last executing test programs: 15m18.805990578s ago: executing program 4 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000950000000000000005000000c69ee6efed3ec3c07705079be0496022"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc008000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001f900000000004cdc7cb700000a3c000000120a01020005000000000000020000000900020073797a310000000008000440000200000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a19d98fdb6544dbc7131a"], 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaacaaaaaaaaaaaa0000000088907800000000ffffffff00000000000890780000000000000000ead1ec1391acd6fed7a7ae8706012dd7b3102aae37d55a9d6329f8bf01e432293e166de3e71eef15ee2783d5359e2beaa6b5fa8bde0482a9ffdcdb3f809668cd05f211a4fa3c39273b853c04cfbf2100e41fb9f30c5abe28f0f5e94dacbff741000defc60c38559f320bca20e0ecd9ab2207fa988054e34c77b5dce1e2eaeb0509b6bc7b7b1c337c3de9974074c9e02bebc6d8b57a8efbbe13e0dfd8b8f18159310c179e9de0"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r6}, 0x18) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) userfaultfd(0x1) 15m17.401127282s ago: executing program 4 (id=12): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 15m14.859966621s ago: executing program 4 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x20, 0x0, 0x8000000, 0x10, 0xb, 0x10084, 0x0, 0x152}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r6}, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) 14m58.218765919s ago: executing program 32 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x20, 0x0, 0x8000000, 0x10, 0xb, 0x10084, 0x0, 0x152}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r6}, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) 10m5.268526432s ago: executing program 1 (id=570): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r6, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="c83827844a6f50590497ff5fe277a774ad06f93603e8c9b70884e793ac1a92820f1018da0388f4fd31b145b7333e7c46322d575131435d3779e74e670ce7cce1a78b230b88bc1cb0e63daed461085dc870b9ee0c4bb321356606bc1ad21ccd1f97a0786b701f3c87138265be1263b6c133321b12"], 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040), 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffffe, 0x5, 0xfffffffc, 0x8}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4890}, 0x4) 10m3.716010154s ago: executing program 1 (id=573): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) socket$tipc(0x1e, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10m3.680190508s ago: executing program 1 (id=574): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0xf, 0x0) gettid() write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000000)='e', 0x1}]) sendmmsg$alg(r6, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="e6", 0x1}], 0x1}], 0x1, 0x0) 10m2.291352261s ago: executing program 1 (id=576): r0 = openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x4, 0x101) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r6, 0x12}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) fchdir(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(0x0, 0x80880) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 10m0.804418128s ago: executing program 1 (id=580): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000011000000000000000000000000a20000000000a010100000000000000000100000034000000090a010400000000000000000100000008000a40000000000900020073797a320000000039fc010073797a310000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 9m58.10805463s ago: executing program 1 (id=584): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xd, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_format(r5, &(0x7f0000000000)='-1\x00', 0x3) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x200, 0x9, 0x0, 0x4, 0x0, 0x0, 0x8a, 0x0, 0xfffffff7}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r8 = dup(r7) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0xfdd, 0x81, 0x2, 0x4010002, 0x7}) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000022c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 9m41.810685083s ago: executing program 33 (id=584): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x5, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xd, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a]}}, 0x5c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_format(r5, &(0x7f0000000000)='-1\x00', 0x3) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x200, 0x9, 0x0, 0x4, 0x0, 0x0, 0x8a, 0x0, 0xfffffff7}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid_for_children\x00') setns(r6, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r8 = dup(r7) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0xfdd, 0x81, 0x2, 0x4010002, 0x7}) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000022c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 8m46.595082943s ago: executing program 6 (id=710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x5, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x803, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x26000bc5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r7, 0x4b4b, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x240440c0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b6933d100", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c00010062726964", @ANYRESOCT=r8], 0x3c}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x2fff, 0x1, &(0x7f0000000040)="f6", 0x1}) 8m44.204376226s ago: executing program 6 (id=711): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003680)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200035c0, 0x0, 0x0, 0x200035f0, 0x20003620], 0x0, 0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000a07debbd2251d47700000000000000000000000000000000ffffffff100000000000000000000000ddffff80"]}, 0xe4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r1 = socket(0x29, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@none}]}) socket$inet_smc(0x2b, 0x1, 0x0) 8m38.917450435s ago: executing program 6 (id=713): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setrlimit(0x8, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/19, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d00000000140002800400030004000000080002"], 0x44}}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000040)={0x40001, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e24, 0x0, @empty}}}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r8, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5f6c}]}, 0x34}}, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0x7, 0x0, 0x0, 0xffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 8m36.817449273s ago: executing program 6 (id=720): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 8m34.290319066s ago: executing program 6 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @local, @dev}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xb0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x5, 0x7, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x5e}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x4c, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xc, 0x10001, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80), 0x10, 0x7f, @void, @value}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) socket$inet_udp(0x2, 0x2, 0x0) 8m33.139887693s ago: executing program 6 (id=725): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r8, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 8m33.063692065s ago: executing program 34 (id=725): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) setresuid(0xffffffffffffffff, r2, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r7, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r8, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 2m16.258513739s ago: executing program 3 (id=1437): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'security.', 'GPL\x00'}, &(0x7f00000001c0)=""/109, 0x6d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, r9, 0x0, 0x0, @void}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000000080)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) 2m12.633348221s ago: executing program 3 (id=1441): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x7, 0x0, @private1, @loopback, 0x1, 0x8, 0x7f, 0x8}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) close_range(r7, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0xb0, 0x0, 0xb, [{{0x1, 0x1, 0x7, 0x7fff, 0x9, 0x3b, {0x6, 0x0, 0x3, 0x5, 0x6198fb87, 0x8, 0xd, 0x1, 0xfffffff7, 0x4000, 0x4, 0x0, 0x0, 0x81, 0xffffffff}}, {0x5, 0xff, 0x6, 0x3, '-\x8c+@\xee\x9a'}}]}, 0x0, 0x0, &(0x7f0000000000)={0x130}}) sendmsg$nl_generic(r6, &(0x7f00000009c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x5040) write$uinput_user_dev(r6, &(0x7f0000000140)={'syz1\x00', {0x3, 0x7f, 0x101, 0x954}, 0x27, [0x0, 0x3, 0x10, 0x9, 0xffffff74, 0x7, 0x9, 0x9, 0x5, 0x200, 0x80e, 0x5, 0x9, 0x6, 0x6, 0x9, 0xab, 0x5, 0x2cc40000, 0x1, 0xb1, 0xa, 0x3, 0xc, 0xf9d8, 0x800, 0x1, 0x8, 0x5, 0x7ff, 0xada7, 0x9, 0x7fffffff, 0xddd, 0x600, 0x6, 0x72f, 0x6, 0xd, 0x9, 0xfffffff7, 0x5, 0x0, 0x500, 0xc0000000, 0xcc6, 0x4, 0xc0000, 0x3, 0xd, 0xd892db4a, 0x8001, 0x1, 0x6, 0x9, 0x7, 0xa, 0x7, 0x81, 0x4, 0x7, 0x1, 0x100, 0x400], [0xfff, 0x9, 0x4, 0x5f, 0x3, 0x3f7c, 0x5e, 0x5f10eed9, 0xb, 0x8, 0x2, 0x5, 0x4, 0x2, 0x3, 0x1000, 0x624c, 0x8, 0x3, 0xfffffff9, 0x7, 0x81, 0x9, 0x6, 0x6, 0x42e7, 0xffffffff, 0x81, 0x0, 0x8, 0x4000000, 0x9, 0x553, 0x84e, 0xe, 0x4, 0xf643, 0x1, 0x2, 0xa00000, 0x6, 0x4f83, 0x7, 0x0, 0x1, 0x2, 0x3, 0x2, 0x6, 0xfffffffa, 0xb26, 0x7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x5d9, 0x90, 0x1, 0x4, 0x1, 0x2550, 0xea], [0x1, 0xfffffff9, 0x4, 0x7, 0x3758, 0x10001, 0x8, 0x9, 0x1ff, 0x7, 0x401, 0x10040, 0xff, 0x2, 0x10001, 0x4, 0x3, 0x101, 0x7fffffff, 0x7ff, 0x2, 0x6, 0x9000, 0x5f5, 0x77, 0x5, 0x6, 0x3ff0000, 0x3, 0x8, 0xb3, 0xe, 0xfc1, 0x1, 0xff, 0x3, 0xfffffff8, 0x200, 0xc3, 0x7, 0x8, 0xd, 0x8001, 0x2, 0xfffffffa, 0xffff, 0x1, 0x80000001, 0x88, 0x6, 0x4, 0x9, 0x1, 0x9, 0xfffffffe, 0x2, 0x400, 0x1ff, 0x6, 0x8, 0x4, 0x0, 0x9, 0x8], [0x9, 0x0, 0x40fd, 0x7, 0xd061, 0x8001, 0x6, 0x7, 0x9, 0x4, 0x8, 0x1, 0x7, 0x2, 0x956, 0x1, 0x5, 0xfffffff8, 0x6, 0x4, 0x8, 0xfffffffb, 0x3, 0x8, 0x8626, 0x2, 0x6, 0x8, 0x0, 0x40, 0x81, 0x5, 0xe6, 0x80000001, 0x1, 0x40, 0x4, 0x0, 0x5, 0x8, 0xfffffffd, 0x0, 0x13f, 0x1, 0x8, 0xfff, 0xd9a, 0x6, 0xffff, 0x1, 0x9, 0x5, 0xb, 0xf8, 0x5, 0xffff, 0x5, 0x4, 0x8, 0x101, 0x6, 0x4, 0xb, 0x6]}, 0x45c) 2m11.230146844s ago: executing program 3 (id=1444): socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200008d1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000180)='net/sco\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x7d6f346af930d763, 0x5, 0xdda) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000300)=""/210, &(0x7f00000000c0)=0xd2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x1c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5884484a025b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000001280)=""/4089, 0xff9) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0x20002078) 2m10.03707867s ago: executing program 3 (id=1448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0x8}, {0x0}], 0x2, 0x5c, 0x2) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000580)) r9 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_NET_SET_BACKEND(r3, 0xaf02, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x522240) 2m6.409122313s ago: executing program 3 (id=1451): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$ptys(0xc, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000480)=""/66, 0x42}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x88, r7, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x88}}, 0x0) 2m1.421602412s ago: executing program 3 (id=1462): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000ffffffe500000000000000060000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)='_', 0x1, 0x20012100}) io_uring_enter(r3, 0xe85, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x5b1441, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d1b2cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f034d5ac33e31d612d976920300000000000000503621ec6679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x60, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x2a, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x80, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}, {"f721"}}}}}}}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xb) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1m44.964803496s ago: executing program 35 (id=1462): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000ffffffe500000000000000060000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f00000004c0)='_', 0x1, 0x20012100}) io_uring_enter(r3, 0xe85, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x5b1441, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = socket$inet(0xa, 0x801, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d1b2cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f034d5ac33e31d612d976920300000000000000503621ec6679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x60, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x2a, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x80, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}, {"f721"}}}}}}}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xb) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 11.905283451s ago: executing program 7 (id=2085): syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/195, 0xc3}, {0x0}], 0x2) 8.656596861s ago: executing program 7 (id=2111): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8280) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x0, 0x2}) ioctl$NBD_DISCONNECT(r0, 0xab08) 8.576814853s ago: executing program 7 (id=2113): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@empty, @in6=@loopback, 0x2000, 0x0, 0x4e21, 0x1, 0xa}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x68b, 0x0, 0x8}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010100, 0x0, 0x33}, 0x0, @in6=@local, 0x80, 0x0, 0x0, 0x3, 0xfffbfffd, 0x4, 0x20000}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 8.472310129s ago: executing program 7 (id=2114): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x541b, 0x0) 5.226948422s ago: executing program 7 (id=2151): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.500190569s ago: executing program 2 (id=2182): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="c822", 0x2}], 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @pix_mp={0x2, 0x8, 0x47524247, 0x7, 0x8, [{0x40, 0x2}, {0x0, 0x1}, {0x9, 0x4}, {0xc4b, 0x200}, {0xff}, {0x7}, {0x1, 0x8}, {0x10000005, 0x4}], 0xff, 0x3, 0x4, 0x0, 0x1}}}) 2.500096486s ago: executing program 2 (id=2183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x3) 2.476382909s ago: executing program 2 (id=2184): r0 = socket$kcm(0x10, 0x2, 0x4) setreuid(0xee01, 0xee01) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.444261364s ago: executing program 2 (id=2185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.040128181s ago: executing program 5 (id=2192): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffd, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2284, 0x0) 2.040014835s ago: executing program 5 (id=2193): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000003640)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, 0x0) 2.010757392s ago: executing program 5 (id=2195): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$smackfs_revoke_subject(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffd, 0x40100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd98, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7a8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='fsi_master_acf_cmd_abs_addr\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x853}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x48c08000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1aad]}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x1, 0x0, 0x20040005, 0x0, 0x4}}) 1.9545286s ago: executing program 7 (id=2196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022220000009623130f00000800070c00000076b8000a1a7083"], 0x0}, 0x0) 978.162658ms ago: executing program 8 (id=2209): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1286dd608a37f200142c00fe800000000000001d0b767bc0b21f19b9"], 0x0) 885.676614ms ago: executing program 0 (id=2210): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e1c, @empty}, 0x2) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x58c461a3c156990d, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="736d00000066736861743dae2cc8d44720b07d7fbd1ce1c00bb7408e736d61636b66737472616ec97ef57465285e2c00f5625f06e2e08c7ced120aeb2f25a276dc0e47c66255293e599aa741adfce8de96acdd3776b96dc10db8ef3acc8058127f6b9e56"]) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000340)="d5", 0x1}], 0x1}, 0x40) pwrite64(r0, &(0x7f0000000080)="ca42a205fe6d2841a42f4fb618f4a11a2b312cd4987a5d9211e030a7671e2267dcaeffa38345d1e9f772cbd405da5d2a1e73d5d286d256d9cdc9c59f839fc4bec156c9ed163d274d692f770cfbfa697b67498228503621dea4c23d0e9c49a821e8e6ce9895a2e32198c27b7b4f9fb880a89b3f7116b8a850dca32fc78d78f0e6c9c9c31a43378eab83a067aeee8a2516193dc43f9317eec9eb58950e46d5646b2f31444e189f4839d53031937753eadec7438c49fa8f", 0xb6, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0x0) io_setup(0xff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000002c0)={0x0, 0x2, 0xffffffff, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) syz_open_pts(r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x685, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd}]) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f00000006c0)={0x1000000, 0x0, 0x700000000000000, 0xb, 0x0, r3, 0x0}]) r7 = accept$netrom(r0, 0x0, &(0x7f0000000240)=0xfffffffffffffc6a) pwrite64(r7, &(0x7f0000000180)="325d9d900122489a3ed89aff44add6bd2ec52d11b40cc85211cb82b2e18a484a01363d962024181be297b104959ed75976c7f061f76fc3c747d47e882618bf6cb26ff77246654c2d19e7567d83", 0x4d, 0xffffffff) write$binfmt_script(r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000680)={0x6, 'bridge_slave_0\x00', {0x8}, 0x3ff}) 851.870346ms ago: executing program 5 (id=2211): r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 800.15052ms ago: executing program 8 (id=2212): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="27030200590200000000", 0xa}, {0x0}], 0x2}, 0x0) 786.968493ms ago: executing program 8 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000500040000000000050001000600000005000500000000000900020073797a32000000000d0003006c6973743a736574"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000030601080000000000000000050000050500010007"], 0x30}}, 0x40000) 743.470616ms ago: executing program 5 (id=2214): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x3b}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 666.18834ms ago: executing program 8 (id=2215): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 666.012591ms ago: executing program 5 (id=2216): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) 665.729938ms ago: executing program 0 (id=2217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) 569.825726ms ago: executing program 0 (id=2218): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000440)=0xad, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 487.323191ms ago: executing program 2 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f0000001ec0)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "fbedb5", 0x18, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x3, 0x2, 0x9, 0x0, 0x2, 0x3, 0x4, 0x0, 0xfffd, 0x200, 0x3, 0x4e23, 0x4e21}}}}}}}}, 0x0) 432.350065ms ago: executing program 0 (id=2220): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={0x0, 0x340}) 380.025221ms ago: executing program 2 (id=2221): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$smackfs_revoke_subject(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffd, 0x40100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd98, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7a8]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='fsi_master_acf_cmd_abs_addr\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x853}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80010, r1, 0x48c08000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1aad]}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x1, 0x0, 0x20040005, 0x0, 0x4}}) 365.185998ms ago: executing program 8 (id=2222): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x6, &(0x7f0000000000)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000002ec0)={0x1, @vbi={0xfffffffc, 0x6, 0x33524742, 0x32314742, [0xa, 0x8], [0x5, 0x7], 0x108}}) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0x20) 235.13324ms ago: executing program 0 (id=2223): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x840) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000002cc0)={0xa770, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) 36.002127ms ago: executing program 0 (id=2224): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff5, 0x9, 0x0, 0xae, 0x4000000006, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) 0s ago: executing program 8 (id=2225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): 98.609567][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.619607][ T3448] veth1_macvtap: left promiscuous mode [ 498.647587][ T3448] veth0_macvtap: left promiscuous mode [ 498.653207][ T3448] veth1_vlan: left promiscuous mode [ 498.658696][ T3448] veth0_vlan: left promiscuous mode [ 500.773343][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 501.196785][ T3448] team0 (unregistering): Port device team_slave_1 removed [ 501.210540][ T3448] team0 (unregistering): Port device team_slave_0 removed [ 501.634953][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.899902][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.136995][ T9727] team0: Port device team_slave_0 added [ 503.433957][ T9727] team0: Port device team_slave_1 added [ 503.705684][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.718036][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.308977][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.375793][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.886203][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.125728][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.666347][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 506.666370][ T29] audit: type=1400 audit(1734364983.222:114): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9938 comm="syz.3.777" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 506.706483][ T9727] hsr_slave_0: entered promiscuous mode [ 506.766863][ T9727] hsr_slave_1: entered promiscuous mode [ 506.799977][ T9727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.807673][ T9727] Cannot create hsr debugfs directory [ 507.101613][ T29] audit: type=1804 audit(1734364983.531:115): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.768" name="/newroot/130/file1" dev="fuse" ino=1 res=1 errno=0 [ 508.328865][ T29] audit: type=1800 audit(1734364983.531:116): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.768" name="/" dev="fuse" ino=1 res=0 errno=0 [ 508.364434][ T29] audit: type=1804 audit(1734364983.531:117): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.768" name="/newroot/130/file1" dev="fuse" ino=1 res=1 errno=0 [ 508.703520][ T29] audit: type=1804 audit(1734364983.531:118): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.768" name="/newroot/130/file1" dev="fuse" ino=1 res=1 errno=0 [ 509.036732][ T29] audit: type=1800 audit(1734364983.531:119): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.768" name="/" dev="fuse" ino=1 res=0 errno=0 [ 509.520581][ T9970] netlink: 273 bytes leftover after parsing attributes in process `syz.5.771'. [ 511.080177][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.771'. [ 511.755455][ T9727] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 511.908720][ T9727] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 513.477825][ T9727] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 513.487328][ T9727] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 513.618679][T10000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 513.629618][T10000] batman_adv: batadv0: Adding interface: gretap1 [ 513.636134][T10000] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.661639][T10000] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 513.802183][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.816949][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.823929][ T9727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.835484][ T9727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.112562][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.119739][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.678547][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.685802][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.742557][ T5832] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 515.778641][ T5832] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 516.363949][T10038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.779'. [ 517.258746][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.246163][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 519.987437][T10093] overlayfs: failed to resolve './file0': -2 [ 521.910759][ T9727] veth0_vlan: entered promiscuous mode [ 521.935028][ T9727] veth1_vlan: entered promiscuous mode [ 522.164814][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 522.212254][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 522.721695][T10118] netlink: 'syz.3.796': attribute type 7 has an invalid length. [ 522.805329][T10119] random: crng reseeded on system resumption [ 522.984703][ T9727] veth0_macvtap: entered promiscuous mode [ 522.997592][ T9727] veth1_macvtap: entered promiscuous mode [ 523.011221][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.021965][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.031979][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.042565][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.053392][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.271589][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.284248][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.295368][ T9727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.320275][ T9727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.368133][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.378626][ T9727] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.387458][ T9727] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.396270][ T9727] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.405025][ T9727] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.549298][T10137] ip6t_srh: unknown srh match flags 4000 [ 523.746770][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 523.768864][T10141] IPVS: Error joining to the multicast group [ 524.262667][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.289255][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.338041][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.445285][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.549401][ T5832] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 528.271885][T10178] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 528.451044][T10191] evm: overlay not supported [ 528.859171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.003183][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.939319][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'. [ 530.948551][T10205] IPVS: Error joining to the multicast group [ 535.584605][T10225] lo speed is unknown, defaulting to 1000 [ 535.591320][T10225] lo speed is unknown, defaulting to 1000 [ 535.597521][T10225] lo speed is unknown, defaulting to 1000 [ 535.676631][T10225] infiniband sz1: set active [ 535.681372][T10225] infiniband sz1: added lo [ 535.686410][T10225] sz1: rxe_create_cq: returned err = -12 [ 535.692540][T10225] infiniband sz1: Couldn't create ib_mad CQ [ 535.698766][T10225] infiniband sz1: Couldn't open port 1 [ 535.713740][T10225] RDS/IB: sz1: added [ 535.717910][T10225] smc: adding ib device sz1 with port count 1 [ 535.724086][T10225] smc: ib device sz1 port 1 has pnetid [ 535.730648][T10225] lo speed is unknown, defaulting to 1000 [ 535.782366][ T25] lo speed is unknown, defaulting to 1000 [ 535.788251][ T25] lo speed is unknown, defaulting to 1000 [ 536.402541][T10247] syz.3.816: attempt to access beyond end of device [ 536.402541][T10247] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 536.415903][T10247] efs: cannot read volume header [ 536.594273][ T29] audit: type=1326 audit(1734365011.266:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10240 comm="syz.5.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x0 [ 537.197186][T10225] lo speed is unknown, defaulting to 1000 [ 537.280170][T10225] lo speed is unknown, defaulting to 1000 [ 538.550054][T10225] lo speed is unknown, defaulting to 1000 [ 538.701497][T10270] ax25_connect(): syz.5.820 uses autobind, please contact jreuter@yaina.de [ 539.883159][T10271] Invalid ELF header magic: != ELF [ 539.890392][T10271] ntfs3(nullb0): Primary boot signature is not NTFS. [ 539.897446][T10271] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 539.942444][T10225] lo speed is unknown, defaulting to 1000 [ 540.253233][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 541.270471][T10284] veth0_to_team: entered promiscuous mode [ 541.276582][T10284] veth0_to_team: entered allmulticast mode [ 542.476499][T10303] dccp_invalid_packet: P.Data Offset(10) too large [ 542.706178][T10297] pimreg: entered allmulticast mode [ 542.885259][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 543.378882][T10294] IPVS: Error joining to the multicast group [ 548.194769][T10370] 9pnet_fd: p9_fd_create_tcp (10370): problem connecting socket to 127.0.0.1 [ 549.542752][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'. [ 550.257412][T10392] IPVS: Error joining to the multicast group [ 552.316484][T10427] netlink: 68 bytes leftover after parsing attributes in process `syz.5.848'. [ 553.141084][ T46] IPVS: starting estimator thread 0... [ 553.282709][T10432] IPVS: using max 25 ests per chain, 60000 per kthread [ 553.602226][T10444] tmpfs: Bad value for 'size' [ 554.449137][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.861'. [ 554.486485][T10454] IPVS: Error joining to the multicast group [ 554.653526][T10448] ax25_connect(): syz.2.851 uses autobind, please contact jreuter@yaina.de [ 555.213968][T10469] overlayfs: failed to resolve './file0': -2 [ 557.162139][ T29] audit: type=1804 audit(1734369125.201:121): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.855" name="/newroot/182/bus/bus" dev="overlay" ino=1015 res=1 errno=0 [ 560.141630][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 561.388839][T10525] lo: entered promiscuous mode [ 561.649116][T10521] lo: left promiscuous mode [ 561.973559][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.873'. [ 561.982565][T10562] IPVS: Error joining to the multicast group [ 562.127337][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'. [ 562.147270][T10522] hugetlbfs: syz.7.868 (10522): Using mlock ulimits for SHM_HUGETLB is obsolete [ 562.455865][T10567] netlink: 108 bytes leftover after parsing attributes in process `syz.7.875'. [ 562.464891][T10567] netlink: 236 bytes leftover after parsing attributes in process `syz.7.875'. [ 562.474055][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.875'. [ 562.882785][T10037] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 563.109114][T10037] usb 4-1: No LPM exit latency info found, disabling LPM. [ 563.593754][T10037] usb 4-1: no configurations [ 563.598425][T10037] usb 4-1: can't read configurations, error -22 [ 563.781882][T10037] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 565.156894][T10037] usb 4-1: No LPM exit latency info found, disabling LPM. [ 565.192015][T10037] usb 4-1: no configurations [ 565.272666][T10037] usb 4-1: can't read configurations, error -22 [ 565.386377][T10037] usb usb4-port1: attempt power cycle [ 569.746431][T10662] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 570.581835][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.889'. [ 570.590847][T10675] IPVS: Error joining to the multicast group [ 570.743647][T10670] Unsupported ieee802154 address type: 0 [ 572.390373][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 575.026216][T10734] input: syz0 as /devices/virtual/input/input10 [ 580.250513][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 580.259869][T10811] IPVS: Error joining to the multicast group [ 580.268372][T10771] Bluetooth: hci2: command 0x0405 tx timeout [ 582.389441][T10835] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 583.959827][T10858] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 584.387049][T10857] tty tty2: ldisc open failed (-12), clearing slot 1 [ 585.182559][T10871] input: syz1 as /devices/virtual/input/input11 [ 585.686825][T10854] syz.5.921: attempt to access beyond end of device [ 585.686825][T10854] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 586.152061][ T25] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 586.505192][ T25] usb 3-1: No LPM exit latency info found, disabling LPM. [ 587.406495][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 587.415084][ T25] usb 3-1: can't read configurations, error -61 [ 588.512426][ T25] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 588.588923][ T975] IPVS: starting estimator thread 0... [ 589.217685][T10904] IPVS: using max 36 ests per chain, 86400 per kthread [ 590.423764][ T25] usb 3-1: device descriptor read/all, error -71 [ 590.431322][ T25] usb usb3-port1: attempt power cycle [ 590.744749][T10931] i2c i2c-0: Invalid block write size 34 [ 591.880230][ T5828] Bluetooth: Frame is too long (len 12, expected len 10) [ 592.490498][T10946] syz.0.934: attempt to access beyond end of device [ 592.490498][T10946] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 592.503520][T10946] SQUASHFS error: Failed to read block 0x0: -5 [ 592.510107][T10946] unable to read squashfs_super_block [ 593.342568][ T5828] Bluetooth: Unexpected continuation frame (len 18) [ 593.666863][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 594.285913][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 594.292399][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.298954][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 596.234345][T10991] netlink: 156 bytes leftover after parsing attributes in process `syz.2.944'. [ 600.376785][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.947'. [ 600.441775][T11017] IPVS: Error joining to the multicast group [ 602.332586][T11038] 9pnet: Unknown protocol version 9p2000.„?ÒUÎ6ïu [ 603.057648][T11049] pim6reg527: entered allmulticast mode [ 604.470111][T10037] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 604.558347][T11066] devtmpfs: Too few inodes for current use [ 604.864704][ T29] audit: type=1326 audit(1734369169.483:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 604.886556][ T29] audit: type=1326 audit(1734369169.483:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 604.989792][ T29] audit: type=1326 audit(1734369169.483:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.011367][ T29] audit: type=1326 audit(1734369169.483:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.033381][ T29] audit: type=1326 audit(1734369169.483:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.055008][ T29] audit: type=1326 audit(1734369169.483:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.076721][ T29] audit: type=1326 audit(1734369169.483:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.318466][T11072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.354286][ T29] audit: type=1326 audit(1734369169.483:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.376039][ T29] audit: type=1326 audit(1734369169.483:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 605.397590][ T29] audit: type=1326 audit(1734369169.483:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11056 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 606.735575][T10037] usb 3-1: Using ep0 maxpacket: 8 [ 612.212298][T10037] usb 3-1: unable to get BOS descriptor or descriptor too short [ 612.235175][T10037] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 612.262874][T10037] usb 3-1: can't read configurations, error -71 [ 613.190192][T11121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.553763][T11124] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 613.568494][T11124] batman_adv: batadv0: Adding interface: gretap1 [ 613.574885][T11124] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.600257][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.606378][T11124] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 614.009872][T11141] hub 2-0:1.0: USB hub found [ 614.015305][T11141] hub 2-0:1.0: 1 port detected [ 614.275037][ T25] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 615.130264][T11149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.253869][ T25] usb 4-1: No LPM exit latency info found, disabling LPM. [ 615.264987][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 615.273859][ T25] usb 4-1: can't read configurations, error -61 [ 618.166469][T11190] netlink: 'syz.7.976': attribute type 10 has an invalid length. [ 618.166496][T11190] netlink: 40 bytes leftover after parsing attributes in process `syz.7.976'. [ 619.470756][T11190] team0: Port device geneve0 added [ 619.524192][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 619.730392][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 620.297124][T11231] netlink: 104 bytes leftover after parsing attributes in process `syz.3.982'. [ 620.336878][T11232] netlink: 'syz.5.981': attribute type 13 has an invalid length. [ 620.336905][T11232] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.981'. [ 621.224407][T11245] overlayfs: missing 'lowerdir' [ 621.247810][T11245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 621.255175][T11245] IPv6: NLM_F_CREATE should be set when creating new route [ 621.262428][T11245] IPv6: NLM_F_CREATE should be set when creating new route [ 621.292153][T11249] qnx6: unable to read the first superblock [ 622.265919][T10771] Bluetooth: hci2: command 0x0405 tx timeout [ 623.575290][T10903] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 623.916368][T10903] usb 4-1: device descriptor read/64, error -71 [ 625.172605][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 625.179116][ T29] audit: type=1326 audit(1734369188.986:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 625.529664][ T29] audit: type=1326 audit(1734369188.986:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 625.636554][ T29] audit: type=1326 audit(1734369188.986:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 625.839731][ T29] audit: type=1326 audit(1734369188.986:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 625.869419][ T29] audit: type=1326 audit(1734369188.986:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 626.636609][ T29] audit: type=1326 audit(1734369188.986:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 627.192385][ T29] audit: type=1326 audit(1734369188.986:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 627.344977][ T29] audit: type=1326 audit(1734369188.986:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 628.458529][ T29] audit: type=1326 audit(1734369188.995:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 628.597355][ T29] audit: type=1326 audit(1734369188.995:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11276 comm="syz.5.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 629.198244][T11304] netlink: 165 bytes leftover after parsing attributes in process `syz.2.994'. [ 629.890500][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 629.899987][T11345] IPVS: Error joining to the multicast group [ 631.602577][T11304] syz.2.994 (11304): drop_caches: 2 [ 633.385828][T11366] pim6reg: entered allmulticast mode [ 635.555477][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1011'. [ 635.564537][T11395] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1011'. [ 636.119640][T11394] 9pnet_fd: p9_fd_create_tcp (11394): problem connecting socket to 127.0.0.1 [ 637.433864][T11414] netlink: ct family unspecified [ 637.439297][T11414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.958603][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'. [ 638.967665][T11425] IPVS: Error joining to the multicast group [ 645.888130][T11461] input: syz0 as /devices/virtual/input/input12 [ 645.894460][T11461] input: failed to attach handler leds to device input12, error: -6 [ 646.163694][ T46] libceph: connect (1)[c::]:6789 error -101 [ 646.170826][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 646.462128][ T46] libceph: connect (1)[c::]:6789 error -101 [ 646.495672][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 646.567518][T11461] ceph: No mds server is up or the cluster is laggy [ 647.781815][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 647.781838][ T29] audit: type=1326 audit(1734369210.276:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11493 comm="syz.0.1031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x0 [ 647.960692][T11499] can0: slcan on ttyS3. [ 648.945463][T11497] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1031'. [ 648.974868][T11496] can0 (unregistered): slcan off ttyS3. [ 648.983268][T11497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.417401][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.043326][T11557] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1042'. [ 655.223499][T11574] libceph: resolve 'c' (ret=-3): failed [ 655.773178][ T3448] tipc: Subscription rejected, illegal request [ 656.350116][T11591] syz.5.1045: attempt to access beyond end of device [ 656.350116][T11591] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 656.363530][T11591] SQUASHFS error: Failed to read block 0x0: -5 [ 656.369884][T11591] unable to read squashfs_super_block [ 656.854222][T11582] smk_cipso_doi:693 remove rc = -2 [ 659.325578][T11660] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 659.837489][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.844045][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.803651][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 660.843302][T11686] IPVS: Error joining to the multicast group [ 661.207325][T11693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.564239][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1059'. [ 662.808370][T11705] bridge0: port 3(syz_tun) entered blocking state [ 662.814932][T11705] bridge0: port 3(syz_tun) entered disabled state [ 662.821731][T11705] syz_tun: entered allmulticast mode [ 662.828035][T11705] syz_tun: entered promiscuous mode [ 662.833743][T11705] bridge0: port 3(syz_tun) entered blocking state [ 662.840310][T11705] bridge0: port 3(syz_tun) entered forwarding state [ 663.174889][T11713] rdma_rxe: rxe_newlink: failed to add lo [ 663.183370][T11713] »»»»»»: renamed from lo (while UP) [ 663.988216][T11725] syz.7.1068(11725): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 664.062147][T10771] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 669.825973][ T29] audit: type=1326 audit(1734369230.087:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 671.105409][T11745] cgroup: none used incorrectly [ 671.613736][ T29] audit: type=1326 audit(1734369230.087:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 671.774887][T11745] orangefs_mount: mount request failed with -4 [ 671.885848][ T29] audit: type=1326 audit(1734369230.274:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 671.921399][ T29] audit: type=1326 audit(1734369230.274:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 672.083601][ T29] audit: type=1326 audit(1734369230.274:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 672.367743][T11755] input: syz0 as /devices/virtual/input/input13 [ 672.389623][ T29] audit: type=1326 audit(1734369230.424:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 672.422357][ T29] audit: type=1326 audit(1734369230.424:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 673.132465][ T29] audit: type=1326 audit(1734369230.424:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 673.280151][T11765] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 673.287244][T11765] overlayfs: failed to set xattr on upper [ 673.293059][T11765] overlayfs: ...falling back to redirect_dir=nofollow. [ 673.300611][T11765] overlayfs: ...falling back to index=off. [ 673.306659][T11765] overlayfs: ...falling back to uuid=null. [ 673.481035][ T29] audit: type=1326 audit(1734369230.611:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 673.768756][ T29] audit: type=1326 audit(1734369230.611:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x7ffc0000 [ 674.467563][T11786] loop7: detected capacity change from 0 to 16384 [ 676.087264][T11789] bridge0: port 3(erspan0) entered blocking state [ 676.093798][T11789] bridge0: port 3(erspan0) entered disabled state [ 676.100439][T11789] erspan0: entered allmulticast mode [ 676.106419][T11789] erspan0: entered promiscuous mode [ 676.111951][T11789] bridge0: port 3(erspan0) entered blocking state [ 676.118438][T11789] bridge0: port 3(erspan0) entered forwarding state [ 676.144069][T10771] Bluetooth: hci3: Unable to find connection for big 0x00 [ 676.353742][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 676.944793][T11805] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 677.144496][T11792] loop7: detected capacity change from 16384 to 16383 [ 677.868173][T11822] could not allocate digest TFM handle vmac64(aes-generic) [ 677.997791][T11826] netlink: 'syz.7.1084': attribute type 1 has an invalid length. [ 680.835967][T11852] hub 2-0:1.0: USB hub found [ 680.840787][T11852] hub 2-0:1.0: 1 port detected [ 687.626516][T11896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 688.600790][T11906] pimreg: entered allmulticast mode [ 688.757363][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 688.766407][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 689.247292][T11907] pimreg: left allmulticast mode [ 691.590281][T11935] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 691.601296][T11935] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 692.969361][ T8] IPVS: starting estimator thread 0... [ 693.127269][T11943] IPVS: using max 41 ests per chain, 98400 per kthread [ 698.642756][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 698.923266][T10771] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 700.670231][T12012] overlayfs: conflicting lowerdir path [ 702.757185][T12014] netlink: 'syz.7.1123': attribute type 10 has an invalid length. [ 702.903211][T12014] macvlan0: entered allmulticast mode [ 702.913035][T12014] veth1_vlan: entered allmulticast mode [ 702.935339][T12014] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 706.537499][T12056] vivid-000: kernel_thread() failed [ 707.325219][T12067] fuse: Bad value for 'user_id' [ 707.330261][T12067] fuse: Bad value for 'user_id' [ 708.484769][T12080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.721415][T12094] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 711.440791][T12109] netlink: 412 bytes leftover after parsing attributes in process `syz.5.1147'. [ 711.652646][T12110] trusted_key: syz.7.1145 sent an empty control message without MSG_MORE. [ 715.676644][T12148] devtmpfs: Too few inodes for current use [ 716.683536][ T3448] Bluetooth: hci5: Frame reassembly failed (-84) [ 719.005162][T10771] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 725.109595][T12227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'. [ 726.291864][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.298219][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.814472][ T5828] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 727.902954][T12256] siw: device registration error -23 [ 728.422744][T12258] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 728.473334][ T5828] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 729.507917][ T5828] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 730.376352][T12295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1182'. [ 730.545810][T12292] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1177'. [ 732.915330][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 732.934540][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 733.440898][T12335] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 733.472840][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 733.538577][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 733.538612][ T29] audit: type=1326 audit(1734369290.495:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.3.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd34bb85d19 code=0x0 [ 733.665399][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 733.684766][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 733.746159][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.767719][ T9] usb 3-1: Product: syz [ 734.078492][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 734.085640][ T9] usb 3-1: Manufacturer: syz [ 734.089818][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 734.091459][ T9] usb 3-1: SerialNumber: syz [ 734.106160][ T5828] Bluetooth: hci4: hardware error 0x00 [ 734.115770][ T9] usb 3-1: config 0 descriptor?? [ 734.140901][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 734.149691][ T9] usb 3-1: Detected FT-X [ 735.191784][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 736.980984][ T29] audit: type=1804 audit(1734369293.517:211): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1197" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 737.022625][ T29] audit: type=1800 audit(1734369293.517:212): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1197" name="/" dev="fuse" ino=1 res=0 errno=0 [ 737.704628][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 737.793811][ T29] audit: type=1804 audit(1734369293.517:213): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1197" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 738.224387][ T29] audit: type=1804 audit(1734369293.517:214): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1197" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 738.433362][ T29] audit: type=1800 audit(1734369293.517:215): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1197" name="/" dev="fuse" ino=1 res=0 errno=0 [ 738.605078][T12382] Smack: duplicate mount options [ 739.086674][T12385] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 739.095278][T12385] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 739.103825][T12385] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 739.906304][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'. [ 739.941390][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 739.972002][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 740.026179][ T9] usb 3-1: USB disconnect, device number 16 [ 740.180368][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 740.930012][ T9] ftdi_sio 3-1:0.0: device disconnected [ 742.147387][T12410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.615968][T12468] erofs (device erofs): cannot find valid erofs superblock [ 749.446647][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 749.456117][T12501] IPVS: Error joining to the multicast group [ 751.888274][T12516] Bluetooth: hci5: Frame reassembly failed (-84) [ 752.012219][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 752.124056][T12522] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1226'. [ 753.289843][T10903] libceph: connect (1)[c::]:6789 error -101 [ 753.296077][T10903] libceph: mon0 (1)[c::]:6789 connect error [ 753.665779][T12550] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 753.674098][T12533] ceph: No mds server is up or the cluster is laggy [ 753.683364][T10903] libceph: connect (1)[c::]:6789 error -101 [ 753.689496][T10903] libceph: mon0 (1)[c::]:6789 connect error [ 754.739966][T10771] Bluetooth: hci5: command 0x1003 tx timeout [ 754.837418][T12561] program syz.3.1231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.904101][T12560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.913727][T12560] netlink: 'syz.0.1233': attribute type 2 has an invalid length. [ 754.921631][T12560] netlink: 'syz.0.1233': attribute type 8 has an invalid length. [ 754.929647][T12560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1233'. [ 755.164046][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 756.716314][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 756.725416][T12584] IPVS: Error joining to the multicast group [ 757.551685][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1238'. [ 759.555889][T12619] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 760.889931][T12635] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 760.901386][T12630] veth0_to_team: entered promiscuous mode [ 760.907411][T12630] veth0_to_team: entered allmulticast mode [ 763.798937][T12660] block device autoloading is deprecated and will be removed. [ 763.807139][T12660] syz.3.1254: attempt to access beyond end of device [ 763.807139][T12660] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 763.961854][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 763.982823][T12668] IPVS: Error joining to the multicast group [ 770.609665][T12702] tipc: Trying to set illegal importance in message [ 771.104355][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 771.577454][T12717] Invalid ELF header magic: != ELF [ 771.584176][T12717] ntfs3(nullb0): Primary boot signature is not NTFS. [ 771.591062][T12717] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 772.164004][T12716] input: syz1 as /devices/virtual/input/input14 [ 772.324076][T12718] bond_slave_0: entered promiscuous mode [ 772.330147][T12718] bond_slave_0: entered allmulticast mode [ 772.336911][T12718] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 772.552705][T12706] bond_slave_0: left allmulticast mode [ 772.558403][T12706] bond_slave_0: left promiscuous mode [ 773.471734][T12732] smk_cipso_doi:706 cipso add rc = -17 [ 774.432336][T12737] smk_cipso_doi:693 remove rc = -2 [ 774.439146][T12737] smk_cipso_doi:706 cipso add rc = -17 [ 775.681362][T12750] omfs: Invalid superblock (0) [ 775.780217][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 775.790838][T12752] IPVS: Error joining to the multicast group [ 776.192545][ T29] audit: type=1326 audit(1734369330.381:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.214167][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.227921][ T29] audit: type=1326 audit(1734369330.381:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.249763][ T29] audit: type=1326 audit(1734369330.390:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.271516][ T29] audit: type=1326 audit(1734369330.390:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.293271][ T29] audit: type=1326 audit(1734369330.390:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.315391][ T29] audit: type=1326 audit(1734369330.465:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.337189][ T29] audit: type=1326 audit(1734369330.465:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.380506][ T29] audit: type=1326 audit(1734369330.559:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.416693][ T29] audit: type=1326 audit(1734369330.559:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.440319][ T29] audit: type=1326 audit(1734369330.559:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12749 comm="syz.7.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x7ffc0000 [ 776.461910][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.492277][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1271'. [ 776.501399][T12755] IPVS: Error joining to the multicast group [ 777.734555][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 777.744665][T12766] IPVS: Error joining to the multicast group [ 778.810741][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 779.092557][T12780] ptrace attach of "./syz-executor exec"[12782] was attempted by "./syz-executor exec"[12780] [ 779.369291][T12783] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.1278'. [ 784.884030][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 784.893090][T12824] IPVS: Error joining to the multicast group [ 786.096846][T12832] netlink: 'syz.5.1294': attribute type 21 has an invalid length. [ 786.104858][T12832] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1294'. [ 786.178630][T12833] 9pnet: Could not find request transport: r•õa [ 788.625164][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 788.634315][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 788.639761][T12857] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 788.643411][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 789.498782][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 789.498840][ T29] audit: type=1326 audit(1734369342.017:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.527430][ T29] audit: type=1326 audit(1734369342.017:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.549276][ T29] audit: type=1326 audit(1734369342.017:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.580865][ T29] audit: type=1326 audit(1734369342.017:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.602648][ T29] audit: type=1326 audit(1734369342.017:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.624297][ T29] audit: type=1326 audit(1734369342.017:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.649529][ T29] audit: type=1326 audit(1734369342.017:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.673526][ T29] audit: type=1326 audit(1734369342.017:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.695242][ T29] audit: type=1326 audit(1734369342.017:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 789.716996][ T29] audit: type=1326 audit(1734369342.017:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e91185d19 code=0x7ffc0000 [ 791.216685][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 791.223131][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 792.435225][T12876] Can't find ip_set type has [ 792.733023][T12886] hub 2-0:1.0: USB hub found [ 792.737875][T12886] hub 2-0:1.0: 1 port detected [ 793.169615][T10771] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 793.283904][T10771] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 797.616909][T10771] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 797.628064][T10771] Bluetooth: hci0: Injecting HCI hardware error event [ 797.634950][T10771] Bluetooth: hci0: hardware error 0x00 [ 798.288826][T12937] bridge0: port 3(erspan0) entered blocking state [ 798.295442][T12937] bridge0: port 3(erspan0) entered disabled state [ 798.302025][T12937] erspan0: entered allmulticast mode [ 798.788811][T12937] erspan0: entered promiscuous mode [ 798.794596][T12937] bridge0: port 3(erspan0) entered blocking state [ 798.801082][T12937] bridge0: port 3(erspan0) entered forwarding state [ 799.016029][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 799.025148][T12953] IPVS: Error joining to the multicast group [ 800.317396][T10771] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 801.186617][T12974] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 801.745349][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1325'. [ 801.754676][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1325'. [ 803.443158][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 803.443340][ T29] audit: type=1326 audit(1734369355.740:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 803.472385][ T29] audit: type=1326 audit(1734369355.740:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 803.839256][ T29] audit: type=1326 audit(1734369355.758:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.353517][ T29] audit: type=1326 audit(1734369355.758:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.421192][ T29] audit: type=1326 audit(1734369355.758:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.443151][ T29] audit: type=1326 audit(1734369355.786:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.465126][ T29] audit: type=1326 audit(1734369355.786:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.486884][ T29] audit: type=1326 audit(1734369355.796:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.508760][ T29] audit: type=1326 audit(1734369355.796:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.531216][ T29] audit: type=1326 audit(1734369355.796:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12989 comm="syz.0.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 804.889655][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 805.491901][ T25] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 805.573713][T13017] erofs (device erofs): cannot find valid erofs superblock [ 805.875834][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 805.901244][ T25] usb 6-1: config 0 has no interfaces? [ 805.935042][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'. [ 805.980918][T13021] IPVS: Error joining to the multicast group [ 806.891345][ T25] usb 6-1: string descriptor 0 read error: -22 [ 807.106036][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 807.106072][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.224568][ T25] usb 6-1: config 0 descriptor?? [ 807.254912][T13031] tty tty25: ldisc open failed (-12), clearing slot 24 [ 807.734190][T13038] Bluetooth: MGMT ver 1.23 [ 809.770946][T10037] usb 6-1: USB disconnect, device number 11 [ 809.915390][T13057] rdma_rxe: rxe_newlink: failed to add lo [ 809.935578][T13057] »»»»»»: renamed from lo (while UP) [ 812.086504][T13085] input: syz0 as /devices/virtual/input/input15 [ 812.093036][T13085] input: failed to attach handler leds to device input15, error: -6 [ 812.263485][ T46] libceph: connect (1)[c::]:6789 error -101 [ 812.264506][T13089] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.1345'. [ 812.273343][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 812.301193][T13089] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 812.644197][ T46] libceph: connect (1)[c::]:6789 error -101 [ 812.652011][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 812.758687][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1347'. [ 813.147643][T13085] ceph: No mds server is up or the cluster is laggy [ 814.952941][T13138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 815.615218][T13139] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.635988][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 816.379330][T13148] program syz.2.1353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.830310][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1352'. [ 816.839738][T13149] IPVS: Error joining to the multicast group [ 817.575243][T13111] bridge0: port 3(erspan0) entered blocking state [ 817.581902][T13111] bridge0: port 3(erspan0) entered disabled state [ 817.588518][T13111] erspan0: entered allmulticast mode [ 817.594417][T13111] erspan0: entered promiscuous mode [ 817.599900][T13111] bridge0: port 3(erspan0) entered blocking state [ 817.606341][T13111] bridge0: port 3(erspan0) entered forwarding state [ 819.106506][T13185] xt_HMARK: proto mask must be zero with L3 mode [ 819.160459][T13185] Bluetooth: (null): Invalid header checksum [ 819.849015][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 819.864474][ T35] Bluetooth: (null): Invalid header checksum [ 819.870592][ T35] Bluetooth: (null): Invalid header checksum [ 819.882016][ T35] Bluetooth: (null): Invalid header checksum [ 819.888411][ T35] Bluetooth: (null): Invalid header checksum [ 819.894697][ T35] Bluetooth: (null): Invalid header checksum [ 819.901085][ T35] Bluetooth: (null): Invalid header checksum [ 820.883401][T13195] input: syz1 as /devices/virtual/input/input16 [ 821.223895][T13195] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 821.231809][T13195] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1362'. [ 821.263474][T13198] loop2: detected capacity change from 0 to 7 [ 821.270931][T13198] Dev loop2: unable to read RDB block 7 [ 821.276633][T13198] loop2: unable to read partition table [ 821.282422][T13198] loop2: partition table beyond EOD, truncated [ 821.288766][T13198] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 824.051530][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'. [ 824.060634][T13237] IPVS: Error joining to the multicast group [ 825.631995][T13258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 825.658272][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 825.769266][T13257] smk_cipso_doi:693 remove rc = -2 [ 825.774644][T13257] smk_cipso_doi:706 cipso add rc = -17 [ 827.669730][T13278] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 827.722693][T13277] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 829.745314][T13277] cgroup: fork rejected by pids controller in /syz3 [ 830.861050][T13323] can0: slcan on ttyS3. [ 832.157861][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 832.373099][T13323] can0 (unregistered): slcan off ttyS3. [ 833.476639][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 833.485814][T13338] IPVS: Error joining to the multicast group [ 846.090861][T13462] fuse: Unknown parameter 'groupvðyê00000000000000000000' [ 846.098200][T10771] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 846.176054][T13467] 9pnet_fd: Insufficient options for proto=fd [ 846.763098][T13473] cgroup: none used incorrectly [ 851.443130][T13473] orangefs_mount: mount request failed with -4 [ 853.551472][T13508] input: syz0 as /devices/virtual/input/input17 [ 856.912055][T13548] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 856.988745][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 856.995528][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 857.882585][T13557] mkiss: ax0: crc mode is auto. [ 859.453256][T13563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.485156][T13563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 859.515727][T13563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 859.778392][T13575] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 859.786955][T13575] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 859.795646][T13575] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 859.848926][T13581] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 861.132117][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 861.973651][T10771] Bluetooth: hci3: command 0x0c1a tx timeout [ 861.979810][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 862.474104][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 866.393415][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'. [ 867.588868][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 867.588888][ T29] audit: type=1326 audit(1734369415.886:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 867.648037][T13641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.763681][ T29] audit: type=1326 audit(1734369415.886:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 868.703785][ T29] audit: type=1326 audit(1734369415.886:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 869.608038][ T29] audit: type=1326 audit(1734369415.886:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 869.800415][ T29] audit: type=1326 audit(1734369415.886:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f756a187c37 code=0x7ffc0000 [ 870.745919][T13651] netlink: 'syz.5.1445': attribute type 9 has an invalid length. [ 870.753998][T13651] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1445'. [ 871.189579][ T29] audit: type=1326 audit(1734369415.886:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f756a187bac code=0x7ffc0000 [ 871.467426][ T29] audit: type=1326 audit(1734369415.886:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f756a187ae4 code=0x7ffc0000 [ 871.553493][ T29] audit: type=1326 audit(1734369415.886:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f756a187ae4 code=0x7ffc0000 [ 871.579652][ T29] audit: type=1326 audit(1734369415.886:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f756a18497a code=0x7ffc0000 [ 871.601672][ T29] audit: type=1326 audit(1734369415.886:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13642 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f756a185d19 code=0x7ffc0000 [ 874.326686][T13681] sz1: rxe_newlink: already configured on lo [ 874.334370][T13681] lo speed is unknown, defaulting to 1000 [ 874.340265][T13681] lo speed is unknown, defaulting to 1000 [ 874.346600][T13681] lo speed is unknown, defaulting to 1000 [ 874.360403][T13681] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 874.398525][T13681] lo speed is unknown, defaulting to 1000 [ 874.405260][T13681] lo speed is unknown, defaulting to 1000 [ 874.411907][T13681] lo speed is unknown, defaulting to 1000 [ 874.418455][T13681] lo speed is unknown, defaulting to 1000 [ 874.424976][T13681] lo speed is unknown, defaulting to 1000 [ 874.442734][T13681] »»»»»»: renamed from lo (while UP) [ 875.377252][T13700] SET target dimension over the limit! [ 877.224930][T13707] tmpfs: Bad value for 'mpol' [ 877.454164][T13713] netlink: zone id is out of range [ 877.459443][T13713] netlink: zone id is out of range [ 877.466732][T13713] netlink: zone id is out of range [ 877.490478][T13713] netlink: zone id is out of range [ 878.786280][T13723] siw: device registration error -23 [ 880.346113][T13725] (syz.2.1465,13725,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 880.355025][T13725] (syz.2.1465,13725,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 881.337470][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1468'. [ 881.446141][T13716] XFS (nullb0): Invalid superblock magic number [ 882.206156][T13753] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1471'. [ 883.773001][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 883.773024][ T29] audit: type=1326 audit(1734369430.983:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.801109][ T29] audit: type=1326 audit(1734369430.983:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.822987][ T29] audit: type=1326 audit(1734369430.983:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.844709][ T29] audit: type=1326 audit(1734369430.983:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.866558][ T29] audit: type=1326 audit(1734369430.983:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.896632][ T29] audit: type=1326 audit(1734369430.983:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.918519][ T29] audit: type=1326 audit(1734369430.983:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.940223][ T29] audit: type=1326 audit(1734369430.983:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 883.962545][ T29] audit: type=1326 audit(1734369430.983:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 884.004964][ T29] audit: type=1326 audit(1734369430.983:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13775 comm="syz.5.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x7ffc0000 [ 884.177998][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1476'. [ 885.528346][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 885.584168][T13778] loop2: detected capacity change from 0 to 7 [ 885.592028][T13778] Dev loop2: unable to read RDB block 7 [ 885.597669][T13778] loop2: AHDI p1 p2 [ 885.601660][T13778] loop2: partition table partially beyond EOD, truncated [ 885.644560][T13786] IPVS: Error joining to the multicast group [ 885.776425][T13798] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1479'. [ 887.797913][T13813] netlink: 'syz.2.1482': attribute type 2 has an invalid length. [ 889.797876][T13825] loop7: detected capacity change from 0 to 16384 [ 891.124458][T13844] tmpfs: Unknown parameter 'quodˆîÝé' [ 891.837054][T13853] input: syz1 as /devices/virtual/input/input18 [ 892.163534][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 892.962685][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 893.130780][T13875] trusted_key: encrypted_key: key user:syz not found [ 893.679248][T13872] IPVS: Error joining to the multicast group [ 893.725364][T10771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 893.732860][T10771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 893.763087][T10771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 893.770879][T10771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 893.778665][T10771] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 893.785883][T10771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 894.005105][T13885] SET target dimension over the limit! [ 895.085463][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 895.092287][ T29] audit: type=1804 audit(1734369440.721:385): pid=13886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1497" name="/newroot/154/bus/bus" dev="overlay" ino=869 res=1 errno=0 [ 895.113212][ C0] vkms_vblank_simulate: vblank timer overrun [ 895.947501][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.960984][T10771] Bluetooth: hci5: command tx timeout [ 895.971190][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.075030][T13879] »»»»»» speed is unknown, defaulting to 1000 [ 896.171523][T13879] »»»»»» speed is unknown, defaulting to 1000 [ 896.304351][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.344290][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.702932][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.815728][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.728284][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.358292][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.417886][T10771] Bluetooth: hci5: command tx timeout [ 899.729919][ T35] erspan0: left allmulticast mode [ 899.875457][ T35] erspan0: left promiscuous mode [ 899.891822][ T35] bridge0: port 3(erspan0) entered disabled state [ 899.912113][ T35] bridge_slave_1: left allmulticast mode [ 899.919476][ T35] bridge_slave_1: left promiscuous mode [ 899.925336][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.935149][ T35] bridge_slave_0: left allmulticast mode [ 899.941006][ T35] bridge_slave_0: left promiscuous mode [ 899.951957][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.032571][ T5826] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 900.455122][ T5826] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 900.477367][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.518818][ T5826] usb 6-1: config 0 descriptor?? [ 900.530919][ T35] batman_adv: batadv0: Removing interface: gretap1 [ 900.588540][T10771] Bluetooth: hci5: command tx timeout [ 900.669515][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.680312][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.690458][ T35] bond0 (unregistering): Released all slaves [ 900.697169][T13944] syz.2.1509 (13944) used greatest stack depth: 18960 bytes left [ 900.852523][T13879] chnl_net:caif_netlink_parms(): no params data found [ 900.882373][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 901.051090][ T35] tipc: Left network mode [ 902.285553][T13879] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.293307][T13879] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.302750][T13879] bridge_slave_0: entered allmulticast mode [ 902.410503][T13879] bridge_slave_0: entered promiscuous mode [ 902.426477][ T5826] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 902.436215][ T5826] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 902.445911][T13879] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.453709][ T5826] [drm:udl_init] *ERROR* Selecting channel failed [ 902.494491][T13879] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.505285][ T5826] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 902.512009][ T5826] [drm] Initialized udl on minor 2 [ 902.523369][ T5826] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 902.553325][ T5826] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 902.566956][ T46] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 902.574881][ T46] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 902.585600][T13879] bridge_slave_1: entered allmulticast mode [ 902.592981][T13879] bridge_slave_1: entered promiscuous mode [ 902.611043][ T5826] usb 6-1: USB disconnect, device number 12 [ 902.660199][T13879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.677414][T13879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.738099][T13879] team0: Port device team_slave_0 added [ 902.822657][T10771] Bluetooth: hci5: command tx timeout [ 902.830482][T13879] team0: Port device team_slave_1 added [ 902.920513][T13879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.927512][T13879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.953907][T13879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.973191][T13879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.980302][T13879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.010500][T13879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.025352][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 903.125621][ T35] hsr_slave_0: left promiscuous mode [ 903.156272][ T35] hsr_slave_1: left promiscuous mode [ 903.206020][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.246197][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.268665][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.277609][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.319717][ T35] veth1_macvtap: left promiscuous mode [ 903.325518][ T35] veth0_macvtap: left promiscuous mode [ 903.331234][ T35] veth1_vlan: left promiscuous mode [ 903.341682][ T35] veth0_vlan: left promiscuous mode [ 904.059575][ T35] team0 (unregistering): Port device team_slave_1 removed [ 904.073102][ T35] team0 (unregistering): Port device team_slave_0 removed [ 904.180726][T13981] IPVS: Error joining to the multicast group [ 904.363642][T14000] tipc: Started in network mode [ 904.368958][T14000] tipc: Node identity ac14140f, cluster identity 4711 [ 904.377291][T14000] tipc: New replicast peer: 10.1.1.2 [ 904.384941][T14000] tipc: Enabled bearer , priority 10 [ 905.109235][T13879] hsr_slave_0: entered promiscuous mode [ 905.272582][T13879] hsr_slave_1: entered promiscuous mode [ 905.278880][T13879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.288932][T13879] Cannot create hsr debugfs directory [ 905.815385][T14014] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 905.851813][ T46] tipc: Node number set to 2886997007 [ 905.957834][T14006] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 905.982595][T14006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 906.305885][T14006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 906.312185][T14006] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 906.322148][T14006] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 907.394085][T14006] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 908.206466][T14029] smk_cipso_doi:693 remove rc = -2 [ 908.212221][T14029] smk_cipso_doi:706 cipso add rc = -17 [ 908.493290][T10771] Bluetooth: hci3: command 0x0c1a tx timeout [ 908.501371][T10771] Bluetooth: hci1: command 0x0406 tx timeout [ 908.603805][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 908.610395][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 908.616726][ T5828] Bluetooth: hci1: Unable to find connection with handle 0x00c9 [ 908.639650][T13879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 909.592413][T13879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 909.749813][T13879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 909.873835][T13879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 909.969297][ T35] IPVS: stop unused estimator thread 0... [ 910.135578][T13879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.165158][T13879] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.490438][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.497612][ T8332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.758566][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.765787][ T8332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.813983][T14057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.840690][T14030] Bluetooth: hci5: command 0x0c1a tx timeout [ 911.114409][T13879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.751708][T14069] Failed to get privilege flags for destination (handle=0x0:0x0) [ 913.092086][T14030] Bluetooth: hci5: command 0x0c1a tx timeout [ 913.633368][T14103] dlm: no local IP address has been set [ 913.639039][T14103] dlm: cannot start dlm midcomms -107 [ 914.639778][T13879] veth0_vlan: entered promiscuous mode [ 914.667637][T13879] veth1_vlan: entered promiscuous mode [ 914.686862][T13879] veth0_macvtap: entered promiscuous mode [ 914.698088][T13879] veth1_macvtap: entered promiscuous mode [ 914.723184][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.733704][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.743830][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.754470][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.767350][T13879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.777382][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.787893][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.801982][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.812735][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.827624][T13879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.837502][T13879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.846300][T13879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.855045][T13879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.863848][T13879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.968927][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.976792][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.036108][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.036203][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.061948][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.075899][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.122418][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.137754][ T29] audit: type=1326 audit(1734369460.355:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14117 comm="syz.7.1538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d19385d19 code=0x0 [ 915.263962][T14119] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 915.285960][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.286064][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.297877][T14119] syz.7.1538[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 915.659874][T14136] hub 2-0:1.0: USB hub found [ 915.677345][T14136] hub 2-0:1.0: 1 port detected [ 916.740204][T14146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'. [ 917.158448][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1542'. [ 917.187539][T14152] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.196340][T14152] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.205191][T14152] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.214063][T14152] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 917.223058][T14152] vxlan0: entered promiscuous mode [ 918.155001][T14171] 9pnet: Unknown protocol version 9p200 [ 918.765085][T10903] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 918.826422][T14164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 920.005987][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 920.314999][T14202] erspan0: left allmulticast mode [ 920.424452][T10903] usb 6-1: No LPM exit latency info found, disabling LPM. [ 920.431818][T10903] usb 6-1: no configurations [ 920.436455][T10903] usb 6-1: can't read configurations, error -22 [ 920.442880][T14202] erspan0: left promiscuous mode [ 920.448036][T14202] bridge0: port 3(erspan0) entered disabled state [ 920.511563][T14202] bridge_slave_1: left allmulticast mode [ 920.523749][T14202] bridge_slave_1: left promiscuous mode [ 920.530388][T14202] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.539595][T14202] bridge_slave_0: left allmulticast mode [ 920.545813][T14202] bridge_slave_0: left promiscuous mode [ 920.553155][T14202] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.601319][T10903] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 920.975384][T10903] usb 6-1: device not accepting address 14, error -71 [ 921.553594][T10903] usb usb6-port1: attempt power cycle [ 921.991522][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 922.216531][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 922.257863][ T8] usb 9-1: config 0 has an invalid interface number: 61 but max is 0 [ 922.322048][ T8] usb 9-1: config 0 has no interface number 0 [ 922.328946][ T8] usb 9-1: config 0 interface 61 altsetting 1 bulk endpoint 0xB has invalid maxpacket 8 [ 922.338841][ T8] usb 9-1: config 0 interface 61 altsetting 1 bulk endpoint 0xF has invalid maxpacket 8 [ 922.348909][ T8] usb 9-1: config 0 interface 61 has no altsetting 0 [ 923.411679][ T8] usb 9-1: New USB device found, idVendor=0a5c, idProduct=368b, bcdDevice=68.32 [ 923.421055][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.434657][ T8] usb 9-1: Product: syz [ 923.438870][ T8] usb 9-1: Manufacturer: syz [ 923.443741][ T8] usb 9-1: SerialNumber: syz [ 923.480272][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.486629][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 923.686647][ T8] usb 9-1: config 0 descriptor?? [ 923.867207][T14236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 923.883443][T14236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 924.985310][ T5870] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 925.345534][ T8] usb 9-1: USB disconnect, device number 2 [ 925.400228][ T5826] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 925.596149][ T5826] usb 3-1: No LPM exit latency info found, disabling LPM. [ 925.609376][ T5826] usb 3-1: no configurations [ 925.614028][ T5826] usb 3-1: can't read configurations, error -22 [ 925.627509][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 925.762430][ T5870] usb 6-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 925.771633][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.780718][ T5870] usb 6-1: Product: syz [ 925.784935][ T5870] usb 6-1: Manufacturer: syz [ 925.789807][ T5870] usb 6-1: SerialNumber: syz [ 925.811012][ T5870] usb 6-1: config 0 descriptor?? [ 925.916673][ T5826] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 926.208530][ T5826] usb 3-1: No LPM exit latency info found, disabling LPM. [ 926.257616][ T5870] kl5kusb105 6-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 926.265213][ T5826] usb 3-1: no configurations [ 926.276947][ T5826] usb 3-1: can't read configurations, error -22 [ 926.278127][ T5870] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 926.305687][ T5826] usb usb3-port1: attempt power cycle [ 926.475229][ T5870] usb 6-1: USB disconnect, device number 16 [ 926.484346][ T5870] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 926.503441][ T5870] kl5kusb105 6-1:0.0: device disconnected [ 926.694938][ T5826] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 926.718935][ T5826] usb 3-1: No LPM exit latency info found, disabling LPM. [ 926.726507][ T5826] usb 3-1: no configurations [ 926.731293][ T5826] usb 3-1: can't read configurations, error -22 [ 926.877106][ T5826] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 926.901371][ T5826] usb 3-1: No LPM exit latency info found, disabling LPM. [ 926.908786][ T5826] usb 3-1: no configurations [ 926.913429][ T5826] usb 3-1: can't read configurations, error -22 [ 926.922073][ T5826] usb usb3-port1: unable to enumerate USB device [ 927.539443][ T5870] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 927.699781][ T5870] usb 9-1: Using ep0 maxpacket: 16 [ 927.709776][ T5870] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 927.718116][ T5870] usb 9-1: config 0 has no interface number 0 [ 927.724478][ T5870] usb 9-1: config 0 interface 50 altsetting 255 has an endpoint descriptor with address 0x91, changing to 0x81 [ 927.736639][ T5870] usb 9-1: config 0 interface 50 altsetting 255 bulk endpoint 0x81 has invalid maxpacket 1023 [ 927.747585][ T5870] usb 9-1: config 0 interface 50 has no altsetting 0 [ 927.757040][ T5870] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=a1.99 [ 927.766566][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.774777][ T5870] usb 9-1: Product: syz [ 927.779142][ T5870] usb 9-1: Manufacturer: syz [ 927.783762][ T5870] usb 9-1: SerialNumber: syz [ 927.790789][ T5870] usb 9-1: config 0 descriptor?? [ 927.798403][T14338] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 928.037855][ T5870] kvaser_usb 9-1:0.50: error -ENODEV: Cannot get usb endpoint(s) [ 928.066828][ T5870] usb 9-1: USB disconnect, device number 3 [ 928.117357][ T5826] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 928.292563][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.302808][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.311779][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 928.320624][ T5826] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 928.329692][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 928.337738][ T5826] usb 3-1: SerialNumber: syz [ 928.493368][ T25] usb 6-1: config 255 has an invalid interface number: 20 but max is 0 [ 928.501821][ T25] usb 6-1: config 255 has no interface number 0 [ 928.508202][ T25] usb 6-1: config 255 interface 20 has no altsetting 0 [ 928.518022][ T25] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 928.527283][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.535968][ T25] usb 6-1: Product: syz [ 928.540271][ T25] usb 6-1: Manufacturer: syz [ 928.545151][ T25] usb 6-1: SerialNumber: syz [ 928.566157][ T5826] usb 3-1: invalid UAC_HEADER (v1) [ 928.578881][ T5826] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 928.591891][ T5826] usb 3-1: USB disconnect, device number 21 [ 928.918043][ T25] usb 6-1: USB disconnect, device number 17 [ 928.952048][T12401] udevd[12401]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.179960][ T46] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 930.426137][ T46] usb 9-1: Using ep0 maxpacket: 32 [ 930.921999][ T46] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 930.956554][ T54] Bluetooth: hci4: Frame reassembly failed (-84) [ 930.995272][ T46] usb 9-1: config 0 has no interface number 0 [ 931.015972][ T46] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 931.055353][ T46] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 931.204452][ T46] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 931.214626][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.230317][ T46] usb 9-1: Product: syz [ 931.234865][ T46] usb 9-1: Manufacturer: syz [ 931.240786][ T46] usb 9-1: SerialNumber: syz [ 931.248621][ T46] usb 9-1: config 0 descriptor?? [ 931.259923][T14407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 931.268423][T14407] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 931.298215][ T46] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 931.684429][ T46] usb 9-1: USB disconnect, device number 4 [ 931.804956][T10037] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 931.891645][T12404] udevd[12404]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 931.965499][T10037] usb 3-1: Using ep0 maxpacket: 32 [ 931.975283][T10037] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 931.991721][T10037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.000275][T10037] usb 3-1: Product: syz [ 932.004465][T10037] usb 3-1: Manufacturer: syz [ 932.010415][T10037] usb 3-1: SerialNumber: syz [ 932.017771][T10037] usb 3-1: config 0 descriptor?? [ 932.026857][T10037] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 932.245841][T10037] gspca_ov534_9: reg_w failed -71 [ 932.606862][ T46] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 932.670912][T10037] gspca_ov534_9: Unknown sensor 0000 [ 932.670979][T10037] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 932.690122][T10037] usb 3-1: USB disconnect, device number 22 [ 932.767152][ T46] usb 9-1: Using ep0 maxpacket: 8 [ 932.776878][ T46] usb 9-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice=9c.be [ 932.786023][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.795289][ T46] usb 9-1: Product: syz [ 932.800103][ T46] usb 9-1: Manufacturer: syz [ 932.805066][ T46] usb 9-1: SerialNumber: syz [ 932.811165][ T46] usb 9-1: config 0 descriptor?? [ 932.833118][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 932.936291][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 932.943351][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 933.066638][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 933.073128][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 933.083516][T14030] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 933.289964][ T46] usb 9-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 933.299326][ T46] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 933.310614][ T46] dvbdev: DVB: registering new adapter (DVBSky T330) [ 933.317432][ T46] usb 9-1: media controller created [ 933.322699][ T46] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 933.329163][ T46] usb 9-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 933.345819][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.836161][T10037] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 933.929705][ T46] usb 9-1: USB disconnect, device number 5 [ 934.163035][T10037] usb 3-1: unable to get BOS descriptor or descriptor too short [ 934.171685][T10037] usb 3-1: not running at top speed; connect to a high speed hub [ 934.232787][T10037] usb 3-1: config 12 has an invalid interface number: 187 but max is 0 [ 934.248053][T10037] usb 3-1: config 12 has no interface number 0 [ 934.254566][T10037] usb 3-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 934.266170][T10037] usb 3-1: config 12 interface 187 has no altsetting 0 [ 934.279711][T10771] Bluetooth: hci2: command 0x0405 tx timeout [ 934.286287][T10037] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 934.295629][T10037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.303997][T10037] usb 3-1: Product: syz [ 934.308902][T10037] usb 3-1: Manufacturer: syz [ 934.314159][T10037] usb 3-1: SerialNumber: syz [ 934.452285][T14498] mkiss: ax0: crc mode is auto. [ 934.659675][ T46] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 934.836891][T14471] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 934.884313][T10771] Bluetooth: hci3: Malformed LE Event: 0x0b [ 934.918672][ T29] audit: type=1326 audit(1734369478.866:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14504 comm="syz.5.1617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbf2985d19 code=0x0 [ 934.972730][ T46] usb 9-1: config 1 has an invalid interface number: 128 but max is 1 [ 934.981201][ T46] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.991431][ T46] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 935.000488][ T46] usb 9-1: config 1 has no interface number 0 [ 935.006785][ T46] usb 9-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 935.018102][ T46] usb 9-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.031069][ T46] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.032905][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1617'. [ 935.040216][ T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.040243][ T46] usb 9-1: Product: syz [ 935.040260][ T46] usb 9-1: Manufacturer: syz [ 935.040277][ T46] usb 9-1: SerialNumber: syz [ 935.083257][T10037] ti_usb_3410_5052 3-1:12.187: TI USB 3410 1 port adapter converter detected [ 935.084682][ T46] cdc_wdm 9-1:1.128: skipping garbage [ 935.094982][T10037] ti_usb_3410_5052 3-1:12.187: missing endpoints [ 935.102657][ T46] cdc_wdm 9-1:1.128: cdc-wdm0: USB WDM device [ 935.110293][ T46] cdc_wdm 9-1:1.128: Unknown control protocol [ 935.127767][T14508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.146230][T10037] usb 3-1: USB disconnect, device number 23 [ 935.297796][ T975] usb 9-1: USB disconnect, device number 6 [ 936.974385][T10771] Bluetooth: hci1: unexpected event for opcode 0x041b [ 937.005425][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 937.017398][ T25] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 937.081447][T14551] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1633'. [ 937.093415][T14551] vxcan2: entered promiscuous mode [ 937.099341][T14551] vxcan2: entered allmulticast mode [ 937.108513][T14553] netlink: 'syz.7.1634': attribute type 27 has an invalid length. [ 937.116470][T14553] netlink: 'syz.7.1634': attribute type 3 has an invalid length. [ 937.124603][T14553] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1634'. [ 937.178984][T14555] netlink: 'syz.7.1635': attribute type 1 has an invalid length. [ 937.407819][ T25] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 940.274678][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.283558][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.120553][T14630] netlink: 'syz.7.1657': attribute type 27 has an invalid length. [ 942.428127][T14643] delete_channel: no stack [ 944.425370][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 944.434864][ T25] usb 9-1: no configurations [ 944.445393][ T25] usb 9-1: can't read configurations, error -22 [ 945.537904][ T25] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 945.920915][T14699] kAFS: unparsable volume name [ 946.030074][ T25] usb 9-1: device descriptor read/64, error -32 [ 946.105579][T14701] dlm: no local IP address has been set [ 946.111321][T14701] dlm: cannot start dlm midcomms -107 [ 946.475863][ T25] usb usb9-port1: attempt power cycle [ 946.795775][T14723] netlink: 'syz.2.1683': attribute type 13 has an invalid length. [ 946.818969][T14723] gretap0: refused to change device tx_queue_len [ 946.827132][T14723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 946.848761][ T25] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 946.897205][ T25] usb 9-1: device descriptor read/8, error -32 [ 946.954177][ T5826] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 947.281202][T14742] lo speed is unknown, defaulting to 1000 [ 947.287903][T14742] lo speed is unknown, defaulting to 1000 [ 947.294043][T14742] lo speed is unknown, defaulting to 1000 [ 948.044103][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 948.057228][ T5826] usb 6-1: too many configurations: 22, using maximum allowed: 8 [ 948.732774][T14742] infiniband sz1: set active [ 948.737644][T14742] infiniband sz1: added lo [ 948.789305][ T46] lo speed is unknown, defaulting to 1000 [ 948.795486][ T25] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 948.837545][T14749] »»»»»»: renamed from lo (while UP) [ 949.103051][T14742] RDS/IB: sz1: added [ 949.107130][T14742] smc: adding ib device sz1 with port count 1 [ 949.113379][T14742] smc: ib device sz1 port 1 has pnetid [ 949.114979][T14752] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 949.128106][T14742] »»»»»» speed is unknown, defaulting to 1000 [ 949.225643][T14742] »»»»»» speed is unknown, defaulting to 1000 [ 949.252868][ T25] usb 9-1: device descriptor read/8, error -32 [ 949.259498][ T46] »»»»»» speed is unknown, defaulting to 1000 [ 949.289725][ T5826] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 949.309431][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=166 [ 949.318352][ T5826] usb 6-1: Product: syz [ 949.322574][ T5826] usb 6-1: Manufacturer: syz [ 949.327579][ T5826] usb 6-1: SerialNumber: syz [ 949.355307][ T5826] usb 6-1: config 0 descriptor?? [ 949.388250][T14762] netlink: 'syz.0.1693': attribute type 4 has an invalid length. [ 949.419692][T14742] »»»»»» speed is unknown, defaulting to 1000 [ 949.488025][ T25] usb usb9-port1: unable to enumerate USB device [ 949.537436][T14742] »»»»»» speed is unknown, defaulting to 1000 [ 949.643724][T14779] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 949.903484][T14742] »»»»»» speed is unknown, defaulting to 1000 [ 950.202154][T14748] siw: device registration error -23 [ 950.204291][ T5826] gspca_main: 047d:5003 too many config [ 951.025244][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1705'. [ 951.090338][ T5870] usb 6-1: USB disconnect, device number 18 [ 951.186100][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 951.687651][T14832] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 953.286422][T10771] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 953.332934][T14878] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 953.443775][T14885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.999841][T14889] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 954.800569][T10771] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 954.892256][T14919] usb usb8: usbfs: process 14919 (syz.0.1740) did not claim interface 0 before use [ 955.097248][T10771] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 955.115459][T14933] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1744'. [ 955.781785][T14973] netlink: 'syz.7.1751': attribute type 17 has an invalid length. [ 956.409673][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.420111][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.949728][ T975] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 957.132985][ T975] usb 3-1: No LPM exit latency info found, disabling LPM. [ 957.152180][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 957.167597][ T975] usb 3-1: can't read configurations, error -61 [ 957.323599][ T975] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 957.334139][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1755'. [ 957.343268][T15000] IPVS: Error joining to the multicast group [ 957.506553][ T975] usb 3-1: No LPM exit latency info found, disabling LPM. [ 957.526251][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 957.534077][ T975] usb 3-1: can't read configurations, error -61 [ 957.551149][ T975] usb usb3-port1: attempt power cycle [ 957.622800][T14030] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 957.631118][T14030] Bluetooth: hci1: Injecting HCI hardware error event [ 957.638721][T14030] Bluetooth: hci1: hardware error 0x00 [ 958.007703][ T975] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 958.033103][ T975] usb 3-1: No LPM exit latency info found, disabling LPM. [ 958.044668][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 958.062776][ T975] usb 3-1: can't read configurations, error -61 [ 959.247756][ T975] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 959.282647][ T975] usb 3-1: No LPM exit latency info found, disabling LPM. [ 959.293907][ T975] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 959.307771][ T975] usb 3-1: can't read configurations, error -61 [ 959.365124][ T975] usb usb3-port1: unable to enumerate USB device [ 959.880012][T14030] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 961.719480][T14575] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 962.034686][T14575] usb 6-1: No LPM exit latency info found, disabling LPM. [ 962.043540][T14575] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 962.055469][T14575] usb 6-1: can't read configurations, error -61 [ 962.281334][T14575] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 962.311158][T15136] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 962.467052][T14575] usb 6-1: No LPM exit latency info found, disabling LPM. [ 962.475904][T14575] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 962.484827][T14575] usb 6-1: can't read configurations, error -61 [ 962.493920][T14575] usb usb6-port1: attempt power cycle [ 962.864755][T14575] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 962.937867][T14575] usb 6-1: No LPM exit latency info found, disabling LPM. [ 962.951678][T14575] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 962.976957][T14575] usb 6-1: can't read configurations, error -61 [ 963.203316][T14575] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 963.280699][T15195] x_tables: unsorted underflow at hook 4 [ 963.490907][T15204] trusted_key: encrypted_key: key user:syz not found [ 964.168918][T14575] usb 6-1: unable to get BOS descriptor set [ 964.776225][T15217] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 964.782813][T15217] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 965.071725][T14575] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 965.079571][T14575] usb 6-1: can't read configurations, error -71 [ 965.086336][T14575] usb usb6-port1: unable to enumerate USB device [ 965.192666][T15231] netlink: 'syz.5.1860': attribute type 4 has an invalid length. [ 966.551015][T15253] sctp: [Deprecated]: syz.8.1868 (pid 15253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 966.551015][T15253] Use struct sctp_sack_info instead [ 966.752585][T14575] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 966.978724][T14575] usb 3-1: No LPM exit latency info found, disabling LPM. [ 966.988409][T14575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 966.996029][T14575] usb 3-1: can't read configurations, error -61 [ 967.033619][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1876'. [ 967.244131][T14575] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 967.356763][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1880'. [ 967.413234][T14575] usb 3-1: No LPM exit latency info found, disabling LPM. [ 967.559165][T14575] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 967.566853][T14575] usb 3-1: can't read configurations, error -61 [ 967.573345][T14575] usb usb3-port1: attempt power cycle [ 967.788063][T15306] misc userio: The device must be registered before sending interrupts [ 968.026433][T15315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 968.463874][T14575] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 968.673239][T14575] usb 3-1: device descriptor read/all, error -71 [ 969.065416][T15343] netlink: 'syz.5.1899': attribute type 10 has an invalid length. [ 969.090998][T15343] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.108182][T15343] bond0: (slave team0): Enslaving as an active interface with an up link [ 969.734981][T15366] IPv6: NLM_F_CREATE should be specified when creating new route [ 969.782192][T15366] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1915'. [ 970.348910][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'. [ 971.636101][T15378] loop2: detected capacity change from 0 to 7 [ 971.662048][T15378] Dev loop2: unable to read RDB block 7 [ 971.684823][T15378] loop2: AHDI p1 p2 [ 971.779939][T15378] loop2: partition table partially beyond EOD, truncated [ 971.821187][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 972.232905][T15423] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 973.439116][T14575] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 973.736639][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1941'. [ 973.745816][T15436] IPVS: Error joining to the multicast group [ 973.755541][T14575] usb 3-1: Using ep0 maxpacket: 32 [ 973.764114][T14575] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 973.778553][ T29] audit: type=1326 audit(1734369515.160:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15439 comm="syz.8.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e985d19 code=0x7ffc0000 [ 973.816922][T14575] usb 3-1: config 0 has no interface number 0 [ 973.834699][ T29] audit: type=1326 audit(1734369515.160:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15439 comm="syz.8.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ffa1e985d19 code=0x7ffc0000 [ 973.861765][T14575] usb 3-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 973.882012][ T29] audit: type=1326 audit(1734369515.160:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15439 comm="syz.8.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e985d19 code=0x7ffc0000 [ 973.911365][ T29] audit: type=1326 audit(1734369515.160:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15439 comm="syz.8.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1e985d19 code=0x7ffc0000 [ 973.933052][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.948262][T15447] netlink: 'syz.5.1946': attribute type 10 has an invalid length. [ 973.957366][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1946'. [ 973.972756][T15447] bridge0: port 4(hsr0) entered blocking state [ 973.980546][T15447] bridge0: port 4(hsr0) entered disabled state [ 973.986948][T15447] hsr0: entered allmulticast mode [ 973.992200][T15447] hsr_slave_0: entered allmulticast mode [ 974.000251][T15447] hsr_slave_1: entered allmulticast mode [ 974.008215][T15449] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1947'. [ 974.019245][T14575] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 974.028704][T14575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.037053][T14575] usb 3-1: Product: syz [ 974.041315][T14575] usb 3-1: Manufacturer: syz [ 974.046222][T14575] usb 3-1: SerialNumber: syz [ 974.053744][T14575] usb 3-1: config 0 descriptor?? [ 974.060881][T15447] hsr0: entered promiscuous mode [ 974.061385][T15421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 974.066780][T15447] bridge0: port 4(hsr0) entered blocking state [ 974.079269][T15447] bridge0: port 4(hsr0) entered forwarding state [ 974.188254][T15457] netlink: 512 bytes leftover after parsing attributes in process `syz.8.1950'. [ 974.306741][T15421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 974.319567][T14575] net1080 3-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, fe:cb:2c:ad:b5:f0 [ 974.548817][T14575] usb 3-1: USB disconnect, device number 32 [ 974.579323][T14575] net1080 3-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 974.906000][T15478] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 974.986776][T15474] loop2: detected capacity change from 0 to 7 [ 974.993682][T15474] Dev loop2: unable to read RDB block 7 [ 974.999407][T15474] loop2: AHDI p1 p2 [ 975.003411][T15474] loop2: partition table partially beyond EOD, truncated [ 976.021895][T15524] xt_connbytes: Forcing CT accounting to be enabled [ 976.028771][T15524] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 976.924360][T15553] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1993'. [ 977.795575][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'. [ 979.051423][T15565] IPVS: Error joining to the multicast group [ 980.565878][T15627] xt_ipcomp: unknown flags 12 [ 981.294364][T15648] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 981.486954][T15664] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.2038'. [ 981.607200][T14030] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 981.768232][T15678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.778118][T15678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.193258][T15686] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 982.199833][T15686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 982.208339][T15686] vhci_hcd vhci_hcd.0: Device attached [ 982.369992][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.380803][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.724474][ T25] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 982.823833][ T975] vhci_hcd: vhci_device speed not set [ 982.895439][T10037] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 982.903036][ T975] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 983.068614][T10037] usb 6-1: config 0 has no interfaces? [ 983.074309][T10037] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 983.090485][T10037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.115528][T10037] usb 6-1: config 0 descriptor?? [ 983.341845][T10037] usb 6-1: USB disconnect, device number 23 [ 983.352816][T15687] vhci_hcd: connection closed [ 983.353039][ T8308] vhci_hcd: stop threads [ 983.362209][ T8308] vhci_hcd: release socket [ 983.373027][ T8308] vhci_hcd: disconnect device [ 983.421878][ T975] vhci_hcd: vhci_device speed not set [ 983.593688][T15729] loop2: detected capacity change from 0 to 7 [ 983.604747][T15729] Dev loop2: unable to read RDB block 7 [ 983.610507][T15729] loop2: AHDI p1 p2 [ 983.614665][T15729] loop2: partition table partially beyond EOD, truncated [ 984.049330][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.178090][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.191046][T15741] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 984.203853][T15740] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2072'. [ 984.290090][T15747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 984.980315][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 985.144529][ T9] usb 6-1: config 0 has no interfaces? [ 985.150288][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 985.160547][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.178774][ T9] usb 6-1: config 0 descriptor?? [ 985.287955][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.297648][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.410229][T14030] Bluetooth: hci3: SCO packet too small [ 985.412347][ T9] usb 6-1: USB disconnect, device number 24 [ 985.511954][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 985.521169][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 985.529452][ T25] usb 3-1: can't read configurations, error -71 [ 985.931567][T14030] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 985.939936][T14030] Bluetooth: hci3: Injecting HCI hardware error event [ 985.947328][T10771] Bluetooth: hci3: hardware error 0x00 [ 985.974321][ T25] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 986.563964][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 986.576199][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.586470][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 986.595891][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.605329][ T25] usb 3-1: config 0 descriptor?? [ 986.818835][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 986.943703][T15787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.952682][T15787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.980745][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 986.988791][ T9] usb 6-1: config 0 has no interface number 0 [ 986.995051][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.006050][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.015908][ T9] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 987.025391][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.034997][ T9] usb 6-1: config 0 descriptor?? [ 987.046719][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.054126][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.061026][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.068335][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.075245][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.082260][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.090513][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.097475][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.104366][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.111391][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.118345][ T25] wacom 0003:056A:005D.0004: unknown main item tag 0x0 [ 987.127506][ T25] wacom 0003:056A:005D.0004: hidraw1: USB HID v40.40 Device [HID 056a:005d] on usb-dummy_hcd.2-1/input0 [ 987.262760][ T25] usb 3-1: USB disconnect, device number 34 [ 987.487018][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0005/input/input22 [ 987.569965][ T9] holtek_kbd 0003:04D9:A055.0005: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 987.695745][ T5826] usb 6-1: USB disconnect, device number 25 [ 988.155233][T10771] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 988.244689][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 988.251247][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.541333][ T5826] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 988.586079][T15815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.594847][T15815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.721830][ T5826] usb 6-1: Using ep0 maxpacket: 16 [ 988.729649][ T5826] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.741453][ T5826] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.751411][ T5826] usb 6-1: config 0 interface 0 has no altsetting 0 [ 988.825431][ T5826] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 988.834604][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.856293][ T5826] usb 6-1: config 0 descriptor?? [ 989.222959][T15843] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2115'. [ 989.308187][ T5826] kye 0003:0458:500F.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 989.321801][ T5826] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 989.329429][ T5826] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 989.336844][ T5826] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 989.344241][ T5826] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 989.361882][ T5826] kye 0003:0458:500F.0006: unknown main item tag 0x0 [ 989.386166][ T5826] kye 0003:0458:500F.0006: hidraw1: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 989.397894][ T5826] kye 0003:0458:500F.0006: tablet-enabling feature report not found [ 989.406028][ T5826] kye 0003:0458:500F.0006: tablet enabling failed [ 989.545744][ T9] usb 6-1: USB disconnect, device number 26 [ 990.218476][ T975] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 990.378948][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 990.387652][ T975] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.399406][ T975] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.421384][ T975] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 990.431850][ T975] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 990.442790][ T975] usb 3-1: Product: syz [ 990.447356][ T975] usb 3-1: Manufacturer: syz [ 990.455233][ T975] hub 3-1:4.0: USB hub found [ 990.599819][T15874] usb usb8: usbfs: process 15874 (syz.8.2129) did not claim interface 0 before use [ 990.672061][ T975] hub 3-1:4.0: 3 ports detected [ 990.735045][T15879] program syz.8.2131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.886379][ T975] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 990.914205][ T975] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 990.946811][ T975] usb 3-1: USB disconnect, device number 35 [ 990.972090][T15890] netlink: 'syz.8.2136': attribute type 6 has an invalid length. [ 991.054043][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2138'. [ 991.159314][T10037] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 991.322097][T10037] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 991.333249][T10037] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 991.342435][T10037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.351642][T10037] usb 6-1: config 0 descriptor?? [ 991.768601][ T25] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 991.790888][T10037] waltop 0003:172F:0038.0007: item fetching failed at offset 3/5 [ 991.799193][T10037] waltop 0003:172F:0038.0007: probe with driver waltop failed with error -22 [ 991.929092][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 991.936270][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.947394][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 991.960781][ T25] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 991.973305][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.983264][ T25] usb 3-1: config 0 descriptor?? [ 992.014891][ T9] usb 6-1: USB disconnect, device number 27 [ 992.124723][T15910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.134634][T15910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.162359][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 992.428486][ T25] waltop 0003:172F:0037.0008: unknown main item tag 0xd [ 992.437110][ T25] waltop 0003:172F:0037.0008: unknown main item tag 0x1 [ 992.444719][ T25] waltop 0003:172F:0037.0008: item fetching failed at offset 25/69 [ 992.454198][ T25] waltop 0003:172F:0037.0008: probe with driver waltop failed with error -22 [ 992.657404][ T9] usb 3-1: USB disconnect, device number 36 [ 993.657303][T15958] tipc: Started in network mode [ 993.662571][T15958] tipc: Node identity 2a10cc93b77a, cluster identity 4711 [ 993.669860][T15958] tipc: Enabled bearer , priority 3 [ 993.788737][T15962] netlink: 'syz.8.2166': attribute type 29 has an invalid length. [ 993.797775][T15962] netlink: 'syz.8.2166': attribute type 29 has an invalid length. [ 993.837822][ T25] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 993.870772][T10771] Bluetooth: hci5: Dropping invalid advertising data [ 993.880702][T10771] Bluetooth: hci5: Malformed LE Event: 0x02 [ 993.956797][T15967] program syz.5.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.024322][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 994.030805][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 994.042739][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 994.053879][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 994.066841][ T25] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 994.075974][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.086112][ T25] usb 3-1: config 0 descriptor?? [ 994.094253][ T25] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 994.281665][ T5826] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 994.318512][ T25] usb 3-1: USB disconnect, device number 37 [ 994.442739][ T5826] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 994.450997][ T5826] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 994.462678][ T5826] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 994.474741][ T5826] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 994.486056][ T5826] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 994.499572][ T5826] usb 6-1: config 0 interface 0 has no altsetting 0 [ 994.509408][ T5826] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 994.520211][ T5826] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 994.530042][ T5826] usb 6-1: Product: syz [ 994.534243][ T5826] usb 6-1: Manufacturer: syz [ 994.547574][ T5826] usb 6-1: SerialNumber: syz [ 994.559706][ T5826] usb 6-1: config 0 descriptor?? [ 994.565892][T15971] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 994.577721][ T5826] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 994.588107][ T5826] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 994.795410][ T9] usb 6-1: USB disconnect, device number 28 [ 994.803250][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 994.858254][ T5826] tipc: Node number set to 2641022099 [ 994.996514][T15992] program syz.2.2180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.038530][T15994] program syz.2.2181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 995.435645][T10037] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 995.607797][T10037] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 995.632535][T10037] usb 3-1: config 0 has no interface number 0 [ 995.666940][T10037] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 995.681832][T10037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.713921][T10037] usb 3-1: Product: syz [ 995.718155][T10037] usb 3-1: Manufacturer: syz [ 995.729330][T10037] usb 3-1: SerialNumber: syz [ 995.735622][T10037] usb 3-1: config 0 descriptor?? [ 995.829485][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.843208][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.966255][T10037] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 995.981233][T10037] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 995.991877][T10037] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 996.000878][T10037] usb 3-1: media controller created [ 996.016291][T10037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 996.547874][ T25] usb 3-1: USB disconnect, device number 38 [ 996.832378][T16074] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2213'. [ 997.188910][ T975] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 997.372517][ T975] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 997.384080][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.407085][ T975] usb 6-1: config 0 descriptor?? [ 1109.889050][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1109.896254][ C0] rcu: 1-...!: (0 ticks this GP) idle=4424/1/0x4000000000000000 softirq=53381/53381 fqs=2 [ 1109.906349][ C0] rcu: (detected by 0, t=10502 jiffies, g=39593, q=220 ncpus=2) [ 1109.914093][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1109.914128][ C1] NMI backtrace for cpu 1 [ 1109.914148][ C1] CPU: 1 UID: 0 PID: 16102 Comm: syz.0.2224 Not tainted 6.13.0-rc3-syzkaller #0 [ 1109.914168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1109.914184][ C1] RIP: 0010:lock_acquire+0x25b/0x550 [ 1109.914211][ C1] Code: 00 9c 8f 44 24 60 42 80 3c 2b 00 74 08 4c 89 f7 e8 0a a1 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb <48> c7 44 24 40 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 43 c7 44 25 [ 1109.914227][ C1] RSP: 0018:ffffc90000a18b00 EFLAGS: 00000046 [ 1109.914244][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff817aaec4 [ 1109.914257][ C1] RDX: 0000000000000000 RSI: ffffffff8c5ed740 RDI: ffffffff8c5ed700 [ 1109.914270][ C1] RBP: ffffc90000a18c58 R08: ffffffff90184ef7 R09: 1ffffffff20309de [ 1109.914284][ C1] R10: dffffc0000000000 R11: fffffbfff20309df R12: 1ffff92000143168 [ 1109.914298][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805c6a2360 [ 1109.914311][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1109.914326][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1109.914339][ C1] CR2: 000000110c2cc83b CR3: 000000004e24c000 CR4: 00000000003526f0 [ 1109.914355][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1109.914366][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1109.914378][ C1] Call Trace: [ 1109.914385][ C1] [ 1109.914393][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1109.914417][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1109.914437][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1109.914465][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1109.914492][ C1] ? nmi_handle+0x14f/0x5a0 [ 1109.914512][ C1] ? nmi_handle+0x2a/0x5a0 [ 1109.914532][ C1] ? lock_acquire+0x25b/0x550 [ 1109.914550][ C1] ? default_do_nmi+0x63/0x160 [ 1109.914570][ C1] ? exc_nmi+0x123/0x1f0 [ 1109.914588][ C1] ? end_repeat_nmi+0xf/0x53 [ 1109.914608][ C1] ? lock_acquire+0xd4/0x550 [ 1109.914626][ C1] ? lock_acquire+0x25b/0x550 [ 1109.914645][ C1] ? lock_acquire+0x25b/0x550 [ 1109.914664][ C1] ? lock_acquire+0x25b/0x550 [ 1109.914681][ C1] [ 1109.914687][ C1] [ 1109.914696][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1109.914715][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1109.914741][ C1] ? __pfx_lock_release+0x10/0x10 [ 1109.914769][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1109.914795][ C1] ? taprio_set_budgets+0x32c/0x370 [ 1109.914817][ C1] ? advance_sched+0xa02/0xca0 [ 1109.914838][ C1] advance_sched+0xa1e/0xca0 [ 1109.914859][ C1] ? advance_sched+0xa02/0xca0 [ 1109.914885][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1109.914917][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 1109.914948][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1109.914970][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 1109.914995][ C1] ? read_tsc+0x9/0x20 [ 1109.915019][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1109.915041][ C1] hrtimer_interrupt+0x403/0xa40 [ 1109.915073][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1109.915095][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1109.915119][ C1] [ 1109.915124][ C1] [ 1109.915131][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1109.915158][ C1] RIP: 0010:obj_cgroup_uncharge_pages+0x157/0x210 [ 1109.915182][ C1] Code: 8f 44 24 40 43 80 7c 25 00 00 74 05 e8 e2 fe f7 ff f6 44 24 41 02 0f 85 8b 00 00 00 f7 44 24 18 00 02 00 00 74 01 fb 4c 89 ff <89> de e8 22 2b ff ff 4c 89 ff 8b 74 24 14 e8 96 e9 ff ff 49 8d 5f [ 1109.915196][ C1] RSP: 0018:ffffc9000499f980 EFLAGS: 00000206 [ 1109.915211][ C1] RAX: aea3c32641d1b500 RBX: 00000000ffffffff RCX: ffffffff81a73c8c [ 1109.915224][ C1] RDX: dffffc0000000000 RSI: ffffffff8c5ed740 RDI: ffff888028634000 [ 1109.915237][ C1] RBP: ffffc9000499fa50 R08: ffffffff90184ef7 R09: 1ffffffff20309de [ 1109.915250][ C1] R10: dffffc0000000000 R11: fffffbfff20309df R12: dffffc0000000000 [ 1109.915264][ C1] R13: 1ffff92000933f38 R14: 1ffff92000933f34 R15: ffff888028634000 [ 1109.915281][ C1] ? trace_irq_enable+0x2c/0x120 [ 1109.915302][ C1] ? __pfx_obj_cgroup_uncharge_pages+0x10/0x10 [ 1109.915323][ C1] ? account_kernel_stack+0x38d/0x3f0 [ 1109.915347][ C1] ? __pfx_account_kernel_stack+0x10/0x10 [ 1109.915371][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1109.915398][ C1] __memcg_kmem_uncharge_page+0xe9/0x290 [ 1109.915420][ C1] exit_task_stack_account+0xd7/0x340 [ 1109.915445][ C1] do_exit+0x1d02/0x28e0 [ 1109.915466][ C1] ? __pfx_do_exit+0x10/0x10 [ 1109.915484][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1109.915511][ C1] ? __pfx_lock_release+0x10/0x10 [ 1109.915530][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1109.915548][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1109.915571][ C1] do_group_exit+0x207/0x2c0 [ 1109.915592][ C1] get_signal+0x16b2/0x1750 [ 1109.915622][ C1] ? __pfx_get_signal+0x10/0x10 [ 1109.915648][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1109.915674][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1109.915703][ C1] ? rcu_is_watching+0x15/0xb0 [ 1109.915726][ C1] ? rcu_is_watching+0x15/0xb0 [ 1109.915754][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1109.915781][ C1] do_syscall_64+0x100/0x230 [ 1109.915806][ C1] ? clear_bhb_loop+0x35/0x90 [ 1109.915822][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.915848][ C1] RIP: 0033:0x7f756a185d19 [ 1109.915862][ C1] Code: Unable to access opcode bytes at 0x7f756a185cef. [ 1109.915870][ C1] RSP: 002b:00007f756af4f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1109.915887][ C1] RAX: fffffffffffffe00 RBX: 00007f756a375fa8 RCX: 00007f756a185d19 [ 1109.915900][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f756a375fa8 [ 1109.915911][ C1] RBP: 00007f756a375fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1109.915923][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f756a375fac [ 1109.915934][ C1] R13: 0000000000000000 R14: 00007ffdd401ad20 R15: 00007ffdd401ae08 [ 1109.915953][ C1] [ 1109.916120][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g39593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1110.504030][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1110.514016][ C0] rcu: RCU grace-period kthread stack dump: [ 1110.519914][ C0] task:rcu_preempt state:R running task stack:26168 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1110.531696][ C0] Call Trace: [ 1110.534986][ C0] [ 1110.537934][ C0] __schedule+0x17fb/0x4be0 [ 1110.542471][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1110.548387][ C0] ? schedule+0x90/0x320 [ 1110.552649][ C0] ? lock_release+0xbf/0xa30 [ 1110.557260][ C0] ? __pfx___schedule+0x10/0x10 [ 1110.562130][ C0] ? __pfx_lock_release+0x10/0x10 [ 1110.567174][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1110.573522][ C0] ? schedule+0x90/0x320 [ 1110.577785][ C0] schedule+0x14b/0x320 [ 1110.581961][ C0] schedule_timeout+0x15a/0x290 [ 1110.586850][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1110.592251][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1110.597576][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1110.603241][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1110.608124][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1110.614299][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1110.619602][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1110.625516][ C0] ? finish_swait+0xd4/0x1e0 [ 1110.630123][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1110.634752][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1110.639967][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1110.645885][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1110.650945][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1110.656167][ C0] kthread+0x2f0/0x390 [ 1110.660270][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1110.665577][ C0] ? __pfx_kthread+0x10/0x10 [ 1110.670187][ C0] ret_from_fork+0x4b/0x80 [ 1110.674618][ C0] ? __pfx_kthread+0x10/0x10 [ 1110.679233][ C0] ret_from_fork_asm+0x1a/0x30 [ 1110.684036][ C0] [ 1110.687066][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1110.693412][ C0] CPU: 0 UID: 0 PID: 16101 Comm: syz.0.2224 Not tainted 6.13.0-rc3-syzkaller #0 [ 1110.702467][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1110.712555][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1110.719356][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1110.739001][ C0] RSP: 0018:ffffc90004a9f680 EFLAGS: 00000293 [ 1110.745089][ C0] RAX: ffffffff81938ebb RBX: 1ffff110170e88b9 RCX: ffff88805a105a00 [ 1110.753073][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1110.761144][ C0] RBP: ffffc90004a9f880 R08: ffffffff81938e8a R09: 1ffffffff20309de [ 1110.769128][ C0] R10: dffffc0000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 1110.777206][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 1110.785195][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1110.794135][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.800734][ C0] CR2: 00007ffa1eb452d8 CR3: 0000000063dd6000 CR4: 00000000003526f0 [ 1110.808730][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1110.816718][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1110.824708][ C0] Call Trace: [ 1110.827994][ C0] [ 1110.830858][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1110.837204][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1110.842854][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1110.848676][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 1110.854947][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1110.861579][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 1110.866979][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1110.873241][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1110.878636][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1110.884321][ C0] ? acct_account_cputime+0x207/0x210 [ 1110.889721][ C0] ? update_process_times+0x242/0x2f0 [ 1110.895116][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1110.900260][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1110.905754][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1110.911166][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1110.917031][ C0] ? sched_clock+0x4a/0x70 [ 1110.921474][ C0] ? read_tsc+0x9/0x20 [ 1110.925562][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1110.931647][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1110.936794][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1110.942987][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1110.948936][ C0] [ 1110.951883][ C0] [ 1110.954828][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.961031][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1110.967212][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1110.973395][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1110.979573][ C0] ? kmem_cache_free+0x195/0x410 [ 1110.984530][ C0] ? native_tlb_remove_table+0x3d/0x50 [ 1110.990010][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1110.995228][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1111.001595][ C0] ? __pfx_free_pgd_range+0x10/0x10 [ 1111.006821][ C0] ? rcu_is_watching+0x15/0xb0 [ 1111.011617][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1111.016864][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1111.022016][ C0] flush_tlb_mm_range+0x329/0x5c0 [ 1111.027067][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1111.032725][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1111.037878][ C0] tlb_flush_mmu+0x1aa/0x680 [ 1111.042513][ C0] ? __pfx_down_write+0x10/0x10 [ 1111.047380][ C0] tlb_finish_mmu+0xd4/0x200 [ 1111.051997][ C0] exit_mmap+0x496/0xc20 [ 1111.056266][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1111.061057][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1111.065759][ C0] ? uprobe_clear_state+0x271/0x290 [ 1111.070973][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 1111.076277][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1111.081501][ C0] __mmput+0x115/0x3b0 [ 1111.085595][ C0] exit_mm+0x220/0x310 [ 1111.089718][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1111.094333][ C0] ? taskstats_exit+0x326/0xa60 [ 1111.099202][ C0] do_exit+0x9b2/0x28e0 [ 1111.103383][ C0] ? preempt_schedule_common+0x84/0xd0 [ 1111.108866][ C0] ? __pfx_do_exit+0x10/0x10 [ 1111.113474][ C0] ? __pfx_lock_release+0x10/0x10 [ 1111.118512][ C0] ? zap_other_threads+0x37e/0x3e0 [ 1111.123640][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1111.129984][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1111.135373][ C0] do_group_exit+0x207/0x2c0 [ 1111.139992][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1111.145036][ C0] x64_sys_call+0x26a8/0x26b0 [ 1111.149824][ C0] do_syscall_64+0xf3/0x230 [ 1111.154359][ C0] ? clear_bhb_loop+0x35/0x90 [ 1111.159055][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.164971][ C0] RIP: 0033:0x7f756a185d19 [ 1111.169396][ C0] Code: Unable to access opcode bytes at 0x7f756a185cef. [ 1111.176421][ C0] RSP: 002b:00007ffdd401b178 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1111.184864][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f756a185d19 [ 1111.192851][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1111.200834][ C0] RBP: 00007ffdd401b1cc R08: 00007ffdd401b25f R09: 00000000000e5914 [ 1111.208830][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 1111.216809][ C0] R13: 00000000000e5914 R14: 00007ffdd401b220 R15: 00007ffdd401b220 [ 1111.224812][ C0]