [ 2107.567571][T26220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.567597][T26220] ? __skb_clone+0x483/0x7a0 [ 2107.567626][T26220] ? skb_clone+0x246/0x3a0 [ 2107.567650][T26220] ? __netlink_deliver_tap+0x866/0x8b0 [ 2107.567670][T26220] ? netlink_deliver_tap+0x2e/0x1b0 [ 2107.567697][T26220] ? netlink_deliver_tap+0x2e/0x1b0 [ 2107.567723][T26220] netlink_unicast+0x82f/0x9e0 [ 2107.567759][T26220] ? __pfx_netlink_unicast+0x10/0x10 [ 2107.567787][T26220] ? netlink_sendmsg+0x642/0xb30 [ 2107.567804][T26220] ? skb_put+0x11b/0x210 [ 2107.567828][T26220] netlink_sendmsg+0x805/0xb30 [ 2107.567856][T26220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2107.567880][T26220] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2107.567905][T26220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2107.567923][T26220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2107.567944][T26220] __sock_sendmsg+0x21c/0x270 [ 2107.567972][T26220] ____sys_sendmsg+0x505/0x830 [ 2107.568000][T26220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2107.568030][T26220] ? import_iovec+0x74/0xa0 [ 2107.568053][T26220] ___sys_sendmsg+0x21f/0x2a0 [ 2107.568077][T26220] ? __pfx____sys_sendmsg+0x10/0x10 [ 2107.568137][T26220] ? __fget_files+0x2a/0x420 [ 2107.568155][T26220] ? __fget_files+0x3a0/0x420 [ 2107.568184][T26220] __x64_sys_sendmsg+0x19b/0x260 [ 2107.568209][T26220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2107.568248][T26220] ? do_syscall_64+0xbe/0xfa0 [ 2107.568278][T26220] do_syscall_64+0xfa/0xfa0 [ 2107.568297][T26220] ? lockdep_hardirqs_on+0x9c/0x150 [ 2107.568317][T26220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.568334][T26220] ? clear_bhb_loop+0x60/0xb0 [ 2107.568355][T26220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2107.568372][T26220] RIP: 0033:0x7fcbeb18eec9 [ 2107.568388][T26220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2107.568404][T26220] RSP: 002b:00007fcbebf6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2107.568423][T26220] RAX: ffffffffffffffda RBX: 00007fcbeb3e5fa0 RCX: 00007fcbeb18eec9 [ 2107.568435][T26220] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 2107.568444][T26220] RBP: 00007fcbeb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 2107.568455][T26220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2107.568466][T26220] R13: 00007fcbeb3e6038 R14: 00007fcbeb3e5fa0 R15: 00007ffc67693dc8 [ 2107.568497][T26220] [ 2108.134381][T26220] Mem-Info: [ 2108.137887][T26220] active_anon:12569 inactive_anon:0 isolated_anon:0 [ 2108.137887][T26220] active_file:11030 inactive_file:50685 isolated_file:0 [ 2108.137887][T26220] unevictable:17162 dirty:277 writeback:0 [ 2108.137887][T26220] slab_reclaimable:8705 slab_unreclaimable:140194 [ 2108.137887][T26220] mapped:30139 shmem:8018 pagetables:1575 [ 2108.137887][T26220] sec_pagetables:0 bounce:0 [ 2108.137887][T26220] kernel_misc_reclaimable:0 [ 2108.137887][T26220] free:1235078 free_pcp:13018 free_cma:0 [ 2108.184607][T26220] Node 0 active_anon:50276kB inactive_anon:0kB active_file:44120kB inactive_file:202584kB unevictable:67112kB isolated(anon):0kB isolated(file):0kB mapped:120556kB dirty:1108kB writeback:0kB shmem:30536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12840kB pagetables:6164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2108.216976][T26220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2108.247879][T26220] Node 0 DMA free:15312kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:16kB free_cma:0kB [ 2108.278815][T26220] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 2108.284823][T26220] Node 0 DMA32 free:1015548kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50376kB inactive_anon:0kB active_file:44120kB inactive_file:202584kB unevictable:67112kB writepending:1108kB zspages:0kB present:3129332kB managed:2550800kB mlocked:0kB bounce:0kB free_pcp:47156kB local_pcp:20124kB free_cma:0kB [ 2108.318768][T26220] lowmem_reserve[]: 0 0 0 0 0 [ 2108.323615][T26220] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2108.353569][T26220] lowmem_reserve[]: 0 0 0 0 0 [ 2108.359497][T26220] Node 1 Normal free:3909452kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4808kB local_pcp:0kB free_cma:0kB [ 2108.391947][T26220] lowmem_reserve[]: 0 0 0 0 0 [ 2108.396795][T26220] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15312kB [ 2108.411095][T26220] Node 0 DMA32: 3*4kB (UME) 46*8kB (E) 214*16kB (UM) 723*32kB (UM) 198*64kB (UM) 145*128kB (UME) 55*256kB (ME) 18*512kB (ME) 16*1024kB (UME) 12*2048kB (UME) 218*4096kB (UM) = 1015356kB [ 2108.434914][T26220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2108.447055][T26220] Node 1 Normal: 189*4kB (UE) 55*8kB (UE) 52*16kB (UE) 249*32kB (UME) 107*64kB (UME) 35*128kB (UME) 14*256kB (UM) 7*512kB (UME) 4*1024kB (UM) 3*2048kB (UME) 945*4096kB (M) = 3909452kB [ 2108.465995][T26220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.476068][T26220] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2108.485535][T26220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2108.495248][T26220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2108.504854][T26220] 86123 total pagecache pages [ 2108.509597][T26220] 0 pages in swap cache [ 2108.514120][T26220] Free swap = 124996kB [ 2108.518337][T26220] Total swap = 124996kB [ 2108.522542][T26220] 2097051 pages RAM [ 2108.526798][T26220] 0 pages HighMem/MovableOnly [ 2108.531543][T26220] 427581 pages reserved [ 2108.535798][T26220] 0 pages cma reserved [ 2109.310917][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5512'. [ 2109.683615][T26341] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2109.816242][T26345] batadv0: entered promiscuous mode [ 2109.826194][T26345] batadv0: left promiscuous mode [ 2109.875937][T26328] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2109.884240][T26328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2109.892699][T26328] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2109.900498][T26328] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 2111.284515][T26394] sg_write: data in/out 2097116/10 bytes for SCSI command 0xfd-- guessing data in; [ 2111.284515][T26394] program syz.1.5543 not setting count and/or reply_len properly [ 2111.523411][T20382] Bluetooth: hci2: sending frame failed (-49) [ 2111.535376][T12407] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 2112.035355][T26417] netlink: 'syz.1.5548': attribute type 9 has an invalid length. [ 2112.736107][T21516] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2112.784837][T26433] input: syz0 as /devices/virtual/input/input40 [ 2112.917097][T21516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2112.954148][T21516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2112.977705][T21516] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2113.034455][T21516] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2113.063867][T21516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.194369][T21516] usb 6-1: config 0 descriptor?? [ 2113.825862][T21516] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2114.289596][T26474] netlink: 'syz.1.5568': attribute type 9 has an invalid length. [ 2114.768388][T26477] ALSA: mixer_oss: invalid OSS volume '0' [ 2114.774227][T26477] ALSA: mixer_oss: invalid OSS volume '' [ 2114.792845][T26479] overlayfs: failed to clone upperpath [ 2116.591054][T26540] overlayfs: failed to clone upperpath [ 2116.658226][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 2116.658243][ T30] audit: type=1800 audit(2130.393:710): pid=26543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5599" name="bus" dev="tmpfs" ino=8180 res=0 errno=0 [ 2116.734734][T15583] usb 6-1: USB disconnect, device number 21 [ 2117.251395][T26561] input: syz0 as /devices/virtual/input/input41 [ 2117.432233][T26566] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2117.448088][T26566] FAT-fs (loop5): unable to read boot sector [ 2119.096160][T13246] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 2119.258330][T13246] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 2119.266665][T13246] usb 6-1: config 1 has no interface number 0 [ 2119.272835][T13246] usb 6-1: config 1 interface 105 has no altsetting 0 [ 2119.281846][T13246] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2119.291441][T13246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.299640][T13246] usb 6-1: Product: syz [ 2119.303825][T13246] usb 6-1: Manufacturer: syz [ 2119.308414][T13246] usb 6-1: SerialNumber: syz [ 2119.446641][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5629'. [ 2119.466619][T26616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5629'. [ 2119.542373][T26621] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 2119.725255][T26633] @: renamed from vlan0 [ 2119.771979][T26635] overlayfs: failed to clone upperpath [ 2120.184478][T13246] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2120.196414][T13246] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2120.227475][T13246] aqc111 6-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 2120.427996][T13246] usb 6-1: USB disconnect, device number 22 [ 2120.436898][T13246] aqc111 6-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2120.487885][T13246] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2120.498561][T13246] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2120.509101][T13246] aqc111 6-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2121.309548][T13246] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2121.518938][T13246] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2121.545988][T13246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.588076][T13246] usb 6-1: Product: syz [ 2121.612145][T13246] usb 6-1: Manufacturer: syz [ 2121.643564][T13246] usb 6-1: SerialNumber: syz [ 2121.980653][T13246] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2122.000101][T13246] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2122.019606][T13246] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2122.023692][T26695] overlayfs: failed to clone upperpath [ 2122.037633][T13246] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2122.054749][T13246] usb 6-1: USB disconnect, device number 23 [ 2122.373539][T26712] Bluetooth: hci0: invalid length 1, exp 2 for type 29 [ 2123.530256][T26733] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2123.538295][T26733] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2123.546622][T26733] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2123.554691][T26733] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2123.575782][T26740] syzkaller1: entered promiscuous mode [ 2123.581660][T26740] syzkaller1: entered allmulticast mode [ 2124.365715][T26762] netlink: 'syz.5.5685': attribute type 1 has an invalid length. [ 2125.486131][T26790] kvm: emulating exchange as write [ 2127.014645][T26816] netlink: 'syz.5.5705': attribute type 9 has an invalid length. [ 2127.925540][T13339] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2128.109861][T13339] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2128.122560][T13339] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2128.127270][T26849] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2128.138823][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5718'. [ 2128.159580][T13339] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2128.180134][T13339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.588756][T13339] usb 6-1: GET_CAPABILITIES returned 0 [ 2128.599592][T13339] usbtmc 6-1:16.0: can't read capabilities [ 2128.788457][T19531] usb 6-1: USB disconnect, device number 24 [ 2129.175075][T26871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5727'. [ 2129.851377][T26903] netlink: 'syz.0.5734': attribute type 9 has an invalid length. [ 2130.689429][T26909] ntfs3(loop7): try to read out of volume at offset 0x0 [ 2131.041725][T26921] netlink: 'syz.3.5739': attribute type 9 has an invalid length. [ 2131.378136][T13339] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2131.393340][T26909] ntfs3: Unknown parameter 'hidden' [ 2131.636833][T13339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2131.647951][T13339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2131.659462][T13339] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2131.669185][T13339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.681699][T13339] usb 2-1: config 0 descriptor?? [ 2132.821227][T13339] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 2133.085138][T19531] usb 2-1: USB disconnect, device number 35 [ 2133.506511][T26950] netlink: 'syz.0.5751': attribute type 9 has an invalid length. [ 2134.237593][T26945] kexec: Could not allocate control_code_buffer [ 2134.412836][T26965] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2134.426803][T26965] overlayfs: failed to set xattr on upper [ 2134.447502][T26965] overlayfs: ...falling back to redirect_dir=nofollow. [ 2134.477921][T26965] overlayfs: ...falling back to index=off. [ 2134.506017][T26965] overlayfs: ...falling back to uuid=null. [ 2135.790297][T27003] netlink: 'syz.3.5765': attribute type 9 has an invalid length. [ 2136.227420][T27004] vivid-003: disconnect [ 2136.289127][T27001] vivid-003: reconnect [ 2136.531595][T27016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2136.562367][ T2153] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2136.729487][ T2153] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2136.750749][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2136.763397][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2136.774852][ T2153] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2136.789863][ T2153] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2136.800884][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.814102][ T2153] usb 6-1: config 0 descriptor?? [ 2137.280644][ T2153] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 2137.300882][ T2153] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2137.623285][T13339] usb 6-1: USB disconnect, device number 25 [ 2138.154968][T27040] overlayfs: failed to clone upperpath [ 2138.597172][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5790'. [ 2138.992150][T27072] wg2 speed is unknown, defaulting to 1000 [ 2139.456547][T27072] lo speed is unknown, defaulting to 1000 [ 2139.473436][T27072] lo speed is unknown, defaulting to 1000 [ 2139.491886][T27072] wlan0 speed is unknown, defaulting to 1000 [ 2140.045925][T11291] Bluetooth: hci2: Frame reassembly failed (-84) [ 2142.218403][T20382] Bluetooth: hci2: command 0x1003 tx timeout [ 2142.240063][T12407] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2143.339305][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2143.510275][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2143.522061][ T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 2143.535612][T27144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5820'. [ 2143.549090][ T9] usb 6-1: config 0 has no interface number 0 [ 2143.574748][ T9] usb 6-1: config 0 interface 89 has no altsetting 0 [ 2143.600432][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2143.617460][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.620051][T27146] overlayfs: failed to clone upperpath [ 2143.638788][ T9] usb 6-1: Product: syz [ 2143.643127][ T9] usb 6-1: Manufacturer: syz [ 2143.647728][ T9] usb 6-1: SerialNumber: syz [ 2143.664294][ T9] usb 6-1: config 0 descriptor?? [ 2143.684604][ T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2143.694569][ T9] em28xx 6-1:0.89: Video interface 89 found: bulk [ 2144.821352][ T9] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 2145.577609][ T9] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2145.595403][ T9] em28xx 6-1:0.89: board has no eeprom [ 2145.680283][ T9] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 2145.687529][ T9] em28xx 6-1:0.89: analog set to bulk mode. [ 2145.698402][ T5961] em28xx 6-1:0.89: Registering V4L2 extension [ 2145.722555][ T9] usb 6-1: USB disconnect, device number 26 [ 2145.750482][ T5961] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 2145.779263][ T9] em28xx 6-1:0.89: Disconnecting em28xx [ 2145.803356][ T5961] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 2145.823656][ T5961] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 2145.838584][ T5961] em28xx 6-1:0.89: No AC97 audio processor [ 2145.866290][ T5961] usb 6-1: Decoder not found [ 2145.875918][ T5961] em28xx 6-1:0.89: failed to create media graph [ 2145.891096][ T5961] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 2145.904910][ T5961] em28xx 6-1:0.89: Registering snapshot button... [ 2145.925336][ T5961] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input42 [ 2145.959657][ T5961] em28xx 6-1:0.89: Remote control support is not available for this card. [ 2145.977357][ T9] em28xx 6-1:0.89: Closing input extension [ 2145.990534][ T9] em28xx 6-1:0.89: Deregistering snapshot button [ 2146.033547][ T9] em28xx 6-1:0.89: Freeing device [ 2146.564138][T27176] vfat: Unknown parameter '@' [ 2147.503578][T24352] bridge0: port 3(syz_tun) entered disabled state [ 2147.549990][T24352] syz_tun (unregistering): left allmulticast mode [ 2147.839536][T24352] syz_tun (unregistering): left promiscuous mode [ 2147.857813][T24352] bridge0: port 3(syz_tun) entered disabled state [ 2148.359644][T27215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5845'. [ 2148.670240][T20382] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2148.682341][T20382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2148.692607][T20382] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2148.703429][T20382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2148.711519][T20382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2148.764693][T27213] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2148.772512][T27213] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2148.780837][T27213] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2148.788571][T27213] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2148.798823][T12407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2148.820990][T12407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2148.832077][T12407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2148.847760][T12407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2148.859569][T12407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2149.035645][T27217] wg2 speed is unknown, defaulting to 1000 [ 2149.613232][T27222] /dev/nullb0: Can't lookup blockdev [ 2149.840048][T27217] lo speed is unknown, defaulting to 1000 [ 2149.847703][T27217] lo speed is unknown, defaulting to 1000 [ 2149.855412][T27217] wlan0 speed is unknown, defaulting to 1000 [ 2150.096728][T27217] chnl_net:caif_netlink_parms(): no params data found [ 2150.193675][T27217] bridge0: port 1(bridge_slave_0) entered blocking state [ 2150.200887][T27217] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.208693][T27217] bridge_slave_0: entered allmulticast mode [ 2150.217967][T27217] bridge_slave_0: entered promiscuous mode [ 2150.227005][T27217] bridge0: port 2(bridge_slave_1) entered blocking state [ 2150.234454][T27217] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.241698][T27217] bridge_slave_1: entered allmulticast mode [ 2150.249501][T27217] bridge_slave_1: entered promiscuous mode [ 2150.283359][T27217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2150.295652][T27217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2150.331459][T27217] team0: Port device team_slave_0 added [ 2150.339488][T27217] team0: Port device team_slave_1 added [ 2150.369466][T27217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2150.377232][T27217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.403523][T27217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2150.416584][T27217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2150.423625][T27217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2150.451135][T27217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2150.496214][T27217] hsr_slave_0: entered promiscuous mode [ 2150.502990][T27217] hsr_slave_1: entered promiscuous mode [ 2150.509243][T27217] debugfs: 'hsr0' already exists in 'hsr' [ 2150.515217][T27217] Cannot create hsr debugfs directory [ 2150.970745][T27217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2150.980931][T27217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2150.991136][T27217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2151.001240][T27217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2151.025261][T12407] Bluetooth: hci2: command tx timeout [ 2151.036081][T27217] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.043350][T27217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2151.050918][T27217] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.058165][T27217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2151.120000][T11291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.128858][T11291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.167271][T27217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2151.200138][T27217] 8021q: adding VLAN 0 to HW filter on device team0 [ 2151.241709][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.248966][ T6595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2151.279709][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.286933][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2151.626829][T27275] overlayfs: failed to resolve './file2': -2 [ 2151.703994][T27217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2152.123398][T27217] veth0_vlan: entered promiscuous mode [ 2152.150399][T27217] veth1_vlan: entered promiscuous mode [ 2152.251830][T27217] veth0_macvtap: entered promiscuous mode [ 2152.279320][T27217] veth1_macvtap: entered promiscuous mode [ 2152.343231][T27217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2152.359029][T27217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2152.387512][ T6582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.408124][ T6582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.443126][ T6582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.452586][ T6582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2152.691936][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2152.730661][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.323188][T12407] Bluetooth: hci2: command tx timeout [ 2153.494257][T11307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.502122][T11307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.957119][T20382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2153.969512][T20382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2153.979959][T20382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2153.988751][T20382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2154.720586][T20382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2155.007205][T27326] wg2 speed is unknown, defaulting to 1000 [ 2155.313643][T15583] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 2155.353854][T15583] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2155.475387][T12407] Bluetooth: hci2: command tx timeout [ 2155.532447][T27346] fido_id[27346]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2155.536761][T27351] binder: 27350:27351 unknown command 0 [ 2155.582419][T27351] binder: 27350:27351 ioctl c0306201 200000000080 returned -22 [ 2155.852961][T27326] lo speed is unknown, defaulting to 1000 [ 2155.864581][T27354] picdev_write: 51 callbacks suppressed [ 2155.864602][T27354] kvm: pic: non byte write [ 2155.880649][T27326] lo speed is unknown, defaulting to 1000 [ 2155.888184][T27326] wlan0 speed is unknown, defaulting to 1000 [ 2156.097981][T27362] netlink: 'syz.3.5884': attribute type 9 has an invalid length. [ 2156.928437][T12407] Bluetooth: hci1: command tx timeout [ 2157.529761][T27326] chnl_net:caif_netlink_parms(): no params data found [ 2157.674982][T27394] overlayfs: failed to clone upperpath [ 2157.695735][T12407] Bluetooth: hci2: command tx timeout [ 2157.823198][ T2153] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2157.843474][T27326] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.850900][T27326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.858646][T27326] bridge_slave_0: entered allmulticast mode [ 2157.866285][T27326] bridge_slave_0: entered promiscuous mode [ 2157.878289][T27326] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.885496][T27326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2157.892960][T27326] bridge_slave_1: entered allmulticast mode [ 2157.900190][T27326] bridge_slave_1: entered promiscuous mode [ 2157.939432][T27326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2157.954256][T27326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2157.985729][ T2153] usb 6-1: config 0 has no interfaces? [ 2157.996225][ T2153] usb 6-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 2158.011018][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.023683][T27326] team0: Port device team_slave_0 added [ 2158.029402][ T2153] usb 6-1: Product: syz [ 2158.033683][ T2153] usb 6-1: Manufacturer: syz [ 2158.034023][T27326] team0: Port device team_slave_1 added [ 2158.051409][ T2153] usb 6-1: SerialNumber: syz [ 2158.180991][ T2153] usb 6-1: config 0 descriptor?? [ 2158.581238][ T2153] usb 6-1: USB disconnect, device number 27 [ 2158.637593][T27326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2158.676731][T27326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.702762][ C0] vkms_vblank_simulate: vblank timer overrun [ 2158.717050][T27326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2158.733546][T27326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2158.740713][T27326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.773295][T27326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.193945][T12407] Bluetooth: hci1: command tx timeout [ 2159.334680][T27326] hsr_slave_0: entered promiscuous mode [ 2159.345267][T27326] hsr_slave_1: entered promiscuous mode [ 2159.353061][T27326] debugfs: 'hsr0' already exists in 'hsr' [ 2159.358815][T27326] Cannot create hsr debugfs directory [ 2160.371209][T27432] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2160.384729][T27432] Error validating options; rc = [-22] [ 2160.601694][T27326] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2160.633415][T27326] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2160.646248][T27326] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2160.675669][T27326] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2160.797269][T27453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5914'. [ 2160.882127][T27456] overlayfs: failed to clone upperpath [ 2160.898130][T27326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2160.930450][T27326] 8021q: adding VLAN 0 to HW filter on device team0 [ 2160.954222][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state [ 2160.961479][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2160.982769][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.989974][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2161.071194][T27326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2161.372335][T12407] Bluetooth: hci1: command tx timeout [ 2161.923244][T27326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2161.925755][T27474] overlayfs: failed to clone upperpath [ 2162.202160][T27486] overlayfs: failed to clone upperpath [ 2162.305387][T27326] veth0_vlan: entered promiscuous mode [ 2162.318542][T27326] veth1_vlan: entered promiscuous mode [ 2162.349337][T27326] veth0_macvtap: entered promiscuous mode [ 2162.359450][T27326] veth1_macvtap: entered promiscuous mode [ 2162.376847][T27326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2162.392666][T27326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2162.408582][ T44] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.419232][T11281] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.433383][T11281] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.443595][T11281] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2162.529430][T11281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.538000][T11281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.558635][ T5961] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2162.575504][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2162.583792][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2162.924635][T27493] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2162.932420][T27493] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2162.940792][T27493] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2162.948652][T27493] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 2163.081648][T27497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5927'. [ 2163.163147][ T5961] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2163.245837][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.328542][ T5961] usb 6-1: Product: syz [ 2163.391807][ T5961] usb 6-1: Manufacturer: syz [ 2163.461774][ T5961] usb 6-1: SerialNumber: syz [ 2163.681861][T12407] Bluetooth: hci1: command tx timeout [ 2164.655365][T27523] bond0: (slave netdevsim0): Releasing backup interface [ 2164.673495][T27523] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 2165.133559][ T5961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2165.172299][ T5961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2165.209739][ T5961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2165.222619][ T5961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2165.238660][ T5961] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2165.250489][ T5961] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2165.266328][ T5961] usb 6-1: USB disconnect, device number 28 [ 2165.676815][T27541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5943'. [ 2165.760693][T27536] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2165.768535][T27536] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2165.776848][T27536] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2165.784584][T27536] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2166.191328][T27558] overlayfs: failed to clone upperpath [ 2166.502601][T27567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5953'. [ 2169.253080][T27590] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5960'. [ 2172.443826][T27639] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2172.451594][T27639] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2172.459871][T27639] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2172.467608][T27639] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 2173.272245][T27648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5978'. [ 2173.713424][T27649] netlink: 'syz.5.5980': attribute type 5 has an invalid length. [ 2174.021325][T27653] iso9660: Unknown parameter '0xffffffffffffffffʼ< 1 [ 2176.710535][T20382] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2176.721941][T20382] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2176.730208][T20382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2176.741612][T20382] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2176.934297][T27701] kvm: pic: non byte write [ 2176.950189][T27697] wg2 speed is unknown, defaulting to 1000 [ 2177.331604][ T6582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.445008][T27697] lo speed is unknown, defaulting to 1000 [ 2177.482801][T27697] lo speed is unknown, defaulting to 1000 [ 2177.490695][T27697] wlan0 speed is unknown, defaulting to 1000 [ 2177.600252][ T6582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.791272][ T6582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.935184][ T6582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.243742][T27723] /dev/nullb0: Can't lookup blockdev [ 2178.250650][T27723] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 2178.312740][T27697] chnl_net:caif_netlink_parms(): no params data found [ 2178.321458][T27725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6006'. [ 2178.491941][ T6582] bridge_slave_1: left allmulticast mode [ 2178.498287][ T6582] bridge_slave_1: left promiscuous mode [ 2178.504649][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.517170][ T6582] bridge_slave_0: left allmulticast mode [ 2178.523731][ T6582] bridge_slave_0: left promiscuous mode [ 2178.531657][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.635540][T27736] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2178.650962][T27736] MINIX-fs: unable to read superblock [ 2178.902476][T12407] Bluetooth: hci5: command tx timeout [ 2180.521155][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2180.543650][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2180.584121][ T6582] bond0 (unregistering): Released all slaves [ 2181.013230][T27697] bridge0: port 1(bridge_slave_0) entered blocking state [ 2181.098514][T27697] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.115554][T27697] bridge_slave_0: entered allmulticast mode [ 2181.129332][T12407] Bluetooth: hci5: command tx timeout [ 2181.150148][T27697] bridge_slave_0: entered promiscuous mode [ 2181.202227][T27697] bridge0: port 2(bridge_slave_1) entered blocking state [ 2181.351029][T27697] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.359592][T27697] bridge_slave_1: entered allmulticast mode [ 2181.374807][T27697] bridge_slave_1: entered promiscuous mode [ 2181.551420][T27762] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 2181.570227][T27762] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 2181.736328][T27697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2182.201314][T27697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2182.554660][T27783] nbd_handle_cmd: 2 callbacks suppressed [ 2182.554739][T27783] block nbd5: Attempted send on invalid socket [ 2182.567063][T27783] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2182.576897][T27783] efs: cannot read volume header [ 2183.311947][T27697] team0: Port device team_slave_0 added [ 2183.346781][T27697] team0: Port device team_slave_1 added [ 2183.355595][T12407] Bluetooth: hci5: command tx timeout [ 2184.080014][T27697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2184.121601][T27697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2184.189674][T27697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2184.231635][ T6582] hsr_slave_0: left promiscuous mode [ 2184.254883][ T6582] hsr_slave_1: left promiscuous mode [ 2184.285152][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2184.311617][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2184.333624][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2184.342739][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2184.390039][ T6582] veth1_macvtap: left promiscuous mode [ 2184.408038][ T6582] veth0_macvtap: left promiscuous mode [ 2184.413765][ T6582] veth1_vlan: left promiscuous mode [ 2184.438310][ T6582] veth0_vlan: left promiscuous mode [ 2185.578170][T12407] Bluetooth: hci5: command tx timeout [ 2185.962378][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 2186.041826][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 2186.660303][T27697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.667562][T27697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2186.695379][T27697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.964587][T27697] hsr_slave_0: entered promiscuous mode [ 2186.971484][T27697] hsr_slave_1: entered promiscuous mode [ 2187.006349][T27697] debugfs: 'hsr0' already exists in 'hsr' [ 2187.040756][T27697] Cannot create hsr debugfs directory [ 2187.047260][T27849] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2187.059817][T27849] EXT4-fs (loop8): unable to read superblock [ 2187.247413][T27855] kvm: kvm [27854]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0xc1) = 0xb24600000000 [ 2187.272416][T27855] kvm: kvm [27854]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0xc2) = 0x14600000000 [ 2187.308457][T27855] kvm: kvm [27854]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0x11e) = 0x14600000000 [ 2187.330735][T27855] kvm: kvm [27854]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0x186) = 0x14600000000 [ 2187.340599][T27855] kvm: kvm [27854]: vcpu0, guest rIP: 0x89c Unhandled WRMSR(0x187) = 0xb24600000000 [ 2189.573869][T27875] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2189.609664][T27875] EXT4-fs (loop7): unable to read superblock [ 2189.880666][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6059'. [ 2189.936537][T27697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2189.975004][T27697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2190.014859][T20382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2190.029342][T20382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2190.030890][T27697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2190.038459][T20382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2190.051315][T20382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2190.059550][T20382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2190.122879][T27697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2190.219927][T27889] wg2 speed is unknown, defaulting to 1000 [ 2190.438274][T27903] overlayfs: failed to clone upperpath [ 2190.472509][T27697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2190.508962][T27697] 8021q: adding VLAN 0 to HW filter on device team0 [ 2190.529110][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.536354][T11281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.568993][T11281] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.576227][T11281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.665559][T27889] lo speed is unknown, defaulting to 1000 [ 2190.680038][T27889] lo speed is unknown, defaulting to 1000 [ 2190.694701][T27889] wlan0 speed is unknown, defaulting to 1000 [ 2190.934633][ T30] audit: type=1326 audit(2199.883:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27910 comm="syz.7.6064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb18eec9 code=0x0 [ 2191.017563][T27697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2191.043957][T27919] wg2 speed is unknown, defaulting to 1000 [ 2191.064627][T27889] chnl_net:caif_netlink_parms(): no params data found [ 2191.160064][T27924] overlayfs: failed to clone upperpath [ 2191.344813][T27697] veth0_vlan: entered promiscuous mode [ 2191.356967][T27889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.381383][T27889] bridge0: port 1(bridge_slave_0) entered disabled state [ 2191.398680][T27889] bridge_slave_0: entered allmulticast mode [ 2191.409332][T27889] bridge_slave_0: entered promiscuous mode [ 2191.432174][T27889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.439303][T27889] bridge0: port 2(bridge_slave_1) entered disabled state [ 2191.462842][T27889] bridge_slave_1: entered allmulticast mode [ 2191.470152][T27889] bridge_slave_1: entered promiscuous mode [ 2191.618897][T27889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2191.629460][T27919] lo speed is unknown, defaulting to 1000 [ 2191.649362][T27889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2191.669403][T27697] veth1_vlan: entered promiscuous mode [ 2191.698981][T27919] lo speed is unknown, defaulting to 1000 [ 2191.811763][T27919] wlan0 speed is unknown, defaulting to 1000 [ 2191.884196][T27889] team0: Port device team_slave_0 added [ 2191.905871][T27889] team0: Port device team_slave_1 added [ 2192.105406][T27889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.113506][T27889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2192.145470][T27889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.186076][T27889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2192.193521][T27889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2192.231270][T27889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.244534][T20382] Bluetooth: hci0: command tx timeout [ 2192.401128][T27889] hsr_slave_0: entered promiscuous mode [ 2192.408794][T27889] hsr_slave_1: entered promiscuous mode [ 2192.420670][T27889] debugfs: 'hsr0' already exists in 'hsr' [ 2192.426830][T27889] Cannot create hsr debugfs directory [ 2192.983532][T27697] veth0_macvtap: entered promiscuous mode [ 2193.169137][T27697] veth1_macvtap: entered promiscuous mode [ 2193.214457][T27697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2193.228572][T27697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2193.396112][T11307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.405086][T11307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.614106][T27958] netlink: 'syz.3.6077': attribute type 9 has an invalid length. [ 2193.896312][T11307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.905806][T11307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.981560][T11308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2193.996097][T11308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.162464][T11281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.256885][T11281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.472960][T20382] Bluetooth: hci0: command tx timeout [ 2194.712867][T27964] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 2195.809977][T27889] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2195.884792][T27889] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2195.945494][T27889] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2195.992840][T27889] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2196.271211][T27889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2196.304181][T27889] 8021q: adding VLAN 0 to HW filter on device team0 [ 2196.324256][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.331423][T11307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2196.372608][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.379772][T11307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.689672][T20382] Bluetooth: hci0: command tx timeout [ 2196.733695][T27889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2196.992574][T27889] veth0_vlan: entered promiscuous mode [ 2197.080403][T27889] veth1_vlan: entered promiscuous mode [ 2197.211379][T27889] veth0_macvtap: entered promiscuous mode [ 2197.257763][T27889] veth1_macvtap: entered promiscuous mode [ 2197.267035][T28014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2197.334490][T27889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2197.362056][T27889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2197.414797][T11307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.448796][T11307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.486218][T11307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2197.761414][T28021] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2197.769224][T28021] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2197.777483][T28021] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2197.785234][T28021] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 2197.915840][T11307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2198.376561][T17996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2198.403236][T17996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2198.558943][T11307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2198.597473][T11307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2198.801714][T28033] netlink: 'syz.7.6097': attribute type 1 has an invalid length. [ 2198.845742][T28033] netlink: 'syz.7.6097': attribute type 1 has an invalid length. [ 2199.799746][T20382] Bluetooth: hci0: command tx timeout [ 2200.100343][T28030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2200.106304][T28030] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2200.351951][T28030] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2200.358372][T28030] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2200.391081][T28030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2200.397006][T28030] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2200.910359][T13339] hid (null): global environment stack underflow [ 2201.429439][T13339] hid-generic 0FFF:0007:0003.001B: global environment stack underflow [ 2201.454016][T13339] hid-generic 0FFF:0007:0003.001B: item 0 0 1 11 parsing failed [ 2202.634689][T13339] hid-generic 0FFF:0007:0003.001B: probe with driver hid-generic failed with error -22 [ 2204.490766][T28067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6108'. [ 2206.027276][T13339] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2206.407966][T13339] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2206.420700][T13339] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2206.668264][T13339] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2206.713355][T13339] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2206.725701][T13339] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.761132][T13339] usb 9-1: config 0 descriptor?? [ 2207.002008][T28098] overlayfs: failed lookup in lower (newroot/8, name='file0', err=-40): overlapping layers [ 2207.133397][T28098] overlayfs: failed lookup in lower (newroot/8, name='file0', err=-40): overlapping layers [ 2207.233487][T13339] usbhid 9-1:0.0: can't add hid device: -71 [ 2207.258531][T13339] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2207.281044][T13339] usb 9-1: USB disconnect, device number 3 [ 2207.632200][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6122'. [ 2207.804267][ T30] audit: type=1800 audit(2215.666:712): pid=28111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6121" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2209.625092][T28130] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2209.632878][T28130] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2209.641954][T28130] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2209.649736][T28130] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2214.841999][T28192] kvm: pic: non byte write [ 2215.458402][T28197] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2215.466177][T28197] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2215.474450][T28197] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2215.482188][T28197] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 2216.591517][T28205] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2216.611579][T28205] EXT4-fs (loop8): unable to read superblock [ 2217.693715][T24452] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2217.895187][T28220] netlink: 10 bytes leftover after parsing attributes in process `syz.7.6155'. [ 2218.228987][T24452] usb 3-1: Using ep0 maxpacket: 32 [ 2218.291492][T24452] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 2218.351361][T24452] usb 3-1: config 0 has no interface number 0 [ 2218.449589][T24452] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2218.462831][T24452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.473548][T24452] usb 3-1: Product: syz [ 2218.481836][T24452] usb 3-1: Manufacturer: syz [ 2218.487039][T24452] usb 3-1: SerialNumber: syz [ 2218.496754][T24452] usb 3-1: config 0 descriptor?? [ 2218.512451][T24452] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 2218.530219][T24452] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 2218.734011][T24452] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 2218.749578][T24452] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 2218.832561][T28230] binder: 28229:28230 ioctl c0306201 200000000680 returned -14 [ 2219.351240][T28235] veth0_vlan: entered allmulticast mode [ 2219.377158][T24452] usb 3-1: USB disconnect, device number 29 [ 2219.435305][T28226] kvm: pic: non byte write [ 2219.841406][T15583] wg2 speed is unknown, defaulting to 1000 [ 2219.909378][T15583] syz2: Port: 1 Link DOWN [ 2220.630543][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2220.654703][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.755133][T15586] wg2 speed is unknown, defaulting to 1000 [ 2221.367546][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2221.404123][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.405096][T28261] EXT4-fs: Ignoring removed bh option [ 2221.449207][T28259] [U]  [ 2221.452917][T28261] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2221.484505][T28261] EXT4-fs (loop6): unable to read superblock [ 2221.530632][T28259] [U] K{ [ 2221.549226][T28259] [U] T 1ŠFFˊ`GJǘGO/MC [ 2222.003918][T28259] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 2222.056062][T28271] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2222.085337][T28271] SQUASHFS error: Failed to read block 0x0: -5 [ 2222.092115][T28271] unable to read squashfs_super_block [ 2222.221228][T28273] erofs (device loop2): cannot find valid erofs superblock [ 2222.698637][T28259] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 2222.712472][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2222.723189][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.335400][T28259] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 2223.398138][T28259] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 2223.429991][T28259] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 2223.560245][T28259] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 2223.591107][T28259] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 2223.940390][T28259] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 2224.444793][T28286] delete_channel: no stack [ 2224.963987][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2224.969529][T28259] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 2225.016090][T28259] [U] 22Ʃ۩X?0;3U [ 2225.056324][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.059543][T28259] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 2225.122739][T28259] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 2225.140469][T28259] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 2225.165517][T28259] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 2225.176231][T28259] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 2225.197543][T28259] [U] EC [ 2225.228865][T28259] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 2226.236934][ T44] bridge_slave_1: left allmulticast mode [ 2226.245546][ T44] bridge_slave_1: left promiscuous mode [ 2226.262959][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.314487][ T44] bridge_slave_0: left allmulticast mode [ 2226.352128][ T44] bridge_slave_0: left promiscuous mode [ 2226.379737][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.426879][T13246] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2226.608908][T13246] usb 7-1: Using ep0 maxpacket: 16 [ 2226.631209][T13246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.650075][T13246] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2226.693427][T13246] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 2226.725102][T13246] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.748062][T13246] usb 7-1: config 0 descriptor?? [ 2226.842887][T28308] input: syz1 as /devices/virtual/input/input44 [ 2227.214101][T13246] konepure 0003:1E7D:2DB4.001C: unknown main item tag 0x0 [ 2227.255301][T13246] konepure 0003:1E7D:2DB4.001C: unknown main item tag 0x0 [ 2227.308449][T13246] konepure 0003:1E7D:2DB4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.6-1/input0 [ 2227.420663][T28267] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 2228.897034][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2228.909810][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2228.925277][ T44] bond0 (unregistering): (slave team0): Releasing backup interface [ 2228.966494][ T44] bond0 (unregistering): Released all slaves [ 2229.032048][ T44] bond1 (unregistering): Released all slaves [ 2229.091735][T21516] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2229.176575][ T44] bond2 (unregistering): Released all slaves [ 2229.416124][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.430553][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.450850][T21516] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2229.465932][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.634156][T13246] usb 7-1: USB disconnect, device number 31 [ 2229.643635][T21516] usb 3-1: config 0 descriptor?? [ 2229.735472][ T44] tipc: Disabling bearer [ 2229.751836][ T44] tipc: Left network mode [ 2230.400787][T28320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6188'. [ 2230.464724][T21516] usbhid 3-1:0.0: can't add hid device: -71 [ 2230.512524][T21516] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2230.688212][T21516] usb 3-1: USB disconnect, device number 30 [ 2231.105875][T28336] /dev/nullb0: Can't lookup blockdev [ 2231.382063][ T30] audit: type=1326 audit(2237.716:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28338 comm="syz.7.6193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb18eec9 code=0x0 [ 2232.968695][T13339] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2233.257540][T13339] usb 9-1: Using ep0 maxpacket: 16 [ 2233.264963][T13339] usb 9-1: config 2 has an invalid interface number: 78 but max is 0 [ 2233.274317][T13339] usb 9-1: config 2 has no interface number 0 [ 2233.281794][T13339] usb 9-1: config 2 interface 78 has no altsetting 0 [ 2233.291611][T13339] usb 9-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=82.1b [ 2233.305397][T13339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.314102][T13339] usb 9-1: Product: syz [ 2233.318278][T13339] usb 9-1: Manufacturer: syz [ 2233.323490][T13339] usb 9-1: SerialNumber: syz [ 2233.631897][T28374] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2233.641758][T28374] EXT4-fs (loop6): unable to read superblock [ 2233.845485][T13339] option 9-1:2.78: GSM modem (1-port) converter detected [ 2233.867257][T13339] usb 9-1: USB disconnect, device number 4 [ 2233.874763][T13339] option 9-1:2.78: device disconnected [ 2234.560256][T28375] ------------[ cut here ]------------ [ 2234.565855][T28375] WARNING: kernel/nstree.c:115 at __ns_tree_remove+0x28d/0x330, CPU#0: syz.6.6206/28375 [ 2234.575683][T28375] Modules linked in: [ 2234.579618][T28375] CPU: 0 UID: 0 PID: 28375 Comm: syz.6.6206 Not tainted syzkaller #0 PREEMPT(full) [ 2234.589093][T28375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2234.599217][T28375] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 2234.605494][T28375] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff [ 2234.627053][T28375] RSP: 0018:ffffc90004fcfaa8 EFLAGS: 00010283 [ 2234.633834][T28375] RAX: ffffffff818de3cc RBX: ffff8880584c2a20 RCX: 0000000000080000 [ 2234.642322][T28375] RDX: ffffc9000ce1a000 RSI: 00000000000008d2 RDI: 00000000000008d3 [ 2234.651120][T28375] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a [ 2234.660732][T28375] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff8880584c2a20 [ 2234.668856][T28375] R13: 1ffff1100b098543 R14: ffff8880584c2a00 R15: ffffffff8e1ea3c0 [ 2234.676846][T28375] FS: 00007f6074adb6c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 2234.685848][T28375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2234.692780][T28375] CR2: 0000001b3301aff8 CR3: 000000006520c000 CR4: 00000000003526f0 [ 2234.700882][T28375] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 2234.708879][T28375] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2234.716949][T28375] Call Trace: [ 2234.720242][T28375] [ 2234.723247][T28375] ? dec_ucount+0x15c/0x180 [ 2234.727779][T28375] free_mnt_ns+0xd1/0x110 [ 2234.732141][T28375] namespace_unlock+0x529/0x760 [ 2234.737083][T28375] ? clone_mnt+0xba/0x9a0 [ 2234.741443][T28375] ? __pfx_namespace_unlock+0x10/0x10 [ 2234.747137][T28375] ? alloc_mnt_ns+0x2fc/0x3d0 [ 2234.751846][T28375] copy_mnt_ns+0x6e0/0x870 [ 2234.756348][T28375] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 2234.761750][T28375] ? create_new_namespaces+0x31/0x720 [ 2234.767211][T28375] create_new_namespaces+0xd1/0x720 [ 2234.772432][T28375] ? bpf_lsm_capable+0x9/0x20 [ 2234.777246][T28375] ? security_capable+0x7e/0x2e0 [ 2234.782207][T28375] unshare_nsproxy_namespaces+0x11c/0x170 [ 2234.788004][T28375] ksys_unshare+0x4c8/0x8c0 [ 2234.792532][T28375] ? __pfx_ksys_unshare+0x10/0x10 [ 2234.797672][T28375] __x64_sys_unshare+0x38/0x50 [ 2234.802453][T28375] do_syscall_64+0xfa/0xfa0 [ 2234.806993][T28375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.813163][T28375] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2234.819830][T28375] ? clear_bhb_loop+0x60/0xb0 [ 2234.824537][T28375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.830599][T28375] RIP: 0033:0x7f6073b8eec9 [ 2234.835033][T28375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2234.854706][T28375] RSP: 002b:00007f6074adb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2234.863152][T28375] RAX: ffffffffffffffda RBX: 00007f6073de6090 RCX: 00007f6073b8eec9 [ 2234.871145][T28375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 2234.879168][T28375] RBP: 00007f6073c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2234.887174][T28375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2234.895193][T28375] R13: 00007f6073de6128 R14: 00007f6073de6090 R15: 00007ffc63f1dd98 [ 2234.903203][T28375] [ 2234.906301][T28375] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2234.913572][T28375] CPU: 0 UID: 0 PID: 28375 Comm: syz.6.6206 Not tainted syzkaller #0 PREEMPT(full) [ 2234.922929][T28375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2234.932992][T28375] Call Trace: [ 2234.936263][T28375] [ 2234.939182][T28375] dump_stack_lvl+0x99/0x250 [ 2234.943760][T28375] ? __asan_memcpy+0x40/0x70 [ 2234.948344][T28375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2234.953536][T28375] ? __pfx__printk+0x10/0x10 [ 2234.958127][T28375] vpanic+0x237/0x6d0 [ 2234.962096][T28375] ? __pfx_vpanic+0x10/0x10 [ 2234.966607][T28375] ? is_bpf_text_address+0x292/0x2b0 [ 2234.971890][T28375] ? is_bpf_text_address+0x26/0x2b0 [ 2234.977092][T28375] panic+0xb9/0xc0 [ 2234.980802][T28375] ? __pfx_panic+0x10/0x10 [ 2234.985218][T28375] __warn+0x334/0x4c0 [ 2234.989190][T28375] ? __ns_tree_remove+0x28d/0x330 [ 2234.994211][T28375] ? __ns_tree_remove+0x28d/0x330 [ 2234.999224][T28375] report_bug+0x2be/0x4f0 [ 2235.003539][T28375] ? __ns_tree_remove+0x28d/0x330 [ 2235.008558][T28375] ? __ns_tree_remove+0x28d/0x330 [ 2235.013576][T28375] ? __ns_tree_remove+0x28f/0x330 [ 2235.018595][T28375] handle_bug+0x84/0x160 [ 2235.022831][T28375] exc_invalid_op+0x1a/0x50 [ 2235.027341][T28375] asm_exc_invalid_op+0x1a/0x20 [ 2235.032177][T28375] RIP: 0010:__ns_tree_remove+0x28d/0x330 [ 2235.037807][T28375] Code: 0f 85 a4 00 00 00 48 8b 04 24 ff 00 48 8b 7c 24 18 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 79 92 f9 09 e8 54 f5 31 00 90 <0f> 0b 90 e9 cc fd ff ff e8 46 f5 31 00 90 0f 0b 90 e9 ee fd ff ff [ 2235.057492][T28375] RSP: 0018:ffffc90004fcfaa8 EFLAGS: 00010283 [ 2235.063553][T28375] RAX: ffffffff818de3cc RBX: ffff8880584c2a20 RCX: 0000000000080000 [ 2235.071519][T28375] RDX: ffffc9000ce1a000 RSI: 00000000000008d2 RDI: 00000000000008d3 [ 2235.079568][T28375] RBP: dffffc0000000000 R08: ffffffff8e1efb53 R09: 1ffffffff1c3df6a [ 2235.087529][T28375] R10: dffffc0000000000 R11: fffffbfff1c3df6b R12: ffff8880584c2a20 [ 2235.096186][T28375] R13: 1ffff1100b098543 R14: ffff8880584c2a00 R15: ffffffff8e1ea3c0 [ 2235.104149][T28375] ? __ns_tree_remove+0x28c/0x330 [ 2235.109177][T28375] ? __ns_tree_remove+0x28c/0x330 [ 2235.114188][T28375] ? dec_ucount+0x15c/0x180 [ 2235.118693][T28375] free_mnt_ns+0xd1/0x110 [ 2235.123026][T28375] namespace_unlock+0x529/0x760 [ 2235.127871][T28375] ? clone_mnt+0xba/0x9a0 [ 2235.132377][T28375] ? __pfx_namespace_unlock+0x10/0x10 [ 2235.137739][T28375] ? alloc_mnt_ns+0x2fc/0x3d0 [ 2235.142403][T28375] copy_mnt_ns+0x6e0/0x870 [ 2235.146806][T28375] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 2235.152165][T28375] ? create_new_namespaces+0x31/0x720 [ 2235.157533][T28375] create_new_namespaces+0xd1/0x720 [ 2235.162736][T28375] ? bpf_lsm_capable+0x9/0x20 [ 2235.167421][T28375] ? security_capable+0x7e/0x2e0 [ 2235.172346][T28375] unshare_nsproxy_namespaces+0x11c/0x170 [ 2235.178055][T28375] ksys_unshare+0x4c8/0x8c0 [ 2235.182567][T28375] ? __pfx_ksys_unshare+0x10/0x10 [ 2235.187666][T28375] __x64_sys_unshare+0x38/0x50 [ 2235.192410][T28375] do_syscall_64+0xfa/0xfa0 [ 2235.196896][T28375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.202946][T28375] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2235.209083][T28375] ? clear_bhb_loop+0x60/0xb0 [ 2235.213744][T28375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.219616][T28375] RIP: 0033:0x7f6073b8eec9 [ 2235.224031][T28375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2235.243631][T28375] RSP: 002b:00007f6074adb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2235.252053][T28375] RAX: ffffffffffffffda RBX: 00007f6073de6090 RCX: 00007f6073b8eec9 [ 2235.260012][T28375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 2235.267973][T28375] RBP: 00007f6073c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2235.275930][T28375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2235.283887][T28375] R13: 00007f6073de6128 R14: 00007f6073de6090 R15: 00007ffc63f1dd98 [ 2235.291854][T28375] [ 2235.295159][T28375] Kernel Offset: disabled [ 2235.299472][T28375] Rebooting in 86400 seconds..